4243] handle_mm_fault+0x293/0x7c0 [ 752.684260] __get_user_pages+0x465/0x1220 [ 752.684282] ? follow_page_mask+0x1560/0x1560 [ 752.684297] ? retint_kernel+0x2d/0x2d [ 752.705975] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 752.709633] populate_vma_page_range+0x18e/0x230 [ 752.741714] __mm_populate+0x198/0x2c0 [ 752.745613] ? populate_vma_page_range+0x230/0x230 [ 752.750560] vm_mmap_pgoff+0x1be/0x1d0 [ 752.754459] ? vma_is_stack_for_current+0xa0/0xa0 [ 752.759307] SyS_mmap_pgoff+0x3ca/0x520 [ 752.763268] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 752.768182] ? do_syscall_64+0x53/0x640 [ 752.772150] ? align_vdso_addr+0x60/0x60 [ 752.776201] SyS_mmap+0x16/0x20 [ 752.779482] do_syscall_64+0x1e8/0x640 [ 752.783358] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 752.788226] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 752.793396] RIP: 0033:0x45a219 [ 752.796583] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 752.804291] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 752.811544] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 752.818797] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 752.826048] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 752.833308] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) recvmmsg(r2, &(0x7f0000001680), 0x0, 0x0, 0x0) 07:35:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:13 executing program 4 (fault-call:2 fault-nth:31): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:13 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x3, 0x0, {0x3f, 0x2, 0x100c, 0x7, 0x9, 0x4, 0x4, 0x7}}) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000000000000000000000550000ffdf00000029599d00d2361e3b16212da3956c1aab523c6953b8b067b7e9eeddec2f296fd729d333e7b2bedd8388a2727c0d453b78cb4af0a8761bd3384ec8459d1d64a44cc4a40ab0f81927d7ff18561a3c2c3c25aec129b1bf91bafa9d75193432554b49f3", @ANYRES32=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r9, 0xffffffff}, 0x8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x7ff, 0x1, 0x0, 0x4, 0x2fe, 0x1, 0x8001, {r9, @in={{0x2, 0x4e20, @local}}, 0x5, 0x4, 0xb11, 0x2}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000080)={r10, 0xbe}, 0x8) [ 753.032600] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 753.041435] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 753.072697] FAULT_INJECTION: forcing a failure. 07:35:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 753.072697] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 753.093437] CPU: 0 PID: 11854 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 753.100477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.109832] Call Trace: [ 753.112432] dump_stack+0x138/0x197 [ 753.116072] should_fail.cold+0x10f/0x159 [ 753.120224] ? __might_sleep+0x93/0xb0 [ 753.124122] __alloc_pages_nodemask+0x1d6/0x7a0 07:35:13 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 753.128808] ? trace_hardirqs_on_caller+0x400/0x590 [ 753.131786] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 753.133834] ? __alloc_pages_slowpath+0x2930/0x2930 [ 753.145368] alloc_pages_vma+0xc9/0x4c0 [ 753.149351] __handle_mm_fault+0xd5d/0x3470 [ 753.153683] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 753.158444] ? find_held_lock+0x35/0x130 [ 753.162506] ? handle_mm_fault+0x1b6/0x7c0 [ 753.166745] handle_mm_fault+0x293/0x7c0 [ 753.170816] __get_user_pages+0x465/0x1220 [ 753.175068] ? follow_page_mask+0x1560/0x1560 [ 753.179576] ? memset+0x32/0x40 [ 753.182865] populate_vma_page_range+0x18e/0x230 [ 753.187630] __mm_populate+0x198/0x2c0 [ 753.191548] ? populate_vma_page_range+0x230/0x230 [ 753.196464] vm_mmap_pgoff+0x1be/0x1d0 [ 753.200338] ? vma_is_stack_for_current+0xa0/0xa0 [ 753.205167] ? __fget+0x237/0x370 [ 753.208620] SyS_mmap_pgoff+0x3ca/0x520 [ 753.212589] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 753.217501] ? align_vdso_addr+0x60/0x60 [ 753.221544] SyS_mmap+0x16/0x20 [ 753.224837] do_syscall_64+0x1e8/0x640 [ 753.228705] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 753.233533] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 753.238709] RIP: 0033:0x45a219 [ 753.241890] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 753.249603] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 753.256866] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 753.264121] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 753.271380] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 753.278640] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:13 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:13 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) writev(r1, &(0x7f0000000000), 0x2db) 07:35:13 executing program 4 (fault-call:2 fault-nth:32): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:13 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 753.401096] FAULT_INJECTION: forcing a failure. [ 753.401096] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 753.401681] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 753.447169] CPU: 1 PID: 11872 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 753.454227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.463586] Call Trace: [ 753.466180] dump_stack+0x138/0x197 [ 753.469831] should_fail.cold+0x10f/0x159 [ 753.473988] ? __might_sleep+0x93/0xb0 [ 753.477883] __alloc_pages_nodemask+0x1d6/0x7a0 [ 753.482545] ? __alloc_pages_slowpath+0x2930/0x2930 [ 753.487551] ? __lock_acquire+0x5f7/0x4620 [ 753.491794] ? SOFTIRQ_verbose+0x10/0x10 [ 753.495864] alloc_pages_vma+0xc9/0x4c0 [ 753.499852] __handle_mm_fault+0xd5d/0x3470 [ 753.504184] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 753.508946] ? find_held_lock+0x35/0x130 [ 753.513016] ? handle_mm_fault+0x1b6/0x7c0 [ 753.517283] handle_mm_fault+0x293/0x7c0 [ 753.521359] __get_user_pages+0x465/0x1220 [ 753.525608] ? follow_page_mask+0x1560/0x1560 [ 753.530106] ? memset+0x32/0x40 [ 753.533409] populate_vma_page_range+0x18e/0x230 [ 753.538171] __mm_populate+0x198/0x2c0 [ 753.538188] ? populate_vma_page_range+0x230/0x230 [ 753.538209] vm_mmap_pgoff+0x1be/0x1d0 [ 753.538226] ? vma_is_stack_for_current+0xa0/0xa0 [ 753.547021] ? __fget+0x237/0x370 [ 753.547045] SyS_mmap_pgoff+0x3ca/0x520 [ 753.547062] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 753.547074] ? do_syscall_64+0x53/0x640 [ 753.547086] ? align_vdso_addr+0x60/0x60 [ 753.547096] SyS_mmap+0x16/0x20 [ 753.547106] do_syscall_64+0x1e8/0x640 [ 753.583294] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 753.588128] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 753.593300] RIP: 0033:0x45a219 [ 753.596473] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 753.604175] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 753.611439] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 753.618695] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 753.625950] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 753.633204] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) recvmmsg(r2, &(0x7f0000001680), 0x0, 0x0, 0x0) 07:35:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:14 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:14 executing program 4 (fault-call:2 fault-nth:33): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:14 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)=0x0) r5 = geteuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8) r10 = geteuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@ipv4}}, &(0x7f00000004c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) fstat(r16, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x4}, [{0x2, 0x69f4a22d80979dd3, 0xee00}, {0x2, 0x1, r1}, {0x2, 0x4, r3}, {0x2, 0x5a02eb5ca2ec8570, r4}, {0x2, 0x4, r5}, {0x2, 0x9, r9}, {0x2, 0x4, r10}, {0x2, 0x1, r14}, {0x2, 0x6, r15}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x6, r17}], {0x10, 0x4}, {0x20, 0x2}}, 0x7c, 0x1) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) [ 753.898960] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 753.916533] FAULT_INJECTION: forcing a failure. [ 753.916533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 753.959164] CPU: 1 PID: 11895 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 753.966240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.966247] Call Trace: [ 753.966270] dump_stack+0x138/0x197 [ 753.966289] should_fail.cold+0x10f/0x159 [ 753.966301] ? __might_sleep+0x93/0xb0 [ 753.966318] __alloc_pages_nodemask+0x1d6/0x7a0 [ 753.966334] ? __alloc_pages_slowpath+0x2930/0x2930 [ 753.966345] ? __lock_acquire+0x5f7/0x4620 [ 753.966359] ? SOFTIRQ_verbose+0x10/0x10 [ 754.007871] alloc_pages_vma+0xc9/0x4c0 [ 754.007891] __handle_mm_fault+0xd5d/0x3470 [ 754.007909] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 754.007922] ? find_held_lock+0x35/0x130 [ 754.007935] ? handle_mm_fault+0x1b6/0x7c0 [ 754.029248] handle_mm_fault+0x293/0x7c0 [ 754.033321] __get_user_pages+0x465/0x1220 [ 754.037578] ? follow_page_mask+0x1560/0x1560 [ 754.042079] ? memset+0x32/0x40 [ 754.042098] populate_vma_page_range+0x18e/0x230 [ 754.042117] __mm_populate+0x198/0x2c0 [ 754.042133] ? populate_vma_page_range+0x230/0x230 07:35:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 754.042150] vm_mmap_pgoff+0x1be/0x1d0 [ 754.042166] ? vma_is_stack_for_current+0xa0/0xa0 [ 754.042175] ? __fget+0x237/0x370 [ 754.042194] SyS_mmap_pgoff+0x3ca/0x520 [ 754.042208] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 754.042221] ? do_syscall_64+0x53/0x640 [ 754.075135] ? align_vdso_addr+0x60/0x60 [ 754.075148] SyS_mmap+0x16/0x20 [ 754.091356] do_syscall_64+0x1e8/0x640 [ 754.095257] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 754.100115] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 754.105305] RIP: 0033:0x45a219 07:35:14 executing program 4 (fault-call:2 fault-nth:34): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 754.108497] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 754.116205] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 754.116212] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 754.116219] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 754.116226] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 754.116233] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 754.204103] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:14 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r3, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r1, r4) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) r6 = geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r9) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x10000, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x100000000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}], [{@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@fsmagic={'fsmagic'}}, {@appraise='appraise'}, {@obj_user={'obj_user', 0x3d, ',wlan1'}}]}}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000055000000000000005943c735d75ecbf13778e860bc7356774cc7e5ae82603a2b5d2e16e0a15c89e4890dcb35aab00bf7e579d164ab7e44dde71833339e36bddd0a5bbb305410292d6e762f46c510e64b0700de5159c6c0b177f43759c094afe4283df30dd756ca6e82883d8aa21270823e7b46a91dc412d51979a72e2c0df71eb3", @ANYRES32=r0]) 07:35:14 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 07:35:14 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 754.267374] FAULT_INJECTION: forcing a failure. [ 754.267374] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.308219] CPU: 0 PID: 11913 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 754.315282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.324630] Call Trace: [ 754.324651] dump_stack+0x138/0x197 [ 754.324671] should_fail.cold+0x10f/0x159 [ 754.324682] ? __might_sleep+0x93/0xb0 [ 754.324696] __alloc_pages_nodemask+0x1d6/0x7a0 [ 754.330896] ? __alloc_pages_slowpath+0x2930/0x2930 [ 754.330909] ? retint_kernel+0x2d/0x2d [ 754.330935] alloc_pages_vma+0xc9/0x4c0 [ 754.330951] __handle_mm_fault+0xd5d/0x3470 [ 754.330971] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 754.330983] ? find_held_lock+0x35/0x130 [ 754.357156] QAT: Invalid ioctl [ 754.360808] ? handle_mm_fault+0x1b6/0x7c0 [ 754.360841] handle_mm_fault+0x293/0x7c0 [ 754.360857] __get_user_pages+0x465/0x1220 [ 754.360876] ? follow_page_mask+0x1560/0x1560 [ 754.360891] ? memset+0x32/0x40 [ 754.393137] populate_vma_page_range+0x18e/0x230 [ 754.397907] __mm_populate+0x198/0x2c0 [ 754.399277] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 754.401798] ? populate_vma_page_range+0x230/0x230 [ 754.413206] vm_mmap_pgoff+0x1be/0x1d0 [ 754.417103] ? vma_is_stack_for_current+0xa0/0xa0 [ 754.421952] ? SyS_mmap_pgoff+0x27a/0x520 [ 754.426108] SyS_mmap_pgoff+0x3ca/0x520 [ 754.430082] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 754.430097] ? align_vdso_addr+0x60/0x60 [ 754.430108] SyS_mmap+0x16/0x20 [ 754.430118] do_syscall_64+0x1e8/0x640 [ 754.430129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 754.439110] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 754.456249] RIP: 0033:0x45a219 [ 754.459437] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 754.467149] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 754.474414] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 754.474420] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 754.474426] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 754.474432] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:15 executing program 4 (fault-call:2 fault-nth:35): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:15 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f00000003c0)={0x0, 0x64}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000400)={0x77359400}, 0x10) r1 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000180)) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000090000000000000000005500000000000000", @ANYRES32=r1]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100)=[{{&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="0bf876714f498f8214f56eb4b95647d4c387ed526f5284fe2891b0f2f2c6ab2c51c7842087ba3529459f88c69f401576fafd5ca1fcdcd083f62851a14eba396661a80f2b105f591356a93c847d1edaddb0588cdc5305d6b3cb59e0ee9adccd1c0e3ef66909746b6e246839ace007e2eecec5503ff5d071a58d15e67ee342288e2e9ee33fdca3933155281997c7c3af5443edf85c5b8853", 0x97}], 0x1, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x20}}], 0x78}}], 0x1, 0x480) 07:35:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:15 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r3, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r1, r4) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) r6 = geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r9) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x10000, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x100000000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}], [{@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@fsmagic={'fsmagic'}}, {@appraise='appraise'}, {@obj_user={'obj_user', 0x3d, ',wlan1'}}]}}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000055000000000000005943c735d75ecbf13778e860bc7356774cc7e5ae82603a2b5d2e16e0a15c89e4890dcb35aab00bf7e579d164ab7e44dde71833339e36bddd0a5bbb305410292d6e762f46c510e64b0700de5159c6c0b177f43759c094afe4283df30dd756ca6e82883d8aa21270823e7b46a91dc412d51979a72e2c0df71eb3", @ANYRES32=r0]) 07:35:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80802, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000008c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d2000000b384f92e2f094c7486d956d6f82285af62d7d1d29b9a6f90c61feaa5c8338ba709e5e7cc60859977397e3622d0526c4f50e0a229c0ac2e7589c3100b9433654004a2308db082f0c970b95e63c96f14e489cd6591f9e4485308f0705dc098f2614702838685189b34da3dd6f0b63e7d054f4d989aaf249784d9ae526db91285fc84a07c1182b8b2dab549c6a34eb293aa8c01c5e94f6b7e7e9f32b37a2222b14bcdb0088c782e7acfd0913ac41c99f645c90491bc017a1fe727a9d7d1b1d6f278a1b9980b45c6dc2866fb5dc18881c4af8e76"], &(0x7f0000000140)=0xf6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x98) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) 07:35:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 754.768462] FAULT_INJECTION: forcing a failure. [ 754.768462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.772489] QAT: Invalid ioctl [ 754.786361] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:15 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000000000000000550000000000000064045ee6e0ad55038bfded0d37102933d7a91574573eed79254c4a1f4a8b7ad076ce3adc05ffe9e5211985b114abc899e75a110d30a22c7c2c3f14990c33fd4fbf07b0befcdafcd4ec95aba1c14f005fb28823b7a386ff53e27fae23f9ab024321635fb5181e8800afe92d33eb896d1419624d681fc2fc9b12a456887ffeefb7dab6b214e80e88ee9ac60c939f2d844c721022ef40f1c8140582ea5bc8d742a75425bd126b0495f96ab5f30521", @ANYRES32=r0]) 07:35:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 754.848367] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 754.858912] CPU: 1 PID: 11940 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 754.865959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.875313] Call Trace: [ 754.875333] dump_stack+0x138/0x197 [ 754.875352] should_fail.cold+0x10f/0x159 [ 754.875368] ? __might_sleep+0x93/0xb0 [ 754.889576] __alloc_pages_nodemask+0x1d6/0x7a0 [ 754.894265] ? __alloc_pages_slowpath+0x2930/0x2930 [ 754.899297] ? __lock_acquire+0x5f7/0x4620 [ 754.899315] ? SOFTIRQ_verbose+0x10/0x10 [ 754.899335] alloc_pages_vma+0xc9/0x4c0 [ 754.899351] __handle_mm_fault+0xd5d/0x3470 [ 754.899365] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 754.920689] ? find_held_lock+0x35/0x130 [ 754.924759] ? handle_mm_fault+0x1b6/0x7c0 [ 754.929016] handle_mm_fault+0x293/0x7c0 [ 754.933091] __get_user_pages+0x465/0x1220 [ 754.937348] ? follow_page_mask+0x1560/0x1560 [ 754.941857] ? memset+0x32/0x40 07:35:15 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r3, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r3, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r1, r4) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r5, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) r6 = geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r9) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x10000, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x100000000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}], [{@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r9}}, {@fsmagic={'fsmagic'}}, {@appraise='appraise'}, {@obj_user={'obj_user', 0x3d, ',wlan1'}}]}}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000000000000000000055000000000000005943c735d75ecbf13778e860bc7356774cc7e5ae82603a2b5d2e16e0a15c89e4890dcb35aab00bf7e579d164ab7e44dde71833339e36bddd0a5bbb305410292d6e762f46c510e64b0700de5159c6c0b177f43759c094afe4283df30dd756ca6e82883d8aa21270823e7b46a91dc412d51979a72e2c0df71eb3", @ANYRES32=r0]) [ 754.945150] populate_vma_page_range+0x18e/0x230 [ 754.949919] __mm_populate+0x198/0x2c0 [ 754.953818] ? populate_vma_page_range+0x230/0x230 [ 754.958762] vm_mmap_pgoff+0x1be/0x1d0 [ 754.962662] ? vma_is_stack_for_current+0xa0/0xa0 [ 754.967512] ? __fget+0x237/0x370 [ 754.970973] SyS_mmap_pgoff+0x3ca/0x520 [ 754.974950] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 754.979872] ? do_syscall_64+0x53/0x640 [ 754.983855] ? align_vdso_addr+0x60/0x60 [ 754.987915] SyS_mmap+0x16/0x20 [ 754.991178] do_syscall_64+0x1e8/0x640 [ 754.995046] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 754.999876] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 755.005103] RIP: 0033:0x45a219 [ 755.008280] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 755.015980] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 755.023285] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 755.030538] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 755.037789] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 07:35:15 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x107fffe, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) [ 755.045041] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:15 executing program 4 (fault-call:2 fault-nth:36): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80802, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000008c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d2000000b384f92e2f094c7486d956d6f82285af62d7d1d29b9a6f90c61feaa5c8338ba709e5e7cc60859977397e3622d0526c4f50e0a229c0ac2e7589c3100b9433654004a2308db082f0c970b95e63c96f14e489cd6591f9e4485308f0705dc098f2614702838685189b34da3dd6f0b63e7d054f4d989aaf249784d9ae526db91285fc84a07c1182b8b2dab549c6a34eb293aa8c01c5e94f6b7e7e9f32b37a2222b14bcdb0088c782e7acfd0913ac41c99f645c90491bc017a1fe727a9d7d1b1d6f278a1b9980b45c6dc2866fb5dc18881c4af8e76"], &(0x7f0000000140)=0xf6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x98) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) 07:35:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 755.175730] QAT: Invalid ioctl 07:35:15 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) r5 = geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r8) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuseblk\x00', 0x10000, &(0x7f0000000440)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x8000}}, {@max_read={'max_read', 0x3d, 0x100000000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}], [{@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r8}}, {@fsmagic={'fsmagic'}}, {@appraise='appraise'}, {@obj_user={'obj_user', 0x3d, ',wlan1'}}]}}) 07:35:15 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r0]) [ 755.219612] FAULT_INJECTION: forcing a failure. [ 755.219612] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 755.229162] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 755.280878] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 755.309525] QAT: Invalid ioctl [ 755.324739] CPU: 1 PID: 11977 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 755.331800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.341156] Call Trace: [ 755.343754] dump_stack+0x138/0x197 [ 755.345145] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 755.347416] should_fail.cold+0x10f/0x159 [ 755.357954] ? __might_sleep+0x93/0xb0 [ 755.361852] __alloc_pages_nodemask+0x1d6/0x7a0 [ 755.366541] ? __alloc_pages_slowpath+0x2930/0x2930 [ 755.371561] ? __lock_acquire+0x5f7/0x4620 [ 755.375804] ? SOFTIRQ_verbose+0x10/0x10 07:35:15 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r6) [ 755.379880] alloc_pages_vma+0xc9/0x4c0 [ 755.383868] __handle_mm_fault+0xd5d/0x3470 [ 755.388198] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 755.392950] ? find_held_lock+0x35/0x130 [ 755.397005] ? handle_mm_fault+0x1b6/0x7c0 [ 755.401268] handle_mm_fault+0x293/0x7c0 [ 755.405346] __get_user_pages+0x465/0x1220 [ 755.409584] ? follow_page_mask+0x1560/0x1560 [ 755.414064] ? memset+0x32/0x40 [ 755.417377] populate_vma_page_range+0x18e/0x230 [ 755.422146] __mm_populate+0x198/0x2c0 [ 755.426017] ? populate_vma_page_range+0x230/0x230 [ 755.430937] vm_mmap_pgoff+0x1be/0x1d0 [ 755.434846] ? vma_is_stack_for_current+0xa0/0xa0 [ 755.439679] ? __fget+0x237/0x370 [ 755.443118] SyS_mmap_pgoff+0x3ca/0x520 [ 755.447690] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 755.452603] ? do_syscall_64+0x53/0x640 [ 755.456561] ? align_vdso_addr+0x60/0x60 [ 755.460605] SyS_mmap+0x16/0x20 [ 755.463953] do_syscall_64+0x1e8/0x640 [ 755.467837] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 755.472674] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 755.477869] RIP: 0033:0x45a219 07:35:15 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80802, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000008c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d2000000b384f92e2f094c7486d956d6f82285af62d7d1d29b9a6f90c61feaa5c8338ba709e5e7cc60859977397e3622d0526c4f50e0a229c0ac2e7589c3100b9433654004a2308db082f0c970b95e63c96f14e489cd6591f9e4485308f0705dc098f2614702838685189b34da3dd6f0b63e7d054f4d989aaf249784d9ae526db91285fc84a07c1182b8b2dab549c6a34eb293aa8c01c5e94f6b7e7e9f32b37a2222b14bcdb0088c782e7acfd0913ac41c99f645c90491bc017a1fe727a9d7d1b1d6f278a1b9980b45c6dc2866fb5dc18881c4af8e76"], &(0x7f0000000140)=0xf6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x98) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r7, 0x0, r6) 07:35:15 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 755.481303] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 755.488994] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 755.496248] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 755.503500] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 755.510751] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 755.518002] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:15 executing program 4 (fault-call:2 fault-nth:37): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 755.619165] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 755.646120] QAT: Invalid ioctl [ 755.651739] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:16 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept$nfc_llcp(r2, &(0x7f0000000600), &(0x7f0000000680)=0x60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffea6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r7}) connect(r3, &(0x7f00000006c0)=@ll={0x11, 0xe, r7, 0x1, 0x5, 0x6, @dev={[], 0x2b}}, 0x80) mount(0x0, &(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r8 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r10) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000200)='./file0\x00', 0x9, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000240)="77bc84ad154aa28738b7f6a3ace4b15357ffa581a0201aed215cd488bfb9f74a1a5a65f3b526ce418a2bb9d1f6139d1179526238d9cd479166975add489797c85773b571106963011f1fe77629f12731a1ba52ba2081728da9bfd16dbbe39d25d1517852c48427d6384c45ae4e25bee08ec5764b72a086ee13ebd0b9c7635982c6fa35fe05760187682beef5872d84baaeab7392e09ae677644b05e15f9c90f0c5dd86d25d51f5d84b5dd86dd037dc10b8358e5d7afd80b59c8f60553fe78c5e10c6f793128facf9eae0412adcf9d370e79c0ada55e2345fdc378a53b8e23b00be65c9bfb9ccd6338f15c5ebcd42", 0xee, 0x9}, {&(0x7f0000000380), 0x0, 0x5}, {&(0x7f00000003c0)="15db83e4619e8d5b141d1b60fc7a16e04c62556afb870508012d46292a428ae33897f94ecbd7826596d0ad8e629de056e1c299cd1e3f95f60964eca734e060af30c7a46c625e8afb2986055d3ee7c1dce94b00db7a389508b16bb50027b160b2dfaaac796c4f1c1aa524c67c24713798a65e4c33343f294f93fdd4ec0c3dde57a1c521e24ae8081720f7a21aea0a52bbfb8c2ed04a2ad38e38d2bd775969fda22e3fa9f2c24a82698a9dced60df401e995a04cc9e3678d60319ba2e70ceb7b5cff349861726a9bfbe6195165d6975ae8b2edc1f1e86d091e943a454ec4", 0xdd, 0xf6}], 0x408, &(0x7f0000000540)={[{@heap='heap'}], [{@dont_measure='dont_measure'}, {@euid_gt={'euid>', r10}}, {@obj_type={'obj_type', 0x3d, 'ramfs\x00'}}]}) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000055000000000000b0d95f00d2ec95eb159c787f83bf142f03e0d6d4253b9115afc5d8f35535f55ed191ce50e43798f1ad3715ac8029820b036843b1e12252405a4b9d269241cb6980ba523aae61c7eb034509975bdac6059111f277fc246a5a43a1d4840293fbf767ea42c4cba8c863d80400cd4776d101d2b339b87c6d00000000000000a01d839164618562b2666c889f54e420fbcb885dadda65895d43270128b59dca3ee4a68566cc2cc56ee7efe33342e7a52b477e07f01600599f71c787c431fb8a05b175df75a50e374ad6a6f8369da0a87b8834777601", @ANYRES32=r8]) getresgid(&(0x7f0000000380), &(0x7f0000000580), &(0x7f00000005c0)=0x0) setfsgid(r11) [ 755.696173] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 755.728567] FAULT_INJECTION: forcing a failure. [ 755.728567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:16 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), 0x0) [ 755.779057] CPU: 0 PID: 12008 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 755.786128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.795494] Call Trace: [ 755.798108] dump_stack+0x138/0x197 [ 755.801759] should_fail.cold+0x10f/0x159 [ 755.805915] ? __might_sleep+0x93/0xb0 [ 755.809819] __alloc_pages_nodemask+0x1d6/0x7a0 [ 755.814497] ? check_preemption_disabled+0x3c/0x250 [ 755.819528] ? __alloc_pages_slowpath+0x2930/0x2930 [ 755.824566] ? __alloc_pages_nodemask+0x1/0x7a0 [ 755.829243] alloc_pages_vma+0xc9/0x4c0 [ 755.833222] __handle_mm_fault+0xd5d/0x3470 [ 755.837551] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 755.842312] ? find_held_lock+0x35/0x130 [ 755.846375] ? handle_mm_fault+0x1b6/0x7c0 [ 755.850632] handle_mm_fault+0x293/0x7c0 [ 755.854704] __get_user_pages+0x465/0x1220 [ 755.858949] ? follow_page_mask+0x1560/0x1560 [ 755.863455] ? memset+0x32/0x40 [ 755.866757] populate_vma_page_range+0x18e/0x230 [ 755.871519] __mm_populate+0x198/0x2c0 [ 755.874744] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 755.875411] ? populate_vma_page_range+0x230/0x230 [ 755.885909] QAT: Invalid ioctl [ 755.886740] vm_mmap_pgoff+0x1be/0x1d0 [ 755.886760] ? vma_is_stack_for_current+0xa0/0xa0 [ 755.886770] ? __fget+0x237/0x370 [ 755.886792] SyS_mmap_pgoff+0x3ca/0x520 [ 755.886806] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 755.912159] ? do_syscall_64+0x53/0x640 [ 755.912172] ? align_vdso_addr+0x60/0x60 [ 755.912185] SyS_mmap+0x16/0x20 [ 755.912195] do_syscall_64+0x1e8/0x640 [ 755.912205] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 755.920231] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 755.920242] RIP: 0033:0x45a219 [ 755.920248] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 755.920261] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 755.920268] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 755.920274] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 755.920281] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 07:35:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80802, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000008c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d2000000b384f92e2f094c7486d956d6f82285af62d7d1d29b9a6f90c61feaa5c8338ba709e5e7cc60859977397e3622d0526c4f50e0a229c0ac2e7589c3100b9433654004a2308db082f0c970b95e63c96f14e489cd6591f9e4485308f0705dc098f2614702838685189b34da3dd6f0b63e7d054f4d989aaf249784d9ae526db91285fc84a07c1182b8b2dab549c6a34eb293aa8c01c5e94f6b7e7e9f32b37a2222b14bcdb0088c782e7acfd0913ac41c99f645c90491bc017a1fe727a9d7d1b1d6f278a1b9980b45c6dc2866fb5dc18881c4af8e76"], &(0x7f0000000140)=0xf6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x98) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) 07:35:16 executing program 4 (fault-call:2 fault-nth:38): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 755.920288] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 756.015331] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:16 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) [ 756.056953] f2fs_msg: 6 callbacks suppressed [ 756.056962] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 07:35:16 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:16 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 756.108217] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 756.116467] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 756.140464] FAULT_INJECTION: forcing a failure. [ 756.140464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.157144] QAT: Invalid ioctl [ 756.165989] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 756.187423] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 756.199904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 07:35:16 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6(0xa, 0x80802, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000008c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000), 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d2000000b384f92e2f094c7486d956d6f82285af62d7d1d29b9a6f90c61feaa5c8338ba709e5e7cc60859977397e3622d0526c4f50e0a229c0ac2e7589c3100b9433654004a2308db082f0c970b95e63c96f14e489cd6591f9e4485308f0705dc098f2614702838685189b34da3dd6f0b63e7d054f4d989aaf249784d9ae526db91285fc84a07c1182b8b2dab549c6a34eb293aa8c01c5e94f6b7e7e9f32b37a2222b14bcdb0088c782e7acfd0913ac41c99f645c90491bc017a1fe727a9d7d1b1d6f278a1b9980b45c6dc2866fb5dc18881c4af8e76"], &(0x7f0000000140)=0xf6) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x98) [ 756.207949] CPU: 0 PID: 12031 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 756.214971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.224349] Call Trace: [ 756.226951] dump_stack+0x138/0x197 [ 756.230595] should_fail.cold+0x10f/0x159 [ 756.234749] ? __might_sleep+0x93/0xb0 [ 756.238646] __alloc_pages_nodemask+0x1d6/0x7a0 [ 756.243322] ? __alloc_pages_slowpath+0x2930/0x2930 [ 756.248349] alloc_pages_vma+0xc9/0x4c0 [ 756.252332] __handle_mm_fault+0xd5d/0x3470 [ 756.256662] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 756.261437] ? find_held_lock+0x35/0x130 [ 756.261452] ? handle_mm_fault+0x1b6/0x7c0 [ 756.261482] handle_mm_fault+0x293/0x7c0 [ 756.261499] __get_user_pages+0x465/0x1220 [ 756.261521] ? follow_page_mask+0x1560/0x1560 [ 756.261537] ? memset+0x32/0x40 [ 756.261554] populate_vma_page_range+0x18e/0x230 [ 756.261570] __mm_populate+0x198/0x2c0 [ 756.261583] ? populate_vma_page_range+0x230/0x230 [ 756.299434] vm_mmap_pgoff+0x1be/0x1d0 [ 756.303332] ? vma_is_stack_for_current+0xa0/0xa0 [ 756.308258] ? __fget+0x237/0x370 [ 756.308282] SyS_mmap_pgoff+0x3ca/0x520 [ 756.308300] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 756.308312] ? do_syscall_64+0x53/0x640 [ 756.308323] ? align_vdso_addr+0x60/0x60 [ 756.308336] SyS_mmap+0x16/0x20 [ 756.308346] do_syscall_64+0x1e8/0x640 [ 756.308356] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 756.332109] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 756.335841] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 756.347181] RIP: 0033:0x45a219 07:35:16 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/member\x00', 0x2, 0x0) [ 756.347188] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 756.347202] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 756.347209] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 756.347216] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 756.347223] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 756.347230] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 756.362623] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 756.433504] QAT: Invalid ioctl [ 756.456550] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 756.468204] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 756.477582] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 756.537526] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 756.571597] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock 07:35:17 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:17 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) 07:35:17 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6(0xa, 0x80802, 0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000008c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000d2000000b384f92e2f094c7486d956d6f82285af62d7d1d29b9a6f90c61feaa5c8338ba709e5e7cc60859977397e3622d0526c4f50e0a229c0ac2e7589c3100b9433654004a2308db082f0c970b95e63c96f14e489cd6591f9e4485308f0705dc098f2614702838685189b34da3dd6f0b63e7d054f4d989aaf249784d9ae526db91285fc84a07c1182b8b2dab549c6a34eb293aa8c01c5e94f6b7e7e9f32b37a2222b14bcdb0088c782e7acfd0913ac41c99f645c90491bc017a1fe727a9d7d1b1d6f278a1b9980b45c6dc2866fb5dc18881c4af8e76"], &(0x7f0000000140)=0xf6) 07:35:17 executing program 4 (fault-call:2 fault-nth:39): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:17 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x800003) r4 = dup2(0xffffffffffffffff, r0) getsockopt$inet_dccp_int(r4, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r5 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5]) [ 756.698293] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:17 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 756.790064] QAT: Invalid ioctl [ 756.794283] FAULT_INJECTION: forcing a failure. [ 756.794283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.815241] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 756.897350] CPU: 1 PID: 12078 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 756.905556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.914922] Call Trace: [ 756.917524] dump_stack+0x138/0x197 [ 756.921168] should_fail.cold+0x10f/0x159 [ 756.925329] ? __might_sleep+0x93/0xb0 [ 756.929233] __alloc_pages_nodemask+0x1d6/0x7a0 [ 756.933919] ? __alloc_pages_slowpath+0x2930/0x2930 [ 756.938943] ? __lock_acquire+0x5f7/0x4620 [ 756.943300] ? SOFTIRQ_verbose+0x10/0x10 [ 756.947369] alloc_pages_vma+0xc9/0x4c0 [ 756.951354] __handle_mm_fault+0xd5d/0x3470 [ 756.955684] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 756.960449] ? find_held_lock+0x35/0x130 [ 756.964518] ? handle_mm_fault+0x1b6/0x7c0 [ 756.968776] handle_mm_fault+0x293/0x7c0 [ 756.972847] __get_user_pages+0x465/0x1220 [ 756.977094] ? follow_page_mask+0x1560/0x1560 [ 756.981599] ? memset+0x32/0x40 [ 756.984882] populate_vma_page_range+0x18e/0x230 [ 756.989644] __mm_populate+0x198/0x2c0 [ 756.993541] ? populate_vma_page_range+0x230/0x230 [ 756.998480] vm_mmap_pgoff+0x1be/0x1d0 [ 757.002383] ? vma_is_stack_for_current+0xa0/0xa0 [ 757.007223] ? __fget+0x237/0x370 [ 757.010776] SyS_mmap_pgoff+0x3ca/0x520 [ 757.014776] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 757.019711] ? do_syscall_64+0x53/0x640 [ 757.023687] ? align_vdso_addr+0x60/0x60 [ 757.027753] SyS_mmap+0x16/0x20 [ 757.031036] do_syscall_64+0x1e8/0x640 [ 757.034925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 757.039781] entry_SYSCALL_64_after_hwframe+0x42/0xb7 07:35:17 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) geteuid() [ 757.045842] RIP: 0033:0x45a219 [ 757.049031] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 757.056740] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 757.064034] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 757.071304] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 757.078580] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 757.085854] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:17 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:17 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet6(0xa, 0x80802, 0x9) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000008c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) 07:35:17 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0/bus\x00', &(0x7f0000000080)='ramfs\x00', 0x2008488, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x40, 0x29) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x9) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x100, 0x5) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000001d00000000000000000000558c0000000000000da65373e29414cbea6d0770c3dc53bc90ef9d3566b8", @ANYRES16=r3]) 07:35:17 executing program 4 (fault-call:2 fault-nth:40): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 757.226223] QAT: Invalid ioctl [ 757.266091] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:17 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000000100)={0x0, 0x8000}) 07:35:17 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:17 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000200)=@v2={0x3, 0x3, 0x3, 0xfffffffa, 0x84, "a885cff6127edee51c2a0437dc15671c23a5d953228aa7141a8d63de3eeb1848a10a8d6442bc336b6b4c9bde5ea34942ed3cf0d7cb3ed7222a3fa70fae7c4c30c1e7848c3a60afcf3d48775b2a0df9c94af8784ad09bc299f1fe0ec84dcb7ce021faa2147b5289108fd6eef8ee4a8a784c47ae2bad4883b238b9c1d309222f013e497341"}, 0x8e, 0x3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) [ 757.327974] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 757.342253] FAULT_INJECTION: forcing a failure. [ 757.342253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 757.435572] CPU: 0 PID: 12111 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 757.442644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.452009] Call Trace: [ 757.454632] dump_stack+0x138/0x197 [ 757.458282] should_fail.cold+0x10f/0x159 [ 757.462440] ? __might_sleep+0x93/0xb0 [ 757.466343] __alloc_pages_nodemask+0x1d6/0x7a0 [ 757.471017] ? __alloc_pages_slowpath+0x2930/0x2930 [ 757.471032] ? check_preemption_disabled+0x3c/0x250 [ 757.471053] alloc_pages_vma+0xc9/0x4c0 [ 757.471068] __handle_mm_fault+0xd5d/0x3470 [ 757.471084] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 757.471096] ? find_held_lock+0x35/0x130 [ 757.471106] ? handle_mm_fault+0x1b6/0x7c0 [ 757.471128] handle_mm_fault+0x293/0x7c0 [ 757.494157] __get_user_pages+0x465/0x1220 [ 757.494177] ? follow_page_mask+0x1560/0x1560 [ 757.515233] ? memset+0x32/0x40 [ 757.518530] populate_vma_page_range+0x18e/0x230 [ 757.523390] __mm_populate+0x198/0x2c0 [ 757.527290] ? populate_vma_page_range+0x230/0x230 [ 757.532239] vm_mmap_pgoff+0x1be/0x1d0 [ 757.536143] ? vma_is_stack_for_current+0xa0/0xa0 [ 757.540993] ? __fget+0x237/0x370 [ 757.544464] SyS_mmap_pgoff+0x3ca/0x520 [ 757.546485] QAT: Invalid ioctl [ 757.548442] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 757.548455] ? do_syscall_64+0x53/0x640 [ 757.548466] ? align_vdso_addr+0x60/0x60 [ 757.564606] SyS_mmap+0x16/0x20 [ 757.567889] do_syscall_64+0x1e8/0x640 [ 757.571780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 757.576636] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 757.581827] RIP: 0033:0x45a219 07:35:17 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) 07:35:17 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000008c0)=0xffffffff, 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:17 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/33) r3 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r3]) 07:35:17 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 757.585013] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 757.592733] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 757.592741] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 757.592747] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 757.592753] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 757.592761] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 07:35:18 executing program 4 (fault-call:2 fault-nth:41): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 757.702577] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:18 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0/bus\x00', 0xc, 0x0) syz_mount_image$bfs(&(0x7f0000000280)='bfs\x00', &(0x7f00000002c0)='./file0/bus\x00', 0x10001, 0xa, &(0x7f00000019c0)=[{&(0x7f0000000440)="cd92fde30ddba44df6a2807afd720741ee978d3ebe00d4bee539d96e149dd2f16d0f5ac8e2d182eb1df7fbf9b2e45cf70cf4db00963e97b30e72cddaf4b9ff4293d461dec27520a06038646f75fae863d885a1f9e39799daaa8f8984a561c38f44721b5bc576e5bd4fecc0ee6672c84b16142fd1c46def4a0b00198afdfc24c301637c4bf9648c556c94a3826bf998ea801c7380775b4f7c1072a82632e26bb9741911feee5deaf9fede3573e8e082de46f972ab4f7228f2fafa7b6fbf30cb8357bcb22fe80fd1aa3c920273a7f0c6654641e768e1453848c3", 0xd9, 0x211}, {&(0x7f0000000300)="0a2e6db7609f406b168e1b07801b573acbc89dace4afbe3b1e0c6d3b83f5b809ffce342835fea44cd066e35ff3ec4981c7aec9a732806b56e0e4", 0x3a, 0x100000000}, {&(0x7f0000000540)="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", 0x1000, 0x7f}, {&(0x7f0000001540)="da7b342c6b8aab7e22bc5eebf203843ba33b9d529d5fb50a9a1522929bee9b5a74cf0731526e663c9e0fb8e327f18220f2022a57905e653f08d74fd7700dbbdeb00f508f2f49b03f31c32da440a2c33680f68b4f0bf58caf364fb42ca019baa377781a23b4ad0e97b64861959eaab939718d791f2962bdaf2958b34f69f48379f46d44b155f3933ba9f4ea0c2191ab912e652aa701a1fa7a0774a717ccffb04a4d6c94254f1a5edd87b8e2b764a7a50363ce570f6d24424d9e558f3f75a9231981200187a58080753be91e8fb96debaace139451ff09a32a23894cf76f18", 0xfffffffffffffd3c, 0x10000}, {&(0x7f0000001640)="518f3b5d25e0dcbb2e7bcc2c3ba6e738bc7f64bc8eda06cccd9e2a58a2aa15091e6840ecadb7fcc75f658759703106ce7ac68adf7fe1d264831a4d95aa0410940a7a175e23162f3ad0bfbb050b80f14eb55a7e5161dd646b841397bb6d3f132b6a14e73652b9e0a17b75f61df6de1398b01ddfabdbf8961d8f78d5745ae6b780807a7189af483d2a2a93ea8d2b9cf39cc83ea954373391a4d9c97e28", 0x9c, 0xeb}, {&(0x7f0000001700)="5a3caa71b25fbc4117ada89ebdc21c7e203db98424d8d7bfbc5b5a13ba9131c96d857672392ef09655104cf77a5570bbc07c5ccb2f32b3f6367bcd5dd2d4b1a097267baa22186b0ec1618c3fd04f2f8759e8a6d0c6ee2b4ba1307ebd8801e99d3569207c256b648917f0784c", 0x6c, 0x70b}, {&(0x7f0000001780)="8ba1430c88dffde2585a5caee423a6ca0becf220757edcb0b1e088df3cf14913b61370967fd1fd1265b39d92a5b425cbf4d2ea7615b392d1edbd500442b75e236f1b10ef79e8117fcf8e0fa74bcebef3229ee4797bcba45b9647abafbf7c", 0x5e, 0x36}, {&(0x7f0000001800)="7cca9dde7cd2c1ca152711b99cc11a959c04259ee3989ffa9b1be09a03303bd7f68c7b28b5b296dbf3d5b84afbb0995abb5aa67a151b5a8102efec8ac8ecd962ea675c20e3743a7ab028e3b4490b91626fbed2e32829eeea5351a44464a70340dbeb0f6679b5cd58a952dd59", 0x6c}, {&(0x7f0000001880), 0x0, 0x9}, {&(0x7f00000018c0)="c002559d3634ba5b51190479d435f1962cec9bab86312f18b59ce6b36ee9ba90b3a476cd000583cb202d796bc5a2fc6ef9c6855927348c22cd0380c76543a752b16c7296b067fb3f6a4d738a0a05de64b61d13c1a25a4a0ad5cc9261bb096050657487c7a5eff0f7cd990c32bd848b5e160348abf84dce0ea994dc74eaf81796cdb4ee98e40c91094d44720e2403501a548f500458444cfbac7043ffec0e5fbf2c224ea73c31f3bf1a54d8b4575bffa69cd1e9b88ab9285869e0933ac52e966114cb7666c480900d1386", 0xca, 0x5}], 0x0, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000032f418d295a4c39d92176a000000df0a1d", @ANYRES32=r0]) r1 = getgid() r2 = getegid() syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000180)='./file0\x00', 0x3, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="4d8442f640ffcc16993beb33d231b358964a142c", 0x14}], 0x8, &(0x7f0000001ac0)=ANY=[@ANYBLOB='show_sys_files=yes,dmask=00000000000000000000001,disable_sparse=no,gid=', @ANYRESHEX=r1, @ANYBLOB="2c672bce94b0b9a4f50000643d7eed98e12ce5ac94121fa00a537f4b8195e84dea75967aebf27e583e8c52cfd5a8e16daaf35af850387c8ed2899ead0db1528847ae661763f9863b1358ed9dd950e6c3f16d4756763e8b9c89459bf856f3a47493e22cfbe62db9f47f2bea7eaeb61413f9b266ff97839953f34351f9302906e79cd049a443e73f3eed0f86266de96856ecd368b8ab76cb35fce0d81c0f2da2228b28a8db", @ANYRESHEX=r2, @ANYBLOB=',rootcontext=user_u,\x00']) 07:35:18 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) acct(&(0x7f0000000140)='./file0/bus\x00') 07:35:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 757.771778] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 757.786725] FAULT_INJECTION: forcing a failure. [ 757.786725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:18 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 757.872003] CPU: 0 PID: 12148 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 757.879122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 757.888493] Call Trace: [ 757.891117] dump_stack+0x138/0x197 [ 757.894770] should_fail.cold+0x10f/0x159 [ 757.898929] ? __might_sleep+0x93/0xb0 [ 757.902837] __alloc_pages_nodemask+0x1d6/0x7a0 [ 757.907521] ? __alloc_pages_slowpath+0x2930/0x2930 [ 757.912549] ? __lock_acquire+0x5f7/0x4620 [ 757.913576] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 757.916789] ? SOFTIRQ_verbose+0x10/0x10 [ 757.927246] alloc_pages_vma+0xc9/0x4c0 [ 757.931235] __handle_mm_fault+0xd5d/0x3470 [ 757.935572] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 757.940337] ? find_held_lock+0x35/0x130 [ 757.944510] ? handle_mm_fault+0x1b6/0x7c0 [ 757.948764] handle_mm_fault+0x293/0x7c0 [ 757.953099] __get_user_pages+0x465/0x1220 [ 757.957348] ? follow_page_mask+0x1560/0x1560 [ 757.961854] ? memset+0x32/0x40 [ 757.965153] populate_vma_page_range+0x18e/0x230 07:35:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 757.969936] __mm_populate+0x198/0x2c0 [ 757.973835] ? populate_vma_page_range+0x230/0x230 [ 757.978783] vm_mmap_pgoff+0x1be/0x1d0 [ 757.982684] ? vma_is_stack_for_current+0xa0/0xa0 [ 757.987576] ? __fget+0x237/0x370 [ 757.991044] SyS_mmap_pgoff+0x3ca/0x520 [ 757.995035] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 757.996472] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 757.999969] ? do_syscall_64+0x53/0x640 [ 758.010516] ? align_vdso_addr+0x60/0x60 [ 758.011205] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:18 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 758.014580] SyS_mmap+0x16/0x20 [ 758.024273] do_syscall_64+0x1e8/0x640 [ 758.028169] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 758.033022] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 758.038214] RIP: 0033:0x45a219 [ 758.041403] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 758.049116] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 758.056384] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 758.063662] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 07:35:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 07:35:18 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 758.070939] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 758.078215] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 758.082517] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 758.142130] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 07:35:18 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 758.182340] ntfs: (device loop1): parse_options(): Unrecognized mount option g+Δ°¹¤õ. [ 758.320412] BFS-fs: bfs_fill_super(): No BFS filesystem on loop1 (magic=de9dca7c) 07:35:18 executing program 4 (fault-call:2 fault-nth:42): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 758.378739] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:18 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x80) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x2a01000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000005500000000000000420a2017d8b9c34598883a73277b5792dde58683aba4dcc5fe3d013600c4ac5c4f5f210711bdeaa8ad4c58f45819f0c81d04dc38103bd552a12e722039dfe4fd83d051d5916c9374990d55bfc233aa5984564560ad585f020c034ed5f0669b93d911d5d535dcaf64024340ee7d954a6af4ae234285a50552569e444b334d979e8b98b11f02c1d493ef4351486fb869b02fe6205b", @ANYRES32=r0]) prctl$PR_SVE_GET_VL(0x33, 0x1075c) 07:35:18 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:18 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r2, 0x0, 0xee01]) lchown(&(0x7f0000000600)='./file0\x00', r0, r3) 07:35:18 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:18 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:18 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000700)=[r1, 0x0, 0xee01]) [ 758.505035] FAULT_INJECTION: forcing a failure. [ 758.505035] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.518636] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 758.577625] CPU: 1 PID: 12201 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 758.584701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.594069] Call Trace: [ 758.596676] dump_stack+0x138/0x197 [ 758.600334] should_fail.cold+0x10f/0x159 [ 758.604492] ? __might_sleep+0x93/0xb0 [ 758.608393] __alloc_pages_nodemask+0x1d6/0x7a0 [ 758.613193] ? __alloc_pages_slowpath+0x2930/0x2930 [ 758.618223] ? __lock_acquire+0x5f7/0x4620 [ 758.623168] ? SOFTIRQ_verbose+0x10/0x10 07:35:18 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) [ 758.627242] alloc_pages_vma+0xc9/0x4c0 [ 758.631222] __handle_mm_fault+0xd5d/0x3470 [ 758.635549] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 758.640311] ? find_held_lock+0x35/0x130 [ 758.644409] ? handle_mm_fault+0x1b6/0x7c0 [ 758.648648] handle_mm_fault+0x293/0x7c0 [ 758.652695] __get_user_pages+0x465/0x1220 [ 758.656919] ? follow_page_mask+0x1560/0x1560 [ 758.661401] ? memset+0x32/0x40 [ 758.664667] populate_vma_page_range+0x18e/0x230 [ 758.669417] __mm_populate+0x198/0x2c0 [ 758.673287] ? populate_vma_page_range+0x230/0x230 [ 758.678213] vm_mmap_pgoff+0x1be/0x1d0 [ 758.682173] ? vma_is_stack_for_current+0xa0/0xa0 [ 758.686997] ? __fget+0x237/0x370 [ 758.690438] SyS_mmap_pgoff+0x3ca/0x520 [ 758.694421] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 758.699339] ? do_syscall_64+0x53/0x640 [ 758.703308] ? align_vdso_addr+0x60/0x60 [ 758.707358] SyS_mmap+0x16/0x20 [ 758.710633] do_syscall_64+0x1e8/0x640 [ 758.714516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 758.719342] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 758.724510] RIP: 0033:0x45a219 07:35:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:19 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 758.727698] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 758.735408] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 758.742704] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 758.749961] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 758.757213] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 758.764466] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:19 executing program 4 (fault-call:2 fault-nth:43): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:19 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000000000000000000005500000000000000905c16a292220279bdf98426f25bf940b7218ede23edd8eb83cba345a0c283d58a09f3277cb25d35fd722ceb1fde42c207b570fb84d9d470d427be05b78b69369d70819eadb17b4c7580cb2ca0d101840868a6316addf12a06ec4b1c5154149ddae01e0036431e9818334b4484165a10501eea34252c4e9b29651c2bd26a9bd854c8b6cb5beb223181301ce7dbb10d9dc1", @ANYRES32=r0]) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) 07:35:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 758.900957] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:19 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) [ 758.951647] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 758.987672] FAULT_INJECTION: forcing a failure. 07:35:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:19 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 758.987672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:19 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) removexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB='osx.)-bmnet0kmn\b\x00\x00\x00\x00\x00\x00\x000ppp0#keyring\x00'/46]) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) [ 759.084924] CPU: 0 PID: 12239 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 759.092029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.103254] Call Trace: [ 759.103271] dump_stack+0x138/0x197 [ 759.103289] should_fail.cold+0x10f/0x159 [ 759.109477] ? __might_sleep+0x93/0xb0 [ 759.109494] __alloc_pages_nodemask+0x1d6/0x7a0 [ 759.109507] ? trace_hardirqs_on_caller+0x400/0x590 [ 759.109521] ? __alloc_pages_slowpath+0x2930/0x2930 07:35:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 759.109545] alloc_pages_vma+0xc9/0x4c0 [ 759.136195] __handle_mm_fault+0xd5d/0x3470 [ 759.140534] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 759.145295] ? find_held_lock+0x35/0x130 [ 759.149363] ? handle_mm_fault+0x1b6/0x7c0 [ 759.153630] handle_mm_fault+0x293/0x7c0 [ 759.157710] __get_user_pages+0x465/0x1220 [ 759.161961] ? follow_page_mask+0x1560/0x1560 [ 759.166562] ? memset+0x32/0x40 [ 759.169866] populate_vma_page_range+0x18e/0x230 [ 759.174634] __mm_populate+0x198/0x2c0 [ 759.176267] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 759.178547] ? populate_vma_page_range+0x230/0x230 [ 759.189877] vm_mmap_pgoff+0x1be/0x1d0 [ 759.193780] ? vma_is_stack_for_current+0xa0/0xa0 [ 759.198631] ? SyS_mmap_pgoff+0x27a/0x520 [ 759.202790] SyS_mmap_pgoff+0x3ca/0x520 [ 759.206776] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 759.210349] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 759.211703] ? align_vdso_addr+0x60/0x60 [ 759.222258] SyS_mmap+0x16/0x20 [ 759.225545] do_syscall_64+0x1e8/0x640 [ 759.229438] ? trace_hardirqs_off_thunk+0x1a/0x1c 07:35:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 759.234289] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 759.239465] RIP: 0033:0x45a219 [ 759.242653] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 759.250364] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 759.257652] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 759.264928] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 759.272199] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 07:35:19 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:19 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) socket(0x9, 0x2, 0xff) [ 759.279471] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 759.337544] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:19 executing program 4 (fault-call:2 fault-nth:44): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:19 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x8) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCLINUX6(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x6, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read$usbfs(r3, &(0x7f0000000000)=""/171, 0xab) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/19, @ANYRES32=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$FIONREAD(r6, 0x541b, &(0x7f00000000c0)) 07:35:19 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:19 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 759.479236] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:19 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 759.525354] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:19 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 759.579796] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 759.601236] FAULT_INJECTION: forcing a failure. [ 759.601236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 759.650231] CPU: 0 PID: 12302 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 759.652090] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 759.657380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.673233] Call Trace: [ 759.675835] dump_stack+0x138/0x197 [ 759.679470] ? vprintk_func+0x65/0x159 [ 759.683372] should_fail.cold+0x10f/0x159 [ 759.687537] ? __might_sleep+0x93/0xb0 [ 759.691437] __alloc_pages_nodemask+0x1d6/0x7a0 [ 759.696109] ? retint_kernel+0x2d/0x2d [ 759.700003] ? __alloc_pages_slowpath+0x2930/0x2930 [ 759.705022] ? __get_vma_policy+0x70/0x160 [ 759.705039] alloc_pages_vma+0xc9/0x4c0 [ 759.705063] __handle_mm_fault+0xd5d/0x3470 [ 759.705078] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 759.705091] ? find_held_lock+0x35/0x130 [ 759.713298] ? handle_mm_fault+0x1b6/0x7c0 [ 759.730660] handle_mm_fault+0x293/0x7c0 [ 759.734729] __get_user_pages+0x465/0x1220 [ 759.738985] ? follow_page_mask+0x1560/0x1560 [ 759.743503] ? memset+0x32/0x40 07:35:20 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 759.746798] populate_vma_page_range+0x18e/0x230 [ 759.751570] __mm_populate+0x198/0x2c0 [ 759.755466] ? populate_vma_page_range+0x230/0x230 [ 759.760412] vm_mmap_pgoff+0x1be/0x1d0 [ 759.764311] ? vma_is_stack_for_current+0xa0/0xa0 [ 759.769241] ? __fget+0x237/0x370 [ 759.772709] SyS_mmap_pgoff+0x3ca/0x520 [ 759.776696] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 759.781625] ? do_syscall_64+0x53/0x640 [ 759.781638] ? align_vdso_addr+0x60/0x60 [ 759.781651] SyS_mmap+0x16/0x20 [ 759.781662] do_syscall_64+0x1e8/0x640 07:35:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 759.781672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 759.781690] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 759.781699] RIP: 0033:0x45a219 [ 759.781705] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 759.781715] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 759.781721] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 759.781728] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 759.781734] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 07:35:20 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 759.781740] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 759.800013] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 759.875760] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:20 executing program 4 (fault-call:2 fault-nth:45): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 760.042154] FAULT_INJECTION: forcing a failure. [ 760.042154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.054178] CPU: 0 PID: 12332 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 760.061191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.070550] Call Trace: [ 760.073170] dump_stack+0x138/0x197 [ 760.076802] should_fail.cold+0x10f/0x159 [ 760.080943] ? __might_sleep+0x93/0xb0 [ 760.084880] __alloc_pages_nodemask+0x1d6/0x7a0 [ 760.089544] ? __alloc_pages_slowpath+0x2930/0x2930 [ 760.094546] ? __lock_acquire+0x5f7/0x4620 [ 760.098768] ? SOFTIRQ_verbose+0x10/0x10 [ 760.102819] alloc_pages_vma+0xc9/0x4c0 [ 760.106786] __handle_mm_fault+0xd5d/0x3470 [ 760.111110] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 760.115878] ? find_held_lock+0x35/0x130 [ 760.119930] ? handle_mm_fault+0x1b6/0x7c0 [ 760.124166] handle_mm_fault+0x293/0x7c0 [ 760.128217] __get_user_pages+0x465/0x1220 [ 760.132455] ? follow_page_mask+0x1560/0x1560 [ 760.136944] ? memset+0x32/0x40 [ 760.140224] populate_vma_page_range+0x18e/0x230 [ 760.144979] __mm_populate+0x198/0x2c0 [ 760.148851] ? populate_vma_page_range+0x230/0x230 [ 760.153783] vm_mmap_pgoff+0x1be/0x1d0 [ 760.157668] ? vma_is_stack_for_current+0xa0/0xa0 [ 760.162500] ? __fget+0x237/0x370 [ 760.165943] SyS_mmap_pgoff+0x3ca/0x520 [ 760.169904] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 760.174824] ? align_vdso_addr+0x60/0x60 [ 760.178870] SyS_mmap+0x16/0x20 [ 760.182134] do_syscall_64+0x1e8/0x640 [ 760.186019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 760.190877] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 760.196062] RIP: 0033:0x45a219 [ 760.199234] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 760.206928] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 760.214191] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 760.221460] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 760.228762] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 760.236017] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:20 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x20834c0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x41) write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0x7) membarrier(0x2, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000872c000000000000ff5400008000000020", @ANYRES32=r0]) 07:35:20 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:20 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:20 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000740)='./file0/bus\x00', 0x2) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:20 executing program 4 (fault-call:2 fault-nth:46): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:20 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 760.380289] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:20 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000200)='ra\xfe\x8dfs\x00\xef\x84\xea\xafH\x9b;\xef{\x00\x00\x00\x00\x00\xb4\xb0:+\xc9m\x17\xb7\x04|\xb4\xa8\x1103\x1b\xe1\xefu\x0e\xac\xae\\!\x84M\x00\xd2\x9fC\x8f\x1d\x82A\xbe+\xac\xbci\xcf\x1f\x9eI\xf7\xbd\x02/\xb3\x00\x00\x004\x90\xd77\xa9q\x16c.X\x99\x95\xd2\xbbBeMNp\xc4\xa6\xde\xcf\x02+\x915KpcY\aW\xe8Mi\xe7\xe0\x8c\xc8U\xc3Z\xef\xb1)E\xd5\xc7d\xc9^K\xb5\xec\xfc\xce\xb8\x8e;\xe6\xa05\\\xfc\xd5dLd\xa02\xdd\xff\xb1\t.\x83\xc4)\x9d==u\x81r\x80j\t\xa0Y\xb7I\x91X~N\xb1\xa6\xd7\xd2\xf2v\xdd\xc5d\x1b\x9b\xcfG\x86\x05\r\x92\xeb\t\xd7\xdd`\x1f\x15\x97k\xf9\xe7b\xa1E\xec`', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000005500000400000000", @ANYRES32=r0]) [ 760.441413] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 760.446763] FAULT_INJECTION: forcing a failure. [ 760.446763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:20 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:20 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:20 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 760.553575] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 760.560729] CPU: 0 PID: 12352 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 760.567770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.577127] Call Trace: [ 760.579729] dump_stack+0x138/0x197 [ 760.583404] should_fail.cold+0x10f/0x159 [ 760.587564] ? __might_sleep+0x93/0xb0 [ 760.591464] __alloc_pages_nodemask+0x1d6/0x7a0 [ 760.596144] ? __alloc_pages_slowpath+0x2930/0x2930 07:35:20 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 760.601169] ? __lock_acquire+0x5f7/0x4620 [ 760.605415] ? SOFTIRQ_verbose+0x10/0x10 [ 760.609493] alloc_pages_vma+0xc9/0x4c0 [ 760.613483] __handle_mm_fault+0xd5d/0x3470 [ 760.617826] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 760.622594] ? check_preemption_disabled+0x3c/0x250 [ 760.627726] handle_mm_fault+0x293/0x7c0 [ 760.631802] __get_user_pages+0x465/0x1220 [ 760.636087] ? follow_page_mask+0x1560/0x1560 [ 760.640589] ? memset+0x32/0x40 [ 760.643881] populate_vma_page_range+0x18e/0x230 [ 760.648653] __mm_populate+0x198/0x2c0 [ 760.652550] ? populate_vma_page_range+0x230/0x230 [ 760.657492] vm_mmap_pgoff+0x1be/0x1d0 [ 760.661396] ? vma_is_stack_for_current+0xa0/0xa0 [ 760.666248] ? SyS_mmap_pgoff+0x27a/0x520 [ 760.670405] SyS_mmap_pgoff+0x3ca/0x520 [ 760.674388] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 760.679331] ? do_syscall_64+0x81/0x640 [ 760.683308] ? align_vdso_addr+0x60/0x60 [ 760.686710] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 760.687369] SyS_mmap+0x16/0x20 [ 760.697126] do_syscall_64+0x1e8/0x640 07:35:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 760.701020] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 760.705870] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 760.711057] RIP: 0033:0x45a219 [ 760.714247] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 760.721965] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 760.729239] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 760.736517] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 760.738123] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:21 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r1) mount$9p_virtio(&(0x7f0000000000)='}@mime_type\x00', &(0x7f0000000040)='./file0/bus\x00', &(0x7f00000000c0)='9p\x00', 0x1200440, &(0x7f0000000200)={'trans=virtio,', {[{@nodevmap='nodevmap'}, {@version_L='version=9p2000.L'}], [{@smackfsroot={'smackfsroot', 0x3d, 'ramfs\x00'}}, {@euid_gt={'euid>', r1}}, {@measure='measure'}, {@subj_role={'subj_role'}}]}}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYBLOB="00007ddf272dbeb95626ef6bad382b9700000000000063000000000000005500000000000000", @ANYRES32=r2]) [ 760.743791] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 760.757545] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 760.761788] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:21 executing program 4 (fault-call:2 fault-nth:47): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:21 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 760.942218] FAULT_INJECTION: forcing a failure. [ 760.942218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.960279] 9pnet_virtio: no channels available for device }@mime_type [ 760.978200] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 760.992285] CPU: 0 PID: 12396 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 760.999331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.008698] Call Trace: [ 761.011301] dump_stack+0x138/0x197 [ 761.014947] should_fail.cold+0x10f/0x159 [ 761.019212] ? __might_sleep+0x93/0xb0 [ 761.023108] __alloc_pages_nodemask+0x1d6/0x7a0 [ 761.027786] ? trace_hardirqs_on_caller+0x400/0x590 [ 761.032806] ? __alloc_pages_slowpath+0x2930/0x2930 [ 761.037842] alloc_pages_vma+0xc9/0x4c0 07:35:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:21 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 761.041827] __handle_mm_fault+0xd5d/0x3470 [ 761.046159] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 761.050944] ? find_held_lock+0x35/0x130 [ 761.055004] ? handle_mm_fault+0x1b6/0x7c0 [ 761.059247] handle_mm_fault+0x293/0x7c0 [ 761.063307] __get_user_pages+0x465/0x1220 [ 761.063327] ? follow_page_mask+0x1560/0x1560 [ 761.063347] ? memset+0x32/0x40 [ 761.063363] populate_vma_page_range+0x18e/0x230 [ 761.063381] __mm_populate+0x198/0x2c0 [ 761.063395] ? populate_vma_page_range+0x230/0x230 [ 761.089043] vm_mmap_pgoff+0x1be/0x1d0 [ 761.092951] ? vma_is_stack_for_current+0xa0/0xa0 [ 761.097801] ? __fget+0x237/0x370 [ 761.101273] SyS_mmap_pgoff+0x3ca/0x520 [ 761.103290] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 761.105278] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 761.116592] ? do_syscall_64+0x53/0x640 [ 761.120577] ? align_vdso_addr+0x60/0x60 [ 761.124642] SyS_mmap+0x16/0x20 [ 761.127930] do_syscall_64+0x1e8/0x640 [ 761.131825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 761.136678] entry_SYSCALL_64_after_hwframe+0x42/0xb7 07:35:21 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000000)=0x80, 0x4) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000200)=0x1) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x211) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000040)='./file0/bus\x00', 0x82) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = semget$private(0x0, 0x0, 0x4) execve(&(0x7f0000000240)='./file0/bus\x00', &(0x7f0000000580)=[&(0x7f00000002c0)='ramfs\x00', &(0x7f0000000300)='ramfs\x00', &(0x7f0000000380)='ramfs\x00', &(0x7f00000003c0)=',]Kwlan1system\x00', &(0x7f0000000400)='security@\x00', &(0x7f0000000440)='ramfs\x00', &(0x7f0000000480)='ramfs\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='ramfs\x00', &(0x7f0000000540)='ramfs\x00'], &(0x7f00000007c0)=[&(0x7f0000000600)='ramfs\x00', &(0x7f0000000640)='ramfs\x00', &(0x7f0000000680)='wlan1.\x00', &(0x7f00000006c0)='ramfs\x00', &(0x7f0000000700)='ramfs\x00', &(0x7f0000000740)='ramfs\x00', &(0x7f0000000780)='ramfs\x00']) semctl$SEM_INFO(r5, 0x1, 0x13, &(0x7f0000000100)=""/168) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x20c000, 0x0) mkdirat(r6, &(0x7f0000000800)='./file0/bus\x00', 0xd0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000001537eb75aac3a0d4000000005500000000000000", @ANYRESHEX=r3]) [ 761.141906] RIP: 0033:0x45a219 [ 761.145095] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 761.152804] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 761.160076] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 761.167348] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 761.174629] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 761.181906] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:21 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) userfaultfd(0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:21 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:21 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:21 executing program 4 (fault-call:2 fault-nth:48): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:21 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 761.304879] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:21 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:21 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:21 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2d4, 0x40080) recvfrom(r0, &(0x7f00000000c0)=""/96, 0x60, 0x40000000, &(0x7f0000000200)=@in6={0xa, 0x4e24, 0x3f, @rand_addr="d2d321b96b993d3c2d7873e8415cd23a", 0x2}, 0x80) r1 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1]) [ 761.382841] audit: type=1804 audit(6137105721.724:140): pid=12433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir414558581/syzkaller.136b1Q/1260/file0/bus" dev="ramfs" ino=185218 res=1 07:35:21 executing program 5 (fault-call:4 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:21 executing program 0: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 761.467758] FAULT_INJECTION: forcing a failure. [ 761.467758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:21 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80802, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 761.554736] CPU: 0 PID: 12435 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 761.561805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.571175] Call Trace: [ 761.573777] dump_stack+0x138/0x197 [ 761.577425] should_fail.cold+0x10f/0x159 [ 761.581576] ? __might_sleep+0x93/0xb0 [ 761.585471] __alloc_pages_nodemask+0x1d6/0x7a0 [ 761.590147] ? debug_smp_processor_id+0x1c/0x20 [ 761.594823] ? __alloc_pages_slowpath+0x2930/0x2930 [ 761.599844] ? save_trace+0x290/0x290 [ 761.603650] ? rcu_report_unblock_qs_rnp.constprop.0+0xac/0x1e0 [ 761.610368] alloc_pages_vma+0xc9/0x4c0 [ 761.614358] __handle_mm_fault+0xd5d/0x3470 [ 761.618695] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 761.623466] ? find_held_lock+0x35/0x130 [ 761.627543] ? handle_mm_fault+0x1b6/0x7c0 [ 761.631797] handle_mm_fault+0x293/0x7c0 [ 761.635865] __get_user_pages+0x465/0x1220 [ 761.640124] ? follow_page_mask+0x1560/0x1560 [ 761.644622] ? retint_kernel+0x2d/0x2d [ 761.648517] populate_vma_page_range+0x18e/0x230 07:35:21 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:22 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 761.653283] __mm_populate+0x198/0x2c0 [ 761.653298] ? populate_vma_page_range+0x230/0x230 [ 761.653316] vm_mmap_pgoff+0x1be/0x1d0 [ 761.653332] ? vma_is_stack_for_current+0xa0/0xa0 [ 761.653342] ? __fget+0x237/0x370 [ 761.653363] SyS_mmap_pgoff+0x3ca/0x520 [ 761.653377] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 761.653388] ? do_syscall_64+0x53/0x640 [ 761.662183] ? align_vdso_addr+0x60/0x60 [ 761.662195] SyS_mmap+0x16/0x20 [ 761.662205] do_syscall_64+0x1e8/0x640 [ 761.662214] ? trace_hardirqs_off_thunk+0x1a/0x1c 07:35:22 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() r6 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) lsetxattr$system_posix_acl(0xfffffffffffffffd, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x5}, [{0x2, 0x4, r1}, {0x2, 0x4, r3}, {0x2, 0xb72b5c30aa2b4035, 0xee01}, {0x2, 0x5, r4}], {}, [{0x8, 0x1, r5}, {0x8, 0x2, r7}], {}, {0x20, 0x3}}, 0x54, 0x2) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r8 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8]) 07:35:22 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 761.662234] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 761.662243] RIP: 0033:0x45a219 [ 761.662249] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 761.662262] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 761.662268] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 761.662277] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 761.670406] FAULT_INJECTION: forcing a failure. [ 761.670406] name failslab, interval 1, probability 0, space 0, times 0 [ 761.670983] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 761.670990] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 761.883764] CPU: 1 PID: 12453 Comm: syz-executor.5 Not tainted 4.14.153 #0 [ 761.890922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.900280] Call Trace: [ 761.902961] dump_stack+0x138/0x197 [ 761.906578] should_fail.cold+0x10f/0x159 [ 761.910715] should_failslab+0xdb/0x130 [ 761.914679] kmem_cache_alloc_trace+0x2e9/0x790 [ 761.919332] ? __might_fault+0x110/0x1d0 [ 761.923382] ? find_held_lock+0x35/0x130 [ 761.927439] proc_do_submiturb+0x1a77/0x3690 [ 761.931837] ? lock_downgrade+0x740/0x740 [ 761.935977] usbdev_do_ioctl+0x65d/0x2a60 [ 761.940119] ? lock_downgrade+0x740/0x740 [ 761.944267] ? proc_submiturb_compat+0x150/0x150 [ 761.949016] ? perf_trace_lock+0x109/0x500 [ 761.953246] ? check_preemption_disabled+0x3c/0x250 [ 761.958360] ? perf_trace_lock+0x109/0x500 [ 761.962604] usbdev_ioctl+0x26/0x30 [ 761.966223] ? usbdev_compat_ioctl+0x30/0x30 [ 761.970660] do_vfs_ioctl+0x7ae/0x1060 [ 761.974592] ? selinux_file_mprotect+0x5d0/0x5d0 [ 761.979344] ? lock_downgrade+0x740/0x740 [ 761.983478] ? ioctl_preallocate+0x1c0/0x1c0 [ 761.987872] ? __fget+0x237/0x370 [ 761.991314] ? security_file_ioctl+0x89/0xb0 [ 761.995711] SyS_ioctl+0x8f/0xc0 [ 761.999061] ? do_vfs_ioctl+0x1060/0x1060 [ 762.003196] do_syscall_64+0x1e8/0x640 [ 762.007074] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 762.011922] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 762.017119] RIP: 0033:0x45a219 [ 762.020316] RSP: 002b:00007fe1a654fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:35:22 executing program 4 (fault-call:2 fault-nth:49): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:22 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) socket$isdn_base(0x22, 0x3, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000000000000000005500000000000000fab26b027ea4fcd6dfed", @ANYRES32]) 07:35:22 executing program 2: sysfs$2(0x2, 0x9, &(0x7f0000000000)=""/125) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:22 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:22 executing program 3: socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:22 executing program 5 (fault-call:4 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 762.028008] RAX: ffffffffffffffda RBX: 00007fe1a654fc90 RCX: 000000000045a219 [ 762.035259] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 762.042522] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 762.049773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1a65506d4 [ 762.057028] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:22 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 762.162253] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:22 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:22 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000000)) [ 762.208772] FAULT_INJECTION: forcing a failure. [ 762.208772] name failslab, interval 1, probability 0, space 0, times 0 07:35:22 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 762.278293] CPU: 0 PID: 12492 Comm: syz-executor.5 Not tainted 4.14.153 #0 [ 762.285361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.294723] Call Trace: [ 762.297323] dump_stack+0x138/0x197 [ 762.300973] should_fail.cold+0x10f/0x159 [ 762.305149] should_failslab+0xdb/0x130 [ 762.309133] kmem_cache_alloc_trace+0x2e9/0x790 [ 762.313847] ? check_ctrlrecip+0x91/0x290 [ 762.318098] proc_do_submiturb+0x3a2/0x3690 [ 762.322449] usbdev_do_ioctl+0x65d/0x2a60 [ 762.326603] ? lock_downgrade+0x740/0x740 [ 762.330763] ? proc_submiturb_compat+0x150/0x150 [ 762.335525] ? perf_trace_lock+0x109/0x500 [ 762.340287] ? check_preemption_disabled+0x3c/0x250 [ 762.345339] ? perf_trace_lock+0x109/0x500 [ 762.349615] usbdev_ioctl+0x26/0x30 [ 762.350683] FAULT_INJECTION: forcing a failure. [ 762.350683] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.353242] ? usbdev_compat_ioctl+0x30/0x30 [ 762.353256] do_vfs_ioctl+0x7ae/0x1060 [ 762.353267] ? selinux_file_mprotect+0x5d0/0x5d0 [ 762.353283] ? lock_downgrade+0x740/0x740 [ 762.382442] ? ioctl_preallocate+0x1c0/0x1c0 [ 762.386857] ? __fget+0x237/0x370 [ 762.390322] ? security_file_ioctl+0x89/0xb0 [ 762.394740] SyS_ioctl+0x8f/0xc0 [ 762.398104] ? do_vfs_ioctl+0x1060/0x1060 [ 762.402256] do_syscall_64+0x1e8/0x640 [ 762.406143] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 762.410997] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 762.416180] RIP: 0033:0x45a219 [ 762.419385] RSP: 002b:00007fe1a654fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.427098] RAX: ffffffffffffffda RBX: 00007fe1a654fc90 RCX: 000000000045a219 [ 762.434366] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 762.441756] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 762.449019] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1a65506d4 [ 762.456292] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 [ 762.463580] CPU: 1 PID: 12494 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 762.470612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.479967] Call Trace: [ 762.482563] dump_stack+0x138/0x197 [ 762.486200] should_fail.cold+0x10f/0x159 [ 762.490401] ? __might_sleep+0x93/0xb0 [ 762.494303] __alloc_pages_nodemask+0x1d6/0x7a0 [ 762.498976] ? __alloc_pages_slowpath+0x2930/0x2930 [ 762.503982] ? __lock_acquire+0x5f7/0x4620 [ 762.504001] ? SOFTIRQ_verbose+0x10/0x10 [ 762.504022] alloc_pages_vma+0xc9/0x4c0 [ 762.516275] __handle_mm_fault+0xd5d/0x3470 [ 762.520608] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 762.525378] ? find_held_lock+0x35/0x130 [ 762.529445] ? handle_mm_fault+0x1b6/0x7c0 [ 762.533695] handle_mm_fault+0x293/0x7c0 [ 762.537767] __get_user_pages+0x465/0x1220 [ 762.542021] ? follow_page_mask+0x1560/0x1560 [ 762.542094] FAULT_INJECTION: forcing a failure. [ 762.542094] name failslab, interval 1, probability 0, space 0, times 0 [ 762.546540] ? retint_kernel+0x2d/0x2d [ 762.546563] populate_vma_page_range+0x18e/0x230 [ 762.546583] __mm_populate+0x198/0x2c0 [ 762.570268] ? populate_vma_page_range+0x230/0x230 [ 762.575202] vm_mmap_pgoff+0x1be/0x1d0 [ 762.579090] ? vma_is_stack_for_current+0xa0/0xa0 [ 762.583929] ? SyS_mmap_pgoff+0x27a/0x520 [ 762.588075] SyS_mmap_pgoff+0x3ca/0x520 [ 762.592050] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 762.596990] ? do_syscall_64+0x53/0x640 [ 762.600962] ? align_vdso_addr+0x60/0x60 [ 762.605036] SyS_mmap+0x16/0x20 [ 762.608332] do_syscall_64+0x1e8/0x640 [ 762.612223] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 762.617065] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 762.622246] RIP: 0033:0x45a219 07:35:22 executing program 5 (fault-call:4 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:22 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r2, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0/bus\x00', 0x7, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="c6eab2bb0a526bd9b3ec38693f61b42eee0d936cb4fdbaca3a77041752", 0x1d, 0x7ff}], 0x2080, &(0x7f0000000440)=ANY=[@ANYBLOB='n=', @ANYRESHEX=r2, @ANYBLOB=',resgid=', @ANYRESHEX=r3, @ANYBLOB="2c736d61636b55ed20097919db30e666736861743d65746830766d6e6574312326656d3070707031292c686173682c7569643d00", @ANYRESDEC=r4, @ANYBLOB=',obj_role=\x00,\x00']) [ 762.625427] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 762.633128] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 762.640393] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 762.647653] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 762.655009] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 762.662272] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 762.669570] CPU: 0 PID: 12511 Comm: syz-executor.5 Not tainted 4.14.153 #0 [ 762.676605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.687777] Call Trace: [ 762.690371] dump_stack+0x138/0x197 [ 762.694004] should_fail.cold+0x10f/0x159 [ 762.698169] should_failslab+0xdb/0x130 [ 762.702150] __kmalloc+0x2f0/0x7a0 [ 762.705692] ? rcu_read_lock_sched_held+0x110/0x130 [ 762.710732] ? kmem_cache_alloc_trace+0x623/0x790 [ 762.715585] ? usb_alloc_urb+0x24/0x50 [ 762.719476] usb_alloc_urb+0x24/0x50 [ 762.723188] proc_do_submiturb+0x3c0/0x3690 [ 762.727517] usbdev_do_ioctl+0x65d/0x2a60 [ 762.731653] ? lock_downgrade+0x740/0x740 [ 762.735788] ? proc_submiturb_compat+0x150/0x150 [ 762.740537] ? perf_trace_lock+0x109/0x500 [ 762.744777] ? check_preemption_disabled+0x3c/0x250 [ 762.749789] ? perf_trace_lock+0x109/0x500 [ 762.754071] usbdev_ioctl+0x26/0x30 [ 762.757692] ? usbdev_compat_ioctl+0x30/0x30 [ 762.762092] do_vfs_ioctl+0x7ae/0x1060 [ 762.765973] ? selinux_file_mprotect+0x5d0/0x5d0 [ 762.770712] ? lock_downgrade+0x740/0x740 [ 762.774845] ? ioctl_preallocate+0x1c0/0x1c0 [ 762.779264] ? __fget+0x237/0x370 [ 762.782718] ? security_file_ioctl+0x89/0xb0 [ 762.787176] SyS_ioctl+0x8f/0xc0 [ 762.790553] ? do_vfs_ioctl+0x1060/0x1060 [ 762.794704] do_syscall_64+0x1e8/0x640 [ 762.798578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 762.803422] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 762.808604] RIP: 0033:0x45a219 [ 762.811789] RSP: 002b:00007fe1a654fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.819506] RAX: ffffffffffffffda RBX: 00007fe1a654fc90 RCX: 000000000045a219 [ 762.826781] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 762.834035] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 762.841294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1a65506d4 [ 762.848584] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:23 executing program 4 (fault-call:2 fault-nth:50): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:23 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:23 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:23 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:23 executing program 5 (fault-call:4 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:23 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 762.962370] FAULT_INJECTION: forcing a failure. [ 762.962370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.993112] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 763.036937] FAULT_INJECTION: forcing a failure. [ 763.036937] name failslab, interval 1, probability 0, space 0, times 0 [ 763.053636] CPU: 1 PID: 12523 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 763.064444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.087371] Call Trace: [ 763.089961] dump_stack+0x138/0x197 [ 763.093590] should_fail.cold+0x10f/0x159 [ 763.097735] ? __might_sleep+0x93/0xb0 [ 763.101626] __alloc_pages_nodemask+0x1d6/0x7a0 [ 763.106298] ? __alloc_pages_slowpath+0x2930/0x2930 [ 763.111308] ? __lock_acquire+0x5f7/0x4620 [ 763.115544] ? SOFTIRQ_verbose+0x10/0x10 [ 763.119607] alloc_pages_vma+0xc9/0x4c0 [ 763.123583] __handle_mm_fault+0xd5d/0x3470 [ 763.127905] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 763.132655] ? find_held_lock+0x35/0x130 [ 763.136711] ? handle_mm_fault+0x1b6/0x7c0 [ 763.140960] handle_mm_fault+0x293/0x7c0 [ 763.145020] __get_user_pages+0x465/0x1220 [ 763.149260] ? follow_page_mask+0x1560/0x1560 [ 763.153759] ? memset+0x32/0x40 [ 763.157045] populate_vma_page_range+0x18e/0x230 [ 763.161804] __mm_populate+0x198/0x2c0 [ 763.165690] ? populate_vma_page_range+0x230/0x230 [ 763.170631] vm_mmap_pgoff+0x1be/0x1d0 [ 763.174522] ? vma_is_stack_for_current+0xa0/0xa0 [ 763.179357] ? __fget+0x237/0x370 [ 763.182817] SyS_mmap_pgoff+0x3ca/0x520 [ 763.186791] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 763.191717] ? do_syscall_64+0x53/0x640 [ 763.195684] ? align_vdso_addr+0x60/0x60 [ 763.199871] SyS_mmap+0x16/0x20 [ 763.203146] do_syscall_64+0x1e8/0x640 [ 763.207037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 763.211883] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 763.217239] RIP: 0033:0x45a219 [ 763.220422] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 763.228215] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 07:35:23 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:23 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 763.235600] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 763.242877] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 763.250145] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 763.257428] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 763.264721] CPU: 0 PID: 12530 Comm: syz-executor.5 Not tainted 4.14.153 #0 [ 763.271751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.281098] Call Trace: [ 763.281115] dump_stack+0x138/0x197 [ 763.281134] should_fail.cold+0x10f/0x159 [ 763.281149] should_failslab+0xdb/0x130 [ 763.281162] __kmalloc+0x2f0/0x7a0 [ 763.281173] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 763.281187] ? trace_hardirqs_on_caller+0x400/0x590 [ 763.281200] ? proc_do_submiturb+0x2830/0x3690 [ 763.299059] proc_do_submiturb+0x2830/0x3690 [ 763.299090] usbdev_do_ioctl+0x65d/0x2a60 [ 763.313784] ? lock_downgrade+0x740/0x740 [ 763.322331] ? proc_submiturb_compat+0x150/0x150 [ 763.331239] ? perf_trace_lock+0x109/0x500 07:35:23 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 763.335487] ? check_preemption_disabled+0x3c/0x250 [ 763.340514] ? perf_trace_lock+0x109/0x500 [ 763.344774] usbdev_ioctl+0x26/0x30 [ 763.348409] ? usbdev_compat_ioctl+0x30/0x30 [ 763.352827] do_vfs_ioctl+0x7ae/0x1060 [ 763.356752] ? selinux_file_mprotect+0x5d0/0x5d0 [ 763.361521] ? lock_downgrade+0x740/0x740 [ 763.365681] ? ioctl_preallocate+0x1c0/0x1c0 [ 763.370102] ? __fget+0x237/0x370 [ 763.373573] ? security_file_ioctl+0x89/0xb0 [ 763.377991] SyS_ioctl+0x8f/0xc0 [ 763.381357] ? do_vfs_ioctl+0x1060/0x1060 07:35:23 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 763.385508] do_syscall_64+0x1e8/0x640 [ 763.389400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 763.394252] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 763.399429] RIP: 0033:0x45a219 [ 763.402617] RSP: 002b:00007fe1a654fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 763.410332] RAX: ffffffffffffffda RBX: 00007fe1a654fc90 RCX: 000000000045a219 [ 763.417602] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 763.424875] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 07:35:23 executing program 4 (fault-call:2 fault-nth:51): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 763.432159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1a65506d4 [ 763.439460] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:23 executing program 1: mkdir(&(0x7f0000000000)='./file0/bus\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) 07:35:23 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:23 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:23 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:23 executing program 5 (fault-call:4 fault-nth:4): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:24 executing program 3: r0 = syz_open_dev$usbfs(0x0, 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 763.649534] FAULT_INJECTION: forcing a failure. [ 763.649534] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 763.721550] CPU: 0 PID: 12552 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 763.728620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.729720] FAULT_INJECTION: forcing a failure. [ 763.729720] name failslab, interval 1, probability 0, space 0, times 0 [ 763.742853] Call Trace: [ 763.742873] dump_stack+0x138/0x197 [ 763.742890] should_fail.cold+0x10f/0x159 07:35:24 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 763.742900] ? __might_sleep+0x93/0xb0 [ 763.742914] __alloc_pages_nodemask+0x1d6/0x7a0 [ 763.742926] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 763.742938] ? __alloc_pages_slowpath+0x2930/0x2930 [ 763.742947] ? __lock_acquire+0x5f7/0x4620 [ 763.742970] alloc_pages_vma+0xc9/0x4c0 [ 763.742986] __handle_mm_fault+0xd5d/0x3470 [ 763.743000] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 763.743009] ? find_held_lock+0x35/0x130 [ 763.743025] ? handle_mm_fault+0x1b6/0x7c0 [ 763.772237] handle_mm_fault+0x293/0x7c0 07:35:24 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 763.788785] __get_user_pages+0x465/0x1220 [ 763.788807] ? follow_page_mask+0x1560/0x1560 [ 763.830705] ? memset+0x32/0x40 [ 763.835307] populate_vma_page_range+0x18e/0x230 [ 763.840086] __mm_populate+0x198/0x2c0 [ 763.844334] ? populate_vma_page_range+0x230/0x230 [ 763.849329] vm_mmap_pgoff+0x1be/0x1d0 [ 763.853259] ? vma_is_stack_for_current+0xa0/0xa0 [ 763.858371] ? __fget+0x237/0x370 [ 763.861845] SyS_mmap_pgoff+0x3ca/0x520 [ 763.865828] ? find_mergeable_anon_vma+0x2c0/0x2c0 07:35:24 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) sched_setattr(r2, &(0x7f0000000140)={0x30, 0x2, 0x1, 0x40, 0x3c9f, 0x8, 0x2, 0x80000001}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) creat(&(0x7f0000000040)='./file0\x00', 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000100)) open(&(0x7f0000000180)='./file0\x00', 0x12002, 0x34) syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x1, 0x14000) r9 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0x9, 0x4ac0105fc0113a7f) fcntl$dupfd(r9, 0x0, r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000005e0000000800e58500000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32=r11, @ANYRESDEC=r10, @ANYRES32=r0]]) [ 763.870762] ? do_syscall_64+0x53/0x640 [ 763.874742] ? align_vdso_addr+0x60/0x60 [ 763.878814] SyS_mmap+0x16/0x20 [ 763.882098] do_syscall_64+0x1e8/0x640 [ 763.885986] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 763.890842] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 763.896039] RIP: 0033:0x45a219 [ 763.899242] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 763.906971] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 763.914245] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 763.921521] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 763.928811] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 763.936110] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 763.943474] CPU: 1 PID: 12566 Comm: syz-executor.5 Not tainted 4.14.153 #0 [ 763.950512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.960741] Call Trace: [ 763.963601] dump_stack+0x138/0x197 [ 763.967272] should_fail.cold+0x10f/0x159 07:35:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 763.971430] should_failslab+0xdb/0x130 [ 763.975399] __kmalloc+0x2f0/0x7a0 [ 763.978946] ? _raw_spin_unlock_irq+0x28/0x90 [ 763.983464] ? trace_hardirqs_on_caller+0x400/0x590 [ 763.988490] ? usb_hcd_submit_urb+0x5ff/0x1e00 [ 763.993089] usb_hcd_submit_urb+0x5ff/0x1e00 [ 763.997770] ? perf_trace_lock+0x170/0x500 [ 764.002018] ? usb_create_hcd+0x40/0x40 [ 764.005999] ? SOFTIRQ_verbose+0x10/0x10 [ 764.010097] ? proc_do_submiturb+0x1662/0x3690 [ 764.014685] ? find_held_lock+0x35/0x130 07:35:24 executing program 4 (fault-call:2 fault-nth:52): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 764.018755] ? proc_do_submiturb+0x1662/0x3690 [ 764.023346] usb_submit_urb+0x5c5/0x1100 [ 764.023366] proc_do_submiturb+0x16d6/0x3690 [ 764.031835] usbdev_do_ioctl+0x65d/0x2a60 [ 764.031848] ? lock_downgrade+0x740/0x740 [ 764.031865] ? proc_submiturb_compat+0x150/0x150 [ 764.044889] ? perf_trace_lock+0x109/0x500 [ 764.049132] ? check_preemption_disabled+0x3c/0x250 [ 764.054162] ? perf_trace_lock+0x109/0x500 [ 764.058455] usbdev_ioctl+0x26/0x30 [ 764.062091] ? usbdev_compat_ioctl+0x30/0x30 [ 764.066506] do_vfs_ioctl+0x7ae/0x1060 [ 764.070664] ? selinux_file_mprotect+0x5d0/0x5d0 [ 764.075433] ? lock_downgrade+0x740/0x740 [ 764.079594] ? ioctl_preallocate+0x1c0/0x1c0 [ 764.084011] ? __fget+0x237/0x370 [ 764.087482] ? security_file_ioctl+0x89/0xb0 [ 764.090356] FAULT_INJECTION: forcing a failure. [ 764.090356] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 764.091910] SyS_ioctl+0x8f/0xc0 [ 764.091922] ? do_vfs_ioctl+0x1060/0x1060 [ 764.091939] do_syscall_64+0x1e8/0x640 [ 764.091949] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 764.091970] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 764.091979] RIP: 0033:0x45a219 [ 764.091992] RSP: 002b:00007fe1a654fc78 EFLAGS: 00000246 [ 764.111352] ORIG_RAX: 0000000000000010 [ 764.111361] RAX: ffffffffffffffda RBX: 00007fe1a654fc90 RCX: 000000000045a219 [ 764.111367] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 764.111374] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 764.111381] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe1a65506d4 07:35:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:24 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 764.111389] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 [ 764.181003] CPU: 0 PID: 12589 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 764.188048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.197409] Call Trace: [ 764.200004] dump_stack+0x138/0x197 [ 764.203650] should_fail.cold+0x10f/0x159 [ 764.207804] ? __might_sleep+0x93/0xb0 [ 764.211702] __alloc_pages_nodemask+0x1d6/0x7a0 [ 764.216382] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 764.221149] ? __alloc_pages_slowpath+0x2930/0x2930 [ 764.226170] ? __lock_acquire+0x5f7/0x4620 [ 764.230425] alloc_pages_vma+0xc9/0x4c0 [ 764.234414] __handle_mm_fault+0xd5d/0x3470 [ 764.238758] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 764.243521] ? find_held_lock+0x35/0x130 [ 764.247588] ? handle_mm_fault+0x1b6/0x7c0 [ 764.248616] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 764.251839] handle_mm_fault+0x293/0x7c0 [ 764.262285] __get_user_pages+0x465/0x1220 [ 764.266535] ? follow_page_mask+0x1560/0x1560 [ 764.271040] ? memset+0x32/0x40 [ 764.274325] populate_vma_page_range+0x18e/0x230 [ 764.279092] __mm_populate+0x198/0x2c0 [ 764.282990] ? populate_vma_page_range+0x230/0x230 [ 764.287930] vm_mmap_pgoff+0x1be/0x1d0 [ 764.291854] ? vma_is_stack_for_current+0xa0/0xa0 [ 764.296711] ? __fget+0x237/0x370 [ 764.300186] SyS_mmap_pgoff+0x3ca/0x520 [ 764.304174] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 764.309217] ? do_syscall_64+0x53/0x640 [ 764.313207] ? align_vdso_addr+0x60/0x60 [ 764.317278] SyS_mmap+0x16/0x20 07:35:24 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(0x0, 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 764.320569] do_syscall_64+0x1e8/0x640 [ 764.324455] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 764.329313] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 764.334508] RIP: 0033:0x45a219 [ 764.337702] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 764.345419] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 764.352698] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 764.359972] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 764.367253] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 07:35:24 executing program 5 (fault-call:4 fault-nth:5): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:24 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(0x0, 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:24 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRESOCT=r0]]) [ 764.374532] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:24 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 764.443544] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 764.479385] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:24 executing program 1: mkdir(&(0x7f0000000000)='./file1\x00', 0xac) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = dup3(r1, r0, 0x40000) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f00000000c0)={0xffff7fff, 0xffffffff, 0x5}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5d7, 0x400) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0xffffffff80000001) [ 764.645654] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:25 executing program 4 (fault-call:2 fault-nth:53): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:25 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(0x0, 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010ff8fff1f9e300000000000000"], 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a}, @IPVS_CMD_ATTR_DAEMON={0xffa2, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0xfffffffffffffea8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffc}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x0, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0xb09209af868eebcd) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000080)=0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:25 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RREADDIR(r1, &(0x7f0000000200)={0xcd, 0x29, 0x1, {0x3f, [{{0x34, 0x3, 0x4}, 0xa7, 0x5, 0x7, './file0'}, {{0x84, 0x1, 0x6}, 0x401, 0x42, 0xb, './file0/bus'}, {{0x2, 0x2, 0x1}, 0xa2, 0x9, 0x7, './file0'}, {{0xc22844e1c82247b7, 0x1}, 0x9, 0x5a, 0x7, './file0'}, {{0x0, 0x2, 0x3}, 0x1, 0x6, 0xb, './file0/bus'}, {{0x80, 0x0, 0x4}, 0x1, 0x5, 0x7, './file0'}]}}, 0xcd) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) 07:35:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:25 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x0, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 764.842780] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 764.916416] FAULT_INJECTION: forcing a failure. [ 764.916416] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 764.957197] usb usb2: usbfs: interface 0 claimed by hub while 'syz-executor.5' sets config #64 [ 764.975474] CPU: 0 PID: 12638 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 764.982539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.991898] Call Trace: [ 764.994495] dump_stack+0x138/0x197 [ 764.998136] should_fail.cold+0x10f/0x159 [ 765.002286] ? __might_sleep+0x93/0xb0 07:35:25 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x10001) r3 = openat(r2, &(0x7f00000002c0)='./file0\x00', 0x21a043, 0x72) recvfrom$llc(r3, &(0x7f0000000380)=""/74, 0x4a, 0x40000083, &(0x7f0000000300)={0x1a, 0x3, 0x4, 0x1, 0x1f, 0x3, @local}, 0x10) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r4 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nullb='/dev/nullb0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='fusectl\x00', 0x58004, 0x0) r5 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x1, 0x200000) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000240)={0x1, 0x0, {0xaa2, 0x5, 0x1014, 0x0, 0x9, 0x0, 0x0, 0x4}}) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='./file0/bus\x00', r4, &(0x7f0000000180)='./file0\x00', 0x6) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4]) [ 765.006182] __alloc_pages_nodemask+0x1d6/0x7a0 [ 765.007799] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 765.010856] ? __alloc_pages_slowpath+0x2930/0x2930 [ 765.022281] alloc_pages_vma+0xc9/0x4c0 [ 765.026268] __handle_mm_fault+0xd5d/0x3470 [ 765.030602] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 765.035363] ? check_preemption_disabled+0x3c/0x250 [ 765.040390] ? handle_mm_fault+0x259/0x7c0 [ 765.040404] ? __sanitizer_cov_trace_pc+0x4a/0x60 [ 765.040416] handle_mm_fault+0x293/0x7c0 [ 765.040432] __get_user_pages+0x465/0x1220 [ 765.040452] ? follow_page_mask+0x1560/0x1560 [ 765.040477] populate_vma_page_range+0x18e/0x230 [ 765.040494] __mm_populate+0x198/0x2c0 [ 765.040509] ? populate_vma_page_range+0x230/0x230 [ 765.040528] vm_mmap_pgoff+0x1be/0x1d0 [ 765.040543] ? vma_is_stack_for_current+0xa0/0xa0 [ 765.040552] ? __fget+0x237/0x370 [ 765.040572] SyS_mmap_pgoff+0x3ca/0x520 [ 765.040585] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 765.053788] ? do_syscall_64+0x53/0x640 [ 765.053800] ? align_vdso_addr+0x60/0x60 [ 765.053816] SyS_mmap+0x16/0x20 [ 765.079725] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 765.079934] do_syscall_64+0x1e8/0x640 [ 765.118678] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 765.123529] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 765.128750] RIP: 0033:0x45a219 [ 765.131923] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 765.139613] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 765.146981] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 07:35:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 765.154243] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 765.161513] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 765.168775] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:25 executing program 4 (fault-call:2 fault-nth:54): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:25 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x0, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000005c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f00000006c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) fstat(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001880)={0x0, 0x0}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r15) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000001a40)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000140)="81c924aaac9f116d8caa5cfca66350f7e286833142aea12a8c7d6b5233353ee534eef029295ef2bdc8467ac49e4858b840d216954a5f83dae99a4eda4f14cfd185b0e1e661ffdbad0fcfdd7180dd6afbdac32ec7443b8a38e546bb53b2592be82183fec8", 0x64}, {&(0x7f00000001c0)="b0660b9a95ecf37d2fa7d2fd11600370ca07c9b1e4f9050031de1764a59b0bdae6b447c799016dbd31687ac254c38aecd782983e2672f65cdeb9a42f357ccef01aaa8876ae81821c25934f8c3306e16abc3327e645f36862fb8f497319a39359d555d412c381449f653b4e90fb6bb21f3a5b5cf6160bca7049b592d816aa42d89764551d", 0x84}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f00000002c0)="01f040b438ce5b753876dafc92432fb77697ece25712cc669da74d240a7703b9ac4e779b667f8a6d38f0689cc5f14dd61cf047fb1ef922f5fedbb489a22bb236108ef7b9f9e253564eea2e30cc5effd4e7e7130df080a0156f7ad14ad6fa3d214fc6868f1eebe3fc8a2bc043d5dffc3b87568520316728fe41cbead6d4c34918e35880633f8fa566e0cc606182a516a6f0298f754c9de9354bebc808b0175acbc5d9b1f5e9fc60040d99ec12223bccd0ba0f04682057560755b452848ba4b15518d97b37aec01429f77039804fd64283c866578572269c38b4379a126aba33df62a897ea71e404e6f51fea", 0xeb}, {&(0x7f00000003c0)="867cddab105c86a7c5416d7d192a33a9fbe8941b9f0012008f04168642eb7a4e4f2b4d17", 0x24}, {&(0x7f0000000400)="e4b07c57cd3e6a3c6dd956f69d199a42c90f95803c5c0bcb272b2c2518bba9fca35bc161eeda9e3c57261c8bfa6df8294d2a99a5e7f9a690a60ecc6e9933f521de210228b86b461319b6308fd6c496c314a4abc43772964c5abcb5191cec182b71e06a65135d421ff983d9ee900853bab42f9f6c7dcf8de82616323500feb6f869647c1a5b2afba4dccba045d305bd83bdd98b484b87463be806ba41996a4c32654cf70848face4a7e419d536a9564c56ac0e0fb4cc4e1dd8c503af64215be13d92d1dd4946a2b1846", 0xc9}, {&(0x7f0000000500)="c9be660bc416f748935b411b7bf0743d1f22cf", 0x13}], 0x7, &(0x7f0000001980)=[@rights={{0x18, 0x1, 0x1, [r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r10, r12}}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r16}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x90, 0x2004076}, 0x1001) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000001c40)=@urb_type_iso={0x0, {0x8}, 0x4, 0x24, &(0x7f0000001a80)="03f39e84975ad866ca563035bb43928fb8d5c9318cc6ace97cc27e324ac46afafa54189dc590e5016e4a0d386dc10a392b3bab1a891d632964f7328cc9011027ef4fa97603603767f7cbffd37ecdca7419263c7ed0c9e4095d0ce6b8f252c502ce12c2b42e450180827988aa50a9f479b3ce2f76c4156d9ecdfbafefeab6fa98ae665f74a9d27f", 0x87, 0x1536, 0x400, 0x68, 0x0, 0x7, &(0x7f0000001b40)="8b20409cbe01db17f2a4d2bad90bea2fc47101b278124a3929ffa2e1ab3d8d0e4c57783b4bd69d61347c38b4977e3df55773b7b758ab9df077e63b1ffdded55b2941797ea007d8ae40241231b556c08c4d06fe5f92f24e9e3d98fe6d06cccd538d893878c7763f25ba48472d9dd69b545665dcd7861f35c43a4184ca40e04ab1be8cfbcdfe01104766f4a1f68e96cc09be80ed6e567761c864c8ddabf7f100f85cdfcaeff34f675b44247b3fc76e236a176fefce0cbe8bdf8b4fd2bfeef1282d3b84b7252499972bded6b0b16530c0bb6a0dbb74c4e8", [{0x1, 0x10001, 0x80000001}, {0x7, 0x5, 0x12c7b54f}, {0xf5, 0x8, 0x56}, {0x36, 0x4, 0xa1}, {0x2, 0x0, 0x80}, {0xfffffffa, 0x8, 0x1}, {0x0, 0xffffff9e, 0x3}, {0xfffffff7, 0x4, 0x2}, {0x8538, 0x4, 0x5}, {0x5, 0x7}, {0x8, 0x7, 0x800}, {0x1, 0x7ff, 0xffff}, {0x7fffffff, 0x9, 0x9}, {0xfffff7a8, 0x7, 0x4}, {0x8, 0x1ff, 0x6d}, {0x9}, {0x0, 0xffffffff, 0x3ff}, {0x8, 0x9, 0x1}, {0x401, 0x1, 0x4}, {0x80000001, 0x7}, {0x80000001, 0x5, 0x2}, {0x0, 0x8, 0xfffff6ce}, {0xffff94ae, 0x8, 0x4}, {0x40000, 0x238, 0x7ff}, {0xfff, 0x80000001, 0x40}, {0x0, 0x400, 0x3}, {0x7, 0x6, 0x7c5}, {0x0, 0xff, 0x1ff}, {0xffffffff, 0xffff, 0x2}, {0x8, 0x80000001, 0x7fff}, {0xbdeb, 0x9, 0x8}, {0x1, 0x4c4d6836, 0x7ffffffe}, {0x9, 0x7fffffff}, {0x342b, 0x0, 0xd3c4}, {0x614, 0x9, 0x5e}, {0x20, 0x80000000}, {0x6, 0x8, 0xcc44b186}, {0x1000, 0x95c, 0x8}, {0x0, 0x7, 0xff}, {0x1, 0x5, 0xde40}, {0x800, 0x20, 0xffffff01}, {0x8, 0x0, 0x9}, {0x4, 0x3, 0x4}, {0x5, 0x81, 0x3}, {0x3, 0x1, 0x7}, {0x9, 0x3, 0x5}, {0x4, 0xfff, 0x4}, {0x7fff, 0x4, 0xfffffffa}, {0x401, 0x2, 0xffffff15}, {0xfff, 0x7, 0x5}, {0x5, 0x1, 0x7}, {0x7f, 0x5, 0x1}, {0x2, 0x46, 0x8fc}, {0x6, 0x3, 0xe07}, {0xfffffffc, 0x2df7, 0x80}, {0x8, 0x4, 0x5c75a8b0}, {0x7ff, 0x8, 0x7ff}, {0x4, 0x7ff, 0x401}, {0x6, 0x7f, 0x1}, {0x1ff, 0xfffffff7, 0x7}, {0xe7, 0x81, 0x2}, {0x5, 0xffffffff, 0x8001}, {0xfe, 0x7fffffff, 0x3}, {0xdf2, 0x7fff, 0x1000}, {0x69, 0x6, 0x9}, {0x4, 0x2, 0x7}, {0xffffff80, 0x3f, 0x9}, {0x81, 0x6292, 0x6}, {0x1000, 0x7, 0x40}, {0x4, 0x1, 0x3}, {0x7, 0x4}, {0x22e0, 0x3}, {0x9, 0x1a0000, 0xfff}, {0xfff, 0x8, 0x1}, {0x81, 0x64f, 0x200}, {0x3, 0x7, 0x4}, {0x6, 0x7, 0x154d}, {0x4, 0x2, 0xa13a}, {0x0, 0x2, 0x2}, {0x0, 0x40, 0x1}, {0x2, 0xfff, 0xa1740000}, {0xffffffff, 0x5, 0x7}, {0x5, 0xffffffff, 0x80}, {0x1, 0x0, 0x1}, {0x0, 0xffff, 0x3}, {0x0, 0x1, 0x6}, {0x4, 0x80000000, 0x1}, {0x1, 0x7, 0x4}, {0x3, 0x5, 0x2}, {0x6, 0x2, 0x1}, {0x3, 0x203d, 0x8}, {0x2, 0x2, 0xd64}, {0x6, 0x6, 0x9}, {0x3ff, 0xca, 0x705d}, {0x100, 0x5}, {0x3ff, 0x1ff, 0x7}, {0x3, 0xffffffff, 0x7ff}, {0x100, 0x8, 0x5}, {0xfffffeff, 0x3, 0x5}, {0x6e, 0xd3, 0x101}, {0x80, 0x4, 0x9}, {0xfffff801, 0x8, 0xfb21}, {0x7, 0x4, 0x8000}, {0x1a, 0x62, 0x3}]}) [ 765.236451] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:25 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:25 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="000000ffeb550000b432d921a4cbb680e5ce519854ccf2ecd965082c993ada0000000000000000000000205cc2bb3e53394c82a333976e284f5b7d3097d87f0fef5559bb5b018dbf27a58a0afc4c9e52f308103c927f7d2d05600786bc3f86ca441cedfeefe6125282e84924000e71", @ANYRES32=r0]) 07:35:25 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x0, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:25 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x5, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000080)=@routing={0x0, 0x2, 0x0, 0x1f, 0x0, [@mcast2]}, 0x18) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) 07:35:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 765.393908] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 765.475632] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 765.500897] FAULT_INJECTION: forcing a failure. [ 765.500897] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:25 executing program 1: clock_getres(0x3, &(0x7f0000000000)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0xa6, "34b6dfb79ca7b7a310713f4a6e66b1136f7704ac24351d49ad185bf45e668b5eec4682b46a9834bb45a4fa0027e1e7a926b4e4993779c2a2cd57d3c66df9cce192aa201ea2c9f4841d847801f0e2af218001aaf9c7dbff4d9a2fc38a1d1d45849706fccb721606fcad9d794ea8e254f2d9128d67d85d545e89fa7f286d1247ab46f9b0e6f36beee047299043e09fc9979adf8d6806368328f930f83d4b50ca93a35cadfd4d06"}, &(0x7f0000000040)=0xae) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={r1, @in6={{0xa, 0x4e20, 0x7, @empty}}, 0x8001, 0xfc01}, &(0x7f00000000c0)=0x90) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000100)=@random={'osx.', '/proc/capi/capi20\x00'}, &(0x7f0000000180)=""/61, 0x3d) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="00040000008b0000000000000000000055db990000000000", @ANYRES32=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000002c0)={r1, 0x6, 0x6, [0x9, 0x27bf, 0x100, 0x5, 0x7, 0x0]}, &(0x7f0000000300)=0x14) [ 765.542776] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 765.570824] CPU: 0 PID: 12678 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 765.577886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.587248] Call Trace: 07:35:25 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 765.589847] dump_stack+0x138/0x197 [ 765.593489] should_fail.cold+0x10f/0x159 [ 765.597641] ? __might_sleep+0x93/0xb0 [ 765.601536] __alloc_pages_nodemask+0x1d6/0x7a0 [ 765.601551] ? __alloc_pages_slowpath+0x2930/0x2930 [ 765.601564] ? check_preemption_disabled+0x3c/0x250 [ 765.601587] alloc_pages_vma+0xc9/0x4c0 [ 765.601604] __handle_mm_fault+0xd5d/0x3470 [ 765.601619] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 765.601632] ? find_held_lock+0x35/0x130 [ 765.601644] ? handle_mm_fault+0x1b6/0x7c0 [ 765.611326] handle_mm_fault+0x293/0x7c0 [ 765.611342] __get_user_pages+0x465/0x1220 [ 765.611363] ? follow_page_mask+0x1560/0x1560 [ 765.611373] ? retint_kernel+0x2d/0x2d [ 765.611395] populate_vma_page_range+0x18e/0x230 [ 765.659506] __mm_populate+0x198/0x2c0 [ 765.663404] ? populate_vma_page_range+0x230/0x230 [ 765.664545] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 765.668356] vm_mmap_pgoff+0x1be/0x1d0 [ 765.678631] ? vma_is_stack_for_current+0xa0/0xa0 [ 765.683656] ? __fget+0x237/0x370 [ 765.687126] SyS_mmap_pgoff+0x3ca/0x520 [ 765.691108] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 765.696045] ? do_syscall_64+0x53/0x640 [ 765.700018] ? align_vdso_addr+0x60/0x60 [ 765.700031] SyS_mmap+0x16/0x20 [ 765.700041] do_syscall_64+0x1e8/0x640 [ 765.700050] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 765.700069] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 765.700078] RIP: 0033:0x45a219 [ 765.700083] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 765.700095] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 07:35:26 executing program 4 (fault-call:2 fault-nth:55): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:26 executing program 5: socketpair(0x9, 0x800, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x60, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x200, 0x60}, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) ptrace$setregs(0xd, r7, 0x2, &(0x7f0000000240)="45ec837da62b112310b1911908e1717655da54b39b29948a273b0ed57d3f") 07:35:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:26 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(0x0, &(0x7f0000000680)) [ 765.700101] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 765.700107] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 765.700113] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 765.700119] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 765.767189] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:26 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) mount(0x0, &(0x7f00000000c0)='./file0/bus\x00', &(0x7f00000004c0)='ckroup\x00\xab1!\xf1:\x80\ak\x1djY\xbae\x83\x0f\x94\xd0\xe5\x8b\x00\xf0Mo9V\xdc6RD0\xd8[\xbac\xaf\x8bV.\xa5\x97)\xba\x86\xa6\x05y\x11:\x12\b%P\xce\xa7\xd1\xc2\xe6\xbb\x885\x9eM\xd9\x92\xca!\x91\x87RS\x11\xf6\x980\v\xd1\x19\x8a0\xc7{\f#\x97\xbb`f]\x06\x17j\xc8^\x81\xae\xef\xcc\xb7\xaf\xcc-\x8a\xd8C.\x830\x84\xbdf6\x04\xb1I\a\xf4\xbb;l\xad\x17#\xcf\xbe\xdc\x1aT\xea\xf9\xa3@\x82j\xfd\xdcI\x87Y\xd5\xd9\x04m\x05\x91\x15\x891{\x9f\\\x82\x01\xf5\x83\xfa\xb9\x17\"t\xea~\x94\xea\x907[\xed\xa45\xb2c\xe0\xc2\x10\xa4\x97Ax\xe6\xeaw\x90]\x82\x94A|;7\x0e\x19\xcf\xb6\x10`kZ4\x9e\x1f\xc2\xd6\xae\xfb\v\xa0\x81\r\xe4\xf7d\xbcQ\xf9\xdf\v\x8al\xbe\x87\xc7\xb1\x00M`c``\xefKrr0@\x9d7\x0f\xd0\xf4tO!\x9e\x0f\xffd\x81u\x1e\xa2YSo\xea\x81\xa1o8C\x04\x99H\xcd&L=\xfc\x02\xc3\xae\x12n\xbb\x9f\xe9\x95a\xdb\xe10\xf5d\x95\xf0=\xbe\xf4\x81\x9f(\x96\xbd\xd6\n\x99\x92\xa4\x9b\xbc\x18\x90k\xe6\xc80M#\xd5\xc4\x1fK\x9b=<\bn\xdbc\xd7\x01\xf6\xd5\x1f\xc5\xcb\xbcp\xb1\xe2\xa9\x94fz\x8f\xf5h\xdc\xd1\x1d\x1a\xbe\xaa\x06>?<\xd8\xd5Iu\xdf\x81\x8c\x95+\b\x80\x14]c2\xb0c\xfe\xe2\xb3\xc0\xd2i\xd4I\x04\x00\x12\x8e\x15 \xe6\xc2\xe8Y\xf1\xe6\xf1\xdc\xdb\xa0\x92\xb3\xa7\xdc?\x7fG0\x89p\x87\xd5~\x9b\xe8\"\xcb\xe5\x1b*\xa1Qh\xe9~\xdd\xe6\x04\xaa\xad>\x8b\xdb\xf1\x02\xacp\xd5Q\xb5\x89\x06\x7f\x17\x88\xf2\xdeL\xea\xd6\x00'/460, 0x245440, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00@\x00\x00\x00\x00\x00', @ANYRES32=r0]) 07:35:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 765.820742] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 765.837944] FAULT_INJECTION: forcing a failure. [ 765.837944] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:26 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(0x0, &(0x7f0000000680)) 07:35:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) alarm(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e20, @rand_addr=0x669d}, 0x6e, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000080)='nr0\x00', 0x8, 0x5, 0x47c0}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x1, 0x60}, 0x36e, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r1, 0x2) [ 765.900817] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 765.909667] CPU: 0 PID: 12704 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 765.916719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.926082] Call Trace: [ 765.928684] dump_stack+0x138/0x197 [ 765.932332] should_fail.cold+0x10f/0x159 [ 765.936482] ? __might_sleep+0x93/0xb0 [ 765.937363] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 765.940374] __alloc_pages_nodemask+0x1d6/0x7a0 [ 765.951527] ? trace_hardirqs_on_caller+0x400/0x590 [ 765.956548] ? __alloc_pages_slowpath+0x2930/0x2930 [ 765.956576] alloc_pages_vma+0xc9/0x4c0 [ 765.956592] __handle_mm_fault+0xd5d/0x3470 [ 765.970098] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 765.974862] ? find_held_lock+0x35/0x130 [ 765.978928] ? handle_mm_fault+0x1b6/0x7c0 [ 765.983183] handle_mm_fault+0x293/0x7c0 [ 765.987250] __get_user_pages+0x465/0x1220 [ 765.991502] ? follow_page_mask+0x1560/0x1560 [ 765.996003] ? retint_kernel+0x2d/0x2d [ 765.996026] populate_vma_page_range+0x18e/0x230 [ 765.996042] __mm_populate+0x198/0x2c0 [ 766.008541] ? populate_vma_page_range+0x230/0x230 [ 766.008562] vm_mmap_pgoff+0x1be/0x1d0 [ 766.008577] ? vma_is_stack_for_current+0xa0/0xa0 [ 766.022195] ? __fget+0x237/0x370 [ 766.025665] SyS_mmap_pgoff+0x3ca/0x520 [ 766.029649] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 766.034585] ? do_syscall_64+0x53/0x640 [ 766.038566] ? align_vdso_addr+0x60/0x60 [ 766.042638] SyS_mmap+0x16/0x20 [ 766.045916] do_syscall_64+0x1e8/0x640 [ 766.045927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 766.045947] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 766.059831] RIP: 0033:0x45a219 [ 766.063016] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 766.070722] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 766.070730] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 766.070735] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 766.070742] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 07:35:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 766.070749] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 766.108406] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 766.127188] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:26 executing program 4 (fault-call:2 fault-nth:56): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r4}, 0x10) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='\'dev?audio\x00', 0x0, 0x0) fsetxattr$trusted_overlay_origin(r5, &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x9ae72fdaf6a85dba, 0x0) 07:35:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 766.153094] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:26 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(0x0, &(0x7f0000000680)) [ 766.269791] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 766.309429] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 766.340764] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:26 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:26 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:26 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', 0x0) 07:35:26 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) eventfd(0x4) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) [ 766.428943] FAULT_INJECTION: forcing a failure. [ 766.428943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 766.477948] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 766.500447] CPU: 0 PID: 12746 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 766.507510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.516876] Call Trace: [ 766.519491] dump_stack+0x138/0x197 [ 766.523144] should_fail.cold+0x10f/0x159 07:35:26 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', 0x0) [ 766.527299] ? __might_sleep+0x93/0xb0 [ 766.531205] __alloc_pages_nodemask+0x1d6/0x7a0 [ 766.535886] ? __alloc_pages_slowpath+0x2930/0x2930 [ 766.540916] ? alloc_pages_vma+0x8e/0x4c0 [ 766.545074] alloc_pages_vma+0xc9/0x4c0 [ 766.549061] __handle_mm_fault+0xd5d/0x3470 [ 766.553396] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 766.558165] ? check_preemption_disabled+0x3c/0x250 [ 766.563200] ? handle_mm_fault+0x1e2/0x7c0 [ 766.567443] ? __sanitizer_cov_trace_pc+0x4e/0x60 [ 766.572293] handle_mm_fault+0x293/0x7c0 [ 766.576365] __get_user_pages+0x465/0x1220 [ 766.580618] ? follow_page_mask+0x1560/0x1560 [ 766.585134] populate_vma_page_range+0x18e/0x230 [ 766.589901] __mm_populate+0x198/0x2c0 [ 766.593800] ? populate_vma_page_range+0x230/0x230 [ 766.598737] vm_mmap_pgoff+0x1be/0x1d0 [ 766.602637] ? vma_is_stack_for_current+0xa0/0xa0 [ 766.607483] ? __fget+0x237/0x370 [ 766.610952] SyS_mmap_pgoff+0x3ca/0x520 [ 766.614938] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 766.619878] ? do_syscall_64+0x53/0x640 [ 766.623856] ? align_vdso_addr+0x60/0x60 [ 766.627933] SyS_mmap+0x16/0x20 [ 766.631226] do_syscall_64+0x1e8/0x640 [ 766.635120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 766.639974] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 766.645162] RIP: 0033:0x45a219 [ 766.648359] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 766.656071] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 766.661385] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 766.663338] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 07:35:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xae, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) fsetxattr$trusted_overlay_upper(r4, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x108, 0x2, 0xfc, "d5eca56504259443295bd476312ab1d7", "fa8f201459147daccc8dfa1822796678b96f8fe390f44a015eea69e2ec7bfc77bcc41ce376cefd38cd28e1a507a9010ef682f8fe5cafbe39d08eae3fb22ae743e864d2da55a414d287d94625b5888b439a9fc8a03e302271f18a66126ce23a9c9ab5edae6ec1d6919c66031e4c3ec1520647beb26cce2716498cd103e6b3402c3c6940b92c7281a6aaa2845769cf4b04ab1206a66a96a03c7d01d43c59b5536d9a7f49bc5c06920eef69ddedc5bd84aaf340e7c56d8b3c2700111623b4cac0eb867b5433c5660f18a5ffe38b9b9ba12542269078400849b5a6d76cbef568b8b6e5af8ae298a75e7dd92f19ef1b1dfebd941a28"}, 0x108, 0x1) [ 766.677094] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 766.684366] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 766.691629] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 766.726669] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:27 executing program 4 (fault-call:2 fault-nth:57): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:27 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', 0x0) 07:35:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x14002, 0x0) 07:35:27 executing program 2: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000340)) sched_getaffinity(r0, 0x8, &(0x7f00000004c0)) getgid() [ 766.927448] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 766.961719] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:27 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 766.981707] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) accept$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000080)=""/5) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 767.042240] FAULT_INJECTION: forcing a failure. [ 767.042240] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:27 executing program 2: [ 767.090075] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 767.105386] CPU: 0 PID: 12788 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 767.112438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.112444] Call Trace: [ 767.112462] dump_stack+0x138/0x197 [ 767.112481] should_fail.cold+0x10f/0x159 [ 767.132172] ? __might_sleep+0x93/0xb0 [ 767.136072] __alloc_pages_nodemask+0x1d6/0x7a0 [ 767.140749] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 767.145505] ? __alloc_pages_slowpath+0x2930/0x2930 [ 767.145524] ? check_preemption_disabled+0x3c/0x250 [ 767.145551] alloc_pages_vma+0xc9/0x4c0 [ 767.145567] __handle_mm_fault+0xd5d/0x3470 [ 767.163857] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 767.168619] ? find_held_lock+0x35/0x130 [ 767.172685] ? handle_mm_fault+0x1b6/0x7c0 [ 767.176943] handle_mm_fault+0x293/0x7c0 [ 767.181015] __get_user_pages+0x465/0x1220 [ 767.185271] ? follow_page_mask+0x1560/0x1560 [ 767.189778] ? memset+0x32/0x40 [ 767.193070] populate_vma_page_range+0x18e/0x230 [ 767.197838] __mm_populate+0x198/0x2c0 [ 767.201740] ? populate_vma_page_range+0x230/0x230 [ 767.206691] vm_mmap_pgoff+0x1be/0x1d0 [ 767.210591] ? vma_is_stack_for_current+0xa0/0xa0 [ 767.215433] ? __fget+0x237/0x370 [ 767.218900] SyS_mmap_pgoff+0x3ca/0x520 [ 767.222888] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 767.227827] ? do_syscall_64+0x53/0x640 [ 767.231807] ? align_vdso_addr+0x60/0x60 [ 767.235873] SyS_mmap+0x16/0x20 [ 767.239163] do_syscall_64+0x1e8/0x640 [ 767.243055] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 767.247921] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 767.253111] RIP: 0033:0x45a219 [ 767.256297] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 767.264008] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 767.271277] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 767.278537] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 07:35:27 executing program 2: 07:35:27 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 767.278545] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 767.278551] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 767.289777] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:27 executing program 4 (fault-call:2 fault-nth:58): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:27 executing program 2: 07:35:27 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 767.399335] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:27 executing program 2: [ 767.451029] FAULT_INJECTION: forcing a failure. [ 767.451029] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.455399] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:27 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 767.540355] CPU: 1 PID: 12816 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 767.547425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 767.556787] Call Trace: [ 767.559383] dump_stack+0x138/0x197 [ 767.563037] should_fail.cold+0x10f/0x159 [ 767.567192] ? __might_sleep+0x93/0xb0 [ 767.571093] __alloc_pages_nodemask+0x1d6/0x7a0 [ 767.575790] ? __alloc_pages_slowpath+0x2930/0x2930 [ 767.580819] ? __lock_acquire+0x5f7/0x4620 [ 767.585067] ? SOFTIRQ_verbose+0x10/0x10 [ 767.589144] alloc_pages_vma+0xc9/0x4c0 [ 767.593119] __handle_mm_fault+0xd5d/0x3470 [ 767.593134] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 767.593145] ? find_held_lock+0x35/0x130 [ 767.593155] ? handle_mm_fault+0x1b6/0x7c0 [ 767.593179] handle_mm_fault+0x293/0x7c0 [ 767.614578] __get_user_pages+0x465/0x1220 [ 767.618833] ? follow_page_mask+0x1560/0x1560 [ 767.623340] ? memset+0x32/0x40 [ 767.626631] populate_vma_page_range+0x18e/0x230 [ 767.631402] __mm_populate+0x198/0x2c0 [ 767.635304] ? populate_vma_page_range+0x230/0x230 07:35:27 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000000)={0xa0, 0x15, 0x40, 0x0, 0x260}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000080)=0x80) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x50, 0xa8, 0x1, 0x7, 0x100000000, 0x2, 0x0, 0x1, 0x36b, 0x40, 0x31, 0x3ef, 0x7, 0x38, 0x1, 0x8, 0x8d2, 0x4}, [{0x4, 0x6, 0x7, 0x3, 0xf77, 0x0, 0x200, 0x4}], "fb9e5c5a3f8a759626c3f9df7d3908d6da0d3b6e05e63716348d41fb421a8393ffe711c7bc9e26806b6d1a80f1da072b8ed61de3da933921c7c9c36a20743c79eefcf4415f71b7875444d394afed1affc0c502a41d2edaed51cd3babea35da96c1aaea0e11671ffdd9b029f541b6c4d718eb30ce5ce9ab96f77abae3270e9894c37d0da4e1b6fc8627589dea3b9fd72b459d3a5d906d2499c6dd3ca08439fb4cbd3a5d51b9c0f1c9128b27440cede2d22532", [[]]}, 0x22a) 07:35:27 executing program 2: 07:35:28 executing program 2: [ 767.640250] vm_mmap_pgoff+0x1be/0x1d0 [ 767.644153] ? vma_is_stack_for_current+0xa0/0xa0 [ 767.649029] ? __fget+0x237/0x370 [ 767.649054] SyS_mmap_pgoff+0x3ca/0x520 [ 767.649070] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 767.649087] ? do_syscall_64+0x53/0x640 [ 767.665386] ? align_vdso_addr+0x60/0x60 [ 767.669464] SyS_mmap+0x16/0x20 [ 767.672753] do_syscall_64+0x1e8/0x640 [ 767.672765] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 767.672786] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 767.681493] RIP: 0033:0x45a219 07:35:28 executing program 0: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 767.681500] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 767.681513] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 767.681520] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 767.681527] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 767.681534] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 767.681540] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 767.719250] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:28 executing program 2: [ 767.731429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43088 sclass=netlink_route_socket pig=12835 comm=syz-executor.5 07:35:28 executing program 4 (fault-call:2 fault-nth:59): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:28 executing program 2: 07:35:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "f5f0c568ff"}, 0x6, 0x7) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 07:35:28 executing program 2: [ 767.985029] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 767.995050] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 768.028866] FAULT_INJECTION: forcing a failure. [ 768.028866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080), 0x4) [ 768.108693] CPU: 1 PID: 12854 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 768.115764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.125128] Call Trace: [ 768.127735] dump_stack+0x138/0x197 [ 768.131400] should_fail.cold+0x10f/0x159 [ 768.135562] ? __might_sleep+0x93/0xb0 [ 768.137664] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 768.139466] __alloc_pages_nodemask+0x1d6/0x7a0 [ 768.150622] ? __alloc_pages_slowpath+0x2930/0x2930 [ 768.155645] ? __lock_acquire+0x5f7/0x4620 [ 768.159887] ? SOFTIRQ_verbose+0x10/0x10 [ 768.163958] alloc_pages_vma+0xc9/0x4c0 [ 768.167940] __handle_mm_fault+0xd5d/0x3470 [ 768.172271] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 768.177029] ? find_held_lock+0x35/0x130 [ 768.181083] ? handle_mm_fault+0x1b6/0x7c0 [ 768.181110] handle_mm_fault+0x293/0x7c0 [ 768.181125] __get_user_pages+0x465/0x1220 [ 768.181144] ? follow_page_mask+0x1560/0x1560 [ 768.198124] ? memset+0x32/0x40 [ 768.201415] populate_vma_page_range+0x18e/0x230 07:35:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x101e01) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x0, 0x2980) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0xfffffffffffffff8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f00000000c0)={@my=0x1}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000080)=0x7) 07:35:28 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 768.206187] __mm_populate+0x198/0x2c0 [ 768.210088] ? populate_vma_page_range+0x230/0x230 [ 768.215030] vm_mmap_pgoff+0x1be/0x1d0 [ 768.216007] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 768.218921] ? vma_is_stack_for_current+0xa0/0xa0 [ 768.230234] ? __fget+0x237/0x370 [ 768.233699] SyS_mmap_pgoff+0x3ca/0x520 [ 768.237687] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 768.242623] ? do_syscall_64+0x53/0x640 [ 768.246609] ? align_vdso_addr+0x60/0x60 [ 768.250668] SyS_mmap+0x16/0x20 [ 768.250681] do_syscall_64+0x1e8/0x640 07:35:28 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 768.250690] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 768.250710] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 768.262677] RIP: 0033:0x45a219 [ 768.271037] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 768.278750] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 768.286021] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 768.293298] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 768.300563] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 768.300570] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 768.394925] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:28 executing program 4 (fault-call:2 fault-nth:60): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:28 executing program 2: 07:35:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 07:35:28 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000080)) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:29 executing program 2: [ 768.712954] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 768.782299] FAULT_INJECTION: forcing a failure. [ 768.782299] name fail_page_alloc, interval 1, probability 0, space 0, times 0 07:35:29 executing program 2: [ 768.864252] CPU: 0 PID: 12889 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 768.870425] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 768.871326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 768.887169] Call Trace: [ 768.889767] dump_stack+0x138/0x197 [ 768.893412] should_fail.cold+0x10f/0x159 [ 768.897564] ? __might_sleep+0x93/0xb0 [ 768.901458] __alloc_pages_nodemask+0x1d6/0x7a0 [ 768.906134] ? __alloc_pages_slowpath+0x2930/0x2930 [ 768.911163] ? retint_kernel+0x2d/0x2d [ 768.915055] alloc_pages_vma+0xc9/0x4c0 [ 768.919037] __handle_mm_fault+0xd5d/0x3470 [ 768.923368] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 768.928137] ? lock_release+0x44d/0x940 [ 768.932137] handle_mm_fault+0x293/0x7c0 [ 768.936213] __get_user_pages+0x465/0x1220 [ 768.940459] ? follow_page_mask+0x1560/0x1560 [ 768.944966] ? memset+0x32/0x40 [ 768.948274] populate_vma_page_range+0x18e/0x230 [ 768.953036] __mm_populate+0x198/0x2c0 [ 768.956930] ? populate_vma_page_range+0x230/0x230 [ 768.961871] vm_mmap_pgoff+0x1be/0x1d0 [ 768.965772] ? vma_is_stack_for_current+0xa0/0xa0 [ 768.970618] ? __fget+0x237/0x370 [ 768.974083] SyS_mmap_pgoff+0x3ca/0x520 [ 768.978063] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 768.983003] ? align_vdso_addr+0x60/0x60 [ 768.987072] SyS_mmap+0x16/0x20 [ 768.990355] do_syscall_64+0x1e8/0x640 [ 768.991570] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 768.994247] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 769.005584] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 769.010778] RIP: 0033:0x45a219 07:35:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x5, @remote, 0x5636}, {0xa, 0x4e22, 0x401, @empty, 0x1}, 0x9ee5, [0x3, 0x0, 0x8000, 0x80, 0x200, 0x0, 0x3]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 769.013964] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 769.021682] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 769.028956] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 769.031945] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 769.036224] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 769.049975] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 769.057245] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:29 executing program 4 (fault-call:2 fault-nth:61): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:29 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb5, 0xc0, 0x0, 0xfeffffff03000000) 07:35:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xcd0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000002c0), r10, 0x2}}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) creat(&(0x7f0000000180)='./file0\x00', 0x5a) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_DEL(r13, 0x0, 0x484, &(0x7f0000000080)={0x4, @empty, 0x4e24, 0x2, 'none\x00', 0x4, 0x3, 0x2e}, 0x2c) 07:35:29 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 769.326389] FAULT_INJECTION: forcing a failure. [ 769.326389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 769.370567] CPU: 0 PID: 12915 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 769.377630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.379021] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 769.386988] Call Trace: [ 769.396067] dump_stack+0x138/0x197 [ 769.399711] should_fail.cold+0x10f/0x159 [ 769.403863] ? __might_sleep+0x93/0xb0 [ 769.407758] __alloc_pages_nodemask+0x1d6/0x7a0 [ 769.412434] ? __alloc_pages_slowpath+0x2930/0x2930 [ 769.417454] ? __lock_acquire+0x5f7/0x4620 [ 769.421715] alloc_pages_vma+0xc9/0x4c0 [ 769.425695] __handle_mm_fault+0xd5d/0x3470 [ 769.430030] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 769.434794] ? find_held_lock+0x35/0x130 [ 769.438858] ? handle_mm_fault+0x1b6/0x7c0 [ 769.443113] handle_mm_fault+0x293/0x7c0 [ 769.447186] __get_user_pages+0x465/0x1220 [ 769.451437] ? follow_page_mask+0x1560/0x1560 [ 769.455937] ? memset+0x32/0x40 [ 769.459220] populate_vma_page_range+0x18e/0x230 [ 769.463985] __mm_populate+0x198/0x2c0 [ 769.467886] ? populate_vma_page_range+0x230/0x230 [ 769.472829] vm_mmap_pgoff+0x1be/0x1d0 [ 769.476757] ? vma_is_stack_for_current+0xa0/0xa0 [ 769.481602] ? __fget+0x237/0x370 [ 769.485076] SyS_mmap_pgoff+0x3ca/0x520 [ 769.486484] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 769.489078] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 769.500827] ? audit_add_tree_rule.cold+0x2e/0x2e [ 769.505681] ? do_syscall_64+0x53/0x640 [ 769.509658] ? align_vdso_addr+0x60/0x60 [ 769.513815] SyS_mmap+0x16/0x20 [ 769.517104] do_syscall_64+0x1e8/0x640 07:35:29 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x2c0000) write$P9_RWRITE(r3, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x9}, 0xb) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0xcd41, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x4004001fd) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) dup2(r5, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 769.521000] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 769.525861] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 769.531923] RIP: 0033:0x45a219 [ 769.535112] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 769.542826] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 769.550104] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 769.557370] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 07:35:29 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 769.557377] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 769.557383] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 769.612490] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 769.648406] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:30 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xa3, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 07:35:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 769.746044] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 769.775413] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:30 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r0) [ 769.879002] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 769.917855] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:30 executing program 4 (fault-call:2 fault-nth:62): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ppoll(&(0x7f0000000080)=[{r0, 0x4000}, {r1, 0x400}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={0xffff}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000140)=0x0) getpgrp(r5) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:30 executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000000c0)={0x0, 0x0, 0x168, "22f53f63e70cb5054c8858b0ac4625cc7835cf4b8a831bc9fe9d90b4b799614cd1722eb34bc6a86e2a"}, 0x9) [ 770.019350] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 07:35:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:30 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 770.079090] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 07:35:30 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 770.175000] FAULT_INJECTION: forcing a failure. [ 770.175000] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 770.190092] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 770.251035] CPU: 0 PID: 12964 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 770.258104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.267464] Call Trace: [ 770.270065] dump_stack+0x138/0x197 [ 770.273701] ? should_fail.cold+0x10a/0x159 [ 770.278033] should_fail.cold+0x10f/0x159 [ 770.282195] ? __might_sleep+0x93/0xb0 [ 770.286094] __alloc_pages_nodemask+0x1d6/0x7a0 [ 770.290781] ? check_preemption_disabled+0x3c/0x250 [ 770.295810] ? __alloc_pages_slowpath+0x2930/0x2930 07:35:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 770.300836] ? alloc_pages_vma+0x46/0x4c0 [ 770.300852] alloc_pages_vma+0xc9/0x4c0 [ 770.300869] __handle_mm_fault+0xd5d/0x3470 [ 770.300885] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 770.300897] ? find_held_lock+0x35/0x130 [ 770.300908] ? handle_mm_fault+0x1b6/0x7c0 [ 770.309052] handle_mm_fault+0x293/0x7c0 [ 770.309068] __get_user_pages+0x465/0x1220 [ 770.334671] ? follow_page_mask+0x1560/0x1560 [ 770.339182] ? memset+0x32/0x40 [ 770.342476] populate_vma_page_range+0x18e/0x230 [ 770.347243] __mm_populate+0x198/0x2c0 [ 770.351143] ? populate_vma_page_range+0x230/0x230 [ 770.356089] vm_mmap_pgoff+0x1be/0x1d0 [ 770.359992] ? vma_is_stack_for_current+0xa0/0xa0 [ 770.364834] ? __fget+0x237/0x370 [ 770.368753] SyS_mmap_pgoff+0x3ca/0x520 [ 770.372740] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 770.377677] ? do_syscall_64+0x53/0x640 [ 770.381663] ? align_vdso_addr+0x60/0x60 [ 770.385730] SyS_mmap+0x16/0x20 [ 770.389029] do_syscall_64+0x1e8/0x640 [ 770.392919] ? trace_hardirqs_off_thunk+0x1a/0x1c 07:35:30 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000), 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 770.397781] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 770.402974] RIP: 0033:0x45a219 [ 770.406163] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 770.413874] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 770.421145] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 770.428418] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 770.435693] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 770.442967] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 07:35:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 770.464789] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 770.506827] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 07:35:31 executing program 4 (fault-call:2 fault-nth:63): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 07:35:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000080)=0x1, 0x4) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x7) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) r7 = dup3(r5, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) close(r4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x5, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000080)=@routing={0x0, 0x2, 0x0, 0x1f, 0x0, [@mcast2]}, 0x18) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f00000000c0)) 07:35:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 07:35:31 executing program 2 (fault-call:4 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 770.799842] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:31 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$vhci(r5, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0xf}, 0x0, 0x2, &(0x7f0000000000)={0x60, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x100, 0x0, 0x0, 0x0, 0x555, 0x0}) 07:35:31 executing program 0 (fault-call:3 fault-nth:0): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 770.892296] FAULT_INJECTION: forcing a failure. [ 770.892296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 770.958800] FAULT_INJECTION: forcing a failure. [ 770.958800] name failslab, interval 1, probability 0, space 0, times 0 [ 770.973135] CPU: 0 PID: 13004 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 770.980171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 770.989615] Call Trace: [ 770.992210] dump_stack+0x138/0x197 [ 770.995854] should_fail.cold+0x10f/0x159 [ 771.000006] ? __might_sleep+0x93/0xb0 [ 771.003906] __alloc_pages_nodemask+0x1d6/0x7a0 07:35:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x12) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 771.008584] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 771.013350] ? __alloc_pages_slowpath+0x2930/0x2930 [ 771.018377] ? retint_kernel+0x2d/0x2d [ 771.022304] alloc_pages_vma+0xc9/0x4c0 [ 771.026287] __handle_mm_fault+0xd5d/0x3470 [ 771.030620] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 771.035377] ? lock_release+0x44d/0x940 [ 771.039360] handle_mm_fault+0x293/0x7c0 [ 771.043433] __get_user_pages+0x465/0x1220 [ 771.047691] ? follow_page_mask+0x1560/0x1560 [ 771.052200] ? populate_vma_page_range+0x23/0x230 [ 771.057052] populate_vma_page_range+0x18e/0x230 [ 771.061820] __mm_populate+0x198/0x2c0 [ 771.064123] FAULT_INJECTION: forcing a failure. [ 771.064123] name failslab, interval 1, probability 0, space 0, times 0 [ 771.065710] ? populate_vma_page_range+0x230/0x230 [ 771.065736] vm_mmap_pgoff+0x1be/0x1d0 [ 771.086766] ? vma_is_stack_for_current+0xa0/0xa0 [ 771.091619] ? SyS_mmap_pgoff+0x2a8/0x520 [ 771.095775] SyS_mmap_pgoff+0x3ca/0x520 [ 771.099763] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 771.104697] ? align_vdso_addr+0x60/0x60 [ 771.108761] SyS_mmap+0x16/0x20 [ 771.112040] do_syscall_64+0x1e8/0x640 [ 771.115919] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 771.120771] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 771.125953] RIP: 0033:0x45a219 [ 771.129136] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 771.136839] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 771.144106] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 771.151371] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 [ 771.158640] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 771.165927] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 771.173220] CPU: 1 PID: 13016 Comm: syz-executor.0 Not tainted 4.14.153 #0 [ 771.180253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.189613] Call Trace: [ 771.192213] dump_stack+0x138/0x197 [ 771.195859] should_fail.cold+0x10f/0x159 [ 771.200017] should_failslab+0xdb/0x130 [ 771.204001] kmem_cache_alloc+0x2d7/0x780 [ 771.208155] ? perf_trace_lock+0x109/0x500 [ 771.212395] ? check_preemption_disabled+0x3c/0x250 [ 771.217418] ? save_trace+0x290/0x290 [ 771.221230] getname_flags+0xcb/0x580 [ 771.225044] user_path_at_empty+0x2f/0x50 [ 771.229202] vfs_statx+0xcd/0x160 [ 771.232664] ? vfs_statx_fd+0xa0/0xa0 [ 771.236472] ? perf_trace_sys_enter+0x44b/0x8f0 [ 771.241155] SYSC_newstat+0x95/0x100 [ 771.244872] ? cp_new_stat+0x5a0/0x5a0 [ 771.248770] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 771.254229] ? rcu_read_lock_sched_held+0x110/0x130 [ 771.261170] ? syscall_trace_enter+0x4c8/0xd40 [ 771.265763] ? exit_to_usermode_loop+0x220/0x220 [ 771.270532] ? syscall_get_arguments.part.0+0x10/0x10 [ 771.275734] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 771.281189] ? do_syscall_64+0x53/0x640 [ 771.285169] ? SyS_fstat+0x30/0x30 [ 771.288720] SyS_newstat+0x1e/0x30 [ 771.292266] do_syscall_64+0x1e8/0x640 [ 771.296154] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 771.301011] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 771.306201] RIP: 0033:0x45a219 07:35:31 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) [ 771.309388] RSP: 002b:00007ff6ef879c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 771.317101] RAX: ffffffffffffffda RBX: 00007ff6ef879c90 RCX: 000000000045a219 [ 771.324373] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000020000640 [ 771.331649] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 771.338945] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6ef87a6d4 [ 771.346239] R13: 00000000004e821b R14: 00000000004e1368 R15: 0000000000000004 [ 771.372588] CPU: 1 PID: 13011 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 771.379640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.379646] Call Trace: [ 771.379664] dump_stack+0x138/0x197 [ 771.379685] should_fail.cold+0x10f/0x159 [ 771.379701] should_failslab+0xdb/0x130 [ 771.379715] kmem_cache_alloc_trace+0x2e9/0x790 [ 771.408032] ? __might_fault+0x110/0x1d0 [ 771.412108] ? find_held_lock+0x35/0x130 [ 771.416181] proc_do_submiturb+0x1a77/0x3690 [ 771.416200] ? lock_downgrade+0x740/0x740 [ 771.416229] usbdev_do_ioctl+0x65d/0x2a60 [ 771.416244] ? lock_downgrade+0x740/0x740 [ 771.433098] ? proc_submiturb_compat+0x150/0x150 [ 771.433111] ? perf_trace_lock+0x109/0x500 [ 771.433127] ? check_preemption_disabled+0x3c/0x250 [ 771.433145] ? perf_trace_lock+0x109/0x500 [ 771.433175] usbdev_ioctl+0x26/0x30 [ 771.433186] ? usbdev_compat_ioctl+0x30/0x30 [ 771.459419] do_vfs_ioctl+0x7ae/0x1060 [ 771.459435] ? selinux_file_mprotect+0x5d0/0x5d0 [ 771.459449] ? lock_downgrade+0x740/0x740 [ 771.459461] ? ioctl_preallocate+0x1c0/0x1c0 [ 771.459475] ? __fget+0x237/0x370 [ 771.480079] ? security_file_ioctl+0x89/0xb0 [ 771.484503] SyS_ioctl+0x8f/0xc0 [ 771.487873] ? do_vfs_ioctl+0x1060/0x1060 [ 771.492034] do_syscall_64+0x1e8/0x640 [ 771.495928] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 771.500894] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 771.506085] RIP: 0033:0x45a219 [ 771.509278] RSP: 002b:00007f2dbb492c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:35:31 executing program 4 (fault-call:2 fault-nth:64): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 771.516993] RAX: ffffffffffffffda RBX: 00007f2dbb492c90 RCX: 000000000045a219 [ 771.524266] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 771.531542] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 771.538819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2dbb4936d4 [ 771.547395] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:31 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$usbfs(r0, &(0x7f0000000080)=""/140, 0x8c) 07:35:32 executing program 2 (fault-call:4 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:32 executing program 0 (fault-call:3 fault-nth:1): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 771.727670] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 771.742764] FAULT_INJECTION: forcing a failure. [ 771.742764] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 771.761052] FAULT_INJECTION: forcing a failure. [ 771.761052] name failslab, interval 1, probability 0, space 0, times 0 [ 771.778032] FAULT_INJECTION: forcing a failure. [ 771.778032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 771.789578] CPU: 1 PID: 13041 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 771.796942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.806314] Call Trace: [ 771.808925] dump_stack+0x138/0x197 [ 771.812555] should_fail.cold+0x10f/0x159 [ 771.816707] should_failslab+0xdb/0x130 [ 771.820687] kmem_cache_alloc_trace+0x2e9/0x790 [ 771.825356] ? check_ctrlrecip+0x91/0x290 [ 771.829501] proc_do_submiturb+0x3a2/0x3690 [ 771.833840] usbdev_do_ioctl+0x65d/0x2a60 [ 771.837995] ? lock_downgrade+0x740/0x740 [ 771.842137] ? proc_submiturb_compat+0x150/0x150 [ 771.846884] ? perf_trace_lock+0x109/0x500 [ 771.851136] ? check_preemption_disabled+0x3c/0x250 [ 771.856149] ? perf_trace_lock+0x109/0x500 [ 771.860394] usbdev_ioctl+0x26/0x30 [ 771.864011] ? usbdev_compat_ioctl+0x30/0x30 [ 771.868411] do_vfs_ioctl+0x7ae/0x1060 [ 771.872292] ? selinux_file_mprotect+0x5d0/0x5d0 [ 771.877036] ? lock_downgrade+0x740/0x740 [ 771.881180] ? ioctl_preallocate+0x1c0/0x1c0 [ 771.885583] ? __fget+0x237/0x370 [ 771.889032] ? security_file_ioctl+0x89/0xb0 [ 771.893433] SyS_ioctl+0x8f/0xc0 [ 771.896791] ? do_vfs_ioctl+0x1060/0x1060 [ 771.900936] do_syscall_64+0x1e8/0x640 [ 771.904898] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 771.909739] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 771.914921] RIP: 0033:0x45a219 [ 771.918102] RSP: 002b:00007f2dbb492c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.925825] RAX: ffffffffffffffda RBX: 00007f2dbb492c90 RCX: 000000000045a219 [ 771.933177] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 771.940459] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 771.947755] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2dbb4936d4 [ 771.955021] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 [ 771.962373] CPU: 0 PID: 13042 Comm: syz-executor.0 Not tainted 4.14.153 #0 [ 771.969674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 771.979032] Call Trace: [ 771.981628] dump_stack+0x138/0x197 [ 771.985268] should_fail.cold+0x10f/0x159 [ 771.989425] __alloc_pages_nodemask+0x1d6/0x7a0 [ 771.994098] ? fs_reclaim_acquire+0x20/0x20 [ 771.998422] ? __alloc_pages_slowpath+0x2930/0x2930 [ 772.003478] cache_grow_begin+0x80/0x400 [ 772.007554] kmem_cache_alloc+0x6a6/0x780 [ 772.011728] ? perf_trace_lock+0x109/0x500 [ 772.015975] getname_flags+0xcb/0x580 [ 772.019786] user_path_at_empty+0x2f/0x50 [ 772.023939] vfs_statx+0xcd/0x160 [ 772.027395] ? vfs_statx_fd+0xa0/0xa0 [ 772.031201] ? perf_trace_sys_enter+0x44b/0x8f0 [ 772.035877] SYSC_newstat+0x95/0x100 [ 772.039589] ? cp_new_stat+0x5a0/0x5a0 [ 772.043479] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 772.048932] ? rcu_read_lock_sched_held+0x110/0x130 [ 772.053958] ? syscall_trace_enter+0x4c8/0xd40 [ 772.058539] ? exit_to_usermode_loop+0x220/0x220 [ 772.063304] ? syscall_get_arguments.part.0+0x10/0x10 [ 772.068499] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 772.073950] ? do_syscall_64+0x53/0x640 [ 772.077927] ? SyS_fstat+0x30/0x30 [ 772.081471] SyS_newstat+0x1e/0x30 [ 772.085031] do_syscall_64+0x1e8/0x640 [ 772.088916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 772.093767] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 772.098955] RIP: 0033:0x45a219 [ 772.102140] RSP: 002b:00007ff6ef858c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 772.109864] RAX: ffffffffffffffda RBX: 00007ff6ef858c90 RCX: 000000000045a219 [ 772.117136] RDX: 0000000000000000 RSI: 0000000020000680 RDI: 0000000020000640 [ 772.124402] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 772.131669] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff6ef8596d4 [ 772.138941] R13: 00000000004e821b R14: 00000000004e1368 R15: 0000000000000003 [ 772.148547] CPU: 1 PID: 13032 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 772.155580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.155585] Call Trace: [ 772.155600] dump_stack+0x138/0x197 [ 772.155618] should_fail.cold+0x10f/0x159 [ 772.175314] ? __might_sleep+0x93/0xb0 [ 772.179205] __alloc_pages_nodemask+0x1d6/0x7a0 [ 772.179221] ? __alloc_pages_slowpath+0x2930/0x2930 [ 772.179234] ? __lock_acquire+0x5f7/0x4620 [ 772.193129] ? SOFTIRQ_verbose+0x10/0x10 [ 772.193148] alloc_pages_vma+0xc9/0x4c0 [ 772.193164] __handle_mm_fault+0xd5d/0x3470 [ 772.205481] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 772.205494] ? find_held_lock+0x35/0x130 [ 772.205505] ? handle_mm_fault+0x1b6/0x7c0 [ 772.218548] handle_mm_fault+0x293/0x7c0 [ 772.222624] __get_user_pages+0x465/0x1220 [ 772.227224] ? follow_page_mask+0x1560/0x1560 [ 772.231730] ? memset+0x32/0x40 [ 772.235022] populate_vma_page_range+0x18e/0x230 [ 772.239790] __mm_populate+0x198/0x2c0 [ 772.243773] ? populate_vma_page_range+0x230/0x230 [ 772.248716] vm_mmap_pgoff+0x1be/0x1d0 [ 772.252611] ? vma_is_stack_for_current+0xa0/0xa0 [ 772.257455] ? __fget+0x237/0x370 [ 772.260921] SyS_mmap_pgoff+0x3ca/0x520 [ 772.264904] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 772.269834] ? do_syscall_64+0x53/0x640 [ 772.273813] ? align_vdso_addr+0x60/0x60 [ 772.277875] SyS_mmap+0x16/0x20 [ 772.281157] do_syscall_64+0x1e8/0x640 [ 772.285049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 772.289899] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 772.295089] RIP: 0033:0x45a219 [ 772.298280] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 772.305990] RAX: ffffffffffffffda RBX: 00007f574dbbec90 RCX: 000000000045a219 [ 772.313275] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 772.320549] RBP: 000000000075bf20 R08: 0000000000000004 R09: 0000000000000000 07:35:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:32 executing program 2 (fault-call:4 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 772.327822] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 772.335091] R13: 00000000004c6c31 R14: 00000000004dc3b8 R15: 0000000000000005 [ 772.342977] FAULT_INJECTION: forcing a failure. [ 772.342977] name failslab, interval 1, probability 0, space 0, times 0 [ 772.387797] CPU: 0 PID: 13051 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 772.394953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.404315] Call Trace: [ 772.406909] dump_stack+0x138/0x197 [ 772.410555] should_fail.cold+0x10f/0x159 [ 772.414717] should_failslab+0xdb/0x130 [ 772.418722] __kmalloc+0x2f0/0x7a0 [ 772.422275] ? rcu_read_lock_sched_held+0x110/0x130 [ 772.427303] ? kmem_cache_alloc_trace+0x623/0x790 [ 772.432152] ? usb_alloc_urb+0x24/0x50 [ 772.436052] usb_alloc_urb+0x24/0x50 [ 772.439776] proc_do_submiturb+0x3c0/0x3690 [ 772.444129] usbdev_do_ioctl+0x65d/0x2a60 [ 772.448279] ? lock_downgrade+0x740/0x740 [ 772.452439] ? proc_submiturb_compat+0x150/0x150 [ 772.457195] ? perf_trace_lock+0x109/0x500 [ 772.461435] ? check_preemption_disabled+0x3c/0x250 [ 772.466467] ? perf_trace_lock+0x109/0x500 [ 772.470732] usbdev_ioctl+0x26/0x30 [ 772.474367] ? usbdev_compat_ioctl+0x30/0x30 [ 772.478784] do_vfs_ioctl+0x7ae/0x1060 [ 772.482679] ? selinux_file_mprotect+0x5d0/0x5d0 [ 772.487440] ? lock_downgrade+0x740/0x740 [ 772.491601] ? ioctl_preallocate+0x1c0/0x1c0 [ 772.496008] ? __fget+0x237/0x370 [ 772.499470] ? security_file_ioctl+0x89/0xb0 [ 772.503890] SyS_ioctl+0x8f/0xc0 [ 772.507262] ? do_vfs_ioctl+0x1060/0x1060 [ 772.511421] do_syscall_64+0x1e8/0x640 [ 772.515314] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 772.520168] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 772.526051] RIP: 0033:0x45a219 [ 772.529240] RSP: 002b:00007f2dbb492c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:35:32 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7750, 0x2000) getpeername$llc(r3, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000100)=0x10) r4 = fcntl$dupfd(r2, 0x0, r1) write$binfmt_elf64(r3, &(0x7f0000000880)={{0x7f, 0x45, 0x4c, 0x46, 0x40, 0x40, 0xff, 0x7f, 0x0, 0x3, 0x6, 0xdb, 0x19f, 0x40, 0x263, 0x2, 0x2, 0x38, 0x2, 0xb94, 0x1, 0x8}, [{0x7, 0x7, 0x6c9, 0x6df5a693, 0x8, 0x7fff, 0x7, 0x3}, {0x70000000, 0x6580, 0xc1, 0x2, 0x20, 0x9, 0x6, 0xc7}], "a115430950d8627dc24027406f822043255f0a57992145f02cde322c0a1d2fe9926aba3f884e309fbc82e9129afed2073d0caea39084c423c49a05fe5e5d3e8e5b44102a7b", [[], [], [], [], [], []]}, 0x6f5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) init_module(&(0x7f0000000140)='!*vmnet0\x00', 0x9, &(0x7f0000000180)='proc%\x00') 07:35:32 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 772.536949] RAX: ffffffffffffffda RBX: 00007f2dbb492c90 RCX: 000000000045a219 [ 772.544221] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 772.551492] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 772.558767] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2dbb4936d4 [ 772.566036] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:32 executing program 2 (fault-call:4 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:33 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000380)) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 772.682840] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 772.705952] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 772.715815] FAULT_INJECTION: forcing a failure. [ 772.715815] name failslab, interval 1, probability 0, space 0, times 0 [ 772.754988] CPU: 0 PID: 13066 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 772.762149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 772.771513] Call Trace: [ 772.774113] dump_stack+0x138/0x197 [ 772.777757] should_fail.cold+0x10f/0x159 [ 772.781918] should_failslab+0xdb/0x130 [ 772.785909] __kmalloc+0x2f0/0x7a0 [ 772.789452] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 772.794663] ? trace_hardirqs_on_caller+0x400/0x590 [ 772.799681] ? proc_do_submiturb+0x2830/0x3690 [ 772.804269] proc_do_submiturb+0x2830/0x3690 [ 772.808699] usbdev_do_ioctl+0x65d/0x2a60 [ 772.812850] ? lock_downgrade+0x740/0x740 [ 772.817002] ? proc_submiturb_compat+0x150/0x150 [ 772.821760] ? perf_trace_lock+0x109/0x500 [ 772.826005] ? check_preemption_disabled+0x3c/0x250 [ 772.831034] ? perf_trace_lock+0x109/0x500 [ 772.835289] usbdev_ioctl+0x26/0x30 [ 772.838922] ? usbdev_compat_ioctl+0x30/0x30 [ 772.843333] do_vfs_ioctl+0x7ae/0x1060 [ 772.847224] ? selinux_file_mprotect+0x5d0/0x5d0 [ 772.851981] ? lock_downgrade+0x740/0x740 [ 772.856242] ? ioctl_preallocate+0x1c0/0x1c0 [ 772.860658] ? __fget+0x237/0x370 [ 772.864122] ? security_file_ioctl+0x89/0xb0 [ 772.868535] SyS_ioctl+0x8f/0xc0 [ 772.871905] ? do_vfs_ioctl+0x1060/0x1060 [ 772.876057] do_syscall_64+0x1e8/0x640 [ 772.879944] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 772.884799] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 772.889988] RIP: 0033:0x45a219 [ 772.893180] RSP: 002b:00007f2dbb492c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 07:35:33 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x4a080, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000cfd000/0x4000)=nil, 0x4000}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) 07:35:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x4, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 772.900895] RAX: ffffffffffffffda RBX: 00007f2dbb492c90 RCX: 000000000045a219 [ 772.908166] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 772.915438] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 772.922731] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2dbb4936d4 [ 772.930002] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:33 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f00000000c0), 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000040)) 07:35:33 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x6) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='\x00', 0x1, 0x1) semctl$GETPID(0x0, 0x2, 0xb, &(0x7f0000000200)=""/120) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000280)={r5, 0x0, 0x0, 0xfffffffffffffffa, 0x3}) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000140)={0xf000, 0x2, 0x7fffffff, 0x80000001, 0x7}) 07:35:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r3 = fcntl$dupfd(r2, 0x406, r0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000080)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:33 executing program 2 (fault-call:4 fault-nth:4): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000500)=""/116) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x406, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000003c0)={{0x2, 0x2, 0x27e45296, 0x103fdcb, 'syz1\x00', 0x4}, 0x3, 0x200, 0x5, r7, 0x5, 0x2ae, '\x82y\x900\x008\x04\x00\x00\x00\x00\x00\x00\x00\x00=1W\x8f\xfa\xc7D\x00\x00 \b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xff\xff\x03\xbc\x9ej\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', &(0x7f00000001c0)=['/dev/usbmon#\x00', '/dev/usbmon#\x00', 'system\x00', '&bdevwlan0mime_type\x00', '\x00'], 0x36, [], [0x7ff, 0x7, 0x7, 0x4]}) io_setup(0x2344, &(0x7f0000000100)=0x0) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000200)={0x0, 0x1f, 0x401, 0xffff}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) io_submit(r8, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}]) io_getevents(r8, 0x5, 0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000100)) r10 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r10, 0x0) 07:35:33 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 773.292990] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 [ 773.357735] FAULT_INJECTION: forcing a failure. [ 773.357735] name failslab, interval 1, probability 0, space 0, times 0 [ 773.387652] CPU: 0 PID: 13093 Comm: syz-executor.2 Not tainted 4.14.153 #0 [ 773.394796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 773.404150] Call Trace: [ 773.406751] dump_stack+0x138/0x197 [ 773.410396] should_fail.cold+0x10f/0x159 [ 773.414582] should_failslab+0xdb/0x130 [ 773.418570] __kmalloc+0x2f0/0x7a0 [ 773.422120] ? _raw_spin_unlock_irq+0x28/0x90 [ 773.426625] ? trace_hardirqs_on_caller+0x400/0x590 [ 773.431642] ? usb_hcd_submit_urb+0x5ff/0x1e00 [ 773.436233] usb_hcd_submit_urb+0x5ff/0x1e00 [ 773.440737] ? perf_trace_lock+0xd0/0x500 [ 773.444897] ? usb_create_hcd+0x40/0x40 [ 773.448874] ? SOFTIRQ_verbose+0x10/0x10 [ 773.452941] ? proc_do_submiturb+0x1662/0x3690 [ 773.457528] ? find_held_lock+0x35/0x130 [ 773.461599] ? proc_do_submiturb+0x1662/0x3690 [ 773.466195] usb_submit_urb+0x5c5/0x1100 [ 773.470273] proc_do_submiturb+0x16d6/0x3690 [ 773.474708] usbdev_do_ioctl+0x65d/0x2a60 [ 773.478859] ? lock_downgrade+0x740/0x740 [ 773.483011] ? proc_submiturb_compat+0x150/0x150 [ 773.487768] ? perf_trace_lock+0x109/0x500 [ 773.492015] ? check_preemption_disabled+0x3c/0x250 [ 773.497046] ? perf_trace_lock+0x109/0x500 [ 773.501305] usbdev_ioctl+0x26/0x30 [ 773.504941] ? usbdev_compat_ioctl+0x30/0x30 [ 773.509356] do_vfs_ioctl+0x7ae/0x1060 [ 773.513253] ? selinux_file_mprotect+0x5d0/0x5d0 [ 773.518017] ? lock_downgrade+0x740/0x740 [ 773.522174] ? ioctl_preallocate+0x1c0/0x1c0 [ 773.526597] ? __fget+0x237/0x370 [ 773.530066] ? security_file_ioctl+0x89/0xb0 [ 773.534482] SyS_ioctl+0x8f/0xc0 [ 773.537844] ? do_vfs_ioctl+0x1060/0x1060 [ 773.541993] do_syscall_64+0x1e8/0x640 [ 773.542003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 773.542023] entry_SYSCALL_64_after_hwframe+0x42/0xb7 07:35:33 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x10000, 0xd5}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40206435, &(0x7f00000000c0)={0x100000000, r4, 0x10000, 0x2}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000005500000023160ef14d2b5c826d000000", @ANYRES64]) [ 773.542033] RIP: 0033:0x45a219 [ 773.542040] RSP: 002b:00007f2dbb492c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.542052] RAX: ffffffffffffffda RBX: 00007f2dbb492c90 RCX: 000000000045a219 [ 773.542058] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 773.542064] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 773.542070] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2dbb4936d4 [ 773.542076] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:33 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x381941) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 773.554941] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:33 executing program 2 (fault-call:4 fault-nth:5): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 773.633950] vhci_hcd: default hub control req: 0006 v0000 i0000 l96 07:35:34 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) lgetxattr(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)=@random={'system.', 'ramfs\x00'}, &(0x7f00000000c0)=""/114, 0x72) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)) 07:35:34 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r7) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0/bus\x00', 0x80000000, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000200)="7d6e1286a588c5c93041b9707fa7a704726f43bca8d982402488be044da19ee009e85a7014f51d30169276af542e243b6045587b3810186edf9d8685b129d822c08ce853374adcaa0bf2603c3ffb66f6d2302d99ba97db5295439238bf7cc392adfafed5527e468d78aa9107bec8ae4f37527b09aa61171df5cf29b0b9a89cd541950ede156e0963f1658a2444a5751e6a086fde99e311047cf113fd5c50dda96a16dfea04908e586930af6b547751", 0xaf, 0x8}, {&(0x7f0000000380)="c33572c7f6abaca42e2ccba99431180d1c0fe518a63722b9d5b62cd091e37f49ece3cd333df7b69d3e1db595732b31542917b885b27b09dd9e169ead4144b56e22e7dc0944141c7288bfbeccc998bccfd04c7859cba75f315661641f391afa32cce877f5bf6e07d672fd59020ba767133edf1597291f0d93a68b64fa76b75630c00c44524c2bcf336a1e7d061eb991408930dbe2fe912ae8288a434e34712cc2cd519cae5f3f3986a49d7357ab906a4bee6d00f511c8466b9e4340b4afc9a6f6dd5e1e4c8e47957c82244495088fd804b2a59621f6c5cde0133a062bb8ed5cb4a0f2ee4b620cf22febcf339acb11096e6a68d4c2561f08fdec3056fd1d5825dd0d966aea046cb7025cd408b331687ea74aef7edcfff42a95570877e0e4482efe98fad7bb516e8674680cccff06fa9a71c706402f62933aa49c3eb09063bdd184fc8b890dde5ce654abd708da3ee4062adc5578b05ec5b0e04e1a37a6c8b4cb7c36842578c63b31c9cf9018a789f9a08540e8b3802f16c88ac81c0db9472cfbc0bf0f2bcef690169f859a202391b55bef0d42a696f631790e863a39cecf873975b2ed5c3a24574b2497a5f955d4d9faf28bfe92551fdee6e18a170db713536aed8b13f6bffa5f69e54ba82b9b25c3bfc426f3f095fbe276b9b7e3699c10419ff17392421ca6a8efa602d3c7ef7eef38385eace54f88a1075825bdff613385a8e5c100ab67fb169ccb90992a55d36fd76c6b8640fbf2c2346551932784bddbca95c540bea78cb89dc66b999d85bff9b63761896061df9614fb92d2143cdd9fdeab7543f7532cbee3184d06548f7a674e5fdc65bc397832d338fdac4b4591b848ca604f1d6e5b0b69de0c1ac3cbd8e0c1e88c1b9ccbafe8f50680fc61a98b08428d680d1cf078e6b407a77eb180e5798024d87894de4aff6eb4b52347616746237dd7e94ceaab12a301ce450702668c560ac22a4727e28389a186fbc53370cf0bc6db03f352c427b559dee419195e7a67a8cda1aa1fdf07f21070b0a2a2527bf47fd06a463dc0ca15e0d835ea8755a28229214e7441add19017314521fb60aab1068afa5a448ec227acf69914abf19ed09752c2f5bd2f41813b0fd04dda1e7966b4ca89d2ce43873fb78995292f1496e07d3b5b61b56d5a99b00171c456731bae572a50d5c26dd1c5ffcbc66ddf4ee70d48144a064e7334bcd048a40472e8a0455bf64750c0a52f34300c06607cae0f6093b9de2b1c6285a1c1e684faa71307de5ae263d6ee3a355c5d134cfb67a325790993a83d7e84b38a5045570e153eb6fd7cb06185733b3154198cbefd86466d7100d34f99aab05bf3f21b05ebcfb632088d8ee8a30d63144d59329ea34e2c11544caf8e8323698db17e75eb9d6145593b26b7f970a0aff5a778aa90d33457ae6b01c276013c6e3ad99c1b1103b90f8f1734177e899899f8f627bd2a9bf6d55a9d3d041d507a2374a3b2c3035027fe5b8b5cab4982ef1c9926cce33b6c739ede3d8ca8bb1ecdb1b941f79bf3323a70b487540f7e78085d5d019b83c8614345ac530c030f9f5d637529ebbdcb27a165f6cccf48bfb2016410004c6973f9d7e1bf0cb0e137434383da9586c4338b1d5879a526d37886b8d5004c0c5a840abaa1ca3f40e442c5b6844f31ef302789d90682d1ef4d8afc6a3d68cbd75799e7887c8c16dae26c9afda50f6951c6d8048f3f8e38d14ff1bdf5b6193a000cdfd0c4b0781a94a92bb452f5581acd5593472e566f9ebd5acb7ffc091d9458fc266c83dac57e139e4cd7baa01daa5d9bf2f23a7b7b2c42eb0f60ad4f123ba7e122146a46659ada5f5ea66c1c229a7c23825d0cc5e1217840f76f15a2d8ce8196dd1caea2650458fd566861f70fa9977c86ddbfef925e0ef7eef9df98c79a1a2c857a88dcf2dea9a383bf25d9ed7532e1a5c4c2eef7b2de075e532d1f8a211f84d176193f358e1e913e7ce243e64b0f1db74e18514874d73ab40686cac2911f1ced63a0b338f6e081342df4136eb04d7d1fda7ed54f216990b9053287494ffcb59d07d7c013cae53a54d8709ff938147b5b0bcf29c2e80d21322c402dda4076582755b29e9f21f2af7b0d207a57db21850787e4cb8fd2fdf88019ee8852b62d1a50faeb54d0793166984904af946ddab00a3caa39d8422e7523bf13ecf437361b997838a8ec7c009184b91009420456accdf2cb9c4ff328c2026b0980697ccc1ac6d08a1e1a2dd007c41bd8a25357436d343e6208dd8cbc516ef718569f8753284fba356d5a942184f92a671a7163b62c303f8917f427f5272c1c581ecf15325c7d9c991c8b35b6fb58d876a2c33de523d4f97474cb913a67132e997b6ab22f4a892aecf68fd41c925981b7400cb92d124f28d4543b8d055efa3c8b51140a3416df62202a295c2478301668a8b0350cc7dd3e6dce8ce313a5ec563d809f46a2887532ed8f3572c9446575af1ac26104aae344ae2b44c6f46a3634e320c76336a68fc128ae0ad0b740bd369e3eb942e655a329006d25c0c6bc6302866c7b6bc4739893b83650b3249a102165235646fd0f2028b7c7e0bdcbf14f79702a434310367d91a344b6e49c54765461629a37d15f62f527f9bcd7889b86c025f536ac536ad9b7192786f12a082929973600fc22461b8935b09a9d7f30e5a67a7a551845d9409a86efb2ce8653cd99387bb84c38b4ba89627a3e0375ae6a6d7a4f7044d3c240839bda79248f90d07426a825012fb527481a7f549dcc0b8b39197fdb26e6b28dd705c732e430891e1f1678c646ebdadaa15018dd076482cc5d36f3cad0b9dd3ef67ea25dab745222ce9923ccaf635ad68d8335030cad7e4beb4072ace17ef10e84f8e721254829982a4752d115e156810d9678d073617045f0bde78db6f7835d7bea14380bfa1b95d3a180a590e7207f67bc7b1f5ed556c7514e4063cc9f2464d2c757e8d26d47ff70f4c70664c818bd615d3217b4dc1c6d65dcb318c851225a4d49f872ee3e20e58b6fb963115d5ea684f1f169b4674ec83d158c6d3718bcbe5331222c9a2e04eaf6afbc7eacc412cb0b36d5e3da9088bfd619a2f88467ff8544a77ca80f0a39ca430fcea6b3b20801a28b79673576fd87e8cbc52f792a7f6f5db674137622c636f3538be2915216f217eef9ee270b5da5773de58ef8a3697674bedb4d9302bd5b4300f930aff38ed6b36b493497138880bb4a03d6fbf9ed84c284120a209f0700032c4c2cdaf4cd1ae2d8337427834265237c5c5d052bc0b8a138c0d5f4ec9187ad986e1d997ed5c2ca4976f74cb0e771d25441c648185d526cf7f2eee9a33acc776b11a16777836912fe0b1ddd3da37ce291bc2a3c0b57d9e6106702cef499530ca396f5fe1ef54c5bbb6fb839aba1236bf8eb242884f5f15fbb42a58e4f77702e606bd26b4638e5761b12dff88b7e7e5a21f3ff8fe241a46e4fedba7f2f06dd2039b4d9c9e4c9f5ad3d645430aa91f9ef39467afa1e8cc01ac9126a913e9f271f1ecbc252bf4509a50e501193a6076cb06ea9a3276a93b07806a0c7757ad8f6def3f632c6ad5df2d8eefcdfc2426d2bd592703e04723311728de46dc427e4fda6646f0505b021369f41d9b0d72c2b4019820873128c81a41faa0a18a4b0a2617b9c42a249df066109ba15c73a76b8efbda1623fd677bccb406da6226c9ed2b60af621f029a2eeebd6a2fbff9b67ee260ce918f31f59850762f920306606d5cec33562d10b928c65705fe1db633e398a11f3304ced827c703670f47ab2544075c5ec9d7b0c48045daedadaa07ae517c8bf6ec4387190ab0bacce03e44d408aee73212758c8a79fa301a166a1969c9d6bbad3517d2bec3f173fa5b05392518f1c69a89c57d858c510b10c33c7d1e006dc3cab8c02da0f7e993ac73aea409790fe1c6ced55683a369fe74dea7b58fe3aaf1081eb7b99c633a19954970be9fc0db03ba43924f00c73d69debf419e3c2afccc86c94e82f85207eec13554fd29d621e94a4659ac6287e9993189932230256199f612b3b46b2567b1fe407a9caf8d1fbefb7d11232644d6f378aa23e36f41f8e000ecc1dea1727b16fe9ad1c9ea367f1535916f2e7ec7368df966e47b4a86cf94b209268fccc4b2e9d3034d5c8f5c5e7227f11cacac34546baad67402b9ac513ca06b2e693699b7054a1c8c343b4b18e34d00f2baff4fabe0ab8ebe121f1bc6d7f2f4c64631f8186b469a4349530efa90f51c9509b20389ad2ae5de9fe3374fb1455cdc4dccd4a24cbf4b1c1174950353da77ef84913f4f4b44ca73376be15ea1f0f6c7c38aadea5eed40769ab5edc5ae8c45ab45f62bbe1dffea9c8b67bf6fce9821f33427dcd8e9faf56865783e9cfeb942ee7a8758ec68c3c25e8f5da0a128c3d488d0559d8f79f33e00eadfcf9350c9594f2e9a3a42e691cc3caec3823a78e60f5d6856676c0fc1bf766661af2c6f27014d2cd0c4dc6f249998448cae381745bcd287f69909213eaae13f8560ae8968ec3db48032e54e8b3f86f4c81e4838885bee741868e85b461d0d4dffe50d009ebf7dc888254711350a0642a32dabd784cc42f8535fb5cb72ae852e8f7bf80a2e20058f7ef85f1e595450773cfba009d3f9db7d217916f0ac629103e3ea839e7b2d0d90ce02af9ffa6942ba72e120fa301e0ef88f41fa0c2b731f47300ad880c46683524d84edf4655769e0648ca962e3a4285a19e7afa8690513b1a469860a486daf78c078d7e9ad37728665e60257a789609f6260ec98dc727657f86d8267f7a93b0c73cf8bf448aaf380ce7ac09b6f8112db81d453e830128adc6f9e95f4cc884e6e2f93c13abf135db2815e7ba3287594458ee8b39da48986c22aae87826d9f69350fe0223abac1cd2154f70a94ac1ca098d9e7e4e39ef5cc3671e7dd33a5998f14c8ff5c610569f06c8ff8c50ded608e2f3b033c45bc06c3f0792242e178e3fac1bf89edbf226729dfa54f00ba0344bfc24421d23221a6b0dfd38b6dd80ae0a687a185e4b1d720754aa035172409a986443a7517f9ac869d8e058bd46e0b22d8fe483b22958ae9952e5306d2db759aacb54a55e0249ea8a0ccff6f1d9e7f78adda6da394ca9e4794f6f8e42adb5714ab6c4d72c59734b958e71b7939dcdf870df1cea1bc21635fb9d249571f736ecf6cb5aa5e1e7944cf45a97e84195ce11ad709074fe253c2cc9de29bcf5d3e16bfcc763b087dcc201788d5f12e5d24e606e01b9e6b41876ff308e462cbc75b56e66fbed28f5a2578bbac9cf0e847d3fdeb3b3ad32cde86afdb949fb8bc60c3330301d58c24ff2e108bd0620bbc57fc1f3a9d6ee4176260df545b409eb139889e4b6be15ac8bb1c5a1396af4043d879963109300539705d61b8ab78ee1bc3f633f964cef099e13aded46e753fad35b5e387621e6971965cf3b2c940abb163593a4e1b2c5e0df6a5341008149a5b0100fb7b1a2bbda9743988ef2fedc89f78e1985ae5df5374a4313d2f4b78e17c82a5f854b5797efd02bff07773cbc83c6379fade8f9d43b8bde7a47296f9ed11d7e3e9e211ba3a985273d0beafaa3617f6fd010974e0f0a6f85b58e68e324c11d9a59bb6288cff12e21b03a2adfecbf375f4be5696428c7af42df9e65b0151e523cef491f2e38e5e8392c07c4c7b07b173b75510b6cd1f37050e993ab8042e4ea12d4b816121695d5fbe417e3e61c0775f7061a3701c5797a506ea662675ff2633972807707bc18d0365de1734eb965ae8749636d9d327ea1d0f533def2d60cb5f699fb31e2dce5cfae6a4df30fe6df", 0x1000, 0x3}, {&(0x7f0000001380)="195c75263c7a34262ee92dc4d250fdaa63bcd290c5dffbd63ab051455bb4d6e4d8fdba5e039bef379267783d23ed2875548367b51b279fbbe08a09c4f8e98effe96f6bf368e0579479caa6eacc3dcd7c8664e48d139a0f9f0cfed5d7e86976c101abce12c818b9f1943b67665aee3d28485718692fddd772676ed20ba3722760fb4aa16d46c89b96805d0558bbc5864f4389c577db3b8a4586168928e6147ad419cd7d8620625bb0f211e54c22c19ce0cf18ad7db371d43d38b7cc7dd07f7ac39e7298fd5da442f801dac457741cf0e879", 0xd1, 0x1}], 0x200000, &(0x7f0000001480)={[{@show_sys_files_no='show_sys_files=no'}, {@uid={'uid', 0x3d, r1}}, {@disable_sparse_no='disable_sparse=no'}], [{@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@fowner_lt={'fowner<', r3}}, {@obj_user={'obj_user', 0x3d, 'ramfs\x00'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x64, 0x38, 0x3e, 0x3a, 0x64, 0x33, 0x4], 0x2d, [0x33, 0x35, 0x66, 0x63], 0x2d, [0x0, 0x30, 0xf, 0x30], 0x2d, [0x33, 0x30, 0x30], 0x2d, [0x36, 0xf4776a639f8b68b8, 0x63, 0x34, 0x64, 0x66, 0x36, 0x30]}}}, {@fsmagic={'fsmagic', 0x3d, 0xa0}}, {@subj_user={'subj_user', 0x3d, 'trusted.@#'}}, {@fowner_gt={'fowner>', r7}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}) r8 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r8]) 07:35:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40908, 0x40a104) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:34 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, 0x56}) [ 773.812249] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 773.833822] ntfs: (device loop1): parse_options(): Unrecognized mount option mask. 07:35:34 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000000)) fcntl$setsig(r0, 0xa, 0x6) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 07:35:34 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r0, 0x9}}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x903, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 773.943723] ntfs: (device loop1): parse_options(): Unrecognized mount option fowner<00000000000000000000. 07:35:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f00000000c0)={0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 773.999751] ntfs: (device loop1): parse_options(): Unrecognized mount option obj_user. 07:35:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:34 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$peekuser(0x3, r2, 0x9) 07:35:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) dup2(r0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:34 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x1) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000100)='eth1md5sumself\x00', 0xf, 0x3) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 774.088133] ntfs: (device loop1): parse_options(): Unrecognized mount option mask. [ 774.123263] ntfs: (device loop1): parse_options(): Unrecognized mount option fowner<00000000000000000000. 07:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) unshare(0x800) [ 774.210286] ntfs: (device loop1): parse_options(): Unrecognized mount option obj_user. 07:35:34 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x8001}, &(0x7f00000000c0)=0x8) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r9}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r9, 0x10, 0x0, @in={0x2, 0x4e23, @local}}}, 0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={r7, 0xb5, "39b617efdbb68a9033a59d438fa65829c6d174da9abb05a2e7dddccc1c57f1f56fde30b5e98b3b0b579bd84a8062c54e5de3083b6c9700c8b773efdd79a08503f4dd0156c6b55c9b3c4e28a452e50ed5750780cfa332075025d0b4ce693793e54f152c07d544feda038bec1e394320ea8f9117358e59c19485877521f403ec391004465e15cc84f769824745e315f1acf31853110302a3a8ee798f74a4f7feb9ea0059ce9d45d13e0774ea4be4cb90af30e3ac1ae8"}, &(0x7f00000001c0)=0xbd) 07:35:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 774.286918] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:34 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) 07:35:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) 07:35:34 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000000)='/dev/usbmon#\x00', 0xd) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x400, 0x0) perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) [ 774.416677] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 774.441070] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 774.451316] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:34 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r0 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000000000000000a70400040000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) setfsgid(r1) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 07:35:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0xc}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0}) 07:35:34 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000680)) 07:35:34 executing program 5: syz_open_dev$vivid(0x0, 0x2, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$alg(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="142cdf", 0x3}, {&(0x7f0000000140)="8bc4770745ee96ea62b105d90ad3103b86e060c0a39e6730e8e6261d3e769c78b99e6df20d18bcd6bc299ac4837b54e494f8e020fc", 0x35}, {&(0x7f0000000180)="92935690832bce41c3008164887dbb8653bab1ff0394ab522dd4260d63433dcde7fb0d4ec03e75e32b91245d65a670a83becad6b4ba5fb88a27c6e62b4e07872f729d08576de70469a726548d80401b2f7ee49a92b214995221e5f63b597efcfe1dad0de74fd564562930541b74ee13cdf6a932c82a85775aee18963a5958a6fbc29dd6677c063b9ee6e69de66f08e4c5c2aa25f00062335902d2c161c844e", 0x9f}, {&(0x7f0000000240)="f9428c340895a316880a91c6bd976ff49d4932783eb1cdc4768afa86d814e7a31fc2bead1aa25a9844262763921dea920edb349f76c0185da52ecaea1d569485f349", 0x42}, {&(0x7f00000002c0)="472c22de398a97560fd2abaac50f06cbe615b2b23f164f23b99838fd37c03f40b2317317f6e2d6efe4d2df83f79a36765957e6e4a37e471ff15d98907fc9a2b4f4235923013a05955ea27464a69ce7efc150e2c04c1a25452d6ab4017522463081e99211e0decd4850557575f601595cd88b3b4abfb05e228e22e5ab014de928d81366fa883955e6285d931fa0b9ca65e9f33c3f3d36e0d52b026faa9ba8d207659e8665ab9e242d931e268410fde26fc9f3c5c714c735cca03d8e7b52e9813fedc264ed692cdd89fb64735e68f3", 0xce}, {&(0x7f00000003c0)="b8a33f9e0f4a8c155b3b750cc83170e0857871efbfeef7dfe46cc248a06cd31d1ff9958ec0a980519f1e0a923caf06b1c191670f447e2ef07100b6329c952ce1e850", 0x42}, {&(0x7f0000000440)="4a7ce0f1147151a88c45a3c34fe63dd19b2c82a8cbaa4dd1b653d8ded020211d109901e8e70c634ae36b011dceed2992143182a263719a52dadd3ad58419c6a0a1367e44c991a31c3960a860bdd5ce65d6fb0157057885f0772bc47ac9b30d0f036cdbe4ac06f922d09b20d80da0d33c6be47549d4e5", 0x76}, {&(0x7f00000004c0)="3c56ac3a735ecb7722cd246ae2dfdf2eae917b1899a5e4a6881017b0daf540a35aaae10ce8198c169724bdeeacfbef6d29093c590da018c8e8c48e8637a6733217620b22c7a2001cad6bd53452d26649d5c1d6bde4f7ecf1866b80ee68f7b51fa71ec20edc1784495db409c2d33a090326c28b89d7fc7f4ff5dd7c427d0b9860e597dfeea88394935ee2336a434366a52bcff7715a86b633e1ebd58e5ea4c9e73d136839d9e0c4a9af1325c78d68faec58ae7022f64785b02d8493f7c24102c1a3845ec2fdb814af6ac50896ace72421220a5db3bda45ef6b00829ef8ea0aae81f765a12fdeb1e88909339543c39c431295d3792c095e4fe", 0xf8}, {&(0x7f00000005c0)="68a3a02f9829f206bdb11f1a5c5c410dd953af5149ed5fafd03cae6361d5c54288117ec7cff0fe743c64b3ca2ad4f3c41925fd3c7025443df3edc7e7d567ec9a32e4ad554b46b5458718bdff3a570aaa3a8884909c0b2bc806ab00f8e7440afef5d50c9dcc33c9fd15fb1ad8c11c89da2a8a10cabc8445a427ba7b3bb2dd7bdb8ed3d11c78cd1987539d9f324cef326bf794668cd84da7fbcc57d5611d8ec25591d236d2c5e7e37237106ad143493d274a9b26d53ac7c38cda28", 0xba}, {&(0x7f0000000680)="899480e8102ed5ce0a78a706b1b7f00601cda29d89fff009726515c6d2423743a0dcc6bec8497c50020b5b52a434eedad7a11c9b41372def8ce2c54150ce864a0b385fe4a20eef1809072e57b4dda67dffd125c6cbee839b9947c1f4e743334bdeffa57f74a58a2e84c2e4c896dc4f99df1a8ed32b2db8277851bc490aca8ac62b2bf83d9e16746734a00df000fccb53b04c98a02b077ef06b1fc3e65a5529e4b0a0df8fe91d7dccf2b8653c6477781ab56875e1d4b53a4c5dafe196", 0xbc}], 0xa, &(0x7f0000000880)=[@assoc={0x18, 0x117, 0x4, 0x100}, @assoc={0x18, 0x117, 0x4, 0x800}, @assoc={0x18, 0x117, 0x4, 0x31}, @iv={0x58, 0x117, 0x2, 0x3f, "46820a7395f4b5671b117eb9a29e0899a43a59cac26f58f10e8964f7a8643980a886bea1562ffc5b57aec92c8f4251467d588ad168f1ade32c70935754221a"}, @assoc={0x18, 0x117, 0x4, 0x7}], 0xb8, 0x400c081}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r7, 0x4c01) 07:35:34 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @empty}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:34 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xd7c, 0x200000) getsockopt$rose(r0, 0x104, 0x6, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000700)="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", 0x1000, 0x800, 0x0, 0x0) [ 774.586726] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 774.624079] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000000)=""/99, 0x63) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:35 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:35 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0/bus\x00', 0x6) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x4042) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10020100}, 0xc, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80020000", @ANYRES16=r1, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x4000004}, 0xabb8e8488f6697da) [ 774.747721] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 774.784690] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/ip_vs_stats_percpu\x00') ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000003c0)={'sit0\x00', 0x1}) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$unlink(0x9, r1, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$P9_RMKNOD(r8, &(0x7f0000000300)={0x14, 0x13, 0x2, {0x2, 0x0, 0x6}}, 0x14) r9 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000002c0)=0x9fc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r11) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)='$\x00', 0xffffffffffffffff}, 0x30) r13 = getpid() sched_setattr(r13, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r14 = getpid() sched_setattr(r14, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r15 = accept4(r6, 0x0, &(0x7f0000000340), 0x800) socketpair$unix(0x1, 0xf, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) kcmp(r13, r14, 0x6, r15, r16) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r9, 0xc1105511, &(0x7f0000000140)={{0x6, 0x3, 0x5, 0x8, '\x00', 0xfffffffb}, 0x0, 0x2, 0x5, r12, 0x7, 0xffff, 'syz1\x00', &(0x7f00000000c0)=['/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '/dev/bus/usb/00#/00#\x00', '$\x00', 'vboxnet1\x00', 'vmnet0[\x00'], 0x67, [], [0x6, 0x8, 0x1, 0x5]}) 07:35:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$TIPC_SRC_DROPPABLE(r6, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@random={'trusted.', 'em0self](posix_acl_access--*\x1dGPL\x00'}) accept4$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000600)=0x10, 0x80800) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0xd, 0x1}, 0xffff81bf, 0xe4, &(0x7f00000000c0)="48c23b04c0c25f7be8d2912e6dc92166574cd67f7f68107d23b22e0cf8908dea945cb4fcf06a6e03ca43916ad19fcbac60e31c18a5e430a3dbd3a84f5bc055fc0725905292f5c26d26c61c64ac4cd051833b6959f5a26caac600ac31d1dbf3be8e1c683eee8cb98c93d6223630dab603281626306255d735f28c616f006c3a1def6c644e9f302b8da7c9693269a607e560340c40b82d9aedab6b83c4cbb56d7b828e4ef513c228eab62ca0c6ea18c0", 0xaf, 0x8001, 0x0, 0x3a, 0x1965, 0x2, &(0x7f0000000180)="91570af6403b48ff31912cd9196a1daf914e9bbc2eb41070b3b8f52c319e98c856fa1c5632f6b2a8229a618eda15c801eee7130497394e877ef9799ba82a90e31bb58333f140c2584d29d731fbddac10ceaeb7c1e23e07b0a888cc3228d6e5fc28869be2dea379b077f02e70782165a93e0883b4887cfd3fc4a24f1f25722b6c19", [{0x0, 0x6, 0x7}, {0x5, 0xa7a, 0x3ff}, {0x6, 0x6c0bceda, 0x7}, {0x5, 0x4, 0x2}, {0xad0b, 0x9, 0x1ff}, {0x100, 0x7fffffff, 0x8000}, {0x1, 0x10000, 0x3}, {0x81, 0x70f, 0xff}, {0x0, 0xff, 0x2}, {0x400, 0x1000}, {0xfffffed5, 0x5, 0x7b97}, {0x7fff, 0x7, 0x1}, {0x5, 0xba5d, 0x2}, {0x92e, 0x1, 0x8}, {0x8, 0x76d4, 0xee8}, {0x1, 0x7, 0x8}, {0x800, 0x4, 0x96}, {0x80, 0x9018, 0x400}, {0xfffffffe, 0xffffffff, 0x7fff}, {0xa, 0x2, 0x4f9765bc}, {0x8, 0x2, 0x7f}, {0x3ff, 0x1, 0x2}, {0x5, 0xfc, 0x7}, {0x7, 0x7f, 0x1000}, {0xfffff5d5, 0x6, 0x5}, {0x80000001, 0x7f, 0x3f}, {0x0, 0x8, 0x1ff}, {0x1, 0x3, 0xe4f}, {0x62, 0x9, 0x2}, {0x3, 0x0, 0xd8000}, {0x40, 0x4, 0xffff}, {0xd29, 0x5, 0x8}, {0x400, 0x4, 0x7fff}, {0x2, 0x2, 0xffffffff}, {0x101, 0x800, 0x1f}, {0x101, 0x9, 0x3}, {0xc7, 0x1, 0x3f}, {0xff, 0x2, 0x4}, {0xe2, 0x1, 0xffff}, {0xfff, 0x80000000, 0x9}, {0x7fffffff, 0x0, 0x8001}, {0x200, 0xffff, 0x46}, {0xfffffffd, 0x6, 0x2}, {0x400, 0x5, 0x4002}, {0x6, 0x7, 0x7}, {0xfffffe00, 0xf792, 0x1}, {0x4, 0x7, 0x7fffffff}, {0x7ff, 0x0, 0x8}, {0x800, 0x7f, 0x10000}, {0x3, 0x2}, {0x2, 0x6, 0x4}, {0xfffffff7, 0x8, 0x7}, {0x1f, 0x800, 0x2}, {0x6, 0xebc, 0x7f}, {0x6, 0x10000, 0x4}, {0xfff, 0x4, 0x401}, {0x3, 0x8, 0xb53}, {0x0, 0x7fff, 0x5}]}) 07:35:35 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x703, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) kcmp(r2, r6, 0x6, r7, r8) [ 774.881565] audit: type=1804 audit(6137105735.224:141): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir145062824/syzkaller.qmgTmn/1546/file0/bus" dev="ramfs" ino=188763 res=1 07:35:35 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x14000, 0x0) ioctl$KDDELIO(r5, 0x4b35, 0xfffffffffffffff9) [ 774.958164] FAULT_INJECTION: forcing a failure. [ 774.958164] name failslab, interval 1, probability 0, space 0, times 0 07:35:35 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20000, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x9, &(0x7f00000000c0)=[{0x0, 0x8, 0xa3, 0x80000001}, {0x6, 0xb2, 0x5, 0x3}, {0x79c, 0x4, 0x3f, 0x7}, {0x98b6, 0x3, 0xe1, 0x1}, {0x0, 0x1f, 0x3, 0x3}, {0x8, 0x81, 0x81, 0x401}, {0x1f, 0x1, 0x81, 0x6}, {0x0, 0x7, 0x7, 0x33}, {0x4ba5, 0x4, 0x20, 0x8}]}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f0000000180)=0x3, 0x4) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000140)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r5}) [ 774.987311] audit: type=1804 audit(6137105735.284:142): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir145062824/syzkaller.qmgTmn/1546/file0/bus" dev="ramfs" ino=188380 res=1 [ 775.035670] CPU: 1 PID: 13228 Comm: syz-executor.3 Not tainted 4.14.153 #0 [ 775.042729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.052086] Call Trace: [ 775.054680] dump_stack+0x138/0x197 07:35:35 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000000)) [ 775.058324] should_fail.cold+0x10f/0x159 [ 775.062489] should_failslab+0xdb/0x130 [ 775.066473] kmem_cache_alloc_trace+0x2e9/0x790 [ 775.071156] ? __might_fault+0x110/0x1d0 [ 775.075226] ? find_held_lock+0x35/0x130 [ 775.079301] proc_do_submiturb+0x1a77/0x3690 [ 775.083724] ? lock_downgrade+0x740/0x740 [ 775.087895] usbdev_do_ioctl+0x65d/0x2a60 [ 775.092055] ? lock_downgrade+0x740/0x740 [ 775.096219] ? proc_submiturb_compat+0x150/0x150 [ 775.100987] ? perf_trace_lock+0x109/0x500 [ 775.105231] ? check_preemption_disabled+0x3c/0x250 [ 775.110255] ? perf_trace_lock+0x109/0x500 [ 775.114520] usbdev_ioctl+0x26/0x30 [ 775.118152] ? usbdev_compat_ioctl+0x30/0x30 [ 775.125252] do_vfs_ioctl+0x7ae/0x1060 [ 775.125266] ? selinux_file_mprotect+0x5d0/0x5d0 [ 775.125277] ? lock_downgrade+0x740/0x740 [ 775.125290] ? ioctl_preallocate+0x1c0/0x1c0 [ 775.125304] ? __fget+0x237/0x370 [ 775.125323] ? security_file_ioctl+0x89/0xb0 [ 775.142491] SyS_ioctl+0x8f/0xc0 [ 775.142502] ? do_vfs_ioctl+0x1060/0x1060 [ 775.142519] do_syscall_64+0x1e8/0x640 [ 775.142528] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 775.142548] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 775.142556] RIP: 0033:0x45a219 [ 775.142565] RSP: 002b:00007f169d464c78 EFLAGS: 00000246 [ 775.150400] ORIG_RAX: 0000000000000010 [ 775.150407] RAX: ffffffffffffffda RBX: 00007f169d464c90 RCX: 000000000045a219 [ 775.150413] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 775.150420] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 07:35:35 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40000, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r5, &(0x7f0000000000), 0x10000000d) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r4, 0xc0406429, &(0x7f0000000380)={r6, 0x7, &(0x7f0000000240)=[0x55c, 0x10, 0xc195, 0xffff, 0x2, 0x5, 0x5], &(0x7f00000002c0)=[0x800, 0x8], 0x20, 0x0, 0x9, &(0x7f0000000300), &(0x7f0000000340)=[0x8]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000000)={r6, 0x1}) accept4$netrom(r5, &(0x7f00000000c0)={{}, [@remote, @default, @netrom, @rose, @netrom, @remote, @default, @null]}, &(0x7f0000000040)=0x48, 0x800) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r7, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f00000022c0)={0x14, r8, 0x1}, 0x14}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000003c0)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000300)=0xe8) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r14}) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f00000005c0)={'team0\x00', r14}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r16}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r17}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) sendmsg$TEAM_CMD_NOOP(r5, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x76a5b58e09b6d86f}, 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x298, r8, 0x400, 0x70bd22, 0x25dfdbfe, {}, [{{0x7, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8a7}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0x1b4, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x74, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}]}, 0x298}, 0x1, 0x0, 0x0, 0x90}, 0x80) 07:35:35 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='v/bus/usb/00#/00#\x00', 0x908, 0xe40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400202) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:35 executing program 3 (fault-call:4 fault-nth:1): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 775.150425] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f169d4656d4 [ 775.150431] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:35 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x928, 0xcc001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000400000000000000000600000000000000ecffffbb940000000000000400"/44], 0x2c) dup2(r0, r3) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0xca1db5423869c0a9, 0x0) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0xa048000}, 0x40084) 07:35:35 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000000)='./file0/bus\x00', &(0x7f00000000c0)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x200, 0x0) sendmsg$kcm(r0, &(0x7f0000001a00)={&(0x7f0000000140)=@x25={0x9, @remote={[], 0x3}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000200)="9abf5b8e3d934cd1a92587d9", 0xc}, {&(0x7f0000000240)="cf25091e9d90a599c0807ec1e9623ab23bc2988a5f3288cf82a6e1eba8", 0x1d}, {&(0x7f0000000280)="28f60ddb02e00924d660b198e4086249f7d20c900790beb2dac91dc75be32ac7ef63c710a5a675b528843336b58c086ac52b494cb4b8b8ede0f364ab05e7776e6c5c8bd2619cd9d65cd11689631e2c23ed5e890f04281aeadbe3abbcc3056d3cf9a6a16c5382f5ff0b4271d84c851658bc809c5400df36c230647bebc2d926d85796a3", 0x83}, {&(0x7f0000000380)="c4088f1e62b335d56bf70d4dc2873beca927e4e42ac4e8aa19a71104967d27f27f22195006207f488c264ff3c0cb0c67ed9f8dfc009033499a8dd19492f4197aea2957348e6eab84d11a706fee51709f6cf37996c777f098d46c25479fd5ac1d50f7bdb706c3dcd3b81b88d34527777a838df86f9cfd6486c34e0aabf998e583baeab63202fb1ec6a1734dd8f2255477973da56a289f1933784bd66bbe33c3c7b4112c40614771fe1ed73cc3b96dcbac1655c828273c714afb70f5124c58e28c3d8b00469fe5ecfd4bb537840fb6c7792a5e6702ba48f9dbd5165783dc8a1c5612c4190b36fa604cce66c105d6e6", 0xee}, {&(0x7f0000000480)="d3d52107811b3f1831db91efc0c0355da2f89e1b3590911dfa1915198e0af506ee9f659a242b85864a337e3ded14906bce97d10229e85a1500055eae", 0x3c}, {&(0x7f00000004c0)="c3ef72576cb65d25ecc82ab4055f5780448f22a3f6e84861cba6bd4c4e641aa21b636846bb730b995e25485f388bb614cf77eba6bc6d4136a2d467744e919e9c2c0c9a995deee064cc1e41129029ea54046a58c255e036bec26766ac", 0x5c}, {&(0x7f0000000540)="d8acd869da95aff27d17b1f2e24454c0567c3983c6a9e64787d885e596c64d70571486bb52c73a47b51ceefc45e257fe7145d6d546ea109eacfd36328e9dab8b6b5bc032e132479a5d8173ab445f1296d19e01be199b9f505c25cce96313e41bdb08ec8d37d291dd8b14bdca89167b8d315e64570957bd0d23aade5d25dea47978223d955c49201d07ff8957a5e87a2ae3cb62bfb6eefe4357a874a8bc8e42152f7a46b1428dc62f56960fa6a6cb02cd445cce32e430b83c737da948c609053f8d4275f39d8e", 0xc6}, {&(0x7f0000000640)="39233c618f0252deabaa81cbfaf04876906c730ae773775f3bb35b166aa4175bdeb4d9fdf275831dbf465da1b9dd366c8b1c1201dd9d91d8f4916758528829d04c93fbf9a02a1db101030df8484033c3988721e134b5f32c4af5d04b3e9a7e1bf3fecd856b726ac14ed23dc216a4", 0x6e}, {&(0x7f00000006c0)="a5c1416c5ad281fe3e4571434e9762fb07e22c26832e465511f334dd500d3bd1ce4b9e6ab38a2e0f436be7b8b5d2c9a7fb37a896d7abd0ec352def7f4390fc62508084f7e228a386268d7f45c9070893a0f1a97ec030b70423833442361e68bd370d675bb0f3554233647afee7d9186efff78547aa9827f39452e73ced13fdbc58147c8c87ab0a1731f039654bf855a5593a3787ca3a9c2f3a130fd31e4ae069533955f099f758cd4b0f1cf02575cfc1c3ebb0f7fb03e22dd3845e4053ff2c5be312874940d1470d329ec95716022234b5", 0xd1}], 0x9, &(0x7f0000000880)=ANY=[@ANYBLOB="20000000000000000f010000860e0000df4a5dbacc38156a4ac800000000000000010000000000000401000009000000cac3a3369b8cb880d121f05a721b16090f97cde96b9ab0f609da1e12b7526b57afd6eb56009a517a0d59c962b3f2cfed5bdb1fbfec88e3cfce24edc4b190f32b0a0668930915cdff3cab4e8d91fef5072fbf56a787f52ac6f9aceb5f9663dbf5536d7a5b6d778fe475043fc52e8e55092c8c773605b67bdd94a0dc697c6d79f2829156014c00194f44ffe557630b696385a01481cc24791a7927bb87e12af81ab9096f6e3a48f7736ea233027e18db01435cd9c4975d30f1264969c0f921d01b7dc3ba8d01fd1b337d1e446a8079f20c2a7e29df1512256fa9953b0189de8917842d163f16ce82938a800000000000001010000000000000030200000000000044b9b4ca6bfe5debcfcde54a0576ff4d0631cfdbafd5c95864909a27cede2a8b2478e66294f6301495f0fd30a36852af53237b4a59edc55b541cec9e5dde2cb734c9179366ac0ea5e646e65854fc38de48af4b1b2fa91b12fd7160c87e91936a9e9938c6ca51aca103bdad7652abc0cdb0c62746700c21f255118450819d6b6be2068918656f2808e621042191d4c1e805b5ec18ecfb1dfffae3153372d641704b680a17dc783b0bd80c20bd4030fced8012fe7b014224acfdd90cb848805df8da934f59e481772855d1c370bff61f07ffe5f44bec1e3befc7238b341e137cc75200386c66ed507e166635219b5f06797c197ae82fd906b404a4563df19b5e6b87e161e3727752095c09430766c3f2b3256a2e848b2ee90de2cad1c878d8fb5e8d5a31fc3693e851a1a462e134007cf3e23b7a08974ac74876c90ed398b99db0f0ed0e71c163cd0fb80fe925b4c828f52388a4a97c46946812d010aafc8b98c496c8816d0b8a1c37290781f79667fc2e1a94a212e4dc09ff0c5b6c8462a9ac5b1e2bd38010d2c013c1426d5f6f4189f34fb2d5ae062920b8fb112b0a8924ded6b505f19867798c1bf50112d5891a5e369a1261b6023b0e9fe7ce608e389c9d737d648703bac771b301070698307e851374b727ef364dfde5a2475454c6c04320214f2af431448147592aa92b489fdfa0416c796027edcf7b77301f3f90099a4f70f0881d1c31581f9005e7b316b633bb9b7808ab4d337174d9778607c2f3c5f0ce59e84dc8f6ae6200eff550f258ee0e83fd03c738381cc6dbb92990f774174b7576c5fad414c6a164178c6f1ef46d60c7f4f7328a75cf3c5b68a961084bfd6daed8530fa8da326335f71b1620fbd89ff666a33042d5e280c7c32e4fd5c1f321a600f7370914f19eef098b0fecb558ff7f9a762c6dd52e142faee1cb3e9cf9bebd66453b5a14cf06ffe26a8006c103268601202141838c8a8d55ca90671c84fcd0d2d82c08afdc115c9445b33af8694e39a4abf80fdbb9c6c5855788369bea681afed08d5e5e56e306a669e52987a949d50e6816ef4e447b2a6f5d1b028a0f2b094b8456d863f9a88897ee606f8cf61a616f6b895f41de55f99cbe2f3474ae0d4fead2ec2cc55cc6469de746fee2fbc5d5c3a5d46b04e576868b2313636e20410ebc6a6ab489b7332c10dac4f0feee9465f05ef4d4dbc8ca45bb547d0a7d5ff54128d86aa9dc7e2b459f6f1025faff23d7dd5cde3e91e7142e06c094ef1c5a66f92763dac32a2684252aa4635052b4d55d20098e81d05c6768fddc24c9896649ed8d0b37903ae5e62419d4959367911c476110c282ef7de2d70f8c660b9f8699ee076e2bab5dbab5910e4c61f8644a9e9173e5bc0811aee96dc918a85ce65488790d24bccbcfef7b0832e5c7c9c08f391aefacd6b67f1751f531b0f20a085e5e4ec7a6cf8f7c6a397d3c44e73660c1aa3e6b018691e703e076e82627fd0d00747fe9722651d1f4df5dff34eeaeb98723c476da083a29aafe0e9af2ad0741021c1400b8d618ed4b3fa02fb76cb2430e61ae881c925884042f644c506bce8a4e5e84ed0d7a262cfa59d02d6f6b333d39fb6d49d3269e1a5058a2cca73204eaeace7dbf2a25d4edf4e8042356b2ecdd2ade64fdee9b13e0f1013d4fbb9cd8689e2a4b221bdea24771c17ef46cfb1937e92d3de4bf95ad5f77414ecd7adce191d440f49a71b89cb453b2d9f326ad61e43e7c009238b1008ede8278c05e2222eb85f09f88aaeed1faaf9ef2f8d9055db5e5d322ef3a9292fae31f2aeafe2363c27e4ca05f2b07eb868616345fb2b7b40e2ee4606ee8e8521c06f78e48cdab03ba5c917d16970a366df95f75bb9c601f665b39182be181020b97b965b5876a8a9822a22295043866900db1a477801b35b08ad72a7c16a7245c6875aefe4bb9f6c26e18ac32def5f6512c8dc652adbff8c5a5afcef0776dbc0482f4f58e5ca3dfe24b88e64036ffebfae187f58a12a515ffafc09222949629ba637a742837ba200c1e389ace67a325cb131e121813ab9bc6fd031baa17efb96b12b77dd3717778782c2b56164e69722c8bbce0bedda0d7e0b5ac1e5179af4a84c981b8998715c9bc4a37a4636cfcdc271304ac1d23af75d7c1e211a8162cbf2e62179ccf1da28fc4fed3602e27cacd77e00838fe7f918af5dfc5aeb121adf668685d26c0c6bd563aa71debce9a94450dd19805dbaac60f4e59ee0562d3a01be45766288e63f84773efd5473de8ad51f1869fec4a7c512a19d23c91ce6bbbb77ee203e3556a8b23930ed89fd14ca6238e96e6b2f3e5811ab76cad83aeb86fdcf932a276ed79aaccf83925984016c83eb0e4e0f32a7c0b5d670610ffc048702996f8ef31e73719e6171cc4c04af8ac8374fa04a92c94eafd2f6dccc0b661bf2729fa786b6284e135e92581f028253e1cb4c4e2e4ec3ea5b5b1749a75293ced84c3842e8888f1e18ac2ae326c49764e9c3e6ccda50f4c74f3f49aae3492ff7fdccd28515368bafc1713020d052c87b97430f0e00b08ca36da78f23cb720c3d52a44b82fd5b3db60225e36d3601f6abd61491b42514c6d28a194b7a7af24809b23248f4a5863fecdb1953ff876af51a59acb83495f0293c1ad2d4712c581cf7aa73510b18aea6de013a966729bbcd657413e941663950c1e9952786e4787b99fc22985242f809fe93c7749e9c41bb8eeddd659a75d124d9911283251517ac218d4d56a49957b9506a37f0928a503f8af0137489c66b1036dc971ef4740d7f11d09eceaa902f5e58bac6c471aff9fac571154b6c0ca18227ca7db98f3726896e1439ea8ba7041901d8800395adaab2928e7655a7ab89b2d06e13a83415400df9f0800b8e1f6dcc96c81122d347d9b36244af0eb3a6a671355c214161db81d1b402586e86db47d8043af07a4485206893601b50199eeb353b341d80b5524d9cfb4412bcbd4dcd96137e4eccc5b0b1b205cc236293c677c1273a4737851a18ddc10d4fce21f197ca52285ac00a740ed4b9cf2883d48af097cf8d6f26f1524bd6acdbfa99bbbd729536359406f643de11cffac93c18b00d946ae3895654e4c97bbd4d3343c8235c10a940d01fd798e3927130a5a75569411ccc02076bb9af711beb02de43a2bf2d03c2701d84a8e188c7d14ab9fd39d9de77600431919cbc8b80e895143f62cae44c3ee75e00031338830d492277f9ce5ed4dee848e10381b231c53bedf548b61f0b4141dfdfe438b4dad63140304620d8bc6c69befdfeeebde5b5e4d4468579dee49493fe7960746dd5b37f5e969cd5af22335f423a119728ef30df985e48a21df94de75ef0a779e9a276bf2aef970e3284d552b7e9b00ee0a9bfd29eb887da422782a86a7807e7d28465041c5ddee28e4b37f9b77e8b8c704c275e1abb812fb8b6a9e560cc6cf358e7bcc16dbeced084451f5f810e81f88be7d3f233cde1aeffea7f744788edbfe9e3d569f567e9b84c982b8c15413c3fb5eb4cf481a0cff4102f2e06a86e95757cd68ffeec2fa9ec1ffeed57979479216d12b3f3e31c4021d3cd1b3778c03dde681a7ec5faaea543efbded517a83252abf5a104aafc7114177bf4f16d8db7b63c14d31e8a077cba3c645d7e850d453f1b7c6ab64fffad0657f2167332e209de8d97366cb204053370bf6af024d7da086fdcbf9ed69ea4da0feb0fab362e7e7cc59cb7db7253009c254fe67619f8305f777e3a306cab8fef4cad94cf6758b3199c252ee6ed1526f2e4b8773a3e9dc4389b99696bd72a32926ca82762863fc03abe513ac32be245a6c54f3eab776261eaa80442bdf7e2afc8c66a7b35e1c56cf33ba81a3f764d78469602714b6bbcc93068daae12538276971829eb0864c1fc54b046fba7578563bb09bdfac8d2d99c0d14c19a28a98a7ed1c714634816e9dd857332d0d8d300bdc4dc63eb0949dcdb4f75a2557a209b2c1f164990ebd61522c18bd309ab5f20530626e43b14672928aec7fac50002c5326f8b798b5e56d09c5dcc98911656229c4aeecef25a8d4caed2969b2187afa931b47833aee0d125090e91a0b151c6553a8ac75cd99439476699a0e2ef75bac6df618cda630474183cbcac24e14e33700e9c7a13742fbe46469ff7f8837c2b566dc3e02d01b621d5a40b16f7d15e5541f78d848fde1b86285932c9b25e34490f6c67865a2eb49b81d90085cf70356bf05292f014bfa6b47dc55bfed6a5442afeca1d680e2cf8f3ec3a4659af2bf0d731709e7bcba987804c79c45972bcdc5210985f47735c51d499a9d19b8f8db1039578861619095b59fe086643f071f414b11aacc2835b2f81d8b7d9eeb2f9f5d19e37b1e898015140ead81d1f40a351c66b20940818c4a59b5080807b2ffab3c3fd63f46e7a4e05d79d62b22ff8d7d0481a25ba86c0816ae6902995533d8780329afe70af5608c5880377b50433a55b4e386a5205bc4d4622f0fda3ad73007a7d37811cc6ea58e811b957573917db314de077658f9187a712c824d3362e643681318add824b1e258efcdd13e7d596a7fcfa1b0678943a144905a51fcf808dd08849ac92b66cd047accce0507ebfffdce1fbdf9f3f85e326fe689662802cbd935a50f0aed5df486b95b825d6dfc21b021a0ac3dc46a22e2fc7408738159336e8bf97b65eae861fd3b3368351d5de4c8593b25e3ff0914feb20c5f2430f5d30e8428df7b0ae34cfc7ec4a0820b49dc44c77473650dad4a065133c3e88631ae7fbd729272a5202e0977f375e95411558a43e42cf2b08d1c264eeb522d6e500d0abd105de011e71c9cb46c2e09e37a9b8a81c5eba14b94042dfdaaac403880ddf047ca13e903640d0b5704a9fc49d7274023fb0a60c955248aeb9ad1724efcb2d3154ea2a653482eb14f3c09aba6f58b514dfb2e50210302bef4b980a6fb498275dfd3784e3635228745bb09f4501bef6489767ab396c1970445fe9888d75600e334cef985ab3b4b4a26c45078e5b04a9e8eac714d1dcd6966a4039c33bcdb12170431297476c25beb458217351eb73c880f82cff3db8dc3abb548c3609214514b875e6454f53b0380469e621f11ab5a15ae60caa5fbfdb2cc2b3269161d0e08d9c7ee8010000005b20b28d0097fb20f73a0b6f886f9eae54b5302809fa25cfc65b3ab7c9e544122c1b63f71c65c656f5e45cecb2a1857aa04ba3fe9cce51309f89475410a2acbb9282c9b3c8e4432b5ea5709d3647a9fbe66c05f1cb1af498263800a3a41486e357204b1b60471cc79b754c79a4b126b6ecd2a41c55eef8f7d8e7afdd22955919f6b4f3c24d0ea259f47595688a899fb1984b6559534cb80239738018837123c40282feb740c1a451925b14c35528eb3a5bc76a90183ebcc03a2a1a74a4961cfafc25661e4daa1163581e6a5f1910dca73907b9fd4042d2794450caa4beb5a98924e68735ddb5c92021f6b4558585d437d6376cff49a21ed748fbabd7bb803f0747c27ad8fc7124ebe2a8a641c42d544ab423613ac6162b3108b6d2c2cd37f5bd8207ecb47aded972545a0d98f6ba7794fe4de1563b2bc3f73f3771549d61d655418c96ab1f506b167d16d17da4ea774d21a5bf083b2cff2b2736cf98c78849899265a464870c304c3c657acfceace6484846d66ef14547ed726d7b2b7bc323ef81339485bb8d98b09ff44669f1dcd59bf9d15fb8c6d61b815e7117d4f9c1c970660996041df1bf2c057924262419c46b72bb2f15db308dd283e6463f2989aad64f4e88044b889672d419dd0077b5c748ea47be718e011800000000000000ff000000090000001c95b85942000000"], 0x1148}, 0x10) [ 775.379608] FAULT_INJECTION: forcing a failure. [ 775.379608] name failslab, interval 1, probability 0, space 0, times 0 [ 775.417642] CPU: 1 PID: 13263 Comm: syz-executor.3 Not tainted 4.14.153 #0 [ 775.424718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.424724] Call Trace: [ 775.424741] dump_stack+0x138/0x197 [ 775.440299] should_fail.cold+0x10f/0x159 [ 775.444445] should_failslab+0xdb/0x130 [ 775.444459] kmem_cache_alloc_trace+0x2e9/0x790 [ 775.444474] ? check_ctrlrecip+0x91/0x290 [ 775.453084] proc_do_submiturb+0x3a2/0x3690 [ 775.453120] usbdev_do_ioctl+0x65d/0x2a60 [ 775.461549] ? lock_downgrade+0x740/0x740 [ 775.461565] ? proc_submiturb_compat+0x150/0x150 [ 775.461574] ? perf_trace_lock+0x109/0x500 07:35:35 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x5) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x8c01, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000300)={0x4, [0x8000, 0x1, 0x3, 0xffff]}, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x67) recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000000)=@caif=@rfm, 0x80, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000200)=""/254, 0xfe}, {&(0x7f0000000380)=""/212, 0xd4}], 0x3, &(0x7f0000000480)=""/243, 0xf3}, 0x2100) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 775.461590] ? check_preemption_disabled+0x3c/0x250 [ 775.469854] ? perf_trace_lock+0x109/0x500 [ 775.469883] usbdev_ioctl+0x26/0x30 [ 775.478829] ? usbdev_compat_ioctl+0x30/0x30 [ 775.478840] do_vfs_ioctl+0x7ae/0x1060 [ 775.478856] ? selinux_file_mprotect+0x5d0/0x5d0 [ 775.488064] ? lock_downgrade+0x740/0x740 [ 775.488077] ? ioctl_preallocate+0x1c0/0x1c0 [ 775.488091] ? __fget+0x237/0x370 [ 775.488111] ? security_file_ioctl+0x89/0xb0 [ 775.488126] SyS_ioctl+0x8f/0xc0 [ 775.496122] ? do_vfs_ioctl+0x1060/0x1060 [ 775.496140] do_syscall_64+0x1e8/0x640 [ 775.504747] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 775.504766] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 775.513281] RIP: 0033:0x45a219 [ 775.513288] RSP: 002b:00007f169d443c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.521118] RAX: ffffffffffffffda RBX: 00007f169d443c90 RCX: 000000000045a219 [ 775.521125] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 775.521131] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 775.521138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f169d4446d4 [ 775.521144] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:36 executing program 3 (fault-call:4 fault-nth:2): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @local}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000500)=0x321) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000340)) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="840000001900fb712cbd7000fcdbdf251d0101000500000004fcffffffffffffff0004000100004000010000c37aaf0e14633d7404dfffff17000200040000a000020000cf13e42cdbd7cb3b0400000008000a00", @ANYRES32=r5, @ANYBLOB="0c000b00030000000400008008000500f8f703051800010000000040030100008d1f436ae0c605e108000000"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) vmsplice(r6, &(0x7f00000004c0)=[{&(0x7f00000003c0)="15daa42cdd79487df59ca2b1fb12ce6abbaba38c61c56c5853820de08e1bca6fda3c9155b2753834a15b086d0e589063b787989ad4493f532f73f3d09f60bc2f9b9efc8ade0b224e843544d7916428e7914ddd0a1f7f938b", 0x58}, {&(0x7f0000000440)="0f0947b2fcfd46a1d9bfb7cc0e91ec35ced246d3e58e29e0a48f553108a2749f32054ecf26f2a756624277e72e17da868d6464f8d4059e929463b726a23a82039ddc717097b7ec92e1257463f113ce41d3b295d3d508c478bedc08aaeac55faf3c893e3427681ff2e713d9a19616b5343f0a12195401d2dceeedb0", 0x7b}], 0x2, 0x8) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:36 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept4$unix(r1, 0x0, &(0x7f0000000000), 0x0) [ 775.744108] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:36 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x40c40, 0x9) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:36 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r11, 0xffffffff}, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r13, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f0000000080)={r11, 0x7c2, 0x3f, 0x101, 0x1ec, 0x3f, 0x8, 0x7, {r13, @in={{0x2, 0x4e20, @rand_addr=0x6}}, 0x80, 0xfffffff7, 0x8, 0x264, 0x800}}, &(0x7f0000000140)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r14, 0x1}, 0x8) [ 775.792505] FAULT_INJECTION: forcing a failure. [ 775.792505] name failslab, interval 1, probability 0, space 0, times 0 [ 775.853465] CPU: 1 PID: 13286 Comm: syz-executor.3 Not tainted 4.14.153 #0 [ 775.860521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 775.869877] Call Trace: [ 775.872473] dump_stack+0x138/0x197 [ 775.876128] should_fail.cold+0x10f/0x159 [ 775.880286] should_failslab+0xdb/0x130 [ 775.884267] __kmalloc+0x2f0/0x7a0 [ 775.887822] ? rcu_read_lock_sched_held+0x110/0x130 [ 775.892829] ? kmem_cache_alloc_trace+0x623/0x790 [ 775.897664] ? usb_alloc_urb+0x24/0x50 [ 775.901556] usb_alloc_urb+0x24/0x50 [ 775.905280] proc_do_submiturb+0x3c0/0x3690 [ 775.905527] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 775.909624] usbdev_do_ioctl+0x65d/0x2a60 [ 775.922425] ? lock_downgrade+0x740/0x740 [ 775.926582] ? proc_submiturb_compat+0x150/0x150 [ 775.931338] ? perf_trace_lock+0x109/0x500 [ 775.935578] ? check_preemption_disabled+0x3c/0x250 [ 775.940598] ? perf_trace_lock+0x109/0x500 [ 775.940627] usbdev_ioctl+0x26/0x30 [ 775.948459] ? usbdev_compat_ioctl+0x30/0x30 07:35:36 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/255, 0xff) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0/bus/file0\x00', &(0x7f0000000100)='overlay\x00', 0x88000, &(0x7f0000000380)=ANY=[@ANYBLOB="6e66735f6578706f72743d6f66660800000000000000662c6d657461636f70793d6f6e2c696e6465783d6f66662c6c6f7765726469723d2e2f66696c65302f6275732c696e6465783d6f6e2c78696e6f3d6f66662c6e66735f6578706f72743d6f66662c7063723d30303030303030b83030303030303030303030382c7375626a5f757365723d72616d6673002c00"]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) 07:35:36 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x6) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) [ 775.952861] do_vfs_ioctl+0x7ae/0x1060 [ 775.952874] ? selinux_file_mprotect+0x5d0/0x5d0 [ 775.952884] ? lock_downgrade+0x740/0x740 [ 775.952896] ? ioctl_preallocate+0x1c0/0x1c0 [ 775.961521] ? __fget+0x237/0x370 [ 775.961542] ? security_file_ioctl+0x89/0xb0 [ 775.961557] SyS_ioctl+0x8f/0xc0 [ 775.970096] ? do_vfs_ioctl+0x1060/0x1060 [ 775.970110] do_syscall_64+0x1e8/0x640 [ 775.970119] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 775.970138] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 775.977954] RIP: 0033:0x45a219 07:35:36 executing program 3 (fault-call:4 fault-nth:3): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 775.977960] RSP: 002b:00007f169d464c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.977970] RAX: ffffffffffffffda RBX: 00007f169d464c90 RCX: 000000000045a219 [ 775.977976] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 775.977982] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 775.977990] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f169d4656d4 [ 775.985469] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:36 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) [ 776.050065] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 776.064633] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x406, r1) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0xfdc2bd9501482004, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) keyctl$get_security(0x11, 0x0, &(0x7f0000000100)=""/18, 0x12) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000140)={0x3, 0xd5bc, 0x3, 0x1, 0x6, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x86f2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) setfsuid(r7) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r10, 0x4) 07:35:36 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000040)={0x4, 0x40}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r1 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[]) [ 776.152568] FAULT_INJECTION: forcing a failure. [ 776.152568] name failslab, interval 1, probability 0, space 0, times 0 [ 776.186617] CPU: 1 PID: 13316 Comm: syz-executor.3 Not tainted 4.14.153 #0 07:35:36 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)=ANY=[@ANYBLOB="00000002000000000000000000000000550000000000000004febaee6a5dd148ab", @ANYRES32=r0]) [ 776.193694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.203235] Call Trace: [ 776.205832] dump_stack+0x138/0x197 [ 776.209477] should_fail.cold+0x10f/0x159 [ 776.213638] should_failslab+0xdb/0x130 [ 776.217627] __kmalloc+0x2f0/0x7a0 [ 776.221178] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 776.226293] ? trace_hardirqs_on_caller+0x400/0x590 [ 776.231309] ? proc_do_submiturb+0x2830/0x3690 [ 776.235881] proc_do_submiturb+0x2830/0x3690 [ 776.240284] usbdev_do_ioctl+0x65d/0x2a60 [ 776.244416] ? lock_downgrade+0x740/0x740 [ 776.248551] ? proc_submiturb_compat+0x150/0x150 [ 776.253300] ? perf_trace_lock+0x109/0x500 [ 776.257521] ? check_preemption_disabled+0x3c/0x250 [ 776.262526] ? perf_trace_lock+0x109/0x500 [ 776.266754] usbdev_ioctl+0x26/0x30 [ 776.270366] ? usbdev_compat_ioctl+0x30/0x30 [ 776.274801] do_vfs_ioctl+0x7ae/0x1060 [ 776.278671] ? selinux_file_mprotect+0x5d0/0x5d0 [ 776.283410] ? lock_downgrade+0x740/0x740 [ 776.287540] ? ioctl_preallocate+0x1c0/0x1c0 [ 776.292071] ? __fget+0x237/0x370 [ 776.295560] ? security_file_ioctl+0x89/0xb0 [ 776.299965] SyS_ioctl+0x8f/0xc0 [ 776.303314] ? do_vfs_ioctl+0x1060/0x1060 [ 776.307497] do_syscall_64+0x1e8/0x640 [ 776.311370] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 776.316199] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 776.321430] RIP: 0033:0x45a219 [ 776.324608] RSP: 002b:00007f169d443c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.332297] RAX: ffffffffffffffda RBX: 00007f169d443c90 RCX: 000000000045a219 [ 776.339549] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 07:35:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) dup2(r1, r2) [ 776.346800] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 776.354487] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f169d4446d4 [ 776.361784] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 07:35:36 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000680)) 07:35:36 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x3, 0x42401) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:36 executing program 3 (fault-call:4 fault-nth:4): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 776.558919] FAULT_INJECTION: forcing a failure. [ 776.558919] name failslab, interval 1, probability 0, space 0, times 0 [ 776.586570] CPU: 1 PID: 13342 Comm: syz-executor.3 Not tainted 4.14.153 #0 [ 776.593726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 776.593731] Call Trace: [ 776.593751] dump_stack+0x138/0x197 [ 776.593772] should_fail.cold+0x10f/0x159 [ 776.593791] should_failslab+0xdb/0x130 [ 776.593805] __kmalloc+0x2f0/0x7a0 [ 776.593817] ? _raw_spin_unlock_irq+0x28/0x90 [ 776.593832] ? trace_hardirqs_on_caller+0x400/0x590 [ 776.593852] ? usb_hcd_submit_urb+0x5ff/0x1e00 [ 776.593869] usb_hcd_submit_urb+0x5ff/0x1e00 [ 776.593881] ? perf_trace_lock+0x170/0x500 [ 776.605831] ? usb_create_hcd+0x40/0x40 [ 776.605851] ? SOFTIRQ_verbose+0x10/0x10 [ 776.605865] ? proc_do_submiturb+0x1662/0x3690 [ 776.605876] ? find_held_lock+0x35/0x130 [ 776.613630] ? proc_do_submiturb+0x1662/0x3690 [ 776.613655] usb_submit_urb+0x5c5/0x1100 [ 776.613675] proc_do_submiturb+0x16d6/0x3690 [ 776.621181] usbdev_do_ioctl+0x65d/0x2a60 [ 776.621193] ? lock_downgrade+0x740/0x740 [ 776.621207] ? proc_submiturb_compat+0x150/0x150 [ 776.621215] ? perf_trace_lock+0x109/0x500 [ 776.621229] ? check_preemption_disabled+0x3c/0x250 [ 776.630703] ? perf_trace_lock+0x109/0x500 [ 776.630735] usbdev_ioctl+0x26/0x30 [ 776.630746] ? usbdev_compat_ioctl+0x30/0x30 [ 776.630756] do_vfs_ioctl+0x7ae/0x1060 [ 776.630768] ? selinux_file_mprotect+0x5d0/0x5d0 [ 776.639718] ? lock_downgrade+0x740/0x740 [ 776.639731] ? ioctl_preallocate+0x1c0/0x1c0 [ 776.639746] ? __fget+0x237/0x370 [ 776.639768] ? security_file_ioctl+0x89/0xb0 [ 776.647952] SyS_ioctl+0x8f/0xc0 [ 776.647963] ? do_vfs_ioctl+0x1060/0x1060 [ 776.647978] do_syscall_64+0x1e8/0x640 [ 776.647987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 776.648007] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 776.656599] RIP: 0033:0x45a219 07:35:37 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000280)="d7", 0x1}], 0x1, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000000000000000000105500000000000000", @ANYRES32=r0]) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x0, 0x3}) 07:35:37 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000100)={0xb0, 0x0, 0x4, [{{0x0, 0x1, 0x2, 0x4, 0xfff, 0xffffffff, {0x1, 0x100000001, 0x9, 0x9, 0xd43, 0x5, 0x38000, 0x11c5, 0x6, 0x8, 0x0, r1, 0x0, 0x9, 0x5}}, {0x4, 0x1ff, 0x6, 0x0, 'ramfs\x00'}}]}, 0xb0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:37 executing program 3 (fault-call:4 fault-nth:5): r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0xffffff3a, 0x4}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000640)={r2, 0x9, 0x4, 0x2}, &(0x7f0000000680)=0x10) r3 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x1, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @local}, &(0x7f00000006c0)=0xfffffffffffffd89) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ftruncate(r10, 0x6) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000480)={0x4, 0x2, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DESTS(r9, 0x0, 0x484, &(0x7f00000000c0)=""/166, &(0x7f0000000180)=0xa6) r11 = fcntl$dupfd(r8, 0x0, r7) socket$inet6(0xa, 0x3, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$P9_ROPEN(r11, &(0x7f0000000080)={0x18, 0x71, 0x2, {{0x8e, 0x0, 0x1}, 0x6}}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) fsetxattr$security_smack_entry(r7, &(0x7f0000000200)='security.SMACK64MMAP\x00', &(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x15, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = fcntl$dupfd(r16, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r17, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0x3e) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 776.656606] RSP: 002b:00007f169d464c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.656619] RAX: ffffffffffffffda RBX: 00007f169d464c90 RCX: 000000000045a219 [ 776.656626] RDX: 0000000020000040 RSI: 000000008038550a RDI: 0000000000000003 [ 776.656633] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 776.656639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f169d4656d4 [ 776.656646] R13: 00000000004c55ea R14: 00000000004da648 R15: 0000000000000007 [ 776.733770] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000000)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/bus\x00', &(0x7f00000000c0)='qnx4\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x558, 0x140, 0x0, 0x0, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000100), {[{{@uncond, 0xf0, 0x218}, @mangle={0x0, 'mangle\x00', 0x0, {@empty, @mac=@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x4, 0xffffff00, 0xff000000, @empty, {[0xff, 0x101, 0x0, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0x7f, 0xff, 0x7f, 0x101]}, 0x5, 0x4, 0x1f, 0xe1b, 0x2, 0xff, 'bond0\x00', 'bcsh0\x00', {0x101}, {}, 0x0, 0x1}, 0xfffffffffffffe75, 0x118}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={[], 0xe}, @empty, @multicast2, @multicast1, 0x1}}}], {{[], 0xc0, 0x27}, {0x28}}}}, 0xfffffffffffffe33) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000080)) 07:35:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 776.874659] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x41bf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x28004, 0xfffffffffffffffd, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000d8f000/0x2000)=nil, 0x2000, 0x1000001, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e20, 0x0, 'lc\x00', 0x42, 0x1b, 0x36}, 0x2c) r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x2, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r5}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r5, 0x0, 0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xa0) r6 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x10000) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000080)={0x2, 0x3}) 07:35:37 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="0000001b00e4ffffff0000000000000055000000fbff0000", @ANYRES32=r0]) 07:35:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f00000000c0)=0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={r5, r9, r10}, 0xc) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x40000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r11, 0x79177000) [ 776.922698] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 776.938492] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x50}}, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x0) ioctl$int_out(r4, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x200, @tick=0x4, 0x5c, {0xff, 0xfe}, 0xff, 0x2, 0x74}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) sched_setparam(r6, &(0x7f0000000140)=0x8) 07:35:37 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x48000, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0xf) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x6, 0xb, 0x2, "7066c650c2710708fcf8b1527790a434d268bb933c2e09f3e07daf4da5e854bd", 0x20323159}) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @reserved}, 0x10, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:37 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x9}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x4, 0x400, 0x9, 0x80}, &(0x7f00000002c0)=0x98) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x12000, 0x0) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) [ 777.058814] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 777.084473] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'. 07:35:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0x48) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x3, 0x8, 0x3, 0x0, 0x0, [{r2, 0x0, 0x2}, {r3, 0x0, 0x8}, {r4, 0x0, 0x7f}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 777.153739] QAT: Invalid ioctl [ 777.158660] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 777.193382] QAT: Invalid ioctl 07:35:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x2838080, &(0x7f0000000100)={[{@metacopy_on='metacopy=on'}, {@metacopy_on='metacopy=on'}], [{@smackfshat={'smackfshat', 0x3d, '/dev/bus/usb/00#/00#\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/bus/usb/00#/00#\x00'}}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 777.222531] QAT: Invalid ioctl 07:35:37 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x40, 0x804) r2 = fcntl$dupfd(r1, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000000)={0x3ff, "b7080d1e2e0737aaf4b4b729311ef33a4e51f928fcefd702794214e906fbd3db", 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000000c0), 0x10) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 07:35:37 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64], @ANYRESDEC, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="cc395788bab15321363fb8ebaa16b9fbd0090e3d61a9f6b0ca9a3e698f63589529fd362d557ee78c48052c6603427e651e53565ddc90100e5c9880f638c1f97d804a5abf6c288b8440784e335e41e0061b30f3406c672124", @ANYRESOCT=r1, @ANYRES32=r2, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR, @ANYBLOB="e570430f77e0a7774a8a8c27c4f1d004a8a85818b45ea33dfdd5f333bf28d54eb35c681ab4272c520556c96811c7894b2cd8bf668f74670f2eea3d94486eb10b71fc79c01351f145804bdbf5395ca9358063076a7bcc214323e584e08fcc4a691a3d9b7763355c4e08d3d6558fe64237b6c8f09a2b54fe25d3003f94baa132309f8508fb0505843929b59d8e256f649311b9683f544b50f81f3389455968eb", @ANYRES32=r3], @ANYRES64=r4, @ANYRES32=r0], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESDEC]]) [ 777.251849] QAT: Invalid ioctl 07:35:37 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x800102, &(0x7f0000000100)='ramfs\x00') stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000c}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x10000000000000, 0x80) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 777.301061] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 777.310266] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 777.340704] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:37 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x80c, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKIOMIN(r6, 0x1278, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r3}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$BLKALIGNOFF(r9, 0x127a, &(0x7f0000000140)) socketpair$unix(0x1, 0xb1a1dbb95587eb54, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0xd9, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040814}, 0x1) mmap(&(0x7f0000c60000/0x3000)=nil, 0x3000, 0x100000a, 0x12, r0, 0x0) 07:35:37 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x7, 0x2, {{0x7, 'vmnet1\''}, 0x2}}, 0x14) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 777.451134] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:37 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) renameat(r2, &(0x7f0000000000)='./file0\x00', r3, &(0x7f00000000c0)='./file0/bus\x00') mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 777.581699] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 777.590910] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000000002002a3df25b666a44ad807ecc9e5da878af000000000000000000000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000b7d31c492bb5b5ee6fb8607f310cb68d16fd37e0eaafba8d7a55a849371ce73a0b0837d3878773a6d1428f1d3792d1178343844cb7b522075c8296ccd765c61759470f8787cf4978e04406e11be4b667a3720c5086404745d7ff34bcb91c3e806d3ef1"]) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:38 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ra\x01fs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) 07:35:38 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="d12c79d845e01812950af456635684cbcc6751e04fa54722fc864323b4f81bac834c61f9ab7a8b28a19ceb9ce54230f3a1e065b5edc1b28cd508ca95260695", 0x3f}], 0x1, 0x5) 07:35:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r6) mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20010, &(0x7f00000002c0)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@posixacl='posixacl'}, {@posixacl='posixacl'}, {@access_uid={'access', 0x3d, r4}}, {@access_any='access=any'}, {@aname={'aname', 0x3d, '/dev/bus/usb/00#/00#\x00'}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r6}}]}}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:38 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) write$P9_RREADLINK(r2, &(0x7f00000003c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000200), 0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000240), &(0x7f00000002c0)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000000400)=0x10001) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000300)='./file0\x00', r5}, 0x10) 07:35:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$packet(r2, &(0x7f0000000000)=""/39, 0x27, 0x100, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0x42, 0x6, @local}, 0x14) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) [ 778.057113] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 778.076005] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:38 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x1) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipx={0x4, 0x2, 0x1, "333dfef15c17", 0x1f}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000040)="709eb946c195a165c9fe7b", 0xb}, {&(0x7f0000000140)="069defab3fef98cd4759d4cd5220b1230f6e82ae53626a052f706371d6ca9c49677b8e3476f004eeb9cc36880371207282545c45f51a282309dc903f191e1c7d2a0244ae462a5c8c71e6259a98f68f2681342500bd95e7bb41ab707e0a2d34e67abf3b5a62", 0x65}, {&(0x7f0000000200)="7ae3f29f0b5fc3aafc22d33e905262c3608ccd484713a3a2b8d17d6e9d1a8319993ff2710536ce5fe6d0ff73f61add59b5bcdd0287fbf88ab06a0ec488b716f336307423d00d87c36bb5cda940bd5c7927d7f575a2635a8fbe3e7df55c8bcfbf544726c8d30d81a6ca5bcdf6ca282177fbd1c217afea6c2c335d932dfbd7e639338bdfa653304fc0de17fce4bffcdd8426385199dc", 0x95}], 0x3, &(0x7f0000000380)=[{0xf8, 0x11, 0x800, "df2e3fe2b06c5fda0542b15f7d4f5d931a654913ddb467cbd0170c0f8920bcbcc67fd3c6f3059c72063d22505c9bb263d8fa31c4971e645aeea0384e061c6c92b4cd58df1d9c6f2bebaf3c011e42ff6a74fec3f55bb4342947ffb1d268900b2296b180e70825e02b8b8130d502cded5f7d85c082942cbab6a6d519a25be0d4e445348863e4bfad0f9e4e664078fa1c89869ab3c8b6257001941586fc2a123f55d3f481bf2a6280ee333fc80b4050968d401efb9cde14979755d6cbc1031b515a84909f4cbbf9b7d1799c89f885c78c82ee9310812f11ff82e53e9647e9c344b9348ce792c4bf"}, {0xb8, 0x107, 0x8, "07d332bb24388cddcb28f4dd8497724c476598e6d3fed7337d626de69a9a3f368198bbb8ef4339edaa2866226c778a0b7e6dfeb2a8d2d6c4a900321fbba8da4a4b2cd67afa31048ecf1db32468224f03fbee9c04cf07bc1ea1b036dab3cf1be705c6325f7c0d47ae1a837d845af20f528a2522d364de62888bb204e142cc01e1ec32fae8629759561c906feaa13955f1d19df843d7f171afd1cef9227feb20ed0262b1b2"}, {0xc8, 0x84, 0x3, "8016c134fddb262d977cd1c7a89a914a8208dbfb7e65bde2b116d442ee32efa1ec04c8f7bfb25328eab7992c4ed064986e2733571e396855ecfdb52337773992b9bcf3f7512f85f69dc2984c04c7c6ccb52c1797fcd284de5e859a9e2984fb87b28f979e71f2e2cd9b28a11cb4790c15b0a1f4562550f434bf4c22c12ec0631343023e8514bc390315cba062f32e8e39f5eb9a320f3cffd19b8f3966aa9b4f2d7b9bedb591f615c38aada2d95db9bc2b41e02faa"}], 0x278}, 0x4) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:38 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x602, 0x11) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) 07:35:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000100000008040d0000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r2}) sendto(r0, &(0x7f00000022c0)="8fb98dfc9614c3ac3967636633d7c47ef7ff7f428c636e8aa7167c8f7659c218e100ce7481d4144e7f38dfdbe960a037783694f9f542ce7c8e2f3d6fa798bb5ff7160022d6602f4f17ee49815a60f03db58e85276f4665de14fef9ba4767e5e000ec27a4a8960397927e984b0307b4eb84d9361509c3f7", 0x77, 0x14008844, &(0x7f0000002340)=@nfc_llcp={0x27, 0x0, 0x0, 0x3, 0x5a, 0x80, "505e20b95dcda267d87c93431171461b61c00fc297f6fa359bd33d8dea34117771bdd9af0883783c6c02665ed0a7d3505ba8be0d5ce3a0756f510a021f10ee", 0x3b}, 0x80) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002180)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000e4b457e000000002800de8d12000c00010076657468000000001807000000000000000000005c800e301e124d6a86b3c24074edc5e2a07a5aa1f0520d9c2948ee1aa4c9b5a8fa6d505d4399124219f29a8e2429119929e1997bb5c8722b09edb20ced40d90925860631ebb4604f49a108b8a690840f55e4c603322a747ff18a40aa6224df8ec800c5ee10cd7b015ed1b83aad1fb7c53a72310b9a9d116ff8f505a3567069dede3f0d47652b3ee7a8e64865451a0a5412745b2b270b44c3db81076efe34d475d6b95ef89f2090b58b76c812463ecc0ae41dcd195463b5d3dd4508", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) recvmmsg(r7, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/205, 0xcd}], 0x2, &(0x7f00000003c0)=""/185, 0xb9}, 0x5b6}, {{&(0x7f0000000200), 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)=""/7, 0x7}, {&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f00000005c0)=""/129, 0x81}, {&(0x7f0000000540)=""/22, 0x16}, {&(0x7f0000000680)=""/250, 0xfa}, {&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000780)=""/147, 0x93}], 0x7, &(0x7f0000000a00)=""/37, 0x25}, 0x6}, {{&(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/75, 0x4b}, {&(0x7f0000000b40)=""/249, 0xf9}], 0x2, &(0x7f0000000c80)=""/65, 0x41}, 0x1}, {{&(0x7f0000000d00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001140)=[{&(0x7f0000000d80)=""/192, 0xc0}, {&(0x7f0000000e40)=""/237, 0xed}, {&(0x7f0000000f40)=""/159, 0x9f}, {&(0x7f0000001000)=""/55, 0x37}, {&(0x7f0000001040)=""/193, 0xc1}], 0x5, &(0x7f00000011c0)=""/245, 0xf5}, 0x7}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000012c0)=""/191, 0xbf}, {&(0x7f0000001380)=""/134, 0x86}], 0x2, &(0x7f0000001480)=""/96, 0x60}, 0x4}, {{&(0x7f0000001500)=@ax25={{0x3, @rose}, [@null, @null, @netrom, @rose, @remote, @default, @remote, @bcast]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001580)=""/135, 0x87}, {&(0x7f0000001640)=""/247, 0xf7}, {&(0x7f0000001740)=""/41, 0x29}, {&(0x7f0000001780)=""/134, 0x86}], 0x4, &(0x7f0000001880)=""/57, 0x39}, 0xfffffff9}, {{0xfffffffffffffffe, 0x0, &(0x7f0000001a80)=[{&(0x7f00000018c0)=""/216, 0xd8}, {&(0x7f00000019c0)=""/71, 0x47}, {&(0x7f0000001a40)=""/4, 0x4}], 0x3}, 0x10c}, {{&(0x7f0000001ac0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001b40)=""/14, 0xe}, {&(0x7f0000001b80)=""/193, 0xc1}, {&(0x7f0000001c80)=""/69, 0x45}, {&(0x7f0000001d00)=""/106, 0x6a}, {&(0x7f0000001d80)=""/146, 0x92}], 0x5}, 0x7}], 0x8, 0x40, &(0x7f00000020c0)={0x77359400}) r9 = fcntl$dupfd(r8, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000002100)={0x0, 0x0, {0x21, 0x4, 0x2018, 0xb, 0x5, 0x2, 0x3, 0x6}}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:38 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0xc0a, 0xffffffffffffffff) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r3) setfsuid(r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000002, 0x8012, r0, 0x4000) 07:35:38 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000380e00000000000000191c005500000000000000", @ANYRES32=r0]) [ 778.273073] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. 07:35:38 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$can_bcm(r3, &(0x7f0000000240)={&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/144, 0x90}], 0x2, &(0x7f00000002c0)=""/187, 0xbb}, 0x40000030) 07:35:38 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000200)=0x4) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x1210, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe99}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc0a}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000000)={&(0x7f0000d2c000/0x4000)=nil, 0x3, 0x2, 0x4, &(0x7f0000c3c000/0x1000)=nil, 0x6}) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) [ 778.436540] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:38 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000001680)=ANY=[@ANYBLOB="00020000001000005c850f40bee3cf317301e90efff1c116f83fea3305dd4492292e8bd8248787ff893a1893401942337ff80366ea36aae02e0441849e2460b5b9dac84a9efd074a55325f96a281dbc2673a2a5806aeb9ba13efee4a675ee63e6e48210c50653d3f191cba91cc10982e2df5f0f6ace367479080ff6a750e7525774cf5f178ed6e54c2ae8d48b9021d0c54537f835e21d648ccdc9099f4a377e6b38c756b0f51130a995c18844df1d7f51605ab6610bc6f2c26c79453465d35aae5cfbea6745a0a96a8c834c74d932ddf395a6a4910eb80db0ea86b6e919655e37b360335aa36b0ac5f7cd91639c99d4feb30e65d0cecc74ba9e29132897af2a9ea7bbc1c91256f8dcb9319cbe28e7d4aba63ca46a017a0f3b01e3bce0c207bef534cbcc69d01b4ba99002b8e23f0fd215bb38a98fcb75f54d9929805f0ae7a9c94d33cf3027c49ae53594666afef0b4880d3f238a0a711884525bda2edbcf2754ae1c9ae9154e36aa79268ac040572e4b09945e097c7538a3e50c2776cb8f93f39bfcfb9a9e7efa9de9ccf81ebf0ad7e97b4b96a31295858af0721d2eac34b86315811f5eea7c594a354193e0ef114e573d8af593cebd794fd0863f2cf973ef9bf60ee2127beb3378e39bc08018688ceda8a27abb2cb5cf33e406ddead6a28dfd755a2dcbf267ab9cf2c60df1dc1da4db3bebe4c9ba50a9441e79b956f31c0723660c3717d4ab79a1a88aab52e82764cc8a3ae270236e40bd2b342f3adf79b8d888aa16302051dcd5f44c363026b2e6af514657c9265ce5f2595f9cf2a55ff8abad7ab75a06586db9f904b22a7dd5967fdce4dc51193afd69dcc8142a9fd601ba43dab8cce42c46d0e54667c86bcee657634efc9a0526adca992c66d8948979c123b7269671ec7dcc556e30391aeeb78373d26baf054c71dae1f216ea54ca666595fff58673973ae8a0f9dc354c585b3c15cb118a4a862d883919f809cf430832d94e4ffbf792bf0b0b7992f0268c66ceeb0569a048f0644b88ea4321677ab001ad07ba098201f1ea1cc8827e0cb767c3256d900fe956e47965fc5558394a88ed12829cd9eaeafa3f05a6ce9874627d778e1c6d42dec76dd62afdcf012632c5c1b864a23820dcd8dd4067a9086dad7d5e8f2d3b14f82e02c75cbb355f9574faaa1f84910b342112ddcfeac3398c8a5ebbba135b76267b12fbe30c3d59c9a8644e2baeadeeb80217b69b69864d026481b7e6e834ba36f35758c4922729c02ac42b232fa8dca540c04dcd520ea5d876af2509dd36f21c772a06f5e5cd3b20b4b804c7331283639021b77f586d05db19426394b989fff79c1b8d348b18a80463ad0948b0b426c8712096bec3ea3850fd9e01d73747bc712046941732f05e8fba7002cbe690082f439e4e088108f22c3f642b5d43aadc9f178ce26c29e72ea2c51a7d5444cc8a8c32a129cb09ed447977a1b66818266b97542acac544c3c81c640e7386603ee93e12305171eb7de769b3207e64332fceede000bcd41e528faafbaae2b8acf92d7c93cb059d6aad017d4a503685f45e5b5bdd7531577941b64593bdb4b7f12b2021902ccb868e6f25712e64ee891e1ed15cf8cf32eaca9455b6cb4d1a620d28550c13c95ba4fad25decb6ca15618af8cf299b43299d5a54b3f5d1125cafb1374d4a7a31231bb8003b10c72484f993943bce6109fe7f9372fcebecc3963e4d767e1c4e6d00d3ac438476facb0048454ab95d764bc9b325ac8ec1dabeb1b8fdddc9a8eefcac02476c0b4d474df3d52795a544a11e80401f6b6dcc82a4fa2b52ca2e63ca003ddc486f23870df1203865cf1700a9caea33b313ac9771ba8b04b8041dfe466f36445844ea447322f978e01087d9925dc93bb50ce55229c4dd762e3cb1d0efca1d75669c5f3702cec05048bcd284611d30f1e2b2d65bf63772b922de3936561c8ad81611b628c31b3bd1253409e79f6647b9459f856846e02d532b564fae25d61faa93c302033429cc37ad2220831eeb1606da5a67d2e750d9aa02862cf03c6903146093e14e449ccc6ffb375dc86d76143f5911c9d375055023a7824c4dd627955805d085617da4ba8e6307bd6163a721a2fac613af3b25fe3fe121effa2db4092bc1cb84f5610fc89effefea30d2f5e281cf828cbff54c0536f7bb094566589de8bd1546771ee649a3b542c1ba8f5744b8f4f07397240749d0ec9c8798314089ae2deb74aa258381c25c74853e44da766944b6c494c485eee008e83fcb77e0564a34b73924b655221120facbd96dc236376c954f24518013152cc33915358ad83adf372c5e0dacaf8aef8e659d6120d1cf9bee2e2a373691ac000e721c27e0d833273d094888b5445072fa342fbee2aa2dfd237e0dae26d27930caaec45e147870b3ebc7b2231de6de085dd20a657dc08c5626d974fbf954cd9b1b58ede528fc92ae7e82f848639e7e4278df450d19026ffc6b8750ae8806b7a6c813c12acf4c2c7558b2ca6950877938b04b7b4d4751637085b15617cdaf79c63d2a64620601aa91fa9343e48a4598cb23896a4f64d8216baa01234aa524972a235f0027802ae0fc79677e62345f9f2b95e9fdd40b03bf4aacad4f68e74c7f90161d742ae0dccdd54ff40bd2b86b1675be3ce0e9f83075a5a273cbc9b07074eb4f6e95d99bae7ea6901c4d1581b888d433d3e2e01fce8b4e8bceae1898b1579efd8cabfc97653a048622a14d30af71bc87d80479e12c9d400c8f230d563b629d34cb13f9cc5800ca5c5a70cc7e871b26035f0fd18f166b338a47cde995d709bc31943826e045e69e1c5fac8027da79f1a502e8443cd2423233d6d9d875c6b9c49227051b1cc3a6330e6ebb7a7acfb3d9d75b22ac40c62686ed2b9a2b430a9a0f55a087e4405bb1f751c405f2e42daaa1140587da86355abc6bde085944bded2b17615f81d4ccddf1e11b7ed80523879ed794c2b7593315a71028a294506430b10b9007b1dd26d58acf921e4f21763c5f7a56e07a1d729c40520ff957e7ff52c17ef3933977d0ed9aec1982b2035435b7ad09eded1e54937f1a2740546f62a5156bcc152379cdec76b335f4219a5b0dcc143bc1867300b9e0c91ae7273c10b869fc434ff4c03b6144793145782f776c6d690e38e62003b4a60970bc00ef83a3ee6f28848ab9c9f5925fe8457a8910b69811cef558f8afe1c4cc3686d311c3ea7873b13ad92c70097f3b7c5f8f2cc649a408b1d5e7b54ac0c9a10c0cd24ce3f07e889ba94714c17a125e9f4ea8022102e7e16015f5a4dcb1d8d0d6b00f47a1c8b609f1fab0d728d3d93f54267be7b300660a5c7e789444b9398931ba06eeccda5fa298cf91f375b87e69ea91f32bc99cf10c76dd5f0340a75b4c25a9ebfeab3c7989eec8e67bb80496d3a5f483ad80ca764ae932f801993c979c1f6437d6aa7e5916bd217e07ff511cd6888974a3fe8e3b0f69a0103729189924029eeb6e09eb23d99866b26b30d5f9e4d4fdaf9242966696ed2d483535e103c844faf5f8a452bbcbfed7d484aeaa54b256964db97857e7c24208a45935088160fdf0ee2bd0afa424cdcb9cce32b467f77d73b77293806240883b1bf5b9b0160e5e89b5ca9f637e7f1cbba24fc6151d2421d87b59681a03dd886d385d8ff5045a1c88e47f1bdd447c1986f64b8b7ace287d66e7d9b1a36dc8f2462793295b07a0093c9c32a177929d0f779b4c4a77c79844bc24c692a6a1aad54510582a0c9599f405d50db5d8f2a1846b2dbab547f91f42188e19995c507f11b94f2bd6647074ec0f39318aabd1e7aa7b17b4ef9b2da31af7695b6e3945fde9647aa12da66135892ce9e8e4bf99db171b7d370ca3e83b4251c0619a69657aca0274250f713809ee2cd5aee514055a3a16a52912d0cd2d5af70e5a2e5c0fb5a9dbf629281dc48bf2ab05a05e9db3b3d775726235bbcbb7651f9b3939acc3efe6543e9d78138d82eea4bfd82b0d8cb5907cfb57670e394743d6b92d26fccc7cb802eba6047c1e9de022c80f0d56793c521316f2531254fcaf97020535b3ff1371628fa62d5036f4bf5088abb42a172ef3cb62a79ca89683ff9859627c45804462f73cd60d1418c3a5270918c7112f3d541c69d1d23c6b34e8ac1806109dba62b78a000a6c9e28dfcf41503fd25f564269c290780fafa3c49b57e6fc31f0a63e56231f5c7e19146f6d11d62625bdebeebd7b67f0599c004bc78c48b385d5bc10b8761ecdee57e00de52e406b9e13e34433b08e3c299654edfe61ca56696b6efe9d32283e65ba6cec8182cda8d88762ccd727e4357a34f45d15774f043e999d1d53f7acab8adedfce56407d95145d766c46a8b77f73720852708e36f26e819469e2e8a231386ad68e4249cf5d8fd2c8bb548c978a50592e65342dec3056f528cb35066c5c0ad48352ed8dc2e2b4d9d8ccdf0e20b26a9547a47876c31c3c267a9f5a1fc12c67b2a6e50da562f8c5eac4ad00154702eb1a384aac10806122daeea7aa9c79e9d6d69677cddd2b23e35519c3e9bdd59b752ac6a636a72b11d3301848989165b9c3174fbd01379a8863d48db5b5e16f59d435b1591b91e878dcc768c123cdd381fcff35f441ac89fe8c7877407be620d415d76732267337e9c7fe82f50d82dc64a09a1b30ed379355024b431969a4f707c9836d77e3faee2be22e755c3151d9019beb6a7d79ff5033b3c874b438d12ea95f630a221026a2180e79d8406ecacdb6e0bb7be68f563d2c1663ebce808801c512058821754093eda99f8872974ab5bfa814d5211049de3ace1aa8f040b778a217d69be87288c6fc9f88b9cf111daba8d5e8182659284eee19c8ec1b0c5567282aa109fabbc6d289e582677cafebbb4b7f09b8186d641f8dc7ac0740bab19eccfc3bc3461edfd250e7d2788b36795402ebac2f85f6bf52ef3bea6f1c140b390252599b4f555a9a06ddf428f0bce2c76c6dfd09567014babf89fc04cced8dafa5ce68341ea069a2aa8c36db3eda7be09d623eb7368376a31a392e30fcc7adfaec14446eb698d423d555a889a93c79016520edf2da99ba2103e9de0d32c7994222ad9c272209b2a2d6097fe93d2a479f0d013f60ef406092402be1ce1bf0fcf6e75d45997a4849bc9687755278f0a8c6678f7ef219b432f96c751c5c6f9a7b203fe4ac61eaa85f4e1cd46b37fce7ed62f370f794f228f01ddb5a15e50067d88d1f1ade3a98b4802aad7fbe32def3be969f82f12f4c348b14526cae4dbc0937760b94ad6efc4659a47672e0774c47271d99a17f8eb0d3d1b2873ab0af5789672bce98335097fcb9db9f15a679b92bd527a0b5094ea8f4b8536ff1a2912915f3e5a286a637a566f085dd8a78a3af595767867c64eff1fbcb8d860f960ac4eca01755c838d4fdedbe98765a5176d98e2d57cdf364016fee236c97b9e36e3f8aabc2d5aad2371e6c8232fddb529f31009b2b4f21d39078de93a12f5e80b055134b1bb4e468719752885a5a3ebee6dbaedd519781787676a1ebaebee1da8ecc1de7b09ffafcf6d614926eeb8aea788db1638cbc1b5f29dbd9f89301e5591f70ce1696b2567b19b518db081c55225653cb258f7dda96c4b9fee1ac31115b8cb366f583a8a51b22949cc878cde1f520e4f6bee71e2079ce7f36249472912be0b7f3cfc925604d5801399ace420ff48fc075350ff1a6b069b9b03ba7f557f1b1861e82fd4241bef40a6fc74238f2591f3104c13f64bc4ebea519868e4d8991c95e60e82463c24fbafec1ce1c75687821313e40a30301e7becbbd309dc450b96d8ad4c73fba2752867685d8f298199e0112d0a2fdab6873c5ce7a0d08817a3b8d8610b82ed748df5e78ebc08876f8e1da629c2bb0d054f240c6ee7703acfc34e27c7a5ba48f86630249c35dc2f3bc0e5e42a56b2850395490e1673f96f7e95bda06698d0a39a45f35f1e6966443858ff7db3028fad2b38e57d7e4eb0cdb83e"]) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80080, 0x0) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x77359400}}) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000001540)={@empty, @loopback}, &(0x7f0000001580)=0xc) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="ff45705df5dc", @ANYRES32=0x0], &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r7, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000014c0)={r7, 0x1, 0x5, 0x0, 0x3, 0xffff}, &(0x7f0000001500)=0x14) r8 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x6, 0x48000) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f00000003c0)={{0xa, 0x4e23, 0x8000, @rand_addr="4d22ca49e975c1adf6c86213f573ae3f", 0xff}, {0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffff5}, 0x9, [0x9, 0x8, 0x817, 0x0, 0x51591dd, 0x3, 0x401, 0x80000001]}, 0x5c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r13, 0xffffffff}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f00000015c0)={r13, 0xcd29, 0x7, [0x7, 0x89ca, 0xb310, 0x8, 0x6, 0x3f, 0x5]}, 0x16) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001600)=ANY=[@ANYBLOB="0000000000000000000000000000ee06c018bf0868ce7c4bb7b889cbc7cdab6b8a68b55b6fb2f0063e8ba20d4c9c3173e6392e253cc847323bcdb6477dcd204e5084819f6014fb8d9dd8801ec02bea2d39ff9319790d909c96171e561582c3a472b1f5f953ea80e0bba0672001201336ae19f9543c6007db17", @ANYRES32=r2]) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, r14, 0x410, 0x70bd27, 0x7a11}, 0x14}, 0x1, 0x0, 0x0, 0x95043c0b5f41d807}, 0x20000050) [ 778.518754] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:38 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000140)) r4 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000068673b2f34dba4e6aec3386ebba4878774dee8d2acba448c50e3cc9792c0b974cfe309c865bb3cf5c53e59f53dd9e77205fd7e774378afd2eb7c8e0be869c8f849e5e526a3dfc1e1bb0779f86c6a40ad14ccc8a00688b31c6bd2be09fca3445968cc2d5f8a37d2aa4cb0bfc24e61b8dad54708c1fc656d0a1c7e2408d5748c65efda619296443147fa8c5ec96abe719b669ed1ba069c0f2c80b1392fd43bab2f1b5c527d5a4bfa38e692f4996180fe75b044d5177a68e627c1fdcaeecd3b367003784778b1e3ad27abd18cff22eae187cd1fb28410c8bc98b4283c4e40cdb8c674f3ebf72a37935d0df4ca54", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r5], &(0x7f00000000c0)=0x6) fadvise64(r4, 0x100000001, 0x4, 0x4) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) [ 778.678277] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:39 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x5, 0x2}) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) [ 778.815332] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:39 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000080)=""/204, 0xcc}, {&(0x7f0000000180)=""/108, 0x6c}, {&(0x7f00000002c0)=""/176, 0xb0}, {&(0x7f0000000380)=""/173, 0xad}, {&(0x7f0000000440)=""/177, 0xb1}, {&(0x7f0000000200)=""/120, 0x78}], 0x6) 07:35:39 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r6, 0xc040564b, &(0x7f00000000c0)={0xffff, 0x0, 0x100e, 0x1, 0x48, {0x5, 0x2af}, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) renameat(r3, &(0x7f0000000000)='./file0/bus\x00', r9, &(0x7f0000000040)='./file0\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) 07:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000040)) [ 778.927964] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000080)={{0x3, 0x3, 0x6, 0x7, '\x00', 0x2c0a7238}, 0x1, 0x3, 0x582, r3, 0x0, 0x0, 'syz0\x00', &(0x7f0000000040), 0x0, [], [0x7f, 0x1, 0x6, 0x4]}) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) 07:35:39 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/llc\x00') faccessat(r1, &(0x7f0000000180)='./file0\x00', 0x9462b33768c9b2ee, 0x900) r2 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) getsockopt$inet6_buf(r3, 0x29, 0xcc, &(0x7f0000000200)=""/152, &(0x7f00000000c0)=0x98) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2]) 07:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x8000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0xb4404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfc, 0x400000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c000100766574680000006159000228d672510000040000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) tee(r1, 0xffffffffffffffff, 0x9, 0x4) 07:35:39 executing program 1: r0 = mq_open(&(0x7f0000000100)='systemem1posix_acl_access\x00', 0xee38cbb01e9bf9bf, 0x10, &(0x7f0000000180)={0xfff, 0x1f, 0x80, 0x9, 0x0, 0x1ff, 0x29, 0x47e3}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) statx(r1, &(0x7f0000000480)='./file0/bus\x00', 0x0, 0x200, &(0x7f0000000380)) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x14001) r2 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PVERSION(r5, 0x80045500, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$caif_seqpacket(0x25, 0x5, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ppoll(&(0x7f00000000c0)=[{r6, 0x6008}, {r7, 0x2}, {r8, 0xc400}, {r9, 0x200}, {r10, 0x4}], 0x0, &(0x7f0000000240)={0x0, 0x1c9c380}, &(0x7f00000002c0)={0x5}, 0x8) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2]) [ 779.591246] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 779.665986] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:35:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x3, 0x100) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x80c, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) r5 = socket$netlink(0x10, 0x3, 0x1) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f00000001c0)=""/135}) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f00000000c0)={{}, {r6, r7+30000000}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 779.833775] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0100000000e5ff6c2700"], 0x50}}, 0x0) fsetxattr$security_smack_transmute(r1, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x6) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:40 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000040)={0x0, 0x10001, 0x8, &(0x7f0000000000)=0x4}) 07:35:40 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x200) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x200, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0)) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 779.936224] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 779.965378] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0xffffffff, 0x2, &(0x7f00000000c0)="51e7362b63db30821ec2604f8398b66f41a974213e9c5b9086778beda11df5ee38d9b33f20c9ec1041cf21681dc51db773ddb75fad871093c7eb91ee1aa4e645930ce61048b564b5d820bcdd1e9abb687b0b211abf7170be660956b05b6098002e553d2dcfc7fb51db8f9a8f3934686358f4418f1200ca4bab57d2b408db787907083a8caae225494abff8736b475e9f7c5f2a5c6fac0ea03a2bdcca1a18218ecc3b5cf1e5384f82bda8f39e449de6fdf7457e4733d3", 0xb6, 0x1, 0x2, 0x0, 0xffffff81, 0xfffffffe, &(0x7f0000000180)="db927822de157efee2e69daf946e7c8546062766ce0431081806a4d64d3373bfa0c993870e0aa23060c49b7f31ea9fc297b262d8dab44916d1cbe094437eb5a85de20c0187f44edc9f805a3f18a5764516b28f7cb1b453cc5c1bf537af9eba926872d8acd27858962d21e25fafb73cd353d1a4799dd6e1dfd44f067a33447b05922a1298817d11d54e25b99c3ea752f8c191665d86724823b6ab316a57418481183f7e40edfa154e"}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) 07:35:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f00000022c0)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r4}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r5}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@empty, @dev, 0x0}, &(0x7f0000000100)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r7}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r8}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r9}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r14}) accept4$packet(0xffffffffffffffff, &(0x7f0000008000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000008040)=0x14, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r16}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r17}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) getsockopt$inet_pktinfo(r20, 0x0, 0x8, &(0x7f00000084c0)={0x0, @initdev, @loopback}, &(0x7f0000008500)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r22}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = fcntl$dupfd(r24, 0x0, r23) ioctl$PERF_EVENT_IOC_ENABLE(r25, 0x8912, 0x400200) getsockopt$inet_mreqn(r25, 0x0, 0x61, &(0x7f0000008880)={@rand_addr, @local, 0x0}, &(0x7f00000088c0)=0xc) r27 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r27, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r28}) ioctl$ifreq_SIOCGIFINDEX_team(r27, 0x8933, &(0x7f0000008900)={'team0\x00', r28}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008980)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r31}) getsockname$packet(0xffffffffffffffff, &(0x7f00000089c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000008a00)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r33}) accept4$packet(0xffffffffffffffff, &(0x7f0000008a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000008a80)=0x14, 0x181000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r35}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r36}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000092c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f0000009280)={&(0x7f0000008ac0)={0x7a8, r3, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x134, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x104, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x148, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x86f}}, {0x8, 0x6, r21}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r22}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}]}}, {{0x8, 0x1, r26}, {0xb8, 0x2, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x779d}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0xb4, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r31}}}]}}, {{0x8, 0x1, r32}, {0xc0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r33}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r34}}}]}}, {{0x8, 0x1, r35}, {0x124, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r36}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3}}}]}}]}, 0x7a8}, 0x1, 0x0, 0x0, 0x800}, 0x10000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r39 = fcntl$dupfd(r38, 0x0, r37) ioctl$PERF_EVENT_IOC_ENABLE(r39, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:40 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) lsetxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f00000000c0)='em0[+\x00', 0x6, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) 07:35:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/\x8c\xb2\xcb\xa9\xb7-g\xdd', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000080)={0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$setopts(0x4206, 0xffffffffffffffff, 0x2, 0x5) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e, 0x2, 0x80, 0x1e, 0x0, 0x9, 0x23, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfff, 0x20000000000}, 0x800, 0x6, 0x40, 0x2, 0x9, 0x401, 0x1}, r1, 0xa, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) 07:35:40 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000180)=@urb_type_interrupt={0x1, {0xf, 0x1}, 0x3ff, 0x4, &(0x7f0000000080)="35095763e1bf1db50744444ff2e3caba0c46f6abd897fab1a8f7d53ad8e9f20b69740598aad922d203bbd213a2c792c3a886b6237ec73a718bbb7c393f1477c76c112e3c5c7fdcaf7e78f1ffe0dbb0314f81b05fd37dacf2d9b97eb430f8db8b23a173782d1e4e5010612bed1f9d418cd69c56830d7fb2034458b14a062e5e88f167902ba7c81943811d8ec09355ee8f30ea99aa949b28058b179b52caa45894f7231afb200d18d4957ecaf32e1e89", 0xaf, 0x8f0, 0xf16000, 0x0, 0x5, 0x401, &(0x7f0000000140)="f5b4e16daa2e22c3772ebab2790ddbb5385a5c2e65f102e6db3e530a6d3c08263278c55be5927c51"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:40 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0/bus\x00', 0x6, 0x9, &(0x7f00000015c0)=[{&(0x7f00000000c0)="30a2aefb5f0b3b2dceef325e2977e8a1779ee2b6425d97cf19d9f32e51db2d4c767ad9c064bf3464c54b2f8470f5374cff565bd66b4cae692c451dca5ebed6364f30302e3d26218663d29adc1ceb9702ec2c95e5", 0x54, 0x9}, {&(0x7f0000000200)="2315763a36156908e9509a3b0655b20ffce2695f7a7030da55235ebe54be4ce23e2908abe13c7844d25b6bb095d5083f26f3baee95cf2bfbcd8b584317f9fb4aae79e4634e58da", 0x47, 0x7f}, {&(0x7f0000000280)="a853a90158060a224cab49699a950f0a90a20d4236c24299b2d3458de174ad0853b36c0b8fc762c3815d9e4222b084d4002babcf058d7ef244b45a08eb043ab6778f65958733b27c6655f851f12e7cc89bc46db6b5a145e0435a6a8b18578115899f58b693dcd2e6c997d01cd85f42b71b6feb0831811e298923a9c62900d1f1ef91b4e37b141ede9a1927b530240eeeb5", 0x91, 0x6}, {&(0x7f0000000380)="01ed13c6c99fcd7f6346e6ffeb5741f60540d7e5d90f9ec19311978df4854d4f3839148fcdfc8ac4836e95e0e0490002d4f8a207ba2b41c3b9540271d20e58aa2ef63cd480a0e562fe7148425c135c4648cee1bbca4de50e8822ac17a4db88422fc75853f6011ab84e3efb91234fcc1cc7e202c833fb070a4a", 0x79, 0x4}, {&(0x7f0000000400)="4329fc0f3055d5f829eb685a5066319cac3803466c046fa54346f87ee65a038a727d862b5e8bf51a244069897897627e0d4f0c166baa2bd70d74f5c8f5e47acecc017fc798bb4fd26f64d1572e1e7dffa0d313ce76e837ba722ee874cf004cf5a9d4257c6f363efa0f53de8279fcca2eddbc09cbc933b5b9decb55781d743049c1bb55f57b03af810383c44e1bc8a89efe466fbff0cc7aa7828fcb3a2f8e063c56117b04b4c942fcea0af939059267049195d0e3a9a7efb8155e9ce2565b22c066942d06cd065ac533af8c4f7028692f157ba5a601c5bdb0c1bd477f928d438a846eef671f9de8c12a73b9ae03d1716e00", 0xf1, 0x9}, {&(0x7f0000000180)="cdc47832a78c57b66c621d091ee60a03edb4c9c7e66c989014a2e751ce7d37132232974996c8aa03f817e9981c75449698fd358e4d1155d016cac19e25", 0x3d, 0x800}, {&(0x7f0000000500)="d95d4bbfb124fe413bd32ab7764ecfff06c67a156b1a5da7c6e0757ca7071970b730d2e660f54324f18a6ddf3a773b31c3ce524717472df30b3f25ba22e410f7ef0ee238c5f5cf03e92c484460dcaccff0979f", 0x53}, {&(0x7f0000000580)="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", 0x1000, 0x3}, {&(0x7f0000001580)="b523", 0x2, 0x7f}], 0x10000, &(0x7f00000016c0)='\x00') r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) [ 780.265305] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 780.305176] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x705, 0x20000, 0x0, {}, [@IFLA_IFNAME={0x0, 0x3, 'sit0\x00'}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) getsockopt$netlink(r3, 0x10e, 0x4, &(0x7f0000000080)=""/223, &(0x7f0000000180)=0xdf) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:40 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x501, 0x0) getdents(r0, &(0x7f0000000040)=""/4096, 0x1000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom$rose(r4, &(0x7f0000001040)=""/237, 0xed, 0x0, 0x0, 0x0) [ 780.340586] ceph: device name is missing path (no : separator in /dev/loop1) 07:35:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x5f, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x3}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) connect$llc(r8, &(0x7f0000000080)={0x1a, 0x338, 0x5, 0x7f, 0x40, 0x3, @dev={[], 0xd}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xfff, 0x3ff}, 0xc) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 780.451328] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 780.462434] ceph: device name is missing path (no : separator in /dev/loop1) 07:35:40 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', 'ramfs\x00'}) r1 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1]) [ 780.506438] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:40 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:40 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r7, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000300)=']}\xc1\xac\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000680)='\x00', r8}, 0x30) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700)={0x0, 0x0}, &(0x7f0000000740)=0xc) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000880)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000900)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000a00)=0xe8) r14 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r15, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r15, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r16 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r17, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r17, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) getgroups(0x3, &(0x7f0000000a40)=[r15, r17, 0xffffffffffffffff]) r19 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r20 = fcntl$getown(r19, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = fcntl$dupfd(r22, 0x0, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r23, 0xb704, &(0x7f0000000a80)=0x0) r25 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r26, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r26, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r27 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000ac0)='/selinux/load\x00', 0x2, 0x0) r28 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r28, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) r30 = socket$inet_sctp(0x2, 0x5, 0x84) r31 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r31, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r32, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200) sendmmsg$unix(r2, &(0x7f0000000bc0)=[{&(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000340)="8cd33b5fc020482fa01f28238d4b3a7bc6c40013df252ae813a4ec8c22ffda8783bd34c56df0432272e5665a5adcad7c3fe5ab1610d04fdfc88dbc5fc269f14ca57d5035419c08f88a2a92eee915c54f43579924920b828050a0f59b9a426663", 0x60}, {&(0x7f00000003c0)="73eaeaa689019c669f78f47d799da8587fa194d100eb76ecf15a2a0dba828665f4df2dbb0a1a007072be0b2193a9dba989c3a7f7429fd7b47f28fba981c1493182b3d96ae58c526e87ddd70a8a1c74ea71168f5a99dd0fe2968c3b48eb3c481397c800ac36c2720bd7de5abc5b19", 0x6e}, {&(0x7f0000000440)="20ceca34de74eddb18b3139344cf4915c9012c348e29cefea109f90795a4ffc9de358f9cd8e70aabe0345bbb96cd594ca3eb889bf686d97ff829332713394a3a73fd1c602a0b3a2894562873a0481eb3665ab19d545c8b7c73a19b40615f89077bb348d7deb5fc3542e41b5ab5df5cdd40e3136bd1ffbb0345bb7d81c0923e4840b029628fc761ef153e28afa2eda4b83b4c39a4decbea761fac", 0x9a}, {&(0x7f0000000500)="3bdddde6abe84596a1602630a15c83d38234508adb185ac7d98a1155dafd16a6ece617752727226d214af28f17c67ebc4941311f1f3f7689293bf67da9f0952d5fa6a7deb39e9029c82492bf07792215b8e26c96c6c484f7046371b7ef79d988839611857b64f62ee137c0b366cce36577ca64d766f4a345860fe9d12e6d7f0f11911a934956eac10d3fec5198c131f6d677467e63d06da378fdb64523b26613db4ea42b5a13dacc5af473cd928446815f629957154641f8be0335715db7addacecd1c83a2cb58382bcf97f4f42e32cea7230c800b201417d65fb7b16c2e", 0xde}, {&(0x7f0000000240)="9dbff30578f722eafafd2b", 0xb}], 0x5, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r18}}}, @cred={{0x1c, 0x1, 0x2, {r20, r24, r26}}}, @rights={{0x1c, 0x1, 0x1, [r27, r28, r6]}}, @rights={{0x30, 0x1, 0x1, [r29, r30, r4, r0, r31, r32, r4, r33]}}], 0xb0, 0x10000}], 0x1, 0x8804) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000100)={r34, 0xd0, "b86e73c0fd9e0ca0c4bf9129670659e58bf70b398388c6ed1324637fd208eb6960b28048f967630649821c59bb5c28a06687965c977e47896441fe80f4ebac9d5c755b00c526433cd2243729a2178a9b6e8225af34295e26548f20633e919d464efeeeb36349f81ec4b4dc8872270a5ecfc23d4625d811a79bfcf516b96b7bcdc1d07d8055bd8d7f151e53f7b837ee40d347b5859bdd069f16ac9a437d0a5745814adfb6285230636e9a4e995a13594c294f1da148249793f7fb48c86184672e85fed03c70a79bd7730b77808c978d46"}, &(0x7f0000000200)=0xd8) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 780.619920] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 780.677173] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x22492485d7cdadfc, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x4, 0x8, 0x101}) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) 07:35:41 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="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"]], @ANYRES32=r0]) 07:35:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x4b8540457cf65205, 0x0, &(0x7f0000000080)) 07:35:41 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) [ 780.849414] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 780.872337] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:41 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x184800) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0xffffffff}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000000c0)={r6, 0xa5, "77781ecc9e2766459f334f76712b115a08ca86f9af1e0bcab90543b74d393b9d44554daec90a1625117ed0e7acd40899e62e394b68a3fc1f04ce1b7b65558e5214f5caa36c95308252cd67c713c2cd183e1b342657f24a8d120f60d3f6301180b27e15a15790cf0a0be622061fdf9a7e977fe1f02f31bad193c50c98f09e09ca48680dfabe3470f2221fb14a5e9a88ac3e37e950c279c4989f7003374f282fd12cc9c7beb7"}, &(0x7f0000000180)=0xad) 07:35:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e22, @remote}}) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x400) [ 780.913696] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 781.017855] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000040)={0x3, 0x401, 0x101}) 07:35:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x13, "534301", "a0237edefd9374214f2d03cd91471a0098be24f0b33ad46d29275d118a407abe4a9c848b672978eec029f282a38b5a0ba6196dd1c207cb04d8c45dd6e8736d443e920af56877d8c1e0c5ccee16ed36299766a41bea73ee5f64765036fd9fe3acdf653a3112f607d253d2b6c23e8aa6c15dddce91c25a74a567ef5920345dc3f6879ca5f175173fd922201e611057cdb0f977d942433b323946dfde95c743e17887ce3d15252393c744bc8448d5095ca228941b09a0bab2fce316b0029f0491e09cae79016b5476681eae45ae9734585dac1a66595bdaf6cea25e54e096b790c1f112f9cd84a1a752ccf655c33f658c3085f50b76393bb68fac422945833753c6"}}, 0x110) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:41 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r16, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r17}) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT=r18, @ANYRESHEX=r12, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16=r13, @ANYRESDEC, @ANYRES32=r5, @ANYRESOCT=r10, @ANYRESHEX=r8, @ANYRES16=r9], @ANYRES64=r4]]) 07:35:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x2}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}) 07:35:41 executing program 0: mkdir(&(0x7f0000000200)='./file0/bus\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0/bus\x00', &(0x7f0000000140)='tmpfs\x00', 0x400, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r2, 0x4) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) splice(r4, 0x0, r5, 0x0, 0x10000, 0x0) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) getsockname$packet(r6, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r7, 0x0) r8 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r9, &(0x7f0000000240)=0x202, 0x4000000000dc) r10 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db0c21d74b8c1994cb573ff0c5320e3fe397bd8a7c25799573fdffffffffffffff16ed2d05dfcd8089ed7cfcc53c2c4c19daee0a2449ee45439a1b546b1aba6dcc98"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=r10, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000001e08184400080001000000000000000c0008006c000000000000000c000200f52c2f740000ffffffff060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24010855) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x40086602, 0x400007) fsetxattr(r11, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r10, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r11}, {0x8, 0x1, r6}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x100) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x50, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = fcntl$dupfd(r16, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = syz_open_dev$admmidi(&(0x7f0000000480)='/dev/admmidi#\x00', 0xff, 0x10200) r19 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/status\x00', 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40010204}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)={0x68, r10, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x801}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r14}, {0x8, 0x1, r17}, {0x8, 0x1, r18}, {0x8}, {0x8, 0x1, r19}, {0x8, 0x1, r3}, {0x8, 0x1, r2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}, 0x1, 0x0, 0x0, 0xa507be833802c424}, 0x2000) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r20 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r20, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) fanotify_init(0x1, 0x400) r21 = socket$nl_generic(0x10, 0x3, 0x10) r22 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r21, &(0x7f0000000500)={0x0, 0x4, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r22, 0x805, 0x0, 0x0, {{}, 0x0, 0x5, 0x0, {0x5}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r20, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r22, 0x46875bbbbb9dad72, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xc}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x790c0ca197f4cc9a}, 0x6d7f70411ad950c8) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0) 07:35:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:41 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x20401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x860}, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0}) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000080)) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) [ 781.274746] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:41 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:41 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x4d97) r4 = accept$netrom(r2, 0x0, &(0x7f0000000400)) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000480)=@req={0x28, &(0x7f0000000440)={'yam0\x00', @ifru_names='team_slave_1\x00'}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) recvmsg$kcm(r12, &(0x7f00000003c0)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000240)=""/62, 0x3e}, {&(0x7f00000002c0)=""/167, 0xa7}], 0x4, &(0x7f0000000880)=""/4096, 0x1000}, 0x20) fcntl$dupfd(r6, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 781.413832] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:41 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='teql0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 781.454634] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 781.616493] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="f16beb33d724ec8c0f6beadc9b11e2c245b3507738ce2d730c164d2eb22232a6f7935bf12ccdf3039dd99460e245aac4afffa270db0277a662cdcf94a18f90152c6bbc7c65dc5b9b5596316585f1094aaa579bd310b7ef83de4952c5160c50fde9df35d0ffa27a1dd356d65052b856f7c10a9b37a8856706606c23108f7f30d0191617968aa52201ce", 0x89) 07:35:42 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000040)='./file0/bus\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:35:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8) 07:35:42 executing program 2: connect(0xffffffffffffffff, &(0x7f0000000080)=@sco={0x1f, {0x40, 0x80, 0x1, 0x7, 0x0, 0x80}}, 0xffffffffffffffb7) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0xd2bb09e0716012a4, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:42 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file0/bus\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x80000, &(0x7f0000000100)='ramfs\x00') r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00U\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0]) 07:35:42 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x80001f, 0x1010, r0, 0x0) 07:35:42 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r16, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r17}) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT=r18, @ANYRESHEX=r12, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16=r13, @ANYRESDEC, @ANYRES32=r5, @ANYRESOCT=r10, @ANYRESHEX=r8, @ANYRES16=r9], @ANYRES64=r4]]) [ 781.848359] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 781.861907] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080)=0x401, 0x4) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:42 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x604801, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:42 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000180)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x1084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0xe4cd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000000)={0x4, 0x1, 0x0, 0x0, 0x0, [], [], [], 0x1}) [ 782.009188] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:42 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:35:42 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r7, 0xc1105511, &(0x7f0000000380)={{0x5, 0x2, 0x9, 0x6, 'syz1\x00', 0x4}, 0x6, 0x200, 0xfffffff7, r8, 0x3, 0x1000, 'syz1\x00', &(0x7f00000002c0)=['(\\^eth1\x00', '$wlan1$}\x00', 'trusted\x00'], 0x19, [], [0x5, 0x3f, 0x4, 0x1]}) write$selinux_create(r4, &(0x7f0000000240)=@objname={'system_u:object_r:vhost_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x6, 0x20, './file0\x00'}, 0x6f) migrate_pages(r1, 0x800, &(0x7f0000000180)=0x10001, &(0x7f0000000200)=0x4) socket$tipc(0x1e, 0x5, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101540, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r9, 0x40086432, &(0x7f0000000140)=0x2) 07:35:42 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000040)=""/199, 0xc7}, &(0x7f0000000140), 0x40}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x1) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 07:35:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22800}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd0, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}]}]}, @TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x85}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xed14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:42 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r16, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r17}) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT=r18, @ANYRESHEX=r12, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16=r13, @ANYRESDEC, @ANYRES32=r5, @ANYRESOCT=r10, @ANYRESHEX=r8, @ANYRES16=r9], @ANYRES64=r4]]) 07:35:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x1c, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r6}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r5, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000300)=']}\xc1\xac\x00', r6}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_UNIQUE(r9, 0xc0106401, &(0x7f0000000180)={0x7c, &(0x7f0000000100)=""/124}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r4, r3, 0x0, 0xb, &(0x7f0000000080)='^/trusted^\x00', r6}, 0x30) [ 782.421711] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 782.439769] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000000, 0xa10, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$TCSBRK(r1, 0x5409, 0xfff) 07:35:42 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_END_FF_ERASE(r6, 0x400c55cb, &(0x7f0000000100)={0x9, 0x9, 0x8}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xffffffffffffffff, 0xa84080) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000080)) 07:35:42 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0x5, 0x7, 0x9, 0xe485, 0x101, 0x32c}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:42 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f000095dffc)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0xffffffff}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000080)={0x0, 0x4}, 0x8) 07:35:42 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f00000000c0)={0x8, 0x0, 0x39, 0x1f, 0xffff06ca, {0x2, 0xd3}}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x800, 0x100) open$dir(&(0x7f0000000100)='./file0/bus\x00', 0x42040, 0x8a) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:42 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4e, 0x0, 0x7, 0x6, 0x5, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) timerfd_create(0x9, 0x80000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000002, 0x8012, r0, 0xa0ddb000) [ 782.636377] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000002c0)={r4, 0xffffffffffffffff, 0x8, 0x65, &(0x7f0000000200)="9c5946864be8f71727013a9c07ded75f7f45bdf6211332a010d72ec94239567369d5e5c44661d8f844871cbf8ebb9f359e25635a360b9e270351b2dd1f47d3bcbaf7d8dd454a4e8708cb1827d59ef70ec0a272bc89bb779d484701b41377ef589f712fa996", 0x40, 0x7, 0x7, 0xa8, 0x2, 0x145e1edfeb672106, 0x6, 'syz0\x00'}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {0x2, 0x1}, 0x4, 0x23, &(0x7f0000000080)={0x60, 0x31, 0x3, 0xfff7, 0x3ff}, 0x8, 0x10001, 0x80, 0x0, 0x7f, 0xffffffff, &(0x7f00000000c0)="88b9202740c7a2b41e33b2e630ddb2daff44ce5bf3b2bde822f6e52d75e781cdb520656f603d3ea604cba5f82cea8eec2b38e8ea12a8a89eeaaa262ac997456f8a6b9162e6891efce7b14e400e3e2fe9e7ffbf59d61b531082e0f78069bd3c7047c997378cc4352e64f3f689538ecbc03f027501752c6b08ca5b613c6fea0476155a8367976f0ece7ab8baecffc374019e247e65403776e33dd2ed7f73b5386737dc0a7a390dfb723d628872cea0858b9e267600c5fd2f2378f553653c5201985b412e2c9e0fa9bb451b8e600ac946e7a9a2079128cd"}) [ 782.677873] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 782.694782] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 782.729817] audit: type=1400 audit(6137105743.054:143): avc: denied { wake_alarm } for pid=13777 comm="syz-executor.4" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 07:35:43 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$UHID_CREATE(r6, &(0x7f00000002c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/230, 0xe6, 0x101, 0x3, 0x9, 0x10000, 0x101}, 0x120) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x912e1b8147499f2f, 0x0, [0x9, 0x5, 0x3, 0x3ff, 0x7, 0x7, 0x8, 0xef]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:43 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xffffffff}, 0xffffffffffffff7a) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e23, @broadcast}}, 0xdb8, 0x8000}, &(0x7f0000000040)=0x90) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x0, 0xd1) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f0000000040)={0x2d}) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "001aed360c0d15a6b562f1e756204f8f23b6d5c9"}, 0x15, 0x6) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 782.915617] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 782.924438] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) getsockopt$sock_buf(r4, 0x1, 0x5, &(0x7f0000000880)=""/4096, &(0x7f0000000080)=0x1000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 783.101411] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:43 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r16, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r17}) sendmsg$nl_route(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRESOCT=r18, @ANYRESHEX=r12, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16=r13, @ANYRESDEC, @ANYRES32=r5, @ANYRESOCT=r10, @ANYRESHEX=r8, @ANYRES16=r9], @ANYRES64=r4]]) 07:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000000)) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0x8, @sliced={0x3, [0x4, 0x87, 0x8, 0x40, 0x8, 0x1f, 0xe5, 0x44, 0x0, 0x16e7, 0x1f, 0xe3d, 0x100, 0x7, 0x6, 0x8, 0x7cf, 0xc94, 0x74ad, 0xff80, 0xffff, 0xab9, 0x3, 0x9, 0x7, 0x8001, 0x3, 0x20, 0x0, 0xfeff, 0x0, 0x3ff, 0x1, 0x6a1, 0xffff, 0x2054, 0x1, 0xfab8, 0x0, 0x446, 0x7, 0x6, 0x80, 0x1, 0xa2, 0x5, 0xf800, 0x40], 0x1ff}}) 07:35:43 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100003, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f00000000c0)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x1, 0xbe69298a65d6b1c) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$FUSE_LK(r2, &(0x7f0000000000)={0x28, 0x0, 0x3, {{0x2, 0x2, 0x2, r3}}}, 0x28) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000080)={{0x3, 0x2, 0x8576, 0x2, 0x6}, 0x100000000, 0x40, 0x9}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) [ 783.241105] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:43 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x401) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x20000000fb], 0x1f004, 0x110400}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x13c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x5e}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f0000000000)="d8f681b83235a46c111d4ade87f7ef7a5b5d58f56ef02ecd5394585fc73f05af3dcd2e92b5cf2df506f6e038171bcfc7fb296b79f036de84a2e73bf2e43a23fa5d42cebd4ad6a7", 0x47) 07:35:44 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0xfffffffffffffff9, 0x2, &(0x7f0000000200)=[{&(0x7f0000000100)="73c1e3bbbc3d2b02f2153d4a7caea961088c7abd2440d50553378328cd40027bb460e2b0ea9c2b1d5ea75082d6c03f911ba504a581701292d6dc8ada7da3fde315844bb978d4d0e2fee11811589212ab909d3cfc7aef1ff68d403a2769efea5d276fd167219adbc86dd168cc8befb5eefd0062", 0x73, 0x5}, {&(0x7f0000000180)="d580f2eb682c781cfbad6593f9d41a04286c2c80e53f8d83a19e", 0x1a, 0x7}], 0x40000, &(0x7f0000000400)={[{@session={'session', 0x3d, 0x2f}}], [{@dont_hash='dont_hash'}, {@smackfstransmute={'smackfstransmute', 0x3d, '-\\*'}}, {@subj_type={'subj_type', 0x3d, '.'}}, {@dont_hash='dont_hash'}, {@appraise_type='appraise_type=imasig'}, {@obj_role={'obj_role', 0x3d, 'ramfs\x00'}}, {@obj_role={'obj_role', 0x3d, 'ramfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@func={'m\xffnc', 0x3d, 'MOcULE_CHECK'}}]}) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f0000000280)='./file0/file0\x00', 0x8001, 0x8, &(0x7f0000001900)=[{&(0x7f00000004c0)="d793f158b777c5a7d0495b26bef0b856c3c9f3eaa7de1d7407e5f6853cd61a8c12873f49741d885521433a0aca9bffdeae1e4cdc2a788e67e506d0ae224ca568bd64e6e8120bd669898a1e78a78429225d22f8331a1b5ba65110a18305b663f4dc146f9f16216bcd88f174a0ca82bab9b627d3e866b65c4736802a2c539474be1e813391cdd552b6a08f85d0beff03ffa440f801915fe44df24552656bfaf16bef5a7e8dc5370501e511be860bcfac47ca776e2f5d8926543955772b3287653bf5b4d078d5ec1445f920d1400726c16e9786de0ed385b10a13d02ea70a90fc6cb6c904", 0xe3, 0x9}, {&(0x7f00000005c0)="7c655936d8a3738c36b1c7b784a313a275095a4b204c00b52c2a3a0887a701c108556faf1450564d8f4d20ca04381a922c16e2fb1cbb48d9073e6655887f7c935fb3aa7cac1fe04a0b6817b520040a8225eaf567c71d3d566fceb2eab820838a0a7530935f383f99eec065b608ba7e0ed6d7f17b550c203e3b0a8bac2e0737ee4d9efef4d65a821d4f9609060bc9f5f7c3dcc2645d8327888fa073566b4b4436e3b41c848388c43856b383b93e7e2fbc8b333552f8d71aa968652e114423da75e7f03b1751ab09bcc0e4c42e967de006ba0b4868d14dbde7", 0xd8, 0x8}, {&(0x7f00000002c0)="71de768c7e21eb7e2850318523463455d577c0e4b9d45363bbd3de125484c414ee5aaad2ec9249b166", 0x29, 0x8}, {&(0x7f00000006c0)="0e7f9f1edc7fdeb41be8b552cc586c69580f571b3a641410212917f9dd0adc0976380aa3969139a7293aca4055c22b920e641f06fc20fd8cb3faeb24e9a4a90f20f1d7928f45a7f767f48cb2a14d70d75797d30008589a69c8793617cd10dde972f15de3d97736cb31f1a6382a5dd903d93494c7a9d219d61429e2e9a82135ec2d7489751881e9e1c266c3b3925b2d0c2f028e77", 0x94, 0xf1c}, {&(0x7f0000000780)="515114e50501c2ed40edab2069bf5a22c8094d3532b85f7455fa12dc83818ab896337bf9eca79e0c2ebf785cd7052ffc1f6f55a6848d0322887590d031ff9bbf6aaf539e310b003d406db2ba1e06d7dae6c4dba535bfe8b879935cbd643df7a276096753c6a5c35782a330f3a9903dede98952958a6eca234955234a463f782191c1e18341de817659c9e199fe030d2204fcdbb74031640429c086380e50f160d6fbc1b56eb00369d6c6913163dca1cf0e818c864a0d6b32b8332e18bb43374461124c60f21f2155585096f3b33e9f75129ff2c8610df729cd845b7f12713d63786c30f01790e4641bf2de53903871279dc94ce11e0622386133ec2a7d78d49666af311af8f53edf8061114216a5d12241db5b8a159960fa2dd9dc6c8620c815a0d6df2426ae0e6c9594351d6830af91ef84811af8e07df88f4b0e0e66dd11f8f116333169e9ea864910043143886ae603a19308bab68e890278c4663ed7455609a34f0edb87b7bfd222fcc1eb76821a7cecf0588edef66f603e6414b7d727bbcdef435dddf34018e030206b8abe73a74a02a0570fc0006cf5821a121f22494178d9739b9cf906b868e493644b63d4b675c4566b885b424c1b3daae96a4fe019631d002ba4268c49e7d31ce36b889ba3aeb922a47b2c8336657979adec91497b7f89d7fd6bf79f30d1f7be25bf683368f686d050f614b1e2f1cfedc97879dd1a37beba2374ad4bc930c92878dd1fc6446dbd47051b004ed94948db475ae3b5af0cb4cdb96eef1097c65ecb82a4b17ea2197a0b73ecd0812743a9bd18061151e57e1df80a90116266da51b2d2c2f8393f052119c1a92b2cf628bd74bf4a4647bc381886980a7ca3cf76ad992e2698fa0d5f57d881c73bfc0dbae5fe7f42762e184ef8e5ddff2deb252ed99b3c1ae7d4462a2296c8eae115c88d7100526b257dde579ea0d16210fd41daa73c3819f6fc3005537fa95a84b17f4bc4a2f7a242054bbfdc181d104cb2c5f04b30537aa73ccaa2b6b28b996f4ad69f0a1e6223e3a92c658f3d6483fca3dd00471378b1f9b34d775a41172ed0fcc8f05730cd75b1c80964b73c3f00f97e88a9820050a61949eb9cc3450431dfe003fd5ee2e3bc15642757ba1d39253c56a72adf3b8f86f959c84efe7c2ec66519de1b21ddddf3e115f60e4a6a2304d1359c1a21fd4e507839eeafcbfe1711b249c39ac67c304b968e9fee373b11b7e80aac5839008b641c68889793a39b326b77d0a85219204eeeae9ae33e7cff30d5a791a1f00266b0f2071e9dcf12debd7c267a703ce801192ce0c65d5d53ffb1d5675ed892a244dbd60c8180eaa75b87f19affb99e0e7a105e4c06d355625a31124484a148868e6d245c8237b034a6fc07bb13035560e82ba26309b9e613907ed9882a07c076a820968af42f05e74d24836998601a59339afb3b2b27ebf6dd10358864ad84bb7c314a673eceba23c49a434699c5536c6aa08732ad099ceee92bbe29c8d719424d6b58b812e1795e9966a873bc20a38d2720d074d85125fce8266696ead5da479d45274a0b7cde9a6137b5b3266b07eb75c72d9270ad69ee72c45c7c798dc23f5a4f11dbfc5c363c571205c253f533815a6e19cb753c654d118b42023d2f73d5bdd1cc90c815efb269d0b1fdea3b5f08097701d8863b96daa2ef20e300cc230faaf9526be5e7761ffd2bddcb901c4d51ed8b229244990683b1d82bc010ad53cc34130a6bac5eacd629962d20fe69a0c8c9049c3dab7a1d8d34d4e72ce9ec9e917ad0ffe88e2c50aefe7194a1169b0813e1ce9e75e292cfd64a5e22c543409c537229972c407fa6955162c2b5d4294f7b5dbe3695271be6d833104d0836e5f6a7e612dc51d563bc2887597594c9d2f67c653014851ea21edde19509867303341c3f21d41eec33933c2bb8232e874106a7bd4e0e30aec3b81e9b5bb53d5ca96b58928e11192f33f26e2051a56079d76fa5fb6fb33833b67970619368acec3331c30754c7e21974b9941477a4201d5e0d51c89fe6c29e127f12b63a054d170c38ad5982b1f0875139adeb5539e37dc649535a4187f15a1d2388d7e5358a23c91cd8b509f4ab2ad83da2b51c4ffb6963c6731b22c2a54feadaac07ff3ebec2ee6c0678bc0cbadb7a8dfb4bb0fa619d26d59faaa7b1c646ec80505fd4d9f37aa93e4ceeb7da1ff5cc3a2b5e3bf8227fe14e1763d1769e0095e101c664a646561cafdde9821bb8cdd8508dd43bcb600c8b45dfd28976e60bbb774ca761e2a09c89499f9dfcbb09b423896c0265ffa2e68d5c67b73a5c0045d829714c604187db0bfd82d807b64cff69e67cb9dea14f03b015d6f819c0be22cb21dc9adf7b6d379319bc115428c619ad1412d60a0724cd90c059e3d7c9a0343f70a1bb7a0d8ef6f7a6aa96f0e9f23f7dace1496cee2cb91ef7ad758615219df140ac7247d1b2714006a3a36b1d844e90597a9adca8897f574a7747cfd569e88f254e2df71e8c2bdc398445e8b28aba3e9c437cb8fc29fa21f7767e799492f5715430eb6b94fa2dc0358099fd1297aebc0c7d7b3da0690fc7fa2bd811491eb9fc50eb0389fb09cfd2ae822b6e3d22fcac6c0b98f384a5b0f6e579e185c0c633eb668461bb67b54daa1cc0afd27104135b6a75be3b03f83ba49d2a6d3b719d9b84f9d3ca252a42e283e1cf914f669c7fec6d7bd30f1515b12b875b410f9ddd67e5411a8d06e6d734f957fce9d56b9621dff4a935107444402e0f7fed26d94668388bf5a8e0917a2702acff7ab8f5b5d3c77b9b5adea895d0fc9f63f9a52098b5f79c473cffaa4ad52477893b86a044548f6061fe17a84a8ae0e6021357a4513ac800bb0e028994bcb11a52cc0fb2eedda12339c5d1183ceb382e01232cab519d3a50537e8106133532cf50f82f6a1be42f1f3f85244f12c176148fc121ee6cb4d144e363b0c7c3332c9fb035ccbc74f6f69e05085285646d9546c9a4ed138c0dd759740ad6b246931cfd5d35ee3f9c41c0e7b1355c1d05dc224ac7676098b8f093acca49982e7da17af18be2475a676ad6af580ec347a924319b44a008ed663261ee33df7a556c32610970de5dc76bb5b77316555967f2637ad829855fbb7651982b9b0a17b010ce89cdad7ba82f8d69f2a58d5aa7827708846a633ad6b83b8efc38c8fc9b6684a0ce7f776baff120019c745526dd4fadfbebfb6fa3fc44c310766bfa407985e0dda49df7563c1ebefe4fdbd7c6162757247d0afe2a95afe62d4e43deb3d3600e3391e2c4f10d1feacf4a1b9ac06caebf322de044d70d51070d25db918756d7c052c71ab8fbdfa53dfd0e4cdfc00b3a471b7da4e7800a35a4031c45ccfd27dfb041a6198bb25778cecbaa1ad52d06ffac678a937cd7c980350e95f0d21dc9564ac612a2e4c479f74774fc112707e9023e459ca5c99c2c661463bac1b3e20acd177bd3b3c6b3dd2bea139f6c8626631f066317daebf69f24fb571b3cd5d1bd0fb59d7f3a87fcf763ced2bc0eead60d10ecb46cb33ae8ec46cb1163c56fb285ea65fbe953fbb2a1733828fb770cd712b017b0282ac186088c590643b7025c0db584a752e7e5450e9266a2041fa10bb4bec50eed238a1d2f8386f7894484b757904f59d17c84b6204a82aea9ea9dbd5c69310bd2f5dc6912a5d5e26b92579a6ab783e4a9b71ccb7751a5976d86d9a930a161a138c92e109f30df05fdc95be149a0f6f836d070f632f9134627550b9d1563cbe96fa83db85da916081cfe9957331a34df37db8bac41e565652dd576f76ddb18c1daa26405b3e6ab19b9df75d8cfad356ae54ddb9559a05c0a01bfca05686e3aadc29d58b4c66a39c16d13765dd9a9b323607510d9363b65bb3ecd7131eec2ebd7e847a2e894af54627e875882058bb166a6f796824353b0a1c1bcd433fa2e0f96962ef404a008a699162f56872d7ee278b999081e4e74421179590d5cc40018fe7f7c6d440085e4fecea02ab9bbc48d4edc9b9e334dbced789c179f2c3acf99d3c434b75b6f5bd87fe771e73823e109008b4a608b5b32a77157c1b835ea18b26ee0195a19103b611b0368c7532e107f053e2f1f6a2e5e2f2ee1d4907109a1c5730334fa05a5192662890609defe23965dcc349a4ad747786024b7be0505f34c62c07cb299fd49f28b40bf5dccce2e2ddfdc939d44aaf0e3b96598a0801216c9b30ecccde5cbfda4784fcdbdf1e518b0e0c64d4faf2d9535e3dc42407d5c85113eb6dc4cd95a6b49fbac11eb3a883988fd7acc0b1ce0db245074a58e418443d04e0c6f94c2e857b76b63749fde0011aae24a5de1d2308b1c45069d56baa734e1f953a48fa74249cb5d4d4f2bca6b799d9839077865a8cf57a10db87737c9a779f90216838b7918ce513e0bca2416a0cb8327c0e758cea884d4f7f349fae83a91322a4cd16918b538ea29591ec6ea6ebf0456c55e69ab76dd663ba4737b11f31f6d29c84d4feeb555b873658ce80258fb96f087eb1a5027c7d04d26c36547302e6952a89eadf0ac2ae3f37b5129bc89d8f619dc4729eaa2e060121a688d6e2fcf66a90ba33d758af6e183c17aea21090fff837fc200dedf43ccce5b6bd254b00120890406ac59439e52e1769a74979165481941898ebfbfd076d022085815a0fb63a0dfd1be028bf4dd30e97e5eefbaadb69be705ed634562b92b2d7a074d3abe6c80a211a83c694d89587dfa2f635a57426e637dc5e2a805092bbf811a8d565186dfdbef0d15fd32d628653b7cc37b0e1ff19898c7df2aba8f0d133fc453263661b21cc4876074419a034e7a7778cbb34acb326b1fdd5ac7b24436b6e2c6026c3f80c40a5fee9075ac06655e2f409e42fb08c8fc9b0bdb2ef1d01391c7b89c2cbfcaa8e35a7529a7ae42345fe7465130b9b3b233fae0971e81a5acb03b416ef8b81074f658654cbee3c8d96d969eed350d96c976d29ca4b9d7b61433838be67d12347d84681a0541cdd2d7396af6eb0dcd54234eddf4d1a4c209a07b9f67e3f325c4cbda86d7b14b11352eeed7874380d8f73d247caee6455a76d06a9075b86dbc8269cdd1eb07beb287e81f5f1ffe1b85bacf523e3e724c2acc99fa57b474990d1fbb3dd7312ba3b11b16f909541554cc53eaf7d0e8394ea67cb6a7c0bf94c91a8f855b811f96951d04acf13fd5fd0981be94eef4137cba4838590822ab5ac507ee5bdaae69a8b815016f01215c649aa546f82ab32f463182647d9d27d7b99844118b5376b3da2c6cfd9a37a867831f537fb200b103fafd9ea28b2e4822d8845a06841c4baf198147dbc3729aa901734e7e6edea1ce42b3fa883c557f8abd5a5fd6e4186487f15d2d3d43fc35dc867c6e9a1f97d590e1d58ef3963d819a25546075f2d03e8a1eb5973d5bc9382940d90d010cf5c529b8125d2c9ebc5c0656a929e39b7b9907a5c8c91cf0ba8b9984b8f03c456aacb02fd38c0df2bb7310211ea489c07cab82dcc52ea0660d91e819bdb34fa84afc9702a274d3236f0faa5079f4ab25a8fa5bdd177f8ffa15967a6d4a65029573bec6814fc04b7eb33f7994698923d03c2b5d600613c533886b7d029d346a6c21bc566fb2e3d4828a8e78aeea7a8136053fb0611d59e89ffa60a3e5d989ddaa5332a06d6a3a7f3c5e8ace9ee4d16f433a6126449501ec1d03a713d522508d71a4f9a677cbc57d91a6389d1640f31389cecd3244eeb95fe76c951eccb86227d37f2440b5e32d40ce0ab4d1084547167d7a0dfe379017c3537d84d3cbdf0813a9edb1d6a8a05a43ee960ba721f8ea82f7655a12e89cda", 0x1000}, {&(0x7f0000001780)="173dc17d7edd4f7446711797ec6ec0ad84b1f2fca664475db15e1def72c8d89e707c279ecece1b067575dc3f827e2a2f21aee213d8a2c2faf6532a287032d0a157e1a1388d4ff98a8a4fe72acccecf665fc68433d6a96aded33d95192358750f7a9eaa8ad2acbf8a3de01610bd", 0x6d, 0x2}, {&(0x7f0000001800)="cdf9cd8cdea4cd7a3d647906ee78ff0899108f5fb9f46c00690f392b72c9368b", 0x20, 0x101}, {&(0x7f0000001840)="655e384ddee18dcd5af43fae02d9dd11ab67200ea25e8ccd357fb2029c38bc87ec3d3dfe1464c75337fc0e434eb611caee7a4933fe6d22e0c778777137f15cc5f9162f7d07fcd533a3f29b9f5c5826e68d2ff59cca57ef7b1db589400d1a7077586099339dc5e225178c19bf17a49c3b230bbef4099aeebac1d98551ccee85320c05963d668781f03da1c9f8d7b37d65659917288f32bedc2997542fb54fe9408f74ef", 0xa3, 0x3}], 0x2000008, &(0x7f00000019c0)={[{@barrier_none='barrier=none'}, {@balloc_noborder='block-allocator=noborder'}], [{@fsmagic={'fsmagic', 0x3d, 0x3600000000000000}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}, {@dont_appraise='dont_appraise'}, {@measure='measure'}, {@obj_type={'obj_type', 0x3d, 'wlan1@eth1eth0\'(vmnet1[cgroup'}}, {@fsuuid={'fsuuid', 0x3d, {[0x1d, 0x39, 0x32, 0x34, 0x33, 0x66, 0x63, 0x34], 0x2d, [0x66, 0x64, 0x64, 0x65], 0x2d, [0x38, 0x32, 0x38, 0x36], 0x2d, [0x32, 0x38, 0x64, 0x36], 0x2d, [0x38, 0x34, 0x64, 0xa5fe874df2cd1b6e, 0xded0d4cc4bde667a, 0x63, 0x0, 0x65]}}}]}) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x540, 0x80) r0 = syz_open_dev$cec(&(0x7f0000000300)='/dev/cec#\x00', 0x2, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f0000000380)=""/26, &(0x7f00000003c0)=0x1a) 07:35:44 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r14}) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r16, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 07:35:44 executing program 3: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bd2}) msgctl$IPC_INFO(r0, 0x3, &(0x7f00000000c0)=""/223) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x57ad053dd9864334) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 783.938108] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "fsmagic=0x3600000000000000" [ 784.031936] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)=@urb_type_iso={0x0, {0xd, 0x1}, 0x1, 0x0, &(0x7f0000000080)="9973d24a54513251cd879ad7383127c6669b93cceb64e4873c92c5820e4e412597c8f7c39e16f4afb5aca0b0cc85be98bcc7791026ab00bb3bdaa73bc23c11328d298e87d52f74582add03e837656817fbc09210a708e73ff4f4b0512f6d1bcfa20b3384afbe8915bdb7d3b552e284eec8a8a52bb06555", 0x77, 0x4, 0x101, 0x1bb, 0x2, 0x0, &(0x7f0000000880)="48d059c267040b126ba664543a812371569877c12da4f2361883b935c94b5a900b07005c604f952cd3bb69b155fbd7ffa5f10c8448653a360c210e2cb055717ad9a659186ebc6fc5e6bb4005d3663df6f1c9048916bfd12d4d815fd63263954e2ef1b938f45edb4d8395a586127760759e9b8b2f31d6ca4c8f67f46b22a32a940d7825a0439fee53cf0a0e822c66780a11b72ea90e6a9c6b6fd36c0062d4243ec9cdfd15f94886d1501b478d30cbe2c48380003c6054d0cb56dd8c1e8124d8cbcccdc8a0560129d8f644c3ff2b3be9abcdd25e2d5bdd77787475503be1d206b12e6ec3e6ddc349ef0b26155517c4ad99fb91203aa36d023f3b1ead93e8417e80d4a81e323f1e063353f04cea96f093c020ddcaab9a561b3d239bf659a81adcc862cee1d9cf2ff064dda6f44e7108555e5d8e3150a3ea541ce17dc3ec58440ba33c08df6fa3e6fd8612490a7fe7b5a4eb94057bbb3965d1dc066aaace89225488724553d923a34b808c0366ca3868c5917ae8cbdb221a812358a466ca24d3de1a6c1c0bc960416e8a05a12f097fc5c0c714b73978ca9fd60ff88e72c4da54eba2cfe79648d010440158b09a4c5a6ed7e19d7c24d1833e0b958fe7ca4270af527190414603fe45aa2aa6bbbcd68b7c8151a9c5456213284c7e2a28969187c51322ddf598c4c8eeaa63dc58fc8dcda75414006f945aafd486e80500d5ca02b7757a1fb929dc021d7d29eb3bdae86d8f7c40bce6daac5bcda6dc62c84877c799d8cb2689f5c56b2d67c3450adaeb4e596b0c357d9e83e402b39f2266bbb10545bda740e17df9f948160582360c8aa7b8dcf51e996ab37c7392b8f01a0b2e376251edbcedc8e2bf44783c836bbee550ac93aa20e906807d15d964044638301592f9d1987b452c2ab74755dec156bcc6fcd3840c78a0542f9b777bac13cee05ff040996d6dcfa7353965bdcb3993452b184adc6bd470ad07a13e9283b887cdb0f0bd06d256b418305f8c8e2b346dddbad025f00c1c7178d9c8923a929b26de7ab5108ecace668801017b1b8938aac2f800d024d90c9ea72e645a193649595e61f1e51de2fd858da235a5d6034c8e0696e47bf9fb20f68931d3e8d40778595b0d455b490e858630ad85a69c2126c774b2b144a69e84b650a3e3a6db389646bcbd540b997bf9647b472ef1bfc637bcd376b3dfb939601c2167fb8851242fc9f4cb2539b09d3dcba9d182a6e6a83c04a11ecb2372cb86986239db829bd87ac567ff2d75f57902c3d5af6d79b60af994aa386bf15760cacbe8177fd328d2a2aeaf01d19f108cebe7443b2d2189c5b793b59604dcd59ee928090d07166c2775081c677fa0bc21bead93505322ca95ea83c035768237ef9e31d632b282e53391ff92b198eb910d18e6d2b9485398dbc1a4a6a43b7d254603473128d81174aafbfd8516e3a2a00b70546eb87366b3c9d196b3cd39d3829a06cf08ccaecb34bdce8effb6e8550b3b4123f5cfdbfd8f8fc34ee5d88e97040e54e89959f904d0c4b7b84e3ac6d4229c36497f3f4d4783333523146312690b080f531350cd17f6c09b02be8aeb2efe73623d1e3ee525738dfe1836834866f59777e92776775e08aef1b3cc3bf79749fbc04c048fa09ec8a6b36613c16b3aaa731886a8d7630d9c1dc6ab9af0f6133138ddc3c5312e85555edf2d5668ddc7bea9f69e63b7cee511a4d1e5ca18e7f198c366cce84e85449ad7e65b58c9fb29c1a6273f2ba92ab72710ce1a99522f471bb335cb5c8e790761a78a4ec58e841cf709ae6c156d30c400abaaa20496e5d4eb9316aa7d6a8d95dcae3d41289d61bf0e747b1d5c10f605ea6c519e47a38a40a5d94e1fff68593cf6692bab49d0dbd96128acb9fdbd62158f2ab6a1c99be91d61d375dcea9bd4158d086f79b04e0aeaae2e3ade78e499667dcc8c93840649304b098d9df649f6a41a434fa298a306e4291f69ec6ef227b92cebe759257cde91757b1da896ad1c147f2e7666667e809e35ceb210efe7367bd75eed6f2468cc04b5a3d794ced6c923d3d4d999214dcfaf4c9255ff2ac1b97fa98528d3f87ca18e64fb759f70e65db58e4ea87304963b59bc1f5bc905c4d0211c159d4d5a853ef0a3c469fdef9822e1c220a47852044386a8e57f1ee2dc61a1da0456394f972e94a9e3f1f2a8438eba8ab73e60380872ba73d4bc1fb88481f9bc52b65aa9a73e1ee1cd210f6eb032c19ad4ef11d4bd25c22f440a2551b1ea3e708868bd5ce1bc6de6790e7e734611faf151cf5d4604180e63641ba604c2ad49bf8905f49093f1aaf61f82a896eb4b4d304f634060bddaccca52d8966aa4142a61e8d24e5880f912206a425ebb4aefb749ef3acc32b313e3a0c964b70190b1edd937e6c5a02c53a23a6c18324f3c2eb9af0c8102d336d2d80dc4f7eae49bedbfe36fd698240d7cce23aed0733d10e62d0da89d5e5741e39725dce49c16e8456663800275aefc2d85557d6b6059a66398c7d07bb10fc5bfe964bb4b12d453a6bffe89cb3e69481775bf85a9444f1061b700b931aca22c5eec3ea08255aa7628a05e5b9d097820f90b7ddaa0a46e3ec81cd1a2ad0e24a4d100c4090d4db8986859d269ee896304054075650f67b3cbb94ce5fad72e4ce1feb47794e623eba30b11a69bf4d3f32bd903a27a0f981192578af7fdca2d92f153001f723ddfb88df035ba81edabe4ebfd7fa51872d8fec3e10b948d941b1e335a5b3acc24401c1e5f7fe1009103671bd075b616a64e53d6a53ff548b19713aa1701d0754a9017e9a3ac863ca006081d661ee19b62ed34da40080232116e3b2bf2a5ed8c9b3f6665c91218f401c3db36d3581243847a4a33fcc595dae669f42e9b6253088d5a478f223af7b53f9f19dbca748d3b4f19e89e767993d823ed8c38f863081484d40509900a3d288d2a2943bbc3e7b33ff33b082bb7ef07cfa29fb47ab62ad9a4a6693e5fe5316ef00894639574c52e06fce5db7a2b7a77e1418da78aad26f483f143156d93503c3427c67b76a79768878f667a5e95c9e5fb2cdb66e64cd85e99c81d938b14dcad5873d5d00f35cd4081ac90eb4f8b0aa993c1690aad2dc3b03ec389e9015194fd4af1fcdba140d5484a98862e1850d1b05dd807802a34d9d1bcaa10002065c8fb3c412a05550d21521de17b6337d3fbea7d01c4e2ea3070ba32cc914905a2f1d48169ef353d121030eb5689551c130252c13477ef19742177fa860bfc20d5fc7b9f869547d0d6cf6b3add977648d14778b713d5ecb4d839842633b5d65d5ae86a7148fb09071b12d888c2e4eb379eb3da87e56b0cdae09fcb5056db806e8f37f17c7d9ecd39cf339539fd4cccd727b5ac1fffce534cf9301040db508c9a79b546b64a89a51d4a33cf38d302a4cd6e4d82e8d6532567b4471abe31058f1abcf166ee744dd572642779030806e6af5db68abc7c17a6d1d43eda8e3a45f84422f4f933f7c56e4a2392d317f28f4336e74b6c2c97d2fb8f18d5bc6c363b9140bfecc5835104e084ccaee96acd3c688a18639229cf337e05747f5e32d66f6c99f155e99561edc1628f49e292308f7354992f86efa09d499077df35700875e9d5fe149456284f4764d08ac7c54e5db13b161ead12b331ad49a04b1afc51c63b22cf0ee87fc0313c0a95739b725a0ef5df608dfad8ad73eeaef4a8ad18ee28aefe4f92b49e631b3f65ed2324469a8ad84503691d5b70ab3a308dd7c1f0818d6e07cedcf54b39db98c8da3480292979c6052e51d83343838208255fb8a33edc92af0a96dbac12190ee94f68870df93a31470ac3c0088e28c78b9c3ecb1f6c4665cbe0cba69350dfad1b960344d77415bf24be99d63ac09e501c701816c45a07fdd787237f93f31249a327815d4bd3b0992709a4e7f25fb8ea2d5d2b48b18760c87c67c5bc06fe9f43b3d2b5010ac2c1bff8a39ae9aafe6b9bef263f87a61c1a91c4e9977a77ec7b3f8a65bf2acdf7378e39a6ae726c5da97a7c3ea14772d64e7e1704115bef3db887ba6af369fc77b4fd0f1eb98bea43a21b6d7b4fa56704a31397d0350e63c7e2b001be259404a14444c101a253e9155235b487641eaa5197aaae427f09a4f1b87c10fff9129e88f7d5404f47930921258f70025f5bb4df00d621ee98c3212f4c8b9d1bfee87b8729133162e51ec0181ef4ef881bb9dee87aa8c07efb403da75c6296bf3278c96c391e8d818ceba661a42ca64ca6441f2700b038d9045021c465bb9b504050e9c7fed56b24090c56e7197afeeb413f8f5062cb561870935c3f342a4f54d62e50b76d102533f282391ea57118f1ad433b4fbb06e1ed9ccee0706db6be82f95679365f50791055c3114ae80a575f212c600989774d256c32c3703e2d462a280c15af3ed9967a973b2a22bcbefb3ac9263f6be44dee64074eecd70505abb65ee1d6f777f8adc75725ae01117228e0f4969d798b1a43d695f87c385db7053e4f2a6c0802d2c0ccef92bcd59e011d5c1af56365c31aa44e37c6533a5e2f25e49ed1b5c2d4df37aee87170941efa8046c816d7a3352863c3178381dc5784e113ac615468c1c0ac2a9c56b1e9e18cef6e8023f956da40ed6977d82482fa6c06dbccd06d98ee05de8ab23893a5466ee1fa08e38fc65aaedf01ffb51e6ff602c966734e39c981a9d51ad879228406c0c68d20f69b971d39f0f1da85d219cbc1071b3685b7510fdfc47bc4d78e7fc18a26d698beb1813336d79c90e8b724938b31d9bd6cff11a3b081f20d5e917b5a6b8b7173d9937678bb405b379d3aca657091b13cd4e9012bddf1894db24d5772f42cea3e04fef1883be24541ce1129409bd8e80ac18ed407c4c0f148015626b2d9f6a785c100bb8619d6d227ded0755c586c11c5166d1863d2385ed92209f656cbaa748a06d559d66cb06cbc4c3952451fb9a5dacdb81be8f72906170098d4110b0b463257b3eb136f022b3340486966f28ce9801fabf12b1a8f34fd80fa4a116b6f663680af6e6f0ff3774dd368e030e48adfe2836ab9da8b10c520c0ce3d64e58ae41f5137b3714228d15a16217ee69d7ff905e962d4b6aabb7ddc80e77645720eae5f55acb70147b9c9cbe59cf43b5cda67278185af569e5be1a9e6cfd09e917672184cbd62ddf9c9f2856a9ec6a6aac061a0c39101869eee32dd70bbdf3b7d613ff57723a4070cca8e572e23ba0d30772641b83b5d42014c37085318fa3398fbfa146bca174c55ea2c240c719454f9041eb39a713f941c946d0d52018c335893353705825266513740acc6f90ffc0182095661fd4d51833407916b4e4ac56d00ae3b774743352bcdbfff9339f68b174a5a709f60b6bdd43bf2beef16e66b834ea6dee4856f0bd069c7fb51bb5879364f0d37ec43844da6bedce8be6886dbb02a53f5b9269fe13d4e2849a19d25c145f8374674baf8741e6cc4280c00020ad60c001cff3f3c14a31432550003e1e34c4dda7ecdee9bbde0d26c025f8be3631c56e34ab647e05e36a05b96c855c5d268f7e9c151163f0bb313a26ca7efa4866c37e0573b5baf3b768fc8b8b08987a1429997c4acc83384cc888e65e6ade44534070fe4f23a6e94199edc20bf78ab856571b867137d6ec8cd47f88bb688ccffdf6b77f84711e9fad478cb0b481c67fdc50acf092007ad2f58db85f2f91d6b0428ebc00d5452868834c876d5a3948ee59e550a6fc94c4e08f61d15c055baeccf82bfd01b715ae6cf94a763d18e64723fd79414bc4cfde842442e42e90548112324abda130d4519f1fe137b282211ada594550520", [{0x0, 0x40, 0x6a5af24d}, {0xfffffffb, 0x535, 0x2}, {0x4, 0x9, 0x6}, {0x10000, 0xffffff00, 0x2}, {0x490, 0x1, 0x8}, {0x4, 0x7fff, 0x4}, {0x8910, 0xffffffa5, 0x9}, {0x0, 0x401, 0x4}, {0xfffffc00, 0xe6c0, 0x1051a918}, {0x5, 0x39, 0xbe}, {0x101, 0x2, 0x1000}, {0x1, 0x1, 0x9}, {0x2, 0x6, 0xfffffff9}, {0x7, 0x401, 0x3}, {0x5, 0x3, 0x1}, {0x1, 0x6, 0x8000}, {0x1ff, 0x8000, 0xb00}, {0x8000, 0x5, 0x4}, {0x7, 0x2, 0x8}, {0x0, 0x7f0e, 0x5}, {0x0, 0x0, 0x400}, {0x6, 0x737, 0x5b00}, {0x7ed8, 0xfffffff7, 0x1}, {0x7fff, 0x3f}]}) 07:35:44 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 07:35:44 executing program 5: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r4) r5 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r7 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r9 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r10, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="100006000000000020000000000000"], 0x34, 0x0) r11 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, 0x0, 0x0) r14 = accept$alg(r13, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x100100) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = dup2(r16, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) r18 = dup(r14) write$UHID_DESTROY(r18, &(0x7f0000000080), 0xfff2) recvmmsg(r18, &(0x7f0000009d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)=""/35, 0xffffffdc}, {&(0x7f00000029c0)=""/4080, 0xff0}], 0x2}}], 0x1, 0x0, 0x0) write$P9_ROPEN(r2, &(0x7f0000000340)={0x18, 0x71, 0x2, {{0x0, 0x3, 0x6}}}, 0x18) r19 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r19, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES64=r19, @ANYRES32], 0x5, 0x0) socket(0x9, 0x2, 0xff) 07:35:44 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000009c0)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f00000000c0)='./file0/bus\x00', 0x7f, 0xa, &(0x7f00000008c0)=[{&(0x7f0000000100)="cac0", 0x2, 0xfffffffeffffffff}, {&(0x7f0000000140)='@w', 0x2, 0xb970}, {&(0x7f0000000200)="78c5a76a7a2847a5f350f63ca6f44627bebd2d098a40768826163c0be4ce037c82459db9f531a6463e2ec64f961f4889945c52be686310b7eb603061568ef4f604655503051dce911eb075c2520ba0d365e1be7728efa040ca6fef8be215b9b8831d274037", 0x65, 0xd6}, {&(0x7f0000000280)="feefc11f0c6f9e223b2edc9db2f82ac417b6c4e1f5ed68cacf3e53eb521e2a914e27a1b576202cd68f13985b8b1d2fc0282a418056374f6a58b790559c88528f531a7840cbfaa06353ecbfc68a5f13d5fbc13e2541303fe0b63e1bc770", 0x5d, 0x2e12}, {&(0x7f0000000380)="90a7003dc548b7d72eb2df041a914a2a4336df5a82f4e99c49c004ef1445c0aaa9b85401b015c12592cbd2286dc7229cb203f36bd10edaec6053246dce425935ea212a441de5c1d8004cbdfc24b58b7b7d18511eedf08949349c93aad5d077d15a3e9a6ee31538d7aebc79ed3613fea9da6ed7edad2db5639aa25fae62ff6e5a9cd81643be7d9ab81cd94f7d70588969b8041eb8644bc586fa8fd915748a1862ee5963fe78de9c20c238949c7498dd9213a40c13ccd0ba5127242a26ad856b005ef4642d1290f02d90d11f93", 0xcc, 0xa4}, {&(0x7f0000000180)="7d7e7134cab4d72d3a2ba26b3c174c063c969a0d1f3feebd1f3b01b312faeb7611115192", 0x24, 0x8}, {&(0x7f0000000480)="d3e89ccdf0982e8c1038eb427797136ee9b6aa464de10b83e0622b35c7b78f0c7aead08ed0019d9cf47be9a003aa622db76da67b58fe244526b9f99ea0f94764a836252bf7a1169dfb03832218ba0a88beb6af829f301a5d88876052701b54d0be383eeee2a4ac1a5887e7817b045c7a9c1be196bf914ea410a38c7b2dadae76838528412b5f69fdc813680618dd27b6ff90290d7f6572e1e0db977c87fb99fff2df1a5bc4481ac8027cd477ce69bbbfa82d88294d0ffee5aa5794e65addfbed4aff043c74235eaf472c8a7f2ab3a339917ca5daef649c9101f6b3de0bd27eb7438e9ab4190792382ab8e8db1765f1", 0xef, 0x101}, {&(0x7f0000000580)="8ace3f4c5e5c42773090b0ace3a1d6280757cf3418ee3dbd2e26d3eeec1b2a7cb4b1ed6162a36ea282811236647ca234ae21e2816d1721e7c30a3f6c172291f0b76dbbb49aa40db51a773330da6bd31f0664df3bcfe0d9fda3c4fd9519953c0cdb53d9b28de5879a30bff374cb56074910688c7ae4ba4698079e93c1e3cb40f6db5c76fcc63baf0632f11c91ac80b7e070e3cbf9", 0x94, 0x9}, {&(0x7f0000000700)="f94f064bca51ec803748721211d72ad547f2413e722e9dd7bc311276171743fe084c4e914e659627a947463b16fd439b6b3e86e7ada22344cbf95986d55c21ecb2692a86f852a7daed7e980d4012a8c064578a1db96b50732337943b37bc6247fe00de8d8dc703cd5c6630c7e02517f4d637bce85ccc1e6ab3e43cef551b3ca37c7c9ef3fd4d317d7dba84ee9bb29253e67edc49ba4ed44496f07aa632cd481036b3e3edd6ff63f910bc98b98c24db5745a9adbd9e10f75b79d4d6a5c1c81462aa42ecbc660d459065aebecfade63f91ee2d47224c44c7955049a0537051db064056d7dae8ab3b9e533273c6c082d72c63", 0xf1, 0x30}, {&(0x7f0000000800)="29686673d86c7490d0c5dd9a69816bf28ab4f3979fa1e89a66a447cdd50f99f253fad1c787ac74770d9fc6fa8ef048d786e2354f5631e0acf968ead54c17a2aea3c1d832ded95bfd8c2af7502e9e7278a8cf095b84621811d3284f0bbaadf3caa64e0dd03cb640c9c96cfd9403ccfa1ed0942d16d6be0c471aa790099c7a9cc621ef700dad4042e535a293b36105c590e02939542078179fdb4d3a2ad7b1a7305ebd8018576c", 0xa6, 0x7f}], 0x2, &(0x7f0000000ac0)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@map_normal='map=normal'}, {@overriderock='overriderockperm'}, {@dmode={'dmode', 0x3d, 0x9}}, {@nocompress='nocompress'}], [{@dont_measure='dont_measure'}, {@appraise='appraise'}, {@uid_eq={'uid', 0x3d, r0}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@dont_measure='dont_measure'}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@appraise_type='appraise_type=imasig'}]}) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) truncate(&(0x7f0000000000)='./file0/bus\x00', 0x8) 07:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000000)={&(0x7f0000ade000/0x4000)=nil, 0x1, 0x0, 0x28, &(0x7f0000b20000/0x4000)=nil, 0x75}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/#\x00', 0x908, 0xaa080) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x1, 0x6, 0xffff, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000028000000000a00000000000000200000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r5 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x7fff, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f00000002c0)={0x1, &(0x7f0000000240)=[{0x7f, 0x10, 0x7, 0x120000}]}) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) sendmsg$nl_netfilter(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)={0x13a8, 0xb, 0x2, 0x400, 0x70bd26, 0x25dfdbfc, {0xc, 0x0, 0x5}, [@nested={0x11fc, 0x7b, [@generic="dcd4084ccf484d030b1e5a2b0f64ed470f0c82c3a1fa6714b13a362009a6e51aeef976b54eb6e259e6487274b341211a8a9cb932b85c596aedb4cb5ad8c458f41fd5d777237bb841c995e014a558da8338695d718615c903ece90f303354b835e8aed31e5fafea0c75ea841203ab80d550267cebf3b1bf41678d0f221cdec6bc729ec432ba5f9c95a62559fc8cc07d291fdebcc939aa935f3791ceba4afebf7e795ffd4f6d80a0ba2d80da6acb41d6de51aafaae23ea9e17420f9a1c7a7f83fab07894c6634d9733ef237b623c0879b50059d47eb8c0ca91fcdef35f75e9256708c7abc7cbaf27fe9769bee462daabb8b42225a449", @typed={0x10, 0x4a, @str='mime_type\x00'}, @generic="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", @typed={0x14, 0xad88, @ipv6=@local}, @typed={0x10, 0x37, @str='/dev/bus/#\x00'}, @generic="d9e6021c089e93d46913403f4e9f6bb0b025cc7f5c84eae4ea859b8de1cbdc7c9b19655edd2d04f51a6ba27d94379a98a584a11602bc448fd76f021bba5a599757c9e9298b9e2932344148f5390dd1b273a128259510447a4f", @typed={0x8, 0x82, @fd}, @typed={0x4, 0x3e}, @typed={0x68, 0x75, @binary="3b8b81023e18eccfd6d6b237d868b6a353d3d09999f8efcee8bbee3a1b3e8c53477d41fac1b93576d36af9dbe23e2428a60afc5344a4487a079bcc7383185fb34a8ebcbcf330738f15d18595b3c84208234ccb5aa4d7706fef463199d02cbc826bd674a3"}]}, @generic="3f29b1c2d532c9b886de6894d488f6b4c18adcb285d6b9385400e643bbf9df3d949b76a57b857049cae1d3ded51d731456277047b611206ba11b6e1c4a443696b1e391e5178cdcaa13fc3fd85fff08510cf1647a129d155455e183d9969562945bfbe4a8c63c24cf417b0e602db236d206b602488a28895006d76aa79fc2ff4a64e123a47288ccc5344b83073395a0298480a492de928861", @typed={0x8, 0x3, @uid=r6}, @typed={0xf8, 0xc, @binary="e9658d25728ffcc711ac36d1c192ac97c12d9a8744c519196569c9bd418f7c4646aa7a1aee0aafb5d81fb177ce08df29140117a1af2566fea745b88557f3174a14c970e3ee984315278c52798dd79092a74f93d7b3ba9e7ca5b34430c12923850906011eec352501d8af097390e1928c3bd51808cb64b308f0920709042501475ffb76555866d88141e2d12f524b6dde248df98e3a5e4b11ef72223fc153581c33bf4fff7cfa2263595ce5c7b8ced171006c9e263304f6ac934d341efa0563d11260a069683914b452daa549d6b29e68c89ea5431b57c58f7fa7e9cc088ff72359a7ff27ffa24cfafe06b18499ac493405"}]}, 0x13a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000300)={0x1, 'ip6tnl0\x00', 0x4}, 0x18) 07:35:44 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r14}) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 07:35:44 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000000, 0x12000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r3, 0x5, 0x0, r6}) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:44 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000adf000/0x1000)=nil, 0x44d3, 0x0, 0x4, &(0x7f0000ffb000/0x2000)=nil, 0x8}) [ 784.507857] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 07:35:44 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000080)) 07:35:45 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x10b, 0x4) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 784.697743] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:45 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000000)='./file0/bus\x00', &(0x7f00000000c0)) 07:35:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup2(r1, r2) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000100)=0xffffffff) 07:35:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) readlinkat(r5, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/139, 0x8b) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$ASHMEM_GET_PIN_STATUS(r9, 0x7709, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:45 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x100, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='\xe4[-{self!{vmnet1\'\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='ramfs\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='/dev/userio\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='ramfs\x00', &(0x7f0000000300)='user\x00', &(0x7f0000000380)='\'eth1eth0\x00', &(0x7f00000003c0)='ramfs\x00', &(0x7f0000000400)='ramfs\x00', &(0x7f0000000440)='/dev/userio\x00', &(0x7f0000000480)='/dev/userio\x00']) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000500)={0x100000, 0x4000, 0x0, 0x0, 0x6}) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x8b4dae782d0e4dbd, 0x48) stat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680)) 07:35:45 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r14}) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) [ 785.006547] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:45 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000000)) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x8}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r5, 0x28, &(0x7f0000000040)}, 0x10) 07:35:45 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) fcntl$dupfd(r0, 0x80c, r1) 07:35:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000140)=0x8, 0x4) r4 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000080)={@broadcast, @loopback, 0x0, 0x2, [@local, @dev={0xac, 0x14, 0x14, 0x22}]}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5387, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000300000008000d0000000000280012000c00010076657468561c64a1004e5c4fff384b76a1711800000000180002001400010000000000377a", @ANYRES32=0x0, @ANYBLOB="1a00000000200000"], 0x50}}, 0x0) fdatasync(r11) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:45 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:45 executing program 4: ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000000)={{0x3, @name="b07f22b88760bf93aaf240b492e2fb9bc670b301a5f7e49e2b104b126b852a88"}, "61916e417a2d4fc0a64fe043fb23a66be17cde84dbec5408276d0c212b6a5f2b", 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in6=@loopback, 0x4e23, 0x9, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x0, r0, r1}, {0xfffffffffffffffe, 0x0, 0x8, 0x10000, 0xf32, 0x2, 0x400}, {0x7, 0x80000000, 0x6, 0x1}, 0xfffffff9, 0x6e6bbf, 0x1, 0x1, 0x13537086c74b8a7a, 0x35f5574fe1339b7a}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x4, 0x3, 0x7, 0x984, 0x6, 0x4}}, 0xe8) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 785.418325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 07:35:45 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x420000, 0x0) sendfile(r0, r1, &(0x7f0000000040)=0x100000001, 0x800) [ 785.464095] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:45 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x3}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:45 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0xf, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/mcfilter\x00') ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000080)=0x7) 07:35:46 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r14}) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 07:35:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000507000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$sock_netrom_SIOCDELRT(r8, 0x890c, &(0x7f00000001c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x1000, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x9de5, 0x2, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4001001) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000507000000e6ffffff0000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=@getlink={0x3c, 0x12, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x2000, 0x12000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xfffffffd}, @IFLA_PORT_SELF={0x4}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x10001) 07:35:46 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x100040, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000700)="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", 0x1a3}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="1d0000005437e2e1f5cb282ab6010100000cc9a90b0000000000000036f1000000000000000000001a00000000eec93c6c8681d773ab9b9e0468d19348ccf601816461d3ebbd3897bd28c7d05ad1561858e4b7002dd4f07e5caad2d77b9bb5ac95e78ff537c19ac11bb4d8b030330ae43239e9094eea9baa21c4046f640804837b3a31a3a8e5ecb18713ead2ac7fac771636bf16", @ANYRES32=0x0], &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xffffffff}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x401, 0x401, 0x0, 0x9, 0x9, 0xffff, 0x6, 0x9, r1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fstatfs(r3, &(0x7f00000001c0)=""/11) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2, 0x7fff}, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup2(r7, r6) setsockopt$inet_dccp_buf(r8, 0x21, 0xf, &(0x7f0000000200)="90d3f8c09acc20aab2c88f0342759793173fb2a34aa0eafada", 0x19) r9 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xffffffffffffffdb, 0x40) openat$cgroup(r9, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000100)={0x5000, 0x100000, 0xc0, 0x2}) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:46 executing program 4: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x1, 0x1, 0x0, 0x8000000041bf, 0x210, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x12}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getparam(0xffffffffffffffff, &(0x7f0000000000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000002, 0x20010, r0, 0x0) 07:35:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x5, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 785.884140] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:46 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r14}) sendmsg$nl_route(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 07:35:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000af3000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0xd8c50000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000040)=0x5) 07:35:46 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r8, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000080)={r8, @in={{0x2, 0x4e24, @local}}, 0xd52e, 0xad04, 0x7, 0x7, 0x400}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r9, 0x9}, 0x8) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x5, 0xc4b8ed5be58dd2e1) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r7) splice(r6, 0x0, r7, 0x0, 0x10000, 0x0) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) getsockname$packet(r8, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001280)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, r9, 0x0) r10 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) r11 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r10, r11, &(0x7f0000000240)=0x202, 0x4000000000dc) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)) sendmsg$NBD_CMD_RECONFIGURE(r11, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="050c27bd7000ffdbdf2503000000e7401191a1d7da378753f18bb8db0c21d74b8c1994cb573ff0c5320e3fe397bd8a7c25799573fdffffffffffffff16ed2d05dfcd8089ed7cfcc53c2c4c19daee0a2449ee45439a1b546b1aba6dcc98"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x8040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=r12, @ANYBLOB="000829bd7000fddbdf25030000000c00050020000000000000000c00030007000000000000000c00040008000000001e08184400080001000000000000000c0008006c000000000000000c000200f52c2f740000ffffffff060000a666414e000000000000050100000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x24010855) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r13, 0x40086602, 0x400007) fsetxattr(r13, 0x0, &(0x7f0000000540)='em0/ppp1\xc5em0\x00', 0xd, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r12, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r13}, {0x8, 0x1, r8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = fcntl$dupfd(r18, 0x0, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/sequencer2\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = fcntl$dupfd(r22, 0x0, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x7c, r12, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0x0, 0x2, 0xdc8}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_SOCKETS={0x34, 0x7, [{0x8, 0x1, r16}, {0x8, 0x1, r19}, {0x8, 0x1, r20}, {0x8, 0x1, r23}, {0x8, 0x1, r24}, {0x8, 0x1, r6}]}]}, 0x133}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40010204}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r12, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10d}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r27 = fcntl$dupfd(r26, 0x0, r25) ioctl$PERF_EVENT_IOC_ENABLE(r27, 0x8912, 0x77) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = fcntl$dupfd(r29, 0x0, r28) ioctl$PERF_EVENT_IOC_ENABLE(r30, 0x8912, 0x400200) r31 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r32 = creat(&(0x7f0000000140)='./file0\x00', 0xb54da354a46ad676) r33 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x4000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r12, 0xc39800b379447774, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7fffffff}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r27}, {0x8, 0x1, r30}, {0x8, 0x1, r31}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r32}, {0x8, 0x1, r33}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x5e20c4990604fefa}, 0x10040000) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:46 executing program 0: ioctl$TCGETX(0xffffffffffffffff, 0x5432, &(0x7f00000000c0)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2002, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/93, 0x5d}, {&(0x7f0000000200)=""/179, 0xb3}, {&(0x7f0000000380)=""/252, 0xfc}], 0x3, &(0x7f0000000480)=""/204, 0xcc}, 0x2020) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) uselib(&(0x7f0000000000)='./file0/bus\x00') r1 = syz_open_dev$dspn(&(0x7f0000000580)='/dev/dsp#\x00', 0x1, 0x8000) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/avc/hash_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r4, 0xffffffff}, 0x8) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/enforce\x00', 0x40002, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000640)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r7}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001f00)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000002000)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r9}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r10}) getpeername$packet(r2, &(0x7f0000002040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002080)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r12}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f00000022c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002280)={&(0x7f00000020c0)={0x1b4, r6, 0x8e3683932210171e, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x8c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x74, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xc8}}, {0x8}}}]}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000740)={r4, 0x1}, 0x8) stat(&(0x7f0000000040)='./file0/bus\x00', &(0x7f0000000680)) 07:35:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="81708f2b9b522a6c1c12666bbec666143cd87d9c64da280b6f449e16d9a19400006ae7c792fd8f17203bb06e0caa8f6c110000b50000000000dfae7491a9f3bd59985fdf0c654b1b28ee202239543a77f093c1ebf3d2c1dd3993002492b0b2d62ccd008c55ea62fb9280fc01008487ee1557a9c32d24768d0600000000000000786cb97b04984b7ac4c399b82dc9e9b098c13e036e909fceac263af4a11a6769f249b4fa2ed53b8c9c9200df870680a5cf89a8eae8ffeefc550db4187c2505ec4ddf94dbc5b417f5ca575bc13cec8e6426f7bdef5627c4461911d95392f6e64fc8"], 0x50}}, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 07:35:46 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) restart_syscall() r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 786.253640] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 786.396392] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0xbb5, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:46 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000200)={@mcast2, 0xc, r13}) 07:35:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4820, 0x0, 0x0, 0x16}, 0x0, 0x0, 0xffffffffffffffff, 0x11) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:47 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) ioctl$VIDIOC_S_FBUF(r0, 0x4030560b, &(0x7f00000000c0)={0x6e, 0x40, &(0x7f0000000040)="4970728d2ba527c215dd6e1572f8f0af1411f6baecf08f60ad729e480bac94bac3e0d623fc450e47b6b8a95785ff992605a7b221ec90bdbfda3e1d7d5ab9c921621924549f76f52c2762bae77e8934b7b65c5ad8e760be04736bb69fc922645737e9de9f072a1c20ea6b785483e531a0ee91e342b4ffa7e4beb644b5cd25", {0x400, 0x4, 0x384c4150, 0x15, 0x9, 0x0, 0x0, 0x9a7c}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$USERIO_CMD_REGISTER(r3, &(0x7f0000000100)={0x0, 0x6}, 0x2) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x7, 0x3f, 0x8, 0x8, 0x0, 0x1c, 0x82060, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa1d1, 0x5, @perf_config_ext={0x9, 0x9}, 0x2, 0x7, 0x7, 0x7, 0x6, 0x5}, r4, 0x6, 0xffffffffffffffff, 0xee10bca988eea904) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r7, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000001c0)={r7, 0xfff}, &(0x7f0000000200)=0x8) syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x800000000905, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioperm(0x8ce, 0x1, 0x9) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000640)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000000740)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000780)={@dev={0xfe, 0x80, [], 0x1a}, 0x4f, r11}) 07:35:47 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@broadcast}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) 07:35:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000000, 0x408000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)=@urb_type_interrupt={0x1, {0x2}, 0x2, 0x1, &(0x7f0000000180)="25e6e6f022fbb049a552bbed5ef59afa746c684f857c3098d61fa306ef6492b2df5a4e02a545fd253dbd5bcfa7a386dfeed67611b2678df7829b2283adb1a34738eb54049b5bf224aeea2b11286a1b099ef8e6d975dccc1ccabe265ec6585dfe4ec3f3eaec6f", 0x66, 0x81, 0x0, 0x0, 0x207, 0x585f, &(0x7f0000000200)="ae6696da8bbacd59db2c7951e39c6595772d3caee39ea4b3b57f4ee54bb616e3d70a57c081bbbb0900000026421d1d"}) 07:35:47 executing program 4: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/206, 0xce) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='+dBm\x13n#\x00', 0xfffffffffffffffe, 0x10000) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x40000) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) 07:35:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_bulk={0x3, {0x3, 0x1}, 0xfffffff9, 0xc0, &(0x7f00000003c0)="13e2c02ef5489b48255762ef76a445f98bbf88846df327ba7507d4fd940b2b2effe3df09e25df2745edbfae8c8e9b3f06bebc4bd24476131c5ab3e3f8336aedb205e11481eb4ddcd327904142b2eb6dabb5f4e895af8aca0eeb254dea43fffad32b83943a5b9c1a20128d6802d5fd7f71828a50f8f5c44fe841fa675fb8489075028879cb4fbb932fcf285d309cb23a92eea3037a1162deb5fafb7b87364c8be1f618bd03670c503077ca20ac463399f09e7ea8c808515b624109f59ecb862092407c9", 0xc3, 0x6, 0x2, 0x1, 0x4, 0x800, &(0x7f00000002c0)="8e4332d6c0f37fd505fbcbc95a9d922182a89c0cefacabac619ab5c79826885a6189c53e1b75832608c306a125285cd29f073fc4dfa8ad661713850a19143f1ac165758d3659fcb1f5bfdfe5941e419d86590a9f0696a86aac9086640e1c45cd5211bc109f1dfb5492ca21a203a50c38397d11780e7de1325803381d9767fd03f41f2c2ccc7c308a07e6eaaadd5629b4d74ba1f05ad1ca5e533da8af2905b2e80f258716a94c52be87794fa2fa9c61e7afe02e876ae9b0a29e49b936eb72a331e5ca95e4640a7f2819b158baf87d767d08be4b56cf15cf87482ac9"}) 07:35:47 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1c) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f00000001c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) prctl$PR_GET_DUMPABLE(0x3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet6(r5, &(0x7f0000000140)="22f9bd225598ae7ac9d753e7bbb804658aa15e3e07dc7fd732252d20d3794dd0c08a62bef3214125747d410f15ccd3218d97019bd68636e508e9bac23adfe5c5eb2724206f3ae623f87f3c881af17f6d033ba95ed1a026d6e75b4362834e46578ee03f6771bdb02b3669", 0x6a, 0x20008040, 0x0, 0x0) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$trusted_overlay_opaque(r1, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x10001, 0x48000) 07:35:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x6}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 787.276344] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:47 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000040)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f00000000c0)=""/140, 0x8c}) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:47 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@x25, &(0x7f0000000140)=0x80) sendto$rose(r1, &(0x7f0000000180)="0934766c2207bba3adb5382c6f5d4dc595c1f418259e68b51980e93f772dd8670a68dabd80d6c675d7c3e50064d77df707b7e4cccdad83bffd4d3df091b22681e1c28312824009455a5d", 0x4a, 0x4000000, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000080)=""/51) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f0000000300)={0x5, 0x0, [{}, {}, {}, {}, {}]}) mkdir(&(0x7f0000000240)='./file0\x00', 0x10) 07:35:47 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) link(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='.\x00') setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000000080)="0a14a08067fd565a9495e3781b85b57426006d090796d43544e955e162187e79f94aa24b4f4f736472aeff0c9107929d0c030bdaa395e5f821d47560c1b3e934a5a9663ee78c77e943585fea627b8fe2b0acd67f2bbe5ef050a940567be25c7b33c172fed0e97a716a60e542db78000319eca4ce2a9565060d2d527a47fb3ee8e891e2f256ce2140255aceacd67bf34c5e74fa5774a73919b8ec54019d7d2ea15fb1b154bec00379a1d33adaadbb45b2078a24ed7ad1c216f3026e0a7605e8aa154d39dbe51d5ebb4fe57b32cf567c16ebb0f087cf5f9ca45144b294da21c55147", 0xe1) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-control\x00', 0xe69603d5246e1911, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r5}) setsockopt$inet_mreqn(r4, 0x0, 0x72, &(0x7f0000000400)={@remote, @local, r5}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000200)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) recvfrom$inet6(r10, &(0x7f0000000540)=""/253, 0xfd, 0x2000, &(0x7f0000000240)={0xa, 0x4e20, 0x5db7, @local, 0x954}, 0x1c) r11 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000380)={&(0x7f00000004c0)=[0x0], &(0x7f0000000480), &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2e3, 0x0, 0x4}) 07:35:47 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) 07:35:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 787.498896] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:47 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000100)={0x7, [0x6, 0x4819, 0x3e, 0x7f, 0x3f, 0x0, 0x7, 0x4, 0x5b4, 0x200, 0x9, 0x6, 0x8, 0x0, 0x4, 0x1, 0x4, 0x4, 0x8, 0x4ad9, 0xfff, 0x4, 0x7, 0x1000, 0x0, 0x3f, 0x3, 0x8, 0x3f80, 0x1, 0x200, 0x42, 0x2b4, 0x0, 0x9c, 0xb, 0x983, 0xffff, 0x81, 0xd0, 0x4, 0x0, 0x3, 0x1000, 0xffff, 0x93c0, 0x899, 0x6]}) [ 787.549546] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:48 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2000, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000140)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x4, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) bind(0xffffffffffffffff, &(0x7f00000000c0)=@sco={0x1f, {0x81, 0x6, 0x2, 0x81, 0x1, 0x1}}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg(r4, &(0x7f00000007c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f0000000400)=""/97, 0x61}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f00000004c0)=""/32, 0x20}, {&(0x7f0000000500)=""/181, 0xb5}, {&(0x7f00000005c0)=""/84, 0x54}, {&(0x7f0000000640)=""/94, 0x5e}], 0x7, &(0x7f0000000740)=""/125, 0x7d}, 0x10002) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000800)="c278594c8f0b77e9356727af5199a56046ed4b49df3045c627c2e85c161485bc6f594503b58bae82d9", 0x29) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000e40)='/selinux/mls\x00', 0x0, 0x0) write$P9_RMKNOD(r6, &(0x7f0000000e80)={0x14, 0x13, 0x1, {0x10, 0x0, 0x5}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000880)=@urb_type_iso={0x0, {0xf}, 0xfffffc01, 0x63, &(0x7f0000000180)="448bcda2269db94592f449cb6096bafd85324ed60bca98ede83356494c5f3122b0948b90f41ea657cd70117743af37a822ac3e2cb2d7cee799389de4cfda80f325b54e43edae2d91918a3a18e2e9094601f56505e2f0c15f693b25bc78f306fbab0183dc9da0d39df6fd065598130648d6ff92866a1787b6b19ee16a7a7948abe89fae11c71c91140bef5e7ef8328838cac6e440fcca8bb06c9e843f660e1acbd0374bda8cb5e122096f44a38e53e4ec1ccb3a28a4244c6e6fbd46e9f7620b3b8807b3d6feb25e0075cfd87436613794572051fa1c3e752e92b1b461c532891ac4ef0df49a46471c3c91717f9b327af35053b7ffd294", 0xf6, 0x3, 0x7fffffff, 0x73, 0xc8, 0x3ff, &(0x7f00000002c0)="5200c934c3e3ab1e68ccf3e33d1ad6887907794a2d80ebef7babfde9fd1258f3ca98099efb3c0f3ccd4b", [{0x5, 0x7fffffff, 0xf5ef}, {0xffff17be, 0x3f, 0x2}, {0x10000, 0x7, 0x3f}, {0x0, 0x6, 0x3}, {0xfbff, 0x80, 0x2b}, {0x0, 0x4, 0xea11}, {0x681739ce, 0x1, 0x9}, {0x100000, 0x3566, 0x3}, {0x101, 0x2, 0x5}, {0x10000, 0x1, 0x6}, {0x1, 0x7bd, 0x4}, {0x3, 0xffff, 0x8d}, {0x5, 0x2b0c, 0xfff}, {0x0, 0x3, 0x78}, {0x0, 0xd82, 0x8001}, {0x101, 0x8, 0x80}, {0x80, 0xfffeffff}, {0x7f, 0x7, 0x5}, {0x0, 0xfffffeff}, {0x2, 0x9, 0x1b}, {0x80, 0x800, 0x8}, {0x5, 0x6, 0x5}, {0x81, 0x6f63, 0xc30a}, {0x2, 0x9, 0xffffffff}, {0x7, 0x9, 0x4}, {0x7, 0x0, 0x10001}, {0x10001, 0xe87, 0x7fffffff}, {0x20, 0x5, 0xffffff01}, {0x11, 0x7, 0x93a2}, {0x1, 0x8, 0x7}, {0x6, 0x80000001, 0xffffff01}, {0x400, 0x9, 0x5}, {0x7ff, 0x46e}, {0xfff, 0x3f, 0x4}, {0x7, 0x1, 0x2}, {0xffff04b4, 0x7}, {0x7, 0x401}, {0x8d6d, 0x8, 0x1}, {0xc200, 0xfffffffb, 0x3}, {0x9, 0x5, 0x7fffffff}, {0x1, 0x7, 0x3ff}, {0x73b, 0x7deb, 0xe7f8}, {0x3, 0xaf5, 0x45900}, {0x7fffffff, 0x3, 0x3abb}, {0x5, 0xfffffffc, 0xfffffffc}, {0x0, 0x5, 0x9}, {0x5, 0x80000001, 0x10000}, {0xed61, 0x80000001, 0xfa57}, {0x2, 0xc00, 0x3e}, {0x20, 0x8, 0x5}, {0x0, 0x6, 0x80}, {0x3, 0x489a52cc, 0x3}, {0x9, 0x5, 0x2}, {0x3f, 0x8001, 0xffff}, {0x3, 0x9}, {0xe80, 0x10000, 0x5}, {0x3e38856a, 0x0, 0x9}, {0xfc, 0x8000, 0x6}, {0x10001, 0xd1, 0xfffff800}, {0xffffff6f, 0x20, 0x3}, {0xff, 0x8, 0x696b9f2e}, {0x0, 0x0, 0xf39}, {0x171e, 0x0, 0xbe}, {0x7, 0x40}, {0x4, 0x7, 0xc4b}, {0x1, 0x1, 0x5}, {0x7, 0x20, 0x7}, {0x1, 0xffffffff, 0x10000}, {0x20, 0x800, 0x3f}, {0x3, 0xc4d7}, {0x1000, 0x9, 0x2}, {0x7f, 0x5, 0x10001}, {0x4, 0x3ff, 0x5}, {0x7, 0xffff, 0x2}, {0x100, 0x3, 0x4}, {0x40, 0x5, 0x8}, {0x5, 0x9, 0x7}, {0xffffde79, 0x80000005, 0x9}, {0x8001, 0x9, 0x5}, {0x3, 0x80000000, 0x20}, {0x2, 0xfffffffd, 0x80000000}, {0x3, 0xac16, 0x6}, {0x7, 0x1e1dd535, 0x4bb}, {0x1f, 0x5, 0x200}, {0xf065, 0x8, 0x7fffffff}, {0x100, 0x2}, {0x2, 0x5, 0xfffffff9}, {0x5346, 0x5, 0x7}, {0x2, 0x94, 0xfffffff8}, {0x8, 0x800, 0x444}, {0x7fff, 0xcd, 0xdde}, {0x9, 0xf3b8, 0x1}, {0xff, 0x7cdd, 0x8}, {0x6, 0xffff283d, 0x6}, {0x6, 0x1, 0x10}, {0x3, 0x4, 0x8}, {0x1000, 0x5, 0x38a3}, {0x3, 0x9, 0x8006}, {0xda, 0xca, 0x8001}, {0x4, 0x10001, 0x6}, {0x7fff, 0x3, 0x2}, {0x1, 0x7fff, 0x6}, {0x61d4, 0x4, 0x7fffffff}, {0x7, 0x6, 0x400}, {0x8, 0x8, 0x2b}, {0x7f, 0x4, 0x1}, {0x5, 0x3}, {0x5, 0x100, 0x800}, {0x7fff, 0xba, 0x2425}, {0x7, 0x4, 0xffff0001}, {0x3f, 0x5dd, 0x10000}, {0xc9, 0x0, 0x8001}, {0xa, 0x7ff, 0x5}, {0x2, 0x0, 0xc37}, {0x2b, 0x20, 0x49ddde2c}]}) utimes(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={{}, {0x77359400}}) 07:35:48 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x40000000000000, 0x0, 0x0, 0x9}, 0x0, 0x0, r2, 0x8) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) 07:35:48 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x4) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x10) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) statfs(&(0x7f0000000040)='./file0/bus\x00', &(0x7f0000000700)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000507000014ed0114c63e247f4186e3ea5d2800"/34, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) socket$rxrpc(0x21, 0x2, 0xb) sendfile(r1, r2, 0x0, 0x1) 07:35:48 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r11, 0x0, r10) 07:35:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$netrom(r2, &(0x7f0000000000)={{}, [@netrom, @netrom, @netrom, @remote, @bcast, @netrom, @default, @null]}, &(0x7f0000000080)=0x48) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) [ 787.880196] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 787.934109] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 07:35:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2, 0x204000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r3) r4 = getegid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x200000, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x50}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@dont_appraise='dont_appraise'}, {@audit='audit'}]}}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:48 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000400)='/dev/input/mice\x00', 0x0, 0xd21539db1f2c13e7) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000480)={0x990000, 0x0, 0x10000, [], &(0x7f0000000440)={0x9c0908, 0x0, [], @value64=0x12000000}}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_buf(r1, 0x1, 0x0, &(0x7f0000000200)=""/234, &(0x7f0000000080)=0xea) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f00000004c0)) r5 = geteuid() fstat(r1, &(0x7f0000000380)) setfsuid(r5) getpeername$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x6e) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000300)=@v2={0x2000000, [{0x81, 0x18}, {0x1ff, 0x100000}]}, 0x14, 0x1) 07:35:48 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)) 07:35:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000100)={0x2, 0x2, "d192cc3f8f1c3e44c389a81769925b9c0c3077773b3ca2ba3fe8839687f17eb1cbc4678b93963c4857fbf09a1dd8006886e256fcc854fe81ba14c85babbe09a566e30f2e258cb76d17aa91dfee7d20c3d7796013effb90320a0d234fc1698261a111c9f033735dbf80f93c9fd7e07b5a68cab11f52085a4f5baf1e9e672fa000e0d8e76e5b983949e443d046e961d4a96b68acc0b437f85455bab5490f8fa1e5808029c9e337c9c3bdf339247896087363e5378f8474afaa8ff1123f790424a1d30f4c05212baeca789e728175ea12d8932b2425268eb89355438e20603d1415d0f4951e5397a87a6776b03642a59eca6f38cbd6798672aefa3c2c8b1aec98a1"}) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x1) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)={@remote, @loopback, 0x1, 0x2, [@broadcast, @empty]}, 0x18) r7 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:48 executing program 4: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x20000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f00000000c0)={0x5, 0x62}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x40}, 0x0, 0x0, 0x5}, 0x0, 0x0, r3, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r5 = getpgid(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x8, &(0x7f0000000000)=""/96) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) 07:35:48 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) [ 788.409377] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:48 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) getxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=@random={'user.', '\x00'}, &(0x7f0000000140)=""/240, 0xf0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000080)='./file1\x00', 0xc0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r3}) bind$packet(r2, &(0x7f0000000200)={0x11, 0x8, r3, 0x1, 0xb2, 0x6, @local}, 0x14) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r5) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0/bus\x00', &(0x7f00000000c0)='9p\x00', 0x320b000, &(0x7f0000000100)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x1}}, {@sq={'sq', 0x3d, 0x5}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_role={'subj_role', 0x3d, 'ramfs\x00'}}, {@context={'context', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r5}}, {@obj_role={'obj_role', 0x3d, '&*posix_acl_access'}}, {@hash='hash'}]}}) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) accept4$bt_l2cap(r2, 0x0, &(0x7f00000000c0), 0x6ce79070039c1a76) 07:35:48 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1d, 0x81, 0xff, 0x7, 0x0, 0x1, 0x4000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x2000, 0x80000000, 0x10001, 0x5, 0xf4, 0x8001, 0x1}, r7, 0xffffffffffffffff, r3, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r6, 0x110, 0x5, &(0x7f0000000200), 0x2) r8 = fcntl$dupfd(r0, 0x406, r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 788.562450] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:49 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) 07:35:49 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000008f35b538bfad94cdfb2e51052fd467725ed95e3330d500001093a3dfde7934e90153a5c07ec68b389522755316bbd418cdfe812925ff5b320f472ea42c21cdb7fc50b9a19304bbc98c24c16acd3af0a46464c5d0df71843d936b7b15052d315ecf8130f84f957cf718"], 0xc, 0x2) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x400, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x3, 0x0, 0xffff, 'queue0\x00', 0x5}) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000010001004000000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="78256947cd3a916f23fc9f8845a6a0a74521"], @ANYBLOB="120000006d00000006000000180100000000000000000000ede5ad39f4c777d7f79717b55a09f5182d0981afe05e8de8464554947a581d8a6fd6a6431c20c3af32eb0132e3f5e8ff51bd816e2268ccd56f3a5841b98c4d4a621f12a477e2ff03235b9686b24a21ad12170e9191754a6cda724e93aa92249224f9a277cff537fa5054013c1507fbe56bba5b94666b8468bc7549cb7da12319c970162782157ae87640aed380a94346a9d302e0c5c50f84dfb5090a907a06418e650763d2e62b39", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB="74af"], @ANYBLOB="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"]) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl$KVM_GET_PIT(r7, 0xc048ae65, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000000)={0x9, 0x4, 0x5, 0x3f, 'syz1\x00', 0x6}) [ 788.727640] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xc201, 0x0) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096}) 07:35:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x9, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'ip6gre0\x00', 0x8001}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xba01, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f00000000c0)={0x3, 0x2379560bf7c3d1d7, 'client1\x00', 0x4, "46f523e2dd6a883d", "124c335157d0ba744ae2ab05259b85a2f5aeb44a2a214264991db9a0c5f84d44", 0x10001, 0x80000000}) fsetxattr$security_evm(r3, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@sha1={0x1, "e8ee9886c62d743b47eb83fab475af558d9b446d"}, 0x15, 0x1) 07:35:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086607, &(0x7f0000000080)=0x7ff00) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:49 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='b\x00\a\x006\xe8j\x01\'\x00', 0x908, 0x62800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 788.896711] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:49 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) 07:35:49 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f00000000c0)="133b504bd42481cc3dbfa2c650e074456d8e766010d8a2e605227e5dd7b75e8d23eb0fe844feecc7ec4326fd44d5609f2f134af8411ae15839540b542e579c4f45a1cf641b29") open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="34b3b1c2f2b94eb6589af983e7a4e2b1fa8193ab01321941b6d3d1777395e01acf37bfba7984ae6c1fe1baf04a966206a9a84d17d53d5db57faf5bea66bb17177c75d9d09ed41f843b8ce0fa643501b0a0ce4d9744ea641292ab9496d5dfa92b2fc1d66c5031b85b7b98a6601f3d1a87a12e55f7fd1c564b88522db5290a1589962e88b0938f445b83ca03e716cc30a23062472546162f45f48390216ba2f6c43cbe784f3551819b0289778f83e58fa4ea780011347078b001bb3b9cee192b37723315e5c2c0918b5f858c81ed87d25d4cff487a7a6b74a7", 0xd8}, {&(0x7f0000000040)="de5675b76f7fca8fe3f673a3be17e91c0ed82916efda2da1324aaa0bc60f63ea585b71a4eb1f102f626df09ba71664ecf0e702703d16652f664d0000", 0x3c}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0xb0}, 0x8000) 07:35:49 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f0000000540)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x2, &(0x7f0000000240)=[{&(0x7f0000000140)="ca465bd6973e743da6eac49a0e21163764d4a97f4d098d82d5e291973714beeb94b4eae2b2fec49cb47a04a887a53db011a92d394193ffce440db145cf6c84fd23257ed525a05466333f9551764a9ff2d9f87cbd74da212f4084f1dbf16967ca0bacb4cca7adc348697b3ac54182c665f094d91b4b763ee62c44b9dccd1a15c3f4a5814124e7a13e883e5f45c8858ee46142f805e0ffe848748d00fb558876d73cf1700e45178f357f25b10a7d3e889d5752e6f7db0c62072ded4fd01d7a6ff6bf529e77aa50f24fe105855ab70bee259d7372ef6966", 0xd6, 0x3}, {&(0x7f00000002c0)="abd5d4d2bbba35de23e98a47682c6bf56f3f75330f3bf741fab193656d83d5c0abae9e054139b67fe3ea241a844b2abb25980c2e1165eb28ca1bcfc1c91a8e44d570fa86ab908396046074329e92577e969cf19cf3e6cc75624ab228020633076045e55cf99af2cc9377b334b0a2377e0843b24bb4a66f", 0x77, 0x29df}], 0x4000, &(0x7f0000000880)=ANY=[@ANYBLOB='upgrade,upgrade,noacl,suiddir,quota_quantum=0x0000000000000004,dont_measure,euid>', @ANYRESDEC=r1, @ANYBLOB=',fowner=', @ANYRESDEC=r5, @ANYBLOB=',smackfsroot=/dev/bus/usb/00#/00#\x00,pcr=00000000000000000027,fowner>', @ANYRESDEC=r6, @ANYBLOB=',fowner>', @ANYRESDEC=r8, @ANYBLOB=',fowner>', @ANYRESDEC=r12, @ANYBLOB="2c6d61736b3d5e4d41595f524541442c666f5f94feaceff91bba4f776e65723e", @ANYRESDEC=r13, @ANYBLOB=',\x00']) r14 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = fcntl$dupfd(r16, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r14, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = fcntl$dupfd(r19, 0x0, r18) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) ioctl$USBDEVFS_DISCARDURB(r20, 0x550b, &(0x7f0000000080)=0xd755) 07:35:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key(&(0x7f0000000180)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="701a69fe5c98922c1003767d301e42dd2eae7626678ba351b14e272a7d4296ffe745d6f34b2db21faf003c75d465ea8c7bbb4d57d34f4db96f5071a7a954adbd3dc02314cfffa1c661a6bb540987b6673333c138f54491c9bd1ce50f1d9693ce21645b461580b4176f8fa9ac1dec5c8b336e831f", 0x74, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000000)={r1, 0x74, 0x25}, &(0x7f0000000040)={'enc=', 'oaep', ' hash=', {'wp512-generic\x00'}}, &(0x7f00000000c0)="979ba12d7b5c23b2965ddf0281dc13ace6123f6763dc74e1f80423afebdbe07c33a905de179e3f33100b6d426f299eae9047026f1f6fee7c570ac02afc7fbe82c13716d7b9a69f5ed10c91186c0fedfcbbffea4d8c701084885446d3465a00a7ef95d874e65f708e26909325dda46678ccc3660a", &(0x7f0000000140)=""/37) 07:35:49 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) chdir(&(0x7f0000000100)='./file0\x00') stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'U-', 0x800}, 0x28, 0x2) [ 789.285339] gfs2: invalid mount option: dont_measure [ 789.310016] gfs2: can't parse mount arguments 07:35:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x909, 0x503041) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:49 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:35:49 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='overlay\x00', 0x2800400, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:49 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000000000908, 0x101000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f00000000c0)={0x9a6f, 0x8001}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f0000000100)={'batadv0\x00', 0x7f, 0x80000000}) 07:35:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x23, 0x3b, 0xc4, 0x800, 0x0, 0x3e, 0x3, 0x3e0, 0x40, 0x22, 0x4, 0x2, 0x38, 0x1, 0x32a, 0xfff, 0x20}, [{0x6474e551, 0x10001, 0x8, 0xd5e, 0x7, 0x9, 0x4, 0x6}], "24473799ce12877c6860f710aac959b9c0dde024d211656d0175feb771301b6853a888a78314bfddddf4", [[]]}, 0x1a2) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 07:35:49 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x72d}, &(0x7f0000000540)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x6, @mcast1, 0x488}}, 0x1, 0x101}, &(0x7f0000000640)=0x90) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r7, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001c40)={0x0, @in6={{0xa, 0x4e20, 0x4, @mcast1, 0x401}}}, &(0x7f0000001d00)=0x84) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r10, 0xffffffff}, 0x8) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r12, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001d40)=@assoc_value={0x0, 0x5}, &(0x7f0000001d80)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000003400)={0x0, 0x2}, &(0x7f0000003440)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = fcntl$dupfd(r16, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_CONTEXT(r17, 0x84, 0x11, &(0x7f0000003800)={0x0, 0x6}, &(0x7f0000003840)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000003980)=[{&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x4d38, @mcast1, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="41c899e3f2fba2f8d84a1fa4c97b058b6244ec1941d69f95d592b17754b4ecafc40c367898740638c332a57ea9bdb1763f48f911a2bd0c36f17eeecc6e4ffbb5e995f1f5a5e90676c6881a6b7c6bdb38cbf12bf3e4d8b1d6998263f3494d8412b5a699215f572bf8f55b26c86336936f5b236ef1cfc0cfc374113a2424da6705c3ce5de67e6a413d5139ab33", 0x8c}, {&(0x7f00000002c0)="10165577a58c91a371a12e2c55eda7d95e3399c21745b6567917308b2238f8ffac40b6f8b58713d29806de10fa8ec62837b26f36ecfcb72f9cdb0ce631103dc20827d2f9c576bbc824f17ddc51601934e468ed011b0fa4d48a4a3b15d1453ef83c3b1fd89e8faec0f280d4e3ca1a2666282ff76464d66a5ca432ca097576e81774c7370b25c2a6609d1bed845cc6879df0e3b5a3d97890b87de1de585f1a7ac541a1adcdd01a838763e0a262c3c703cbf263c7bd79dfd987227f6c6f5f1f03640bd775636dc72c9cc7d4be679e9e0c2551b8b447b39d", 0xd6}, {&(0x7f00000003c0)="8aff1690353c9cf040912b975b5827e9b28309df07e0a97ade6cef550f2b5ef45f47fa3535cdc1b111d8a85157ee3a5e0a5238c26a8fba6946a5bab493739777e2451bf9f6c67da63bf1067e5066b4845c9ab04eed7f6173b5bba3c31633341a2a798e6a26e1bb92e7429e30467fdb3d8ad7c5373e391c535aa7d1cc979c6ed470f856801884dbd40f6bf70ab1eed32a5aec0c100b889fdd74bb902132baea1821c9ff86637fe9e2831d7ff7e7f252d7ceda0c006317faaf6e69e148021f71e17a26ce67278f34c18f7433883fd362b8fe7e12593d3456420eb56bd419d9f07b98d0c071e27e3fb2a5", 0xe9}, {&(0x7f00000001c0)="beca19530e43084e408690a6d37158566969247511f4623119a3988895a5ce89893c543f7b3b776a4421eb60fd770ac40c6291eb", 0x34}, {&(0x7f0000003b00)="a19da50b2870", 0x6}], 0x5, &(0x7f0000000680)=[@sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x8006, 0x0, 0x9, r1}}, @sndrcv={0x30, 0x84, 0x1, {0xfff9, 0x6, 0x86625145d3c3dbda, 0x1f, 0x3, 0x101, 0x7f, 0x483a3d47, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xc271}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x607, 0x8002, 0x2, 0xfff, 0x7fff, 0x8, 0x4, r7}}], 0xe8, 0x20000840}, {&(0x7f0000000780)=@in={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000007c0)="521654f0fde4658a05e5fc24553f840d14facc787b7319c291aa38f79049dd0235a854290e5d245e026addd853ff9384318cebdfeaefff27b6c0b571d6990e99fc2e22354f885b1ff33a811b4050de6fb4812f436e7a3ccb1ab3b6", 0x5b}, {&(0x7f0000000880)="c9236a1decaa9306b720774b570206bb70523f7b6b4b7ecb711d7b48d09e5ab96228431fc04e908d03bec2bee3da2eb2914d71ababa0408618a92cc861956fb1259a4114cb190e14dc4ef682f6f4178c6d35ba9603", 0x55}, {&(0x7f0000000900)="4be486dc02254548572fa132a9f2b79596e8574f04af92c55b9bd6c03e3c217ef7448491d60537d105d4fa873ba3d6899dab37ff9e75597702d7c7afd353f1f7c1d47dd6f336425d1afefa426e83393f8885", 0x18}, {&(0x7f0000000980)="ae7c02dc9c7bc6f9f9af4673af561f21416639154a979a5f0afd8eb1c02a59ce2c97197fe5d0919419ce9eb3", 0x2c}, {&(0x7f00000009c0)="0e5fe575937c87101f8c39c9d77c9fa9ab52a753c2e0c65aa98c318291d23785e9", 0x21}, {&(0x7f0000000a00)="5b5a168b4a307e685b2abc73bacf42dda29da3d8dc8fd6e74c0f7a7db767a1552173703d251fa97a5784352bffd8bd2710b0cc50c79a8f12ed740579116e34af5981e44d0b97a2a9d0e49ac63038dc", 0x4f}], 0x6, &(0x7f0000000b00)=[@init={0x18, 0x84, 0x0, {0xffff, 0x9, 0x1000, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x5}}], 0x30, 0x10}, {&(0x7f0000000b40)=@in={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="c51240d478c9cdc1b2995f4da29cc0e25452de53f4b6d7fe4c82fd01728c53794b5d99d7055bcfb4e1af24e9b1527fceeb11eb69fdc75295b704cafaf4d73d1e7f90d431712b0991ed7e733a26edc92800cf81fddef0c53f4b0f778fc495acca3f608dccc827f3", 0x67}], 0x2, &(0x7f0000001dc0)=ANY=[@ANYBLOB="300000000000000084000000010000000300290101040000ffffffff06000000030000000000000003000000", @ANYRES32=r8, @ANYBLOB="30000000000000008400000001000000000000000080000004000000ca710000050000000000000001000100", @ANYRES32=r10, @ANYBLOB="206e03d23972028172f4f53a9af54f00000084000000020000000900", @ANYRES32=r12, @ANYBLOB="30000000000000008400000001000000d700ff0701000000c1ffffff0010000002000000b068000000000000", @ANYRES32=r13], 0xb0, 0x48141}, {&(0x7f0000001e80)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002080)=[{&(0x7f0000001ec0)="d03ad333b191c021791ece0355bd3f629c5708b7498bff20b9fcf2c36d150e9de6174c497d0c5718ad1857c2802a3fe0794c2e9136be7569ffa8e7c7e5e0d0c39142cb4ccbd5ee3c05413c724b350e928ed9e7fa40a25a27d598751a6735ca3a2cf1c0c00eba441271500bf98e496bc4fc0260bcb689a824a3d4e0e88276519cb3290477ba65f639823d35a02b6e025e06de8650367cfb322e61d677ce232c896b4918aad9758f51c12d32cd39f52628f61e1c9e3e79963eb759ca27ba62123c7bc5e21f80f2", 0xc6}, {&(0x7f0000001fc0)="216c403c27c0bc4f90a4b719b5b8a5af9e72d0d06ce51af83562fd6e72a1a3151fa5573dbe15c32278b8acf2ec36d36f9d66a21a16c6635049cbecb2b7ba3ffbff266c6531ad27931b4ec1969a0b7e0dca8e8b3b992fde38892b11b8979574c00bf1700e75618ba4d62a64b2bc53aeee7e3021f0ce2f912c01d4b6f78992ea3e60162c2e0aa2d28bf2cf8d5437818c21181756367233fb15bb419b95bc96415107114e0903991f035dc90909238b37660e938290358f42", 0xb7}], 0x2, &(0x7f00000020c0)=[@dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2}], 0x30, 0x80}, {&(0x7f0000002100)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f00000033c0)=[{&(0x7f0000002140)="03efbd4aff83227b9b9f255c5cc6d06233dd0873d59f40bd60d2a1147631fae68703bb17ac947a062cc928f5e6f5bac0f300dba9e6139e2c2bb8ebeaed1c2b25ec002c6c2741f3bd7928034602ada8a2e5c27520cf1aac7adb610e5f1f4fe4230fd36882c5c241ba08bd40273be0e393085685f7414b780f56fc5d56cfd06c12360ee792467c065be2a6731ed227271b884d97e401ce50d201bdb20daf6433f5279c040e53338492f32f531fb61cca88a73c350da5c3", 0xb6}, {&(0x7f0000002200)="bb49d9dd5c642979d2d1730c5e25811e1459faaaef1c6d1375d5d0531e738b2694dc503e44cb7f6418a180374fa74716613b3950bed013adcf16098e47a6c3d63d009113f0a446957feb5533a4fdd2fa4dc4b5433f0e6eeb12814b23e67d631df5c6faf5d2e13897fd173564955f4f77a5e51365822b882ff3c7b71a0c50308fd4edcccac6de3d36459d8ed3ea8a589221f26e2723bd5693ee5f334aad912a39745b32a8d92476c5124be16ae7c585ef6bb3d08c521d1d1835fc5ea0e1607f339efcf78005079ef61b", 0xc9}, {&(0x7f0000003b40)="246af801caca14783c11a839f7ca3623ea331f109b4b22bc45f7f8886d678f1a63ccbf45a361c72d55bc71b43c6026860cdf767e2902c3bc1dbee49e6ea0865771af540483fb44d903c9c95b27f9648e5b20bb1b299367c5387a580643530d597e302b22bb099d5c30b4d9f5c5a4455662b35a03690f2ab881dfc1e2dc61420b62fd9d4c68273ff2291dd351375277480232510a7cd9e5ce5b9545e11f0e96076581131fb43718020620eb3c301c1a932e9f687203dd4b21f805bbbebf", 0xbd}, {&(0x7f00000023c0)="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", 0x1000}], 0x4, &(0x7f0000003480)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xfffffffc}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xd}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0xa, 0xabd, 0x7, r14}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x52}], 0x80, 0x4000000}, {&(0x7f0000003500)=@in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000003780)=[{&(0x7f0000003540)="653f12c6c03b4b7cd34d4ae04b1e52948defa35f8e093988116042ab8684c854555cc8e049f8d9e78dd0c7edd997cb1d34e915a4e4f31a59db50499f72972b5f2d751f7f38d2d4dd67633207dba7e354d3da993ed394fe6291a47b3f6d41db4fd767514e32c8d2abe2821e8609905233", 0x70}, {&(0x7f00000035c0)="f9622c12f2a7a9c96afd418f430e170049ddfcf483229ae043f3757b9ef227511dbf3d78b5835ba15c9022e398d9f8d8c8ce5a3d55", 0x35}, {&(0x7f0000003600)="250f9e1d062158912478e6698ad3eaca4171865eecdc446e1d45e91808741896d7975f5956cc96c82b51484c76fe71df92476ffb7e92619f661846c821375f49e2ea75f2f00a9f2446b5d15cff6bbabeda202042e5300e5d88fb7e79a7bf1859e7063e72c0d3f0cf5158da4d58f3142e62440777ba525447fe9effafbf9b", 0x7e}, {&(0x7f0000003680)="33652a7d8f9fb9926c48966755fd6aef483169", 0x13}, {&(0x7f00000036c0)="5ad9c1717d9d45c8144a57d250b49608ee612b6f107e602241f8f9e1436c4b04d7463f8d9e3d1def6173fd8b1ba5be35a045a3875f3728089209bf526da631c8ac11277e7463116f5b4b6491fc83e29acca000f70c37bcbe58dd92a81bddf06000ab23d8af3f6f6bed8348dae6c4d7d6d744adbb5e767666af5647a6f7d23790ef7459b4cf7c4e14f5af3ee052a3a456737974d4d5322549d7823fe9b028c99f005fbee9a4dc96d4850d06db8e591465e568d2a4656521d02c939f79", 0xbc}], 0x5, &(0x7f0000003880)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0xfffffff8}}, @sndrcv={0x30, 0x84, 0x1, {0x5c, 0x0, 0xa, 0x6, 0x2, 0x1, 0x20, 0x4, r18}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x2b}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x6fe}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @init={0x18, 0x84, 0x0, {0x4, 0x1ff, 0x2, 0x2f77}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7}}], 0xc8, 0x800}], 0x6, 0x4000000) r19 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r22 = fcntl$dupfd(r21, 0x0, r20) ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r19, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 789.558079] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 07:35:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 789.641875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8969 sclass=netlink_route_socket pig=14219 comm=syz-executor.4 07:35:50 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18c01020}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="2e495370438417398a2cc519630300c61dc645ca6d8d936d194aa291d1d03ad5525c29078ea7baab39f7da8479c547761202a81138aab05c420bb64b6db2ec4d985265b932b0abe06628f249247050f519de75de8e4e3cdf8ff8d7938f61e6d2609cbc5bf443f45840615a9748bbe223dbd72e88a9e195982b0061ac95045c957f60006037337313d77925f0094b952b79a9c4583482f959b16d0dcf638097efcf79e15c8530c8f3b2833046b27eb9481445397260e83b1451c39851ae", @ANYRES16=r2, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x444}, 0x80) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)={0x3b4, r2, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99f0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_BEARER={0x16c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x30df6c37, @rand_addr="1262e975e43eb082a6109d3bf260f470"}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe8, @rand_addr="4423932ea8e34e9726884dcfabd3e232", 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xded7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000000}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x15}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffff000, @remote, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}]}, 0x3b4}}, 0x20000000) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000008c}, 0xc, &(0x7f0000000040)={&(0x7f0000000700)={0x3b4, r2, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf4}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ae22573}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff4a9}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x96d1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x70, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf71}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x77}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x58d6}]}, @TIPC_NLA_BEARER={0x144, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x3ff}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3f, @rand_addr="91e7490d2e5e050ad8ada9c99dd6c4cb", 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x508}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4796}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}]}, 0x3b4}, 0x1, 0x0, 0x0, 0x8000}, 0x4) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r3 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000100)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x28) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000240)={r7, 0x4, 0x5, 0x101, 0x64, 0x3}, &(0x7f0000000280)=0x14) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:50 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 07:35:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:50 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x3}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0xf}, 0x7f, 0x48, &(0x7f0000000080)="dd63b6651a6f2e8242b21b0bcc22a9fcd8ac26c4b1cc23a75fb944dcd69caec8e388ca7f486b8ef6e3ba28", 0x2b, 0x49, 0x0, 0x0, 0x2, 0x8, &(0x7f00000002c0)="ef3110244ac6208fb7d3d6c0a40936b0ffe3917a35511ef36defd354d6912eab463fccbcde0ea1f8e43cf3d56151984d75c53f88285cabd2eaf38028303202fab39c9029f9202a5b52887bfc2f884259131068af254e899c73cbbc8b6dbc0b14e5be1cc4199fddaf899c97f26a7673e0df847a8cea0694f39dcf57a3951672be7bac636522644e0faa07388835335107d9512cc7d6923408823f22eb6da650f5bb95f5f216ff119eab8dcc695dda36e785101c250ab3b36c2f1b71f5d26835eb90d3bdd7993eb28dc6353c1f758a8976d45205a8ecc2a1f6570a495c5021cc7ebca4a5bb9ca779c48489234cd351e54d65eed6b802cfb77b15276f3150da9a5251133d2e6a0fe39c9bfccdba9d46d9420a40f357a449f0496e2fccba99b6f4019b63981d3e1c3c757f2dba"}) 07:35:50 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) msgget$private(0x0, 0x80) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000000c0)={{0x2, 0x0, @reserved="c4c297478ca60de32f998a72b9493393234515f0c80e8074abc19d7fdd597649"}, 0xbd, [], "7e94cfacd182cb1b741ff2b7dce9a2e311b283df6087e0445e51b89d7dae96c7152d178a240bdb5e3eab0fe7c122b5a1f86a8a660d525a108489f30c59ae7962ed0075e5f35ee5bf6134b9eb40df3b707f98d7119471b3590a0c99893796197669ff6690ef0af6df83be799eb4aaa71598d1dadc82b6c137fccba2ce41d075b95ce55b744b683adbb2975998efdfca6c0e5adca9689d95f663aaba79f0d32d0c8b4c21b13330ae4d4bb7abde517feb80f9b16e1071c0b63f5dbb7a82e4"}) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getpgid(0xffffffffffffffff) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TIOCGPGRP(r11, 0x540f, &(0x7f0000000300)) fstat(0xffffffffffffffff, &(0x7f0000005840)) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240), 0x0) 07:35:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x60a83, 0x0) recvmmsg(r1, &(0x7f0000001640)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/124, 0x7c}], 0x1}, 0x6}, {{&(0x7f0000000240)=@hci, 0x80, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/112, 0x70}, {&(0x7f0000001340)=""/148, 0x94}, {&(0x7f0000001400)=""/54, 0x36}, {&(0x7f0000001440)=""/211, 0xd3}], 0x5, &(0x7f00000015c0)=""/98, 0x62}, 0x961}], 0x2, 0x40002000, &(0x7f00000016c0)={0x77359400}) 07:35:50 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RCLUNK(r2, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x3, &(0x7f0000000200)=[{&(0x7f0000000140)="b069588bae9c1fbc036c2a101c7aaba9da282bb3287305b5457e6878e153c83918af5ea67ad8041278d291119dec6887d8a0a832a9319808df9d2172636494b58e76989c15081d9ee937d2704fd57eb735cbc28a8f413262e1afd9048f5342164dd52ea97cf5200460b64d6a", 0x6c, 0x4}, {&(0x7f0000000880)="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", 0x1000, 0x4}, {&(0x7f00000001c0)="ad8fac9487946192aafac5913dd1c246e51c2407345d6f1588223b65f25680418b5014ef985fc01454c4f507", 0x2c, 0x13349b23}], 0x400, &(0x7f0000000380)=ANY=[@ANYBLOB="71756f74612c6e6f71756f74612c6e6f646973636172642c66736e616d653dd7292c0026181a7c86f8a4f86e0f2c52135103d1898dfc500ea4cbf13c0044e8294351879224f21a10af55292995b638a4940a01af627cbacfc5f07ab9854ba2ee238bb673c73c5a4f9040beab68dc6a0727a2b635b042beade38e923a10088c8148c52b4fa1eecb1ff1c66700dafae4efed4a127876eb2e5d5336541eb2392edf7bfb0080dced"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x3, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0}) 07:35:50 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:35:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = socket(0x5, 0x3, 0xeb) recvfrom$netrom(r1, &(0x7f0000000200)=""/126, 0x7e, 0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x1f, &(0x7f0000000080)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x2}, 0xc) r5 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x40880, 0x0) ioctl$VHOST_SET_VRING_CALL(r9, 0x4008af21, &(0x7f0000000100)={0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$packet_drop_memb(r8, 0x107, 0x2, &(0x7f00000001c0)={r10, 0x1, 0x6, @dev={[], 0xe9}}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:50 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 790.351505] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000002c0)={r4, 0xfffffff9, 0xe000, "d2303939e0105c4f4b2b8b2e634abf37d6519b034742b3616bd223f504301ad6112c9da0dd6a9c5e9d7a7dae3b6099ac70169e85f1ef4c100ab5bbef3936451eed5b26b2e9ee4556f4d5f283cd783b6ef546bacd5e077462eb27418bbda13eee034cb8668975b9cf715cec91f9d74b08fa90bb22e37cd7b4d361d25b11e6ef812399f40009c1578bcb1efd5456ec0b71d941ca21380434c026702f0fb4c323ec722c5a150fe1798a8ca6dd769047b6b18d0f48d0b55d1853f32c8caa55e33d32adcb24a4d36a5d7efc76"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r9, 0xffffffff}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000000)={r9, 0x6977}, &(0x7f0000000040)=0x8) 07:35:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x968f37070e16b008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x6a3515e7989938d8}, 0x4) r5 = fcntl$dupfd(r2, 0x0, r1) eventfd(0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x7, 0x1}, 0xfffffff8, 0xe0, &(0x7f0000000080)="c9d458f10b60ae5894ff6105df571368cd03f579841a61bf7e2dc78f91f71eadcb45732fa9bee0d4b44a20988d2da87f984949dff683ec25f0e7e414d65e4334fa6ff3e41700d7d8590c738d437ce6", 0x4f, 0x3, 0x2, 0x0, 0xdff, 0x20, &(0x7f0000000100)="8827f90a8b2443caf26ecc6224dae3f034939b8b63dd5c223e3592841e1fa28917038f3b20ff2604520353d57aefcbab751b8e5f90f798b3775fcb43638e2f152d6c0d8865be8b7e47ffe90634ac18c273b066996dc8f299ba593aa86dfc"}) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3ff, 0x2002) 07:35:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0x3, 0x1}, 0x6, 0x1, &(0x7f00000001c0)="9dbb9791dfd24ea0025ffe", 0x0, 0xc4, 0x8000, 0x0, 0x6, 0xfffffffc, &(0x7f0000000880)="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", [{0xdddf, 0x50000, 0xffffffff}, {0x20, 0x8000, 0x7ff}, {0x7f, 0x2, 0x9}, {0x5, 0x91c}, {0xfffff801, 0x6, 0x3}, {0x1, 0x4, 0x9}, {0x6, 0x5, 0x2}, {0xb6, 0x2, 0x7fff}, {0x3, 0xfffffffc, 0xfffffff8}, {0x7fff, 0x0, 0x40}, {0xb02, 0xa1ec, 0x3}, {0x8001, 0x1, 0x5}, {0x10001, 0x71ea, 0x3f}, {0x2, 0x2, 0xcd7}, {0x8, 0x7}, {0x0, 0x7f, 0x6}, {0x9, 0x3}, {0x8, 0x80000001, 0xeae6}, {0x4, 0x0, 0x800}, {0x1ff, 0xde, 0x7}, {0x282, 0x80, 0x6}, {0x0, 0x0, 0x5}, {0xb8, 0x7, 0x5}, {0x2, 0x9}, {0x4, 0x3f, 0x4}, {0x9, 0x7ff, 0x401}, {0x7fff, 0x8, 0x10001}, {0xfffffc4b, 0x1, 0x6}, {0x1ff, 0x0, 0x7fffffff}, {0x7, 0xa2ee, 0x80000000}, {0xe32, 0xffff, 0x58}, {0x1000, 0xef97, 0x2}, {0x5, 0x4, 0x24cb}, {0xfffffff9, 0x63, 0x57}, {0x85, 0x2, 0x47f30000}, {0x4b3a, 0x4, 0x1ff}, {0xffffffff, 0xfff, 0x6}, {0x5, 0x7ff, 0x2}, {0x101, 0x7, 0x6}, {0x1ff, 0x63d, 0x1}, {0xa21e, 0x9}, {0x0, 0x1, 0x80000000}, {0x200, 0x4, 0x7f}, {0x3, 0x8, 0x9}, {0x0, 0x4, 0xfffffffe}, {0x5, 0x2, 0xd9}, {0x21c, 0x7}, {0x39, 0x14c, 0x1c1e}, {0x80000000, 0x7, 0x9}, {0x2, 0xbe0f}, {0x0, 0x2, 0x8}, {0x4, 0x0, 0x9}, {0x3, 0x1, 0xffffff01}, {0x200, 0x27cc, 0x80000000}, {0x80000000, 0xfff, 0xcd}, {0xfffffff9, 0x0, 0x9}, {0x20, 0x2, 0x7ff}, {0x8, 0xffff, 0x2}, {0x0, 0x6, 0x79}, {0x9, 0x1, 0x80}, {0xa7f4, 0x815, 0x3}, {0xee88, 0x1, 0x7}, {0x800, 0xfdf, 0x28}, {0xddb, 0x1, 0x7}, {0x6, 0xff}, {0x400000, 0xb8f3}, {0x80, 0x9, 0x6}, {0x20, 0x7, 0xb470}, {0x1, 0x8, 0x1}, {0x3a, 0x1, 0x1ff}, {0x4606, 0x1, 0x3}, {0x101, 0x6b11, 0xffff1a1d}, {0x1ff, 0xfffffffa, 0x400}, {0x200, 0xafa5, 0x7}, {0x4, 0x6}, {0x6, 0x520, 0x1}, {0x2, 0x6, 0x7ff}, {0x2, 0x1, 0x200}, {0x3, 0x0, 0x3}, {0x7, 0x800}, {0x8, 0x80, 0x9}, {0x2, 0x9, 0x48}, {0x4, 0x9, 0x3}, {0x9, 0x7fffffff, 0xe3}, {0x8, 0xef, 0x7}, {0x5, 0x3, 0x1}, {0xa61, 0x2, 0x6}, {0x4, 0x200, 0x800}, {0x9f62, 0x3, 0x40}, {0x400, 0x10001, 0xff}, {0x4, 0x7fffffff, 0x40}, {0x800, 0xfbac, 0x2}, {0x5, 0x6}, {0x9, 0x947b, 0x5}, {0x9, 0x5, 0x1f}, {0x0, 0x80, 0x4}, {0x1, 0xff, 0x10001}, {0x2, 0x0, 0x8}, {0x8000, 0x0, 0x6}, {0x8, 0xb, 0xee32}, {0x4, 0x5, 0x400}, {0x66ec6f85, 0x0, 0x365}, {0x10000, 0x40, 0xaee}, {0x3, 0xe2b, 0x1000}, {0x7, 0x0, 0x3c4}, {0x2, 0x800, 0xff}]}) 07:35:50 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x4, &(0x7f0000000280)=[{&(0x7f00000000c0)="0dd0968252bbf022020a1223d7eb4e4f04c1663c2cb753a1cdc295ee59c3db13d86b20aede2d73b7687f0c10369d6d468e7e0d81ccadbad5340bbccc3834bd2c29e7683d4970029d4930669411d57767c6a3cf98d94d845867836bb99345619832c6435f4d2b1aea4c7a49a1d3214d14a1148eae567cca23eb28f2e070af009d52780e89244f90c6e4e09945191be2ed9d26fc667927ae3d4f3fd0578569f1725746", 0xfffffffffffffd3a, 0x3ff}, {&(0x7f0000000200)="c1f4856f474d95da7d8f814e2d109e1ee5acf4820830315c1f5d549f1b499c1d0d55dded81ec04547cf2805c538dc51adb4c25d9858bac8d92c939ea2469bb4fecda4e862c4dcd89a2bea8fc41d3efb573b364c94db165f4edbece7cf47cdcfedabd93f88e3f8fd12deca96a1389ed745157f6c6874fde96eb7685dcb91b6e", 0x7f, 0x65}, {&(0x7f0000000380)="a14fbaa9b4778a25857edb4a3d84a92902d9a81462314d5f84b36b9a2db4506df4fb8edf036b3795ecea58a154489356f36cfb66f87422b1af90eb7610b17401cc154ee0745c26687076ea5a162995c1f75846444397c6cb73dc5e1ed22a8b48f156c5d7991c6a83df5bca43233987d3a102096da0309c9193f48688905b354bcc5e5d629876ed29a537a39e9deb57f0bc2aa9cfd22b0ef0cf0d0af79621648894d6aee94703b44f460eaebe5da48e4bc59f9bd29f7b58d250f0af8f7573606289db108b2d37a13ab1e8734c95ed2aab8a25af15f3a7c388509a86c439b7dcef2b", 0xe1, 0x7f}, {&(0x7f0000000480)="2c39ad2d2859a5f561353b8d7ef585db3d70620b672dcb97995f4c8467d2f908b0c7f5faf9a2355bbb02e29d1090fd472b9ac52bbaea2668321cc333767d1fd5aa0da8fd4bd3bfafebb0e20e7d5a6cd839a7a615aecf82aac09c34bb09100a736cfe4e7cd123e0f9880649f469379f0de430e89536178ea5121c784f549304a89a8a48b992c89162586221ca82ff95b4d23109c60820adee8761d4239b5524d8551fba579e9499f87847ae12bf8ffdc685b73fb17a064639f5cdbafa1eef607f0da8490e30eeade36775ce279dfa6861f19b5b84a0f4c4ed4dd922df", 0xdc, 0x8}], 0x58004, &(0x7f0000000580)={[{@nossd_spread='nossd_spread'}, {@discard='discard'}, {@user_subvol_rm='user_subvol_rm_allowed'}, {@nobarrier='nobarrier'}, {@acl='acl'}, {@nodatasum='nodatasum'}, {@noenospc_debug='noenospc_debug'}, {@noenospc_debug='noenospc_debug'}, {@thread_pool={'thread_pool', 0x3d, 0x2}}], [{@fsmagic={'fsmagic', 0x3d, 0x3f}}]}) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:50 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCGETLINKNAME(r7, 0x89e0, &(0x7f0000000180)={0x3, 0x1}) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5198d368f49176ae}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getrule={0x20, 0x22, 0x10, 0x70bd27, 0x25dfdbff, {0x2, 0x14, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x9}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24004810}, 0x8801) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:50 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 07:35:50 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x6, 0x1}, 0x2, 0x20, &(0x7f0000000080)="41729c3cef7cbcce8d1f958ff077d88e1d965643b93392380ff5ce7207ab6e7bbce9059a3ed299c615eac12554b46d857734a1816e25a04c9bae6f288311dcc87a9d9802d43527e3de98d648bfae77fce83c8feaea51cf8696110fadbe42d158eea9348e27c73060fc17fc957132358ead7bc909ef1b21c3942e0406d1", 0x7d, 0x7, 0x20, 0x0, 0x2, 0xe80b, &(0x7f0000000100)="fede1151723bbcac6c3eaf243a75b848c3f08b015f7a889f5ecafb8bdeb99fdcf4b895ceef72cffb203ec9ae4bd41f5e446f488cb6b36002a8355b5b7c437a305464196acc81199f86cf957668cf59ccfc5c9be8a0d69b9f51dd6a826c93b48233833cf4d13b5076c7dc50d2e939af2032d0ba90a5610aa65ad5151c699089f3c8d22a24401a6b164ff0b9a878092d03f864b7a38b0327db75b04f64b192a4d358125fbe8a25d14dd2810cd9b67ec43fbb4ab0580b96274f4e87c55a62e7c67a197885de4b75be0c58bd3d18d7b3530691893df7501c1a61f69d3f759f55d02ac1d02e20329650828be066c10e3041"}) 07:35:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/30#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 790.702056] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:51 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$nfc_llcp(r2, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x7, 0x9, 0x5, "b7863279cc47e9b8440bdaa66f2f68f2dcf73201caa8cc1a8425896d39cc7143729f8b4f098717f897e9567e0f6ec688dde5b5e93d94bc064a55d43ed5eb8b", 0x17}, 0x60) r3 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f00000001c0)=@urb_type_bulk={0x3, {0xc}, 0x5, 0x44, &(0x7f0000000080)="7199dca1c73ae8e0d0326a4833af025fbfb6077e8b2c6299ba3e46358633939b1e1fbd11ab", 0x25, 0xfffffff8, 0x8, 0x4, 0x2, 0x6, &(0x7f00000000c0)="6106477e47f5a6a78e1a63f93f52148d815a0cd970a07c2b08e0d400b796728aa2553d032cbed9dfb2d14de65cfbddcc464c66eaec02c1fe42ab18aff339e08f494acf45930876e229731603a43cdd068a037e49e5127069f31fb6ac9855fa75673a20cd1ddc5f74e66e8eeccf2248bcf463e85cea65017bdd8a8a6f59543ebe21734b98091ddc575829807fee1739b459e5da403a742d93b2ebf7b6e73e0b7aaaa3748d443ec33c472cddd44d2a46d3d251d3ceaa13e29d4ba2b14530dfd646c0e57146034424f78d"}) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0xe}, 0x7, 0x1, &(0x7f0000000080)="30afb2815cdfee855ec2ba862f1142652a41cf2436cd83ac8a66702380b6c357068a8ddba1bf8707e486a39441568667d314040f2569d04edb6e44cc1520417f008717ee800938ebed552d5087fc37bdc07ff87df06955fdfe3b2d18607f8b395492bd61b39d92017caa17d4aee12f1924306528a4c087fb9b7a092540e4b4e3928cb05338dc0758ff3e71322cf8eda818ce9a3b6ca8554b97489a4c99f8a8229fda486db5fac6d43c2ce2a89b70ba440638aa3993274ce45f80761cb23244a3a75662433cf80acf4f84178b3ee89e141d3c85a6317b49c551bae13aaa5ace80bdce0eb094a693c9965ded6eb8fd", 0xee, 0x6, 0x8, 0xf990, 0x1, 0xfffffffe, &(0x7f0000000180)="8639240abc2445be132f80ef3ac401c9b3354631c6abfd7176855347df1304535997cde69e4ca58eebdb"}) 07:35:51 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) [ 790.886264] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)=':posix_acl_access\'md5sum\x00') mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 07:35:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x0) 07:35:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x35017304f4725b68) mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x10, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_DEV_CREATE(r6, 0x5501) prctl$PR_GET_SECCOMP(0x15) r7 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x6, 0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) 07:35:51 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ftruncate(r0, 0x119) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:51 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) [ 791.380676] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:51 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@hci, &(0x7f0000000000)=0x80, 0x800) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000200)="8d2b6ce401f04a19b3e2c409deb7dcc6", 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0xa}, 0x2, 0x80, &(0x7f0000000080)="e0e8d598aaefa8c25b020f49aa7c4373f1f383c222bd8d134fcf4c397b176fba46024b4f6a41757bce197e3e88b27d1004e2d4981c35de1efec5e4c4615b1054e4349e7f786fef18e72a2122956a45f940df9e47f7314244e9dda5c157dd8ba5b80a3feb", 0x64, 0x5, 0x7ff, 0x0, 0x6, 0xffff, &(0x7f0000000100)="c7396849e5c98402d02904a289d1b093bdc66e36cd9f552cb7be7fed5c66dd2ed955eee81f43f3bc4b744d27d6514b406d524e47ac3dfd3fc073db02a5a03a4713b61cbfe5f856"}) 07:35:51 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000200)) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a00}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="10dcfd76dff12544", @ANYRES16=r1, @ANYBLOB="000427bd7000fcdbdf2507000000b40004000c00010073797a31000000000c00010073797a31000000001c000700080003000008000008000300b5ae0000080001000e000000540007000800040004000000080002000180000008000400200000000800040000000000080002000600000008000200ff07000008000200800000000800020001010000080001000a00000008000200fffffeff1400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b0000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c8a0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BLKBSZGET(r7, 0x80081270, &(0x7f0000000180)) 07:35:51 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000080)=0x1f) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:51 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 791.618383] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:52 executing program 3: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0xb, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000080)) 07:35:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000080)=0x2965) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:52 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket(0x10, 0x80002, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x9a3a01d7e8658f45, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) exit_group(0xb8) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:52 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000680)) [ 791.792945] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x100000000, 0x40000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f00000000c0)={0x0, 0x20, 0x2025}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:52 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ipx\x00') ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:52 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 07:35:52 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010000507000000000000000000000000c5a3d112e06a6849dc831b223f51c8278fa67586eb8df60b4e17d564fbff98d5dbf0e7c8267306c2d9ac1d695a22d41c633935e3ec9e887a261b21ce1807725a8f247b66e40bd638d2c072120aec5c12930716abe77460e42a99c342a110e7893da8beedb8da81cb8ac81a72b4616d9b6532f67ffea4a11e5a0c861f12687f629eef4cd35becc21a396cbd33f231bef4760f6ea8c754b6c97d34f02e1dd8adbec82a2e8bd55bdbdc3ef6c34fb4457607fec1c233254c15908586fa28404a72190e64ea62f4d000c16bea46a30b477a06e2d189684a29271af1cde1d4b05d2512b152b4c78ccf6a1db88de92d4e5b12595a6f715d", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x5, 0x4) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 792.022601] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x6, 0x480301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x5, 0x4000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x8, 0x3ff, 0x1, 0x2, 0x1, 0x10001, 0x9, 0x5, 0x5, 0x3, 0x3, 0x9, 0x1, 0x20, 0x20, 0xc}}) r7 = fcntl$dupfd(r2, 0x0, r1) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/tev/infinibaNd/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r9}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x3, 0xfa00, {r9, 0xd45}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:52 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x420000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x4, {{0x2, 0x4e23, @multicast1}}}, 0x88) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r3, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 792.143571] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 792.180239] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:52 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x0) [ 792.194247] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 07:35:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000080)=0xec04) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:52 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) poll(&(0x7f0000000180)=[{r1, 0x1}, {r2, 0x2018}, {r3, 0x8}, {r0, 0x802}], 0x4, 0x5) [ 792.377602] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 792.417293] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:52 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RLOCK(r5, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x3}, 0x8) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:52 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x4}, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0}) 07:35:52 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 792.553545] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:53 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socketpair(0x10, 0x6, 0x55, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) lsetxattr$security_evm(&(0x7f0000000300)='./file0/bus\x00', &(0x7f0000000380)='security.evm\x00', &(0x7f00000003c0)=@ng={0x4, 0x2a, "7d9b34347fb6e1f5c42231d1a4"}, 0xf, 0x0) connect$ax25(r0, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xf69e960f66c5fd0d}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r3, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40000) eventfd2(0x0, 0x80000) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) 07:35:53 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00\'/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x548) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = fcntl$dupfd(r12, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fcntl$dupfd(r15, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = fcntl$dupfd(r18, 0x0, r17) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = openat$null(0xffffffffffffff9c, &(0x7f0000000400)='/dev/null\x00', 0x40000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = fcntl$dupfd(r22, 0x0, r21) ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200) r24 = syz_open_dev$media(&(0x7f0000000440)='/dev/media#\x00', 0x6, 0x2000) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000891}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r7, @ANYBLOB="40078e2b0280d1eeb8a03709128a3b080029bd7000fcdbdf25010000008200050000", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="08000100", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r23, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r24, @ANYBLOB="0c00030002000000000000000c00050010000000000000000c0005000100000000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000085) r25 = getpid() sched_setattr(r25, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r26 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x400002, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x9, 0x8, 0x33, 0x8, 0x0, 0x20, 0x4020, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x6, @perf_bp={&(0x7f0000000180)}, 0x10a02, 0x7, 0x6, 0x6, 0x6, 0x9, 0x8}, r25, 0xe, r26, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = fcntl$dupfd(r28, 0x0, r27) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) r30 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x2, 0x0) setsockopt$X25_QBITINCL(r30, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4) getsockopt$inet_pktinfo(r29, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @initdev}, &(0x7f00000000c0)=0xc) 07:35:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r8}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x1, 0xfffffffa, "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", 0x4, 0x40, 0x3, 0x2, 0xff, 0x7, 0x1, 0x1}, r8}}, 0x120) r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$inet_dccp_buf(r9, 0x21, 0x80, &(0x7f0000000300)=""/116, &(0x7f00000003c0)=0x74) 07:35:53 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 07:35:53 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40000, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r3, &(0x7f0000000000), 0x10000000d) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000380)={r4, 0x7, &(0x7f0000000240)=[0x55c, 0x10, 0xc195, 0xffff, 0x2, 0x1, 0x5], &(0x7f00000002c0), 0x20, 0x0, 0x9, &(0x7f0000000300), &(0x7f0000000340)=[0x8]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={r4, 0x8}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x5, 0xbf9f, [], &(0x7f00000000c0)={0x990a91, 0x8, [], @p_u16=&(0x7f0000000040)=0xff81}}) 07:35:53 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file1\x00', &(0x7f0000000000)) r0 = semget$private(0x0, 0xc78639d8f315cecb, 0x288) semctl$GETZCNT(r0, 0x2, 0xf, &(0x7f00000000c0)=""/224) [ 792.880982] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000080)={0x6, 0x1, 0x1f, 0x6, 0x1ff}, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xcc, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10003}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0xc109c933483dce05) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=@known='security.apparmor\x00', &(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x15, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r8, 0xc04c5349, &(0x7f0000000480)={0x7, 0x7ff, 0x3}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0xc, "3b83330faa68a50eff1c341d"}, &(0x7f0000000100)=0x30) 07:35:53 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 07:35:53 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000040)='./file0/bus\x00', &(0x7f00000000c0)) 07:35:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20882, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000140)=0xffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0x5, 0x2, &(0x7f0000000200), &(0x7f00000002c0)) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r6, 0x81, 0x10}, 0xc) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r7) keyctl$instantiate(0xc, r0, &(0x7f0000000300)=ANY=[@ANYBLOB="6c6f616420656372507074667320747275737465643a23706f7369785f61636c5f6163636573732c20303030303030303030303030303000000000323720373863390065887705ad6f44fe3f4679fb4305722e0aafa3401d214b9b368d9b3a02cae7bacd4bf90514a36cdab8889d2a0c1a7d3a9d15222072982f70a4acc38cb53fda235fe77a6b813f05af979c03b5a75d39ddeac7a96aad4bebaa2527291896a034734ebd9ef0ac19f27e"], 0x43, r7) r8 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r8, 0x0) 07:35:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d100000000028001a000c000100766574686071643ca9b71b6c1400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) eventfd(0x7) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r4 = fcntl$dupfd(r3, 0x80c, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r7, 0x80845663, &(0x7f0000000080)={0x0, @reserved}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:53 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x18000a0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@ax25={{0x3, @null}, [@bcast, @remote, @default, @default, @default, @null, @netrom, @null]}, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) 07:35:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:53 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 793.365079] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:53 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:53 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "a2b9210897af83cc9c7651ccfb165719"}, 0x11, 0xccd78e887b060480) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc000) write$P9_RSTATFS(r0, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x6, 0x9, 0x800, 0x80000000, 0x9, 0x100000000, 0x7fff, 0x6, 0x9}}, 0x43) 07:35:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000100)={0x0, &(0x7f0000000180)}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000000)=0x8, 0x4) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team0\x00'}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 793.573227] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:54 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) accept(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x80) stat(&(0x7f0000000640)='./file0\x00', &(0x7f00000000c0)) 07:35:54 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 07:35:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = timerfd_create(0x8, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000002c0)={0x5, 0x1, "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"}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x511102, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="b4010000ac6881906425539f32e01318684e51e2c7aa88042f73c9c315bde139a80b45ccdd23758d81f4e69720588800000000000000209d0134210949c1004f65f37cbe99f4ee3f3889e164dfc8e1608787e8a9c07f0e615dba4d320800000082e9eed0", @ANYRES16=r7, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:54 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00', 0x2000, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'user.', '}cgroup\x00'}, &(0x7f00000000c0)=""/180, 0xb4) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:54 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) [ 793.968495] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x6, 0x40}, {0x8, 0x8001}, {0x752, 0x8}, {0x5bb, 0x9}]}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_init_net_socket$ax25(0x3, 0x3, 0xcc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0xbca, @remote, 0x11c}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x0, @multicast2}], 0x7c) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0xd}, 0x8, 0x86, &(0x7f0000000100)="ad01b762410f28a3c1d54a9ede2c1b0982e9dd899027e53825a2b68e28c1b4418a2125ca8eceef1a8194b03c8d673ca76d80023a9a97d19bb28ac90a8a52e722679278d1932d96d190dea05d9d6337c6b369aa9906da5c004944feb9e2e563738903deec97cd29238236406bf387337ab69c9ccf24ead5ba9b677d9489716108b3bfe69b01d584e6c90d141928d2b545ae3a31a36cc1711bacc5e424", 0xfcc5cf142f32b816, 0xfffffff9, 0x4, 0x3, 0x10000, 0x5, &(0x7f00000001c0)="8b62343bc8a41c5d5ef38436b51adff21f2e787aeef2d4d56be232c05545aea0b75f64af1b138a4ef2f57c4fe3d214b68f364980b568914296fbb59bb2d9026e06df3d12eb7db6026fe627d58d37d88ffcb70ec26d536f42c51463fc8d7ffd3fb1d7440d2b58016d0770956afc453d4bec068418c232fd23fc924103e8c1e3672bd82ee6f7e8e83c37cf921db5bb10bb22e2e8b333ab8459811cc6542f4b3dd98541739b6afab29d1313854c555b5d4999"}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="50b9b8abcc135861c60002000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) write(r4, &(0x7f0000000000)="17286bdc3b0157d6e17a", 0xa) 07:35:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x7fffd, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x80) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000040)="b7a2f0ccc9f4a82485a0d2fe56f0d788eb9064271344f6ae21b523f3551185cf1f69125c5fda951a2dd08c4f3644e30fed648828929f15b5d2a0193788a17e1f3fa5f534ab6543142bbf05cb3a872c1f95eb9a25cc44c5a418028c58918c066260612e7c72f7d7a5ea670ab92b301fb3c6417271dcb369eb8d322adf2a0be097e765e8f8965b658ace73951354250cbb3c598bc009b0bf148db7656787e39e4aa89fc4d5f72fc910d0ba00fd117a37523db799a04b5806e7e1328e2a69c55926cb2c12a5a09f34883066aa32c016e340f166432efceb628211d41440fad4a1d5648d9196e70687bfcf") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt(r2, 0x3, 0x800, &(0x7f0000000140)="1cc2352714a722ae10161db4afa4f8eb4ee05f8c3e6eca0003b9fb3c6532c01d53fc97a644bbc51e8e4cfd4b779a719bd83fc8ac02321c9fb8d2f4cbab93ba9edf1143082e2033b736a0005a218daaf8a6866cdaf0ef4f44b5240532df000619485b27e81d36ac22ebf4649120cd34c44c5f1b829e48b81c8f5f2b97c2f003fe381baa83c19c6b3fe719f3c60f5168215270eac15e8254f6760760c45ec0995f058e68442a1a4957b7e9e3c98898203394c06b742fd464be6f59b153fcc2be5f6b981b1569b67f9cc8", 0xc9) 07:35:54 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xe8) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000300)) setresuid(r1, r2, r3) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000680)) [ 794.152534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5068 sclass=netlink_route_socket pig=14508 comm=syz-executor.2 07:35:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r3, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x6, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x8, 0x4}, 0x0, 0x0, &(0x7f0000000100)={0x5, 0xa, 0x2, 0x7}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xe6}}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2000000000000006, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x5}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 07:35:54 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) [ 794.363203] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 794.370476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pig=14514 comm=syz-executor.0 07:35:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:54 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x207, 0x0) ioctl$VIDIOC_G_INPUT(r4, 0x80045626, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:54 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 794.506254] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:54 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xc2, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r4, 0xffffffff}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r4, 0x8, 0x6c}, 0xc) r5 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000000)={0x1, 0x2, @start={0x74e9ed69}}) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000041bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/57, 0x39) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/icmp6\x00') ioctl$VIDIOC_G_OUTPUT(r8, 0x8004562e, &(0x7f0000000180)) modify_ldt$read_default(0x2, &(0x7f0000000040)=""/206, 0xce) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) fcntl$dupfd(r9, 0x406, r6) r10 = accept$packet(r7, 0x0, &(0x7f0000000000)) sendmsg$sock(r10, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500), 0x14a, &(0x7f00000015c0), 0x30}, 0x20000000) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000001640)=@req3={0xf743, 0x7, 0xfffffff9, 0x3, 0x9, 0x0, 0x6}, 0x1c) 07:35:55 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) 07:35:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 794.687279] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000000)={0x20, 0x0, 0x2, {0x1000, 0x4, 0x6, 0xad}}, 0x20) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=@srh={0x2f, 0x2, 0x4, 0x1, 0x7f, 0x20, 0xf7d8, [@rand_addr="e49baf358ac07d851214bbd7ea5fc9ad"]}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 794.810759] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x2, 0x8012, r0, 0x0) 07:35:55 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) socket$netlink(0x10, 0x3, 0x0) [ 794.954421] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000080)=0x0) process_vm_readv(r7, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/153, 0x99}, {&(0x7f0000000180)=""/176, 0xb0}], 0x2, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/152, 0x98}], 0x1, 0x0) 07:35:55 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 795.108971] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0xe02, 0x319000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x800, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000002c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x80082102, &(0x7f0000000140)=r8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 795.233788] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:55 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='qnx6\x00', 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x450040, 0x0) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10000, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:55 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:55 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18c01020}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="2e495370438417398a2cc519630300c61dc645ca6d8d936d194aa291d1d03ad5525c29078ea7baab39f7da8479c547761202a81138aab05c420bb64b6db2ec4d985265b932b0abe06628f249247050f519de75de8e4e3cdf8ff8d7938f61e6d2609cbc5bf443f45840615a9748bbe223dbd72e88a9e195982b0061ac95045c957f60006037337313d77925f0094b952b79a9c4583482f959b16d0dcf638097efcf79e15c8530c8f3b2833046b27eb9481445397260e83b1451c39851ae", @ANYRES16=r7, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x444}, 0x80) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)={0x3b4, r7, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99f0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_BEARER={0x16c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x30df6c37, @rand_addr="1262e975e43eb082a6109d3bf260f470"}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe8, @rand_addr="4423932ea8e34e9726884dcfabd3e232", 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xded7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000000}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x15}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffff000, @remote, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}]}, 0x3b4}}, 0x20000000) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x181082a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x556507f9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9445}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000041}, 0xd8370ca49f055cbd) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:35:55 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSIG(r3, 0x40045436, 0x4) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000140)={{0x7, 0x1}, 0x36, 0x100, 0xc0, 0x7fffffff, &(0x7f0000000080)="bd10d0ca8b495d8390b652c894fc9190513a7a15e8e5fbcee6c4e09a0eca5b24c232422bc8783de2914ea2cbc71ca79c89616f6b561236ae4d052d8964ef45108eeb0d21d73c288aa00a1b496c964c329a7aa4bef65ec71dfdfd2262d880560a649854faa56b73100726c0a6d272a18901b3d526e34136c6f89da2f8e16476878f53db6c09b31f4dac70779a15a81814fe331b795dcf57806c3317964930f18f2e0fe5f75b9a35b3c6523627d637ea0f6c671f7574e152e4dd62bbc6d98194e4"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 795.540732] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 795.569115] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:55 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:56 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x0, 0x0, 0xfffffff9, 0xff, 0x0, 0x7f, 0x5, 0xc6, 0x7f, 0x0, 0x200, 0x1}) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x1290}, 0x1, 0x0, 0x0, 0x884}, 0x180) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r6 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x5, 0x1, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:56 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x12000, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:56 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x100, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:56 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:56 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x98) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:56 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:56 executing program 0: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:56 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/44, 0x2c, 0x146, &(0x7f00000000c0)={{0x3, @null, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000001c0)=""/69) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0xf, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0xff0a) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x76, &(0x7f0000000000), 0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup2(r4, r6) dup3(r9, r5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000140)={0x5, 0x2, @stop_pts=0x7}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 07:35:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x181001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0xc}, 0x7fffffff, 0x40, &(0x7f0000000080)="8328bc64b227ffbcdf97eb608a0431b3f12d8e7820847a01cce8327111b1bed381740f070e0a2affc19ddd11c57b608081aa6bd9cff39924929f0d888ae4297b702e2f0ec811f215acc4b9", 0x4b, 0x80000000, 0x657c, 0x6a, 0x200, 0x11, &(0x7f0000000100)="4ac286f59c8ca6f5b2dd54cfabc1d1c34ff0aed1c2b0c2ef1ee522e3a5f2a88d63a35a3953c4c8f5fa1bf5900b1432ccc05c7bc3eb6d29c4d9a3baf25a9a05fdc76d899991a54156664c3fc7f61cdd477712adc5bbe2b6b12cd7", [{0x1, 0x1}, {0x8000, 0x2, 0x8000}, {0xffffc000, 0x9, 0x76b}, {0x1, 0x7f, 0x3f}, {0x8c6, 0xf3d, 0x42e7}, {0x4, 0x9, 0x9}, {0x10000, 0x8, 0xb5d}, {0x6, 0x3, 0x200}, {0x1, 0x8f, 0x7fffffff}, {0xb4, 0x0, 0x62f7}, {0x7, 0x10001, 0x80000000}, {0x5b, 0xbe, 0x100}, {0x81, 0x7, 0x10000}, {0x6, 0x6, 0x6}, {0x7, 0x1, 0xffffffc0}, {0xfff, 0x8, 0x9}, {0x4, 0x5bf, 0x7}, {0x3ff, 0x9, 0x5}, {0x5, 0x3, 0x9}, {0x8, 0x9, 0x101}, {0x8, 0x0, 0x2}, {0x8, 0x2, 0x6}, {0x6, 0x0, 0x10000}, {0x7f, 0x1, 0x100}, {0x8, 0x97, 0x8}, {0x80000000, 0x20, 0x10000}, {0x4, 0x9, 0x4}, {0x313, 0x0, 0x4}, {0x10001, 0xe6, 0x7}, {0x3, 0x80, 0x2}, {0x2, 0x20, 0x5}, {0x0, 0x30, 0x7}, {0xffffffff, 0x401, 0x7fff}, {0x90, 0x5, 0x1}, {0xffffff7f, 0xb137, 0x101}, {0x3ff, 0x3ff}, {0x3ff, 0xffffffff, 0x400}, {0x200, 0x7ff, 0x7}, {0x7, 0x2, 0x1f8f}, {0x1ff, 0x4, 0x6}, {0x4, 0x200, 0xffffffff}, {0x1, 0x403, 0x8ab8}, {0x843, 0x7, 0x8}, {0x0, 0x80, 0x76}, {0x400000, 0x0, 0x3}, {0x800, 0x7, 0x7}, {0x8, 0x7, 0x9}, {0x200, 0xfffffffa, 0x3}, {0x3, 0x7a3b}, {0x1400000, 0x400, 0xfffffffe}, {0xffff, 0x9, 0x7fff}, {0x80000000, 0x9, 0x68}, {0x9, 0x4}, {0x2, 0x0, 0xffffff7f}, {0x8001, 0x7, 0x9}, {0x7f, 0x2, 0x9}, {0x460, 0x5, 0x800}, {0x3ff, 0x0, 0x2}, {0xa1, 0x25, 0x5}, {0x7ff, 0x81, 0x758}, {0x1, 0x20, 0xfffffffc}, {0x6acf, 0x8, 0x8}, {0x4, 0x5, 0x10000}, {0xfff, 0x2, 0xa4c}, {0x9, 0xf4a, 0x9}, {0x9, 0x1, 0x7fff}, {0x40, 0x1, 0x4}, {0x9, 0x0, 0x2}, {0xfffffff8, 0x4, 0x7}, {0xae0e, 0x9, 0x401}, {0x7fff, 0x6, 0x10000}, {0x7fffffff, 0xffff0001, 0x4}, {0xffffffff, 0x8001, 0x80000001}, {0x1, 0xffff, 0x9}, {0x5, 0x9, 0x8001}, {0x7, 0x757, 0x2}, {0x0, 0x1ff, 0x88d}, {0x81, 0x7}, {0x3f, 0x6, 0x3ff}, {0x3, 0x101, 0x38ea}, {0x8, 0x7f, 0xfffff727}, {0x2, 0x9e1, 0x80}, {0x8, 0x5c, 0x40}, {0xffffffff, 0x1, 0xffffffff}, {0x8, 0x6, 0x7fffffff}, {0x50, 0x3ff, 0xffffffff}, {0x1, 0x2, 0x1}, {0x10000, 0x7, 0xffffffff}, {0x1, 0x7fffffff, 0x400}, {0x2, 0x6, 0x101}, {0x0, 0x8, 0x7}, {0xaa77, 0x8}, {0x2, 0x7fffffff, 0x80000001}, {0x1f, 0x5, 0xffff7fff}, {0x8, 0x4f3a480f, 0xb3a}, {0x6, 0x3, 0x3}, {0x4, 0x1ba, 0x7fffffff}, {0x4, 0x7f, 0x4}, {0x5, 0xfff, 0x3ff}, {0x100, 0x800, 0x2}, {0xfff, 0x8001, 0x4}, {0x100, 0x8, 0xfffffffc}, {0x4, 0x0, 0x94}, {0x20, 0x0, 0x5}, {0xe6d, 0x101, 0x10000}, {0x4, 0x2, 0x7}]}) 07:35:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x8000}, 0x44}, 0x10) 07:35:56 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2000000, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:56 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x0, 0x1}, 0x2, 0x41, &(0x7f0000000080)="18f65b7c3c5452119c2f90e7adccc2be70b3bf822ef483d3c45fdcc9b11a7e466205f3f67d2400ffa21153ded91d0bfa7416b3aad64715c20c002c6a7c54840aa6ebd664a65979ca4a6a3ef079275d829f35db8e486ce869bcbf17c3bda90f1af279543f2f7e9542285d85ad1acea243405c420ac561833e80cf6d1619828f814abf14bcb4648aa9a64701fca4948c5e0bc8a7116edeb7214b25ba2c384cfa21188a6e2e132a4afc39f1b1cca908b2a41336e04b19e420e257e1ef999dfeafad8940a5c74bf4bd", 0xc7, 0x459, 0xfff, 0x0, 0x81, 0x11ed, &(0x7f00000002c0)="c735af290e6ae6c17cd227d45b244d43e96dd54c39941ca8d9f7d4542a47e7c3219ad9317c2f829d5affe35099bae1c0b3c08e98aa8c7f1f1a748a9a9353c1b3a67d619d29fb586f09690d2c547ffa3792a4e7fb6c63a1d3d43918fa7caf6730fdb56388e82db0c0e945a041f7c0f6671400070ed55563647fb7b50b68a29c8cd4733577bee3b07275e277076f123cd56ae3344e67509c35db8ff049ad09e7daf9780fadc5816a0dbf8827782e1766b6086baa9b83449c824c6143b04f858a2b165af34df30fdbcf6ded8d2098623c95f149ee555e56153db2d4a3ce34fbc2f1d9f2548dd325288606c58d4ff96b3a1894daef0aefc9d4"}) 07:35:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:35:56 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x3000000, &(0x7f00000000c0)=0x5c5fa3650b33a58a) r2 = fcntl$dupfd(r1, 0x0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000000000)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200)={0xffffffffffffffff}, 0x2e, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x1, {0xa, 0x4e22, 0xffffffff, @rand_addr="71589bc9c2dd76e7301c29a74020cc59", 0x1}, r4}}, 0x38) stat(&(0x7f0000000180)='./file0/bus\x00', &(0x7f0000000680)) 07:35:56 executing program 1: mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 796.326183] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:56 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @rand_addr=0x1}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @empty}, 0x168, 0x0, 0x0, 0x0, 0x3ff, &(0x7f00000000c0)='ip_vti0\x00', 0xc17e, 0x3, 0x5}) 07:35:56 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RSTATFS(r1, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0x6, 0xffffffff, 0x9, 0x7, 0x8, 0x6, 0x9, 0x1, 0x6b885c86}}, 0x43) modify_ldt$write2(0x11, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCCBRK(r4, 0x5428) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0xe, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:56 executing program 1: mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:56 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000000c0)) [ 796.543588] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:57 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0xd9) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x394, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20a0}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) bind(r2, &(0x7f0000000040)=@nfc_llcp={0x27, 0x1, 0x0, 0x2, 0x8, 0x4, "ca9be011d9176714088137a44ee1e32e32c008721d3c582694211978ad3ff2e6493d5d8ab4a0d379f591226cbd5d26541289b18cd8f4e1b3d63259ec4825bc", 0x3d}, 0x80) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000000)={{0x1, 0x0, @identifier="66d456e87f04b75cb2a90c0eddff5ab2"}}) r3 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x1) socket$netlink(0x10, 0x3, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x800}, [@map={0x18, 0xc}, @jmp={0x5, 0x1, 0x3, 0x2, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_val={0x18, 0xf4cbb3d1176b6c4a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x9, [], 0x0, 0x8, r6, 0x8, &(0x7f0000000200)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x101, 0x3f}, 0x10}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000300)={0x3, 0x8000, 0x2, 0x0, 0x0, [{r7, 0x0, 0xfffffffeffffffff}, {r8, 0x0, 0xfffffffffffffffa}]}) 07:35:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(0xffffffffffffffff) ioctl$KVM_GET_XSAVE(r4, 0x9000aea4, &(0x7f00000002c0)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 07:35:57 executing program 1: mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:57 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r0 = getuid() r1 = socket(0x9, 0x2, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', r0, r2) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 796.742535] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/160, 0xa0, 0x1000) fcntl$setpipe(r2, 0x407, 0x1ff) 07:35:57 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 796.826974] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:57 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 796.945468] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:57 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r5) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r7) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='9p\x00', 0x822820, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="2c3d0000000000ed68b53d44f8a0734813bc135710d8b14663d65e325a37ad4707543828d9b500af5c8a758a3cef8832003a4756d8f066eafaea174647c2acb6fcffc8b8", @ANYRESHEX=r3, @ANYBLOB=',access=client,posixacl,loose,version=9p2000,noextend,cache=loose,cache=fscache,euid=', @ANYRESDEC=r5, @ANYBLOB="2c6673757561643d31301c34613566622d383266282da93639372d0180c9022d1c656465353065342c7569643c", @ANYRESDEC=r7, @ANYBLOB="2c6f626a5f757365723d6c6f267d2c6f626a5f726f6c653d3a5e2c73656c696e7578657468305b23e42c646f6e745f6d6561737572652c657569643e", @ANYRESDEC=r8, @ANYBLOB=',\x00']) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:35:57 executing program 1: mkdir(0x0, 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:57 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, r3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = fcntl$dupfd(r5, 0xc0a, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCXONC(r8, 0x540a, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x4, &(0x7f0000000180)={0xa0, 0x31, 0x0, 0x0, 0x5d}, 0xff09, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0}) sendto$unix(r4, &(0x7f0000000080)="4dddbb53524c6a7cc3b393617c2bfd546ac6c4047603147d68f1020fd940b3cc845a8f0c13d654c7dc5ba95ad055231dc83b47ffc9e8ecdcdae453c335eb56a10de55d2884408d9a56298747518a05d8627d4f962843e5a1532f524d7f4da233bd4eff1b93c06dce2088cc3a36fe7d19db7c75498df7f3ffc2da27", 0x7b, 0xcc044, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x2, {0x4, 0x3f, 0x20, 0x4b, 0x0, 0x3}, 0x4, 0x5}, 0xe) 07:35:57 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:57 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={{0x7, 0x8, 0x5, 0x7f, 0xe4, 0x2}, 0x7}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x1121e1bfad4c3570, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x104}, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setreuid(0x0, r9) sendmsg$netlink(r6, &(0x7f0000000240)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000200)={0x34, 0x40, 0x100, 0x70bd26, 0x25dfdbfe, "", [@nested={0x24, 0x73, [@typed={0xc, 0x17, @u64=0x1}, @typed={0x8, 0x94, @pid=r7}, @typed={0xc, 0x7f, @u64=0xb4}]}]}, 0x34}, {&(0x7f00000002c0)={0x240, 0x2a, 0x200, 0x70bd2a, 0x25dfdbfb, "", [@nested={0x138, 0x4c, [@generic="88843a2c295f6bb7e13fc31c86a4abd790e359a7fa0aa9e1a488b0e16c8ed5c31aa45692475563eebec77378a03da7ff506c9a8e16605976f5023e4eb91d5b1a26ceb684869d6d2c75c0558a160402543660950acbeee09b23e143e0c8fac3f582899ad761f4473bfffb5200eae6adae6f3f13818f5caab99836d91ba2977c90e73fb638363da458f866f020ac87694e5b0d8739d365725c35d76143e7bbede7ebd7370efe67d165ae7d15a8321836154ed974ebf9c51b307dbc4a729c87ebcb756e763e3bf463d81f369dffb92128ec3c8b577ec9cf12d32f02282fe752d38458ff51952c", @generic="581a3d8d5f660a514186b3c7d854986658646c0ef5fcfca025023fdaa76af9c664e739c3ea26df38f04a6b1ae52d772989dcb28561b4c18d44a13b715000e9ab7b77e6bf07e146415b2c6083b68c8c"]}, @generic="18005eea3a0b86c44aac747a05b5057770f3d854fd27f40a0dc2de548fd18f876eef0feaca4231174429ed861af84fbd489de3e749b54216abfacb69ea529d6a3713b2f7dd58e1adbedfe4584427a5d55bdfd39ae213393c7f59d9ed7cce405d5edccb43dbfc6136515315d28daf998b922860ef8ca948278462f20b16ecf3fb02ddf0e7212eed477adc4c4c8bdfd9b95acc5c332e7b16d878212343d423f756aba0e80b85ec28facc151226df8c8d70d9d93ac9719a170ba8b071b745bad684211176f427920d0a53d3ab00382053c4ab8a34feb39c98ea312ce77dd8fadd6dbda2dbac329d81bc98c0102ade4eb3016a4691856fa807"]}, 0x240}, {&(0x7f00000005c0)={0x10e0, 0x31, 0x400, 0x70bd28, 0x25dfdbfc, "", [@generic="b18c775ff88547cc5a8a3986ab2f373721490c701152a3f593bbc15a258bbf3e349767be81ff9fb42cb8ab635999a8f2502f58a91a10e3d8505af62dc47c3bd43f3ecf392ae32415fc2fb509e2efc006f7461af18f96e774e1ce97115cf6411c41f66eb091dd6b5b2323e50e32e3fee656394715e745fbedc49e95906e00c90a38f7052315b3d5fd63d8c316bbcc10ae5fc79ccc8ae7765827515ae0f9b0349f7a84831563efb4c19427b15c714e19a717431cf438ec2d5429ad0a756b81f64c99c631b6dc9e3647121fca28", @typed={0x1004, 0x13, @binary="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"}]}, 0x10e0}, {&(0x7f00000016c0)={0x268, 0x2b, 0x2, 0x70bd27, 0x25dfdbfc, "", [@nested={0x250, 0xb, [@generic="df9d9a021e49739203e0997ae2749552cfc0cfa2dad7c90b1efa7ccfa5340844c24eb08ddbbea33fe451bc1d3b89f4204dccc973df418bcde4ae057e6008b4e0e2b3e8977ac2e90db1dce1ec40f846b71b1eda66a86680a180eeb8d8b29d6597e4cc2074b32b4bd19c7a42f7299d5c26fcd6115fa3", @generic="4be7692eed2d0bf918025f2b4095844e7a0cfb85f517e4a4ead4f3cf1583682e52edff8d50a4dcd161a5e4ec5ada72da798d08429b829aad1ed102497929a9f10b2974e74b94916b69a09d27e6b763816854343b4f2ca98e72f873a5e399264789c02f65861b49af83816adae9ec38", @generic="b861e7a73e2f68095dd89b30a6624fc055343c04c2880e3633c93dc201ea7e1779cb", @generic="f7a7bae13a3314f57c5bbda2f40e6561cf07b11a895223d49f5d11293c372b64853f3baa13f0a6c797dfbf554b3a56553bca5f3b985edfcd51a748c2392d5b14df605ecb27edac5befc74577442371dc81827ca3a112f64eb61c5fb7aef4d9a868c4b64ffaf56a0f3fee21d755d8ba1c9083d96b0dfe45aa4fb0f7c59bb2907b9af896fde2956663d79966734b1943ffdd37dcb81122b7fb6c0639c062bbd2fe4f75ccbf285aeb89e82fe3cb19d59b063beecf777f28425e2f6017917783cd3a43e6a88a15fc86e9a52a3e3a16fd4763796952c09a7cd83df00642d254507488f95fc29bd16952e5243a1e8b1add1f", @generic="56b11e6230be7866cb4a4915ddab07450984b1fc65f1dce6c12ded25d88b49124c34c91101cd5426d36c06cf3856fdb14c400f3524d85343bc985a0aeb1020513b7eb332c81525b1398961f939b48643026ca0ab"]}, @typed={0x8, 0x42, @uid=r9}]}, 0x268}, {&(0x7f0000001940)={0x22c, 0x3f, 0xd28, 0x70bd26, 0x4, "", [@nested={0x214, 0x26, [@typed={0x8, 0x4, @str='\x8c*}\x00'}, @generic="bad37d10c80d6cf7189ea52229b418574868537273b6d24a7d82b7b9f4e928fc4108a6f018981b9cfd202dcb", @generic="528d5738665e07e066ee7aa64dc964736aca470d3a2657b8a381e0afe4a95e67d08d4397d081a74d2eb3b2d28ed2f161f6a87eb4ba8fc2268eb88f700e231c74b64f18da50b417a02b4201bce33ed2aa2ef2c70c9ea2fbeaaf3efed5", @generic="160a41c435bfa53cd15c10f2c950c4093cd5a47185c429bc660fba0c5050c500b99cb42b5312c28d4137aa2702bf4c489818a84b8e1675133364edf54e016c6c34b3d8b45884ae5aad890ee9619c91bb2dd381ba4a4e1d9b5bb83cb2106c86f565288ede8bf9c6baa82daa8b9338716c917c3f6afbf1fccd5c713eb6e1843c7cba27f4b3b572036eb8043a961b8dc995e0250e65bca9d3baad45092c066c948186544a28bbeec8886188ad549a9b864f2bf627d443fe0eb7577abaa095326f7ab618edaf6809429aba2b7a9ad2951ab9", @typed={0xc, 0x49, @str='veth\x00'}, @typed={0x4, 0xb16}, @generic="19281a6b00e90cacdb62f926a93dc023657e137b6e86f50ea465a43e22bc32225f6c43334f8d6b166a4f92ad7279ec93ed00eed3c5b209f99bc7c836134003c31071bb192b129e9e8ed45512c29633f8d6a54a00a7aac9567981ccefea0cdeb56d38d86c862ffaa03efd2fafe1dd477fe6dc444920a3e0f5e2ad2ea88fce542cb35ed1a45d8e198a9c049ed9b97f29145f0000b894df4e139d972f4bee49ee"]}, @typed={0x8, 0x3d, @ipv4=@multicast1}]}, 0x22c}], 0x5, 0x0, 0x0, 0x80400}, 0x20008c15) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000040)) 07:35:57 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x408500, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000780)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="1e1062bd09acbc4d74a7fd08bdc1164dce5f2b3a233e56fc3a20edf9d38adf3aa28316fa6048337780d584b5f24c92e91f88a23732d87f0899c66fa13c1bd272bff454f40dbe43aef26b9ee430da7854e42405ef8c878f06c4533c8764b3505f9e2847a7f92a9de1b6edfcdfd9943f5d561b0d30313a6635990245af9d82a90e0a62e4fc5a2cd80b6c784bab823f05984e97684b1a35ef527338f7e511b2c73c3a486c84480ae9c22f1e7463da108a8b94475502c6d3d27321fc3d675d7d5d50f6db3e3730f968aa1368d07b9c4fb1e3631a4dc2f02ce3393c9e3a6fc4ee4f9c8e90a6bb66dde189a5dd839568c86723", 0xf0}], 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000072bb73fa1029194313f4a1471315842b02fd91d2aa32c35cf90b19cd9f7bf375000000008a803b", @ANYRES32=0x0], &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r9, 0xffffffff}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000500)={r9, 0x90, &(0x7f0000000440)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x80000000, @empty}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x3}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e24, 0xdae, @local, 0x20}, @in6={0xa, 0x4e22, 0x1000, @loopback, 0x6}]}, &(0x7f0000000540)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0xcf6, 0x834c}, &(0x7f0000000640)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000680)={r10, 0xfff, 0x8, 0x5, 0x3, 0x1, 0x2, 0x0, {r11, @in={{0x2, 0x4e20}}, 0x32, 0x4, 0x9f8, 0x8, 0x4a1}}, &(0x7f0000000740)=0xb0) r12 = accept4$unix(r8, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) recvfrom$unix(r12, &(0x7f00000002c0)=""/243, 0xf3, 0x20, &(0x7f00000001c0)=@file={0x2, './file0\x00'}, 0x6e) 07:35:57 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x80) stat(&(0x7f0000000040)='./file0/bus/file0\x00', &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = open(&(0x7f0000000380)='./bus\x00', 0x8001141042, 0x0) socket$packet(0x11, 0x3, 0x300) write(r4, &(0x7f0000000000)="b6", 0xfffffe7e) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000240)={0xffff, 0x0, 0x1000}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) socket$inet6(0xa, 0x49c68e0740a3058b, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x33}, {0x3fde27fc, 0x7fffffff, 0x0, 0x0, 0x5, 0x7, 0x0, 0x1}, {0x0, 0x2286, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0x0, 0x3, 0x4e9, 0x7}}, 0xe8) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000180)={{0x8, 0x1}, 0x3, 0xd47, 0x24, 0xfffffff8, &(0x7f00000000c0)="36cf7264c8b5301ce3f117e149f6eecfa2ed5f106231504464f382d6f4939da13b47d511"}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000140)={0x3, 0x0, 0x8, 0x3, 0x12, 0x1, 0xff, 0x2, 0x1, 0x0, 0x6, 0x1}) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r8) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) 07:35:57 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 797.322442] vhci_hcd: default hub control req: a031 v0000 i0000 l93 07:35:57 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 797.403962] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:57 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/211, 0xd3}], 0x1, &(0x7f0000000180)=""/252, 0xfc}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 07:35:58 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:58 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) recvfrom$inet(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x100, &(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/193, 0x54}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$selinux_validatetrans(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a68616c645f4d61635f657865635f743a73302073797374656d5f753a6f626a65637401723a706f7765725f6465766963655f743a733020303030303030303030303030303030333237363720756e636f6e66696e65645f753a73797370656d5f723a696e736d6f645f743a73302d73313a63302e633130323300"], 0x8c) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x4) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000002c0)=@gcm_256={{0x303}, "8af764b013fe13f5", "157e56bab54bfaf651d9f730a07fc5b7181e4b13ad6896fa3ff36dead0ca1253", "4ea31ef7", "b7730d863ceba65c"}, 0x38) 07:35:58 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) splice(r7, &(0x7f0000000380)=0x2, r8, &(0x7f0000000500)=0x22, 0x8, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r10, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = fcntl$dupfd(r13, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r15, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r16, 0xffffffff}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)={r16, 0x63, "b8794d27e5170376a53c683be989ff2ffdaf9e558c65b805e55d0d0dce12b6abf65a7fdf8d621a72206e0fe314f24b876b2fb25fbf11d5cb96230341ac637b3a8cd18e0605e1e66ee36d808bd3f75a7cd23b940c859e06931ec3533fcaf53bbe1ab055"}, &(0x7f0000000000)=0x6b) setsockopt$inet_sctp6_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r17, 0x9}, 0x8) ioctl$VIDIOC_G_DV_TIMINGS(r11, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x10008, 0x10000, 0x1e7a06f0cb56a8e4, 0x0, 0x1fe, 0x7ff, 0xa99f, 0x3, 0x1, 0x8, 0x4, 0x0, 0x5, 0x0, 0x6f028d0a490188c7}}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x7, 0x1}, 0x4, 0x3, &(0x7f0000000180)="66d793a2ea163a3370e8d882363c1fbbfd50b99de7c7e300c9fe588c75d8183c9145eef068092c47d5d322cc852356606fd1fbc06315730bc49a0e96378a446c9fac7d0eb8c44e1d8581441d8a7964b286b6bd26ef264f3365fb341322fe5132b2f3c51590d358617c3c3ba1d4399c9ea9", 0x71, 0x7fff, 0x4, 0x0, 0x6, 0x3, &(0x7f0000000200)="bdb1b710e1afdaf91b0dafbe3be277bd6850ff82f2ec2c4c721d0bf468cfd5d2a3563d83811b875fb1e85fd327998bb4b576c77d1b69d32a2ec71ed3d0b9"}) r18 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x208000, 0x0) ioctl$BLKTRACETEARDOWN(r18, 0x1276, 0x0) fcntl$dupfd(r10, 0x406, r9) 07:35:58 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:58 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(0x0, 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:58 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(r3, &(0x7f0000000080)='net/xfrm_stat\x00') r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$setregset(0x4205, r4, 0x203, &(0x7f0000000100)={&(0x7f00000000c0)="998317cc3d", 0x5}) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:58 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(0x0, 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 798.272100] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 798.272894] [ 798.280177] ====================================================== [ 798.286486] WARNING: possible circular locking dependency detected [ 798.292800] 4.14.153 #0 Not tainted [ 798.296416] ------------------------------------------------------ [ 798.302726] syz-executor.4/14760 is trying to acquire lock: [ 798.308427] (&mm->mmap_sem){++++}, at: [] __might_fault+0xe0/0x1d0 [ 798.316409] [ 798.316409] but task is already holding lock: [ 798.320346] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 798.322374] (&rp->fetch_lock){+.+.}, at: [] mon_bin_get_event+0x3c/0x430 [ 798.322399] [ 798.322399] which lock already depends on the new lock. [ 798.322399] [ 798.328940] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 798.337260] [ 798.337260] the existing dependency chain (in reverse order) is: [ 798.337263] [ 798.337263] -> #1 (&rp->fetch_lock){+.+.}: [ 798.337285] lock_acquire+0x16f/0x430 [ 798.337298] __mutex_lock+0xe8/0x1470 [ 798.337307] mutex_lock_nested+0x16/0x20 [ 798.337315] mon_bin_vma_fault+0x6f/0x280 [ 798.337321] __do_fault+0x104/0x390 [ 798.337327] __handle_mm_fault+0xde1/0x3470 [ 798.337334] handle_mm_fault+0x293/0x7c0 [ 798.337341] __get_user_pages+0x465/0x1220 [ 798.337349] populate_vma_page_range+0x18e/0x230 [ 798.337356] __mm_populate+0x198/0x2c0 [ 798.337363] vm_mmap_pgoff+0x1be/0x1d0 [ 798.337369] SyS_mmap_pgoff+0x3ca/0x520 [ 798.337375] SyS_mmap+0x16/0x20 [ 798.337389] do_syscall_64+0x1e8/0x640 [ 798.400028] protocol 88fb is buggy, dev hsr_slave_0 [ 798.404534] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 798.404538] [ 798.404538] -> #0 (&mm->mmap_sem){++++}: [ 798.404556] __lock_acquire+0x2cb3/0x4620 [ 798.404565] lock_acquire+0x16f/0x430 [ 798.409861] protocol 88fb is buggy, dev hsr_slave_1 [ 798.414215] __might_fault+0x143/0x1d0 [ 798.414222] _copy_to_user+0x2c/0xd0 [ 798.414231] mon_bin_get_event+0x10a/0x430 [ 798.414238] mon_bin_ioctl+0x9b4/0xb50 [ 798.414248] do_vfs_ioctl+0x7ae/0x1060 [ 798.483670] SyS_ioctl+0x8f/0xc0 [ 798.487560] do_syscall_64+0x1e8/0x640 [ 798.491969] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 798.497667] [ 798.497667] other info that might help us debug this: [ 798.497667] [ 798.505809] Possible unsafe locking scenario: [ 798.505809] [ 798.511859] CPU0 CPU1 [ 798.516514] ---- ---- [ 798.521171] lock(&rp->fetch_lock); [ 798.524882] lock(&mm->mmap_sem); [ 798.531017] lock(&rp->fetch_lock); [ 798.537241] lock(&mm->mmap_sem); [ 798.540782] [ 798.540782] *** DEADLOCK *** [ 798.540782] [ 798.546844] 1 lock held by syz-executor.4/14760: [ 798.551590] #0: (&rp->fetch_lock){+.+.}, at: [] mon_bin_get_event+0x3c/0x430 [ 798.560533] [ 798.560533] stack backtrace: [ 798.565030] CPU: 0 PID: 14760 Comm: syz-executor.4 Not tainted 4.14.153 #0 [ 798.572033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 798.581384] Call Trace: [ 798.583980] dump_stack+0x138/0x197 [ 798.587607] ? vprintk_func+0x65/0x159 [ 798.591499] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 798.596866] __lock_acquire+0x2cb3/0x4620 [ 798.601022] ? remove_wait_queue+0x10f/0x190 [ 798.605441] ? trace_hardirqs_on+0x10/0x10 [ 798.609677] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 798.614613] lock_acquire+0x16f/0x430 [ 798.618415] ? __might_fault+0xe0/0x1d0 [ 798.622395] __might_fault+0x143/0x1d0 [ 798.626304] ? __might_fault+0xe0/0x1d0 [ 798.630279] _copy_to_user+0x2c/0xd0 [ 798.633995] mon_bin_get_event+0x10a/0x430 [ 798.638234] mon_bin_ioctl+0x9b4/0xb50 [ 798.642141] ? mon_bin_read+0x5e0/0x5e0 [ 798.646110] ? __might_sleep+0x93/0xb0 [ 798.649993] ? __fget+0x210/0x370 [ 798.653453] ? mon_bin_read+0x5e0/0x5e0 [ 798.657430] do_vfs_ioctl+0x7ae/0x1060 [ 798.661320] ? selinux_file_mprotect+0x5d0/0x5d0 [ 798.666076] ? lock_downgrade+0x740/0x740 [ 798.670225] ? ioctl_preallocate+0x1c0/0x1c0 [ 798.674643] ? __fget+0x237/0x370 [ 798.678098] ? security_file_ioctl+0x89/0xb0 [ 798.682505] SyS_ioctl+0x8f/0xc0 [ 798.685878] ? do_vfs_ioctl+0x1060/0x1060 [ 798.690030] do_syscall_64+0x1e8/0x640 [ 798.693917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 798.698764] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 798.703958] RIP: 0033:0x45a219 [ 798.707146] RSP: 002b:00007f574dbbec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.714849] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219 [ 798.722133] RDX: 0000000020000140 RSI: 0000000040189206 RDI: 0000000000000004 [ 798.729472] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 798.736724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f574dbbf6d4 [ 798.743979] R13: 00000000004c3d98 R14: 00000000004d8128 R15: 00000000ffffffff [ 798.753397] protocol 88fb is buggy, dev hsr_slave_0 [ 798.758537] protocol 88fb is buggy, dev hsr_slave_1 [ 798.759396] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env 07:35:59 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) uselib(&(0x7f0000000100)='./file0/bus\x00') open$dir(&(0x7f00000001c0)='./file0\x00', 0x101, 0x220) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e21, 0x0, @remote, 0xcda4}, {0xa, 0x4e20, 0x6, @empty, 0x7e6}, 0x5, [0x980, 0xfffffffe, 0xab7, 0x10000, 0x8, 0x3ff, 0x80000001, 0x8]}, 0x5c) uname(&(0x7f0000000700)=""/4096) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000680)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uhid\x00', 0x0, 0x0) 07:35:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) write$vnet(r1, &(0x7f00000002c0)={0x1, {&(0x7f0000000080)=""/192, 0xc0, &(0x7f0000000140)=""/224, 0x1}}, 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) connect(r4, &(0x7f0000000340)=@nl=@unspec, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup(r5) 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(0x0, 0x41, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) 07:35:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000002c0)=@urb_type_iso={0x0, {0xe}, 0x6, 0x1, &(0x7f0000000080)="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", 0xfd, 0x80, 0xff, 0x21, 0x8000, 0x7, &(0x7f0000000180)="d0c528e65c0e3fcd5b6161ad80d2450f8febd3ac", [{0x9, 0x8, 0x4}, {0x6f29, 0x6, 0x8}, {0x3, 0x1, 0x48c}, {0x6, 0x1f, 0xe45}, {0x7, 0x7fffffff, 0xffff}, {0x101, 0x3, 0x1}, {0x7, 0x7, 0x9}, {0x508, 0x6, 0x1}, {0xc11, 0x0, 0x4}, {0xff, 0x7fffffff, 0x8}, {0x5, 0xffffffff, 0x2}, {0x6, 0x1f, 0x80000}, {0x20000, 0x7, 0x1}, {0x3, 0x4, 0xfff}, {0x6, 0x2, 0x4}, {0x80000001, 0x0, 0x7}, {0x80000000, 0x9, 0x1}, {0x97, 0x0, 0x6}, {0x9, 0x4, 0x7}, {0x1000, 0x5, 0x5}, {0x51, 0x0, 0x9}, {0x401, 0x3, 0x4}, {0x2, 0xffffff80}, {0x4, 0x1ff, 0x80}, {0x1, 0x0, 0x80}, {0x7fff, 0x5, 0xffffffff}, {0x6e4c, 0x10001, 0x1}, {0x100, 0x1, 0x4bc}, {0x4, 0x0, 0x533}, {0xffff7b21, 0x4, 0x1}, {0x5, 0x6, 0x3}, {0x5, 0x1, 0x6fd}, {0x0, 0x1}]}) [ 798.776159] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 798.835809] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env [ 798.866373] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:35:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000080)=0x80) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="01020000988704e7232659a5fc6075bab1df2814293f0ebcbe78236880ec3539357b224e793d0175d29f432121b7a369c1754eb9b35a1629d9af7c437b0f97f6b8c436babf74db734ef79f054981e695fab480349a5e9c52e8", @ANYRES32=0x0], &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r3, 0xffffffff}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x5}, &(0x7f0000000100)=0x8) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 798.882917] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 798.922110] kobject: 'veth448' (ffff8880a0cfc630): kobject_add_internal: parent: 'net', set: 'devices' 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x0, 0x100) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 798.934610] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 798.947610] kobject: 'veth448' (ffff8880a0cfc630): kobject_uevent_env [ 798.955233] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 798.967578] kobject: 'veth448' (ffff8880a0cfc630): fill_kobj_path: path = '/devices/virtual/net/veth448' [ 798.989922] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 798.998060] kobject: 'queues' (ffff8880a083ee48): kobject_add_internal: parent: 'veth448', set: '' [ 799.001521] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 799.018030] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 799.027159] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x7ffff, 0x0) [ 799.031729] kobject: 'queues' (ffff8880a083ee48): kobject_uevent_env [ 799.041658] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 799.054967] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 799.057474] kobject: 'queues' (ffff8880a083ee48): kobject_uevent_env: filter function caused the event to drop! 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x0) mount(0x0, 0x0, 0x0, 0x7ffff, 0x0) [ 799.103547] kobject: 'rx-0' (ffff88808dcdf6d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 799.135768] kobject: 'rx-0' (ffff88808dcdf6d0): kobject_uevent_env [ 799.145598] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x0) mount(0x0, 0x0, 0x0, 0x7ffff, 0x0) [ 799.150269] kobject: 'rx-0' (ffff88808dcdf6d0): fill_kobj_path: path = '/devices/virtual/net/veth448/queues/rx-0' [ 799.157848] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 799.168928] kobject: 'tx-0' (ffff888098c23298): kobject_add_internal: parent: 'queues', set: 'queues' 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x0) mount(0x0, 0x0, 0x0, 0x7ffff, 0x0) [ 799.208766] kobject: 'tx-0' (ffff888098c23298): kobject_uevent_env [ 799.221239] kobject: 'tx-0' (ffff888098c23298): fill_kobj_path: path = '/devices/virtual/net/veth448/queues/tx-0' [ 799.250474] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 799.253952] kobject: 'batman_adv' (ffff888021d28580): kobject_add_internal: parent: 'veth448', set: '' [ 799.265285] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 799.279602] kobject: 'veth449' (ffff88809eb628b0): kobject_add_internal: parent: 'net', set: 'devices' [ 799.302737] kobject: 'veth449' (ffff88809eb628b0): kobject_uevent_env [ 799.309522] kobject: 'veth449' (ffff88809eb628b0): fill_kobj_path: path = '/devices/virtual/net/veth449' [ 799.320752] kobject: 'queues' (ffff8880a083e148): kobject_add_internal: parent: 'veth449', set: '' [ 799.331102] kobject: 'queues' (ffff8880a083e148): kobject_uevent_env [ 799.337927] kobject: 'queues' (ffff8880a083e148): kobject_uevent_env: filter function caused the event to drop! [ 799.348634] kobject: 'rx-0' (ffff8880a1ae0f10): kobject_add_internal: parent: 'queues', set: 'queues' [ 799.358297] kobject: 'rx-0' (ffff8880a1ae0f10): kobject_uevent_env [ 799.365500] kobject: 'rx-0' (ffff8880a1ae0f10): fill_kobj_path: path = '/devices/virtual/net/veth449/queues/rx-0' [ 799.376446] kobject: 'tx-0' (ffff8880a904e7d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 799.386437] kobject: 'tx-0' (ffff8880a904e7d8): kobject_uevent_env [ 799.393062] kobject: 'tx-0' (ffff8880a904e7d8): fill_kobj_path: path = '/devices/virtual/net/veth449/queues/tx-0' [ 799.405553] kobject: 'batman_adv' (ffff88808492b380): kobject_add_internal: parent: 'veth449', set: '' [ 799.438662] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env 07:35:59 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xefc7d71c634523e8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x1}) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18008051}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="d0ec95c923ec02831da469000000", @ANYRES16=0x0, @ANYBLOB="120027bd7000fbdbdf2505000000100001006e657464657673696d000000100002006e657464657673696d3000000800030000000000100001006e657464657673696d000000100002006e657464657673696d3000000800030000000000080001007063690014000200303030303a30303a31302e30000000000800030002000000080001007063690014000200303030303a30303a31302e30000000000800030001000000080001007063690014000200303030303a30303a31302e30000000000800030003000000"], 0xd0}, 0x1, 0x0, 0x0, 0x90}, 0x80) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x2, 0x1a806bbd1ee1a79e) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) syz_mount_image$bfs(&(0x7f0000000180)='bfs\x00', &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[{&(0x7f0000000240)="299a6f77e7551e8cb3e8174e5eb01d9417cefba937347d3861abf1cba8a5cdbe5b22849ef1aea2cf8b2b9646cb021eb237006cc584d7fcd4069f68e9e6e5c3ab53754b1da300b8174e3519328fb27514701862a31f97c1c9026a3cf1be5805c6f36f6e9482a9202fe3b6e151adf6db23a231b7d2461aac85119d60a9e5ff4a084a4bf1f5c5ea3826c6c273d7a080582851cc0345ec129e325b00c1ec6abaec6796672f1694c2e3511acda91a4a8ce19bd4bd0f05d5e67a9096c1ae68ed37d643044f9c5a8d9995066997c3cd5b266c6cfe643e64d0d9e485ef", 0xd9, 0x2}, {&(0x7f0000000480)="58a5a230995fb666c6f3f5b3fdb4125cd9e4c2c290bdd21ee30d8fc43b77785e86bbbabc01836a24a0923d0bd3084cb22deaafabcb742584a3affa72cc81708c4e68af97d62e583a60e43cf37e5e0270b576b2df047f1a881858d3f472d6685a656690800b36ce7aa6db055464755a637df7b31a4d19dbe242904c8a3aaa4811502c19e495b89644de1339572c27431da3959c35640593ed7b128ffe99ed28adf6e83b37341b6038f6fec96b462f0de05451d2a974d7840787ce084f574166e3faabafd629b12c20641831174bc5e563eed79cbf94", 0xd5, 0xca28}], 0x100004, 0x0) 07:35:59 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x0, 0x0) 07:35:59 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:35:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000200)={0x3}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r4, r5) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0xfff, @local}}}, &(0x7f0000000140)=0x84) socket$caif_seqpacket(0x25, 0x5, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000180)={r7, 0x2}, &(0x7f00000001c0)=0x8) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 799.459176] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 799.486165] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 799.518282] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 799.525431] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 799.528164] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 799.535667] caif:caif_disconnect_client(): nothing to disconnect [ 799.554071] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:35:59 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000080)={0xa, @vbi={0x3560, 0x1, 0x4, 0x5154d8ca, [0x80, 0x1], [0x2], 0x5}}) [ 799.573889] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 799.581616] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 799.595386] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 799.611940] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 799.625132] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 799.634972] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 799.644398] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 799.656669] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 799.663535] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env [ 799.678290] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 799.697109] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 799.713590] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' 07:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 07:36:00 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x0, 0x0) 07:36:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'ipddp0\x00', &(0x7f0000000100)=@ethtool_link_settings={0xd7, 0x875a, 0x2, 0xfe, 0xff, 0x7, 0x9, 0x4, 0xea, 0xd3, [0xa4c5ecf, 0xb6, 0x4, 0x1, 0x7fffffff, 0x5, 0x2032, 0x7], [0xfffffff8, 0x1, 0x7, 0x8]}}) sendto$rose(r6, &(0x7f0000000080)="585f6d6c10", 0x5, 0x8000, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 07:36:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x201) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_bulk={0x3, {0x10}, 0x1, 0xa4, &(0x7f0000000080)="8cd6b85701e7b0eeae7e8c92440a4e30fe080b506ee75814bf359074c63dc910c924750b992fca91622362bc9d025c426580d59018bc31d2870f141af4aa6aea744c93", 0x43, 0x4000ffff, 0x8, 0x80000000, 0xffff, 0xfffffffb, &(0x7f0000000100)="da904c8c4ceae6ebc42f1302f8f7154647ce08ebccdefa848a4bf5be6d9b592b5011c27ac47a9f46f000ca521e7c1778139fe4b1336bf4c4c8ec7486618c62755c86e619ae3f7703ab1b58e531133e17c6c2612034fdd6f32dca440cc6df637a974142865d721e64f7f9c0de6db4856f357ded5ae4934dc30e920711e0ce0c3e7940d5a745f22209ad163fe7ac291ffc814c9303297b689708400b2b77822bfd14f544b03ec6e42fd5bfab7cb63b2728a8f166a1e7f5c2e9c63efc00"/203}) 07:36:00 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="ac812c0ad6cada98834829610e5aad27", 0x10) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x5) [ 799.763763] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 799.783586] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:36:00 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/bus\x00', 0x41, 0x0) mount(0x0, &(0x7f000000fff8)='./file0\x00', 0x0, 0x0, 0x0) 07:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5407}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) accept(r0, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000000c0)=0x80) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) [ 799.846242] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 799.856976] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 799.866155] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:36:00 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x9) 07:36:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_mreqn(r3, 0x0, 0xb23e6d1c4171e559, &(0x7f0000000080)={@broadcast, @initdev}, &(0x7f00000000c0)=0xc) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0xe, 0x1}, 0xffffff80, 0x20, &(0x7f0000000380)="8c1e4a96b3d8a684c5b99924a7415072fab72739e431a2cdbdb5e0af3d9dd5339e0ac973f9316895fdf90003c7288762dfb74287d988e56b0920dc1ffabd3b26070bb4ed884d916d3464bd7ed3f67b1c71e504f042a203446e8cfda240c120868562c7cb035654dfe80bfba3e627def9bbcb82fbbffc6d72eae7f5bed309f2db966bfdcf0d14910f7312b424af3c8611bc0bccd35a9e224dac275e296fd01e893de1616b5cad6a87e1dcbeec98aba88622e96b261f56267ab0750c7c8bce70fd3afeaa5d0050e5feca79484c24fc8547b1bf6b72254620c39b4802eac05099234afab1ef0c6f76e547327c8642cce7b71a3d1cc716bbd0385e22fed39a0ec58144c6b0cad7b8", 0x106, 0x9, 0x8, 0x0, 0x6, 0x81, &(0x7f00000002c0)="5b6488a1478c7f11441113963d9d9244027ee704375a0b0f4f96700d41b51e4244b2ff908ddcf390f7782eb87db63bb93c79b8a9379809588d6253c233e503b614da27b41e7268d22312d80f7f6a4b82c806acd8c24cd80100485f52e3ef6509e34ec3998b65b01e0000000000000006f3584705cd67aea7011f3e86084fdc8a25f0c7"}) [ 799.924664] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 799.944042] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:36:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) recvfrom$inet(r0, &(0x7f0000000300)=""/4096, 0x1000, 0x100, &(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000140)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/193, 0x54}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$selinux_validatetrans(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a68616c645f4d61635f657865635f743a73302073797374656d5f753a6f626a65637401723a706f7765725f6465766963655f743a733020303030303030303030303030303030333237363720756e636f6e66696e65645f753a73797370656d5f723a696e736d6f645f743a73302d73313a63302e633130323300"], 0x8c) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x2, &(0x7f00000001c0)=0x4) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000002c0)=@gcm_256={{0x303}, "8af764b013fe13f5", "157e56bab54bfaf651d9f730a07fc5b7181e4b13ad6896fa3ff36dead0ca1253", "4ea31ef7", "b7730d863ceba65c"}, 0x38) 07:36:00 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) read$usbfs(r6, &(0x7f0000000080)=""/200, 0xc8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000180), 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 799.982120] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 800.009610] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 800.035373] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 800.045505] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 800.072725] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env 07:36:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lapb0\x00', 0x10) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 07:36:00 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) r4 = dup(r3) write$UHID_GET_REPORT_REPLY(r4, &(0x7f0000000080)={0xa, 0x0, 0x7, 0x7}, 0xa) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0xc}, 0x10001, 0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x60}, 0xfffffffffffffd0d, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x0}) [ 800.079734] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 800.090563] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 800.099656] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 800.116366] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:36:00 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/211, 0xd3}], 0x1, &(0x7f0000000180)=""/252, 0xfc}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) [ 800.145452] kobject: 'veth450' (ffff88804c7b4bf0): kobject_add_internal: parent: 'net', set: 'devices' [ 800.146473] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 800.161944] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 800.177121] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 800.180181] kobject: 'veth450' (ffff88804c7b4bf0): kobject_uevent_env [ 800.195980] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 800.221053] kobject: 'veth450' (ffff88804c7b4bf0): fill_kobj_path: path = '/devices/virtual/net/veth450' 07:36:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 800.262887] kobject: 'queues' (ffff88804c216e48): kobject_add_internal: parent: 'veth450', set: '' [ 800.286188] kobject: 'queues' (ffff88804c216e48): kobject_uevent_env [ 800.290522] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 800.299556] kobject: 'queues' (ffff88804c216e48): kobject_uevent_env: filter function caused the event to drop! [ 800.304750] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 800.321962] kobject: 'rx-0' (ffff8880966a9550): kobject_add_internal: parent: 'queues', set: 'queues' [ 800.348156] kobject: 'rx-0' (ffff8880966a9550): kobject_uevent_env 07:36:00 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000300)=']}\xc1\xac\x00', r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='ramfs\x00', r1}, 0x30) process_vm_readv(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 800.375128] kobject: 'rx-0' (ffff8880966a9550): fill_kobj_path: path = '/devices/virtual/net/veth450/queues/rx-0' [ 800.397084] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 800.402622] kobject: 'tx-0' (ffff8880938f65d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 800.412128] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:36:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18c01020}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="2e495370438417398a2cc519630300c61dc645ca6d8d936d194aa291d1d03ad5525c29078ea7baab39f7da8479c547761202a81138aab05c420bb64b6db2ec4d985265b932b0abe06628f249247050f519de75de8e4e3cdf8ff8d7938f61e6d2609cbc5bf443f45840615a9748bbe223dbd72e88a9e195982b0061ac95045c957f60006037337313d77925f0094b952b79a9c4583482f959b16d0dcf638097efcf79e15c8530c8f3b2833046b27eb9481445397260e83b1451c39851ae", @ANYRES16=r7, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x444}, 0x80) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)={0x3b4, r7, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x99f0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xef}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}]}, @TIPC_NLA_BEARER={0x16c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x30df6c37, @rand_addr="1262e975e43eb082a6109d3bf260f470"}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe8, @rand_addr="4423932ea8e34e9726884dcfabd3e232", 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xded7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x44f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000000}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'eql\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x15}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffff000, @remote, 0x80000001}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}]}, 0x3b4}}, 0x20000000) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x181082a}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r7, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x556507f9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9445}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2000041}, 0xd8370ca49f055cbd) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 800.424226] kobject: 'tx-0' (ffff8880938f65d8): kobject_uevent_env [ 800.439546] kobject: 'tx-0' (ffff8880938f65d8): fill_kobj_path: path = '/devices/virtual/net/veth450/queues/tx-0' 07:36:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 800.474166] kobject: 'batman_adv' (ffff888090329500): kobject_add_internal: parent: 'veth450', set: '' [ 800.496905] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 800.508858] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 800.514795] kobject: 'veth451' (ffff88801e35a930): kobject_add_internal: parent: 'net', set: 'devices' [ 800.547147] kobject: 'veth451' (ffff88801e35a930): kobject_uevent_env [ 800.568628] kobject: 'veth451' (ffff88801e35a930): fill_kobj_path: path = '/devices/virtual/net/veth451' [ 800.586336] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env 07:36:00 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000000)={0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r12, &(0x7f0000000200)={0x2c, 0x4, 0x0, {0x4, 0x9, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x2c) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x4001fc) ioctl$CAPI_CLR_FLAGS(r6, 0x80044325, &(0x7f0000000180)) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000040)={r3, 0x2}) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000140)='./file0/bus\x00', &(0x7f00000000c0)) [ 800.595181] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 800.596232] kobject: 'queues' (ffff88804c216a48): kobject_add_internal: parent: 'veth451', set: '' [ 800.640638] kobject: 'queues' (ffff88804c216a48): kobject_uevent_env [ 800.657052] kobject: 'queues' (ffff88804c216a48): kobject_uevent_env: filter function caused the event to drop! [ 800.680802] kobject: 'rx-0' (ffff8880966a9490): kobject_add_internal: parent: 'queues', set: 'queues' [ 800.700339] kobject: 'rx-0' (ffff8880966a9490): kobject_uevent_env [ 800.713406] kobject: 'rx-0' (ffff8880966a9490): fill_kobj_path: path = '/devices/virtual/net/veth451/queues/rx-0' [ 800.735239] kobject: 'tx-0' (ffff8880a4e02318): kobject_add_internal: parent: 'queues', set: 'queues' [ 800.755921] kobject: 'tx-0' (ffff8880a4e02318): kobject_uevent_env [ 800.768999] kobject: 'tx-0' (ffff8880a4e02318): fill_kobj_path: path = '/devices/virtual/net/veth451/queues/tx-0' [ 800.793093] kobject: 'batman_adv' (ffff88808c302800): kobject_add_internal: parent: 'veth451', set: '' 07:36:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x909, 0x406001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d1000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x420000a0}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 800.824917] kobject: 'veth674' (ffff88809ff58670): kobject_add_internal: parent: 'net', set: 'devices' [ 800.850242] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env [ 800.856730] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' 07:36:01 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RREMOVE(r6, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000080)=0x8, 0x4) [ 800.884155] kobject: 'veth674' (ffff88809ff58670): kobject_uevent_env [ 800.892738] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 800.899771] kobject: 'veth674' (ffff88809ff58670): fill_kobj_path: path = '/devices/virtual/net/veth674' [ 800.909442] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 800.951501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14924 comm=syz-executor.5 [ 800.959856] kobject: 'queues' (ffff888015712848): kobject_add_internal: parent: 'veth674', set: '' [ 800.990747] kobject: 'queues' (ffff888015712848): kobject_uevent_env [ 800.996681] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 [ 801.005045] kobject: 'queues' (ffff888015712848): kobject_uevent_env: filter function caused the event to drop! [ 801.015476] kobject: 'rx-0' (ffff88804fbdf910): kobject_add_internal: parent: 'queues', set: 'queues' [ 801.025891] kobject: 'rx-0' (ffff88804fbdf910): kobject_uevent_env [ 801.032541] kobject: 'rx-0' (ffff88804fbdf910): fill_kobj_path: path = '/devices/virtual/net/veth674/queues/rx-0' [ 801.044032] kobject: 'tx-0' (ffff888059aee2d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 801.053800] kobject: 'tx-0' (ffff888059aee2d8): kobject_uevent_env [ 801.060675] kobject: 'tx-0' (ffff888059aee2d8): fill_kobj_path: path = '/devices/virtual/net/veth674/queues/tx-0' [ 801.073212] kobject: 'batman_adv' (ffff8880a98a8b00): kobject_add_internal: parent: 'veth674', set: '' [ 801.085862] kobject: 'veth675' (ffff888045f026f0): kobject_add_internal: parent: 'net', set: 'devices' [ 801.098427] kobject: 'veth675' (ffff888045f026f0): kobject_uevent_env [ 801.106491] kobject: 'veth675' (ffff888045f026f0): fill_kobj_path: path = '/devices/virtual/net/veth675' [ 801.119146] kobject: 'queues' (ffff8880426ff648): kobject_add_internal: parent: 'veth675', set: '' [ 801.133560] kobject: 'queues' (ffff8880426ff648): kobject_uevent_env [ 801.140762] kobject: 'queues' (ffff8880426ff648): kobject_uevent_env: filter function caused the event to drop! [ 801.154271] kobject: 'rx-0' (ffff8880798ec910): kobject_add_internal: parent: 'queues', set: 'queues' [ 801.164569] kobject: 'rx-0' (ffff8880798ec910): kobject_uevent_env [ 801.174286] kobject: 'rx-0' (ffff8880798ec910): fill_kobj_path: path = '/devices/virtual/net/veth675/queues/rx-0' [ 801.185794] kobject: 'tx-0' (ffff88809691e5d8): kobject_add_internal: parent: 'queues', set: 'queues' [ 801.198611] kobject: 'tx-0' (ffff88809691e5d8): kobject_uevent_env [ 801.205690] kobject: 'tx-0' (ffff88809691e5d8): fill_kobj_path: path = '/devices/virtual/net/veth675/queues/tx-0' [ 801.221326] kobject: 'batman_adv' (ffff88804900ad80): kobject_add_internal: parent: 'veth675', set: '' 07:36:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lapb0\x00', 0x10) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r3, 0x0) 07:36:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={'nlmon0\x00', {0x2, 0x4e22, @loopback}}) 07:36:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x0, 0x231}]}, 0xc, 0x1) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x4}, 0x28, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) 07:36:01 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x4040, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 801.290387] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 801.310590] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:36:01 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$P9_RREMOVE(r6, &(0x7f00000000c0)={0x7, 0x7b, 0x2}, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r9, 0x84, 0x12, &(0x7f0000000080)=0x8, 0x4) [ 801.353251] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 801.365894] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:36:01 executing program 0: r0 = getpid() r1 = getpid() sched_setattr(r1, &(0x7f00000000c0)={0x30, 0x2, 0x0, 0x0, 0x5, 0x100000000000, 0x6}, 0x0) sched_getparam(r0, &(0x7f0000000000)) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:36:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x3, 0x400, 0x21c000, {r2, r3+30000000}, 0x1000, 0xff}) [ 801.393452] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 801.413607] vhci_hcd: default hub control req: 0000 v0000 i0000 l96 07:36:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000140)={0x3ff, [0x0, 0x8000, 0x2, 0x9b8, 0x3, 0x3ff, 0x9, 0x8001, 0x7, 0x6, 0x2, 0x0, 0x1, 0x1, 0x6, 0x782a, 0x6, 0x1, 0x4, 0xffff, 0x5, 0xff, 0x4, 0x2, 0x7, 0xe48f, 0x3, 0x5, 0x9, 0xfff, 0x7ff, 0x2cf1, 0x8, 0x2, 0x1, 0x4, 0x7f, 0x5, 0xad, 0x3, 0xd9c7, 0xffc0, 0xfef, 0xc6c, 0x0, 0x6c9c, 0x2]}) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$BLKROSET(r5, 0x125d, &(0x7f00000000c0)=0x8) 07:36:01 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000300)=']}\xc1\xac\x00', r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='ramfs\x00', r1}, 0x30) process_vm_readv(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 801.446453] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env [ 801.486545] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' 07:36:01 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) ioctl(r4, 0x9, &(0x7f00000000c0)="637550de328db0763de729976a65488d8f1303abaf53419f08a0394668e5d0eb72af122a8d9545f7cd4641434fd12c4f7bfc7489f33886007df8994965748c7d56ac64e395923e9be2f891ceb04c0608b70ff83f4f65c32628090d95df4e1e7fd4002410c99500a423f6dc6f8eab60791e05f351b32ab3a6b6c1d6e4ee9266f44c") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = fcntl$dupfd(r9, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(r10, 0xc010640b, &(0x7f0000000180)={0x0, 0x0, 0x100000001}) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f00000001c0)={r11, 0x0, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:01 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000140)='./file0/bus/file0\x00', &(0x7f0000000000)) 07:36:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x1000002, 0x8012, r0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) 07:36:01 executing program 2: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r3, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x40}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x27}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x58e8edebc387ecb3}, 0x8000) r4 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x151, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 801.514867] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 801.526456] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env 07:36:01 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000300)=']}\xc1\xac\x00', r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='ramfs\x00', r1}, 0x30) process_vm_readv(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) 07:36:01 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa4, 0x6, 0x0, 0x5, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:01 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@initdev, @in=@remote}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 801.556273] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 801.585577] kobject: 'veth414' (ffff888045eacbb0): kobject_add_internal: parent: 'net', set: 'devices' 07:36:01 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000040)={0x40, "ba31f6f266f9f2224581232f04001cad3407f22d852a4a800a8995e627e1c5318230b107e7109c2917fddb0461d5bce896d6c0f89438a0743085b7d8cb29f522"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 07:36:01 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000300)=']}\xc1\xac\x00', r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='ramfs\x00', r1}, 0x30) process_vm_readv(r2, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 801.604719] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 801.624164] kobject: 'veth414' (ffff888045eacbb0): kobject_uevent_env [ 801.633033] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 801.646308] kobject: 'veth414' (ffff888045eacbb0): fill_kobj_path: path = '/devices/virtual/net/veth414' [ 801.653069] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 801.658614] kobject: 'queues' (ffff88807229bd48): kobject_add_internal: parent: 'veth414', set: '' [ 801.672800] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 801.673379] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env [ 801.688427] vhci_hcd: default hub control req: 0000 v0000 i0000 l7 [ 801.696721] kobject: 'queues' (ffff88807229bd48): kobject_uevent_env 07:36:02 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040)=0x5, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 07:36:02 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000300)=']}\xc1\xac\x00', r1}, 0x30) process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 801.698955] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 801.708982] kobject: 'queues' (ffff88807229bd48): kobject_uevent_env: filter function caused the event to drop! [ 801.732509] kobject: 'rx-0' (ffff88808a7a50d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 801.738692] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 801.747362] kobject: 'rx-0' (ffff88808a7a50d0): kobject_uevent_env [ 801.754702] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 801.764412] kobject: 'rx-0' (ffff88808a7a50d0): fill_kobj_path: path = '/devices/virtual/net/veth414/queues/rx-0' [ 801.773765] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 801.782825] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 801.793565] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 801.800491] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:36:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x4980, 0x0) [ 801.803337] kobject: 'tx-0' (ffff88805155dc98): kobject_add_internal: parent: 'queues', set: 'queues' [ 801.807157] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 801.829172] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 801.831415] kobject: 'tx-0' (ffff88805155dc98): kobject_uevent_env [ 801.839146] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 801.846062] kobject: 'tx-0' (ffff88805155dc98): fill_kobj_path: path = '/devices/virtual/net/veth414/queues/tx-0' [ 801.870706] kobject: 'batman_adv' (ffff888099487400): kobject_add_internal: parent: 'veth414', set: '' [ 801.871743] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env [ 801.882831] kobject: 'veth415' (ffff88805e2387f0): kobject_add_internal: parent: 'net', set: 'devices' [ 801.893108] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 801.905191] kobject: 'veth415' (ffff88805e2387f0): kobject_uevent_env [ 801.913532] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 801.915957] kobject: 'veth415' (ffff88805e2387f0): fill_kobj_path: path = '/devices/virtual/net/veth415' [ 801.920431] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 801.931599] kobject: 'queues' (ffff88807229bb48): kobject_add_internal: parent: 'veth415', set: '' [ 801.941021] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 801.952066] kobject: 'queues' (ffff88807229bb48): kobject_uevent_env [ 801.955580] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 801.961760] kobject: 'queues' (ffff88807229bb48): kobject_uevent_env: filter function caused the event to drop! [ 801.972059] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 801.984740] kobject: 'rx-0' (ffff88808acce3d0): kobject_add_internal: parent: 'queues', set: 'queues' [ 801.988275] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 801.997490] kobject: 'rx-0' (ffff88808acce3d0): kobject_uevent_env [ 802.007719] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 802.016304] kobject: 'rx-0' (ffff88808acce3d0): fill_kobj_path: path = '/devices/virtual/net/veth415/queues/rx-0' [ 802.019749] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 802.033544] kobject: 'tx-0' (ffff88805155da18): kobject_add_internal: parent: 'queues', set: 'queues' [ 802.041616] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 802.056056] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 802.063612] kobject: 'tx-0' (ffff88805155da18): kobject_uevent_env [ 802.066205] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 802.075033] kobject: 'tx-0' (ffff88805155da18): fill_kobj_path: path = '/devices/virtual/net/veth415/queues/tx-0' [ 802.078662] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 802.090536] kobject: 'batman_adv' (ffff88804b696180): kobject_add_internal: parent: 'veth415', set: '' [ 802.099244] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 802.119312] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:36:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) vmsplice(r4, &(0x7f0000000580)=[{&(0x7f00000001c0)="39667ec2a4ce68582ab6d9580391b54dab9d955176b4f3451334cfa0a3f0e3c9c09b80906616fea2c4b341b9c07647b6c03ed6f549d06c872bf32ddd9e7954e04d370dc7c116b2f64d7134562d8472436966ac3ca8edf044a9f306", 0x5b}, {&(0x7f0000000240)="b6b28803f895e741662b2d796b9523962b417f76515858f5f53003e0c8cc09b6304732de5c089eefcbe1ba3f085ca8e187555caa1530f3b471195912b6fd5d73", 0x40}, {&(0x7f00000002c0)="0136ab3e427ce135f2468698b33ada25cbc64f09c8ae01fb5d70e71b2887d9b1ed711c8103b2b60721574e", 0x2b}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000000300)="f8021512837ee4be7d9528384a9bd78b08807d30e819037fb50451d51c252534f9a6774bd1001b908e56f32f7618686ab3f4df36839941f40e8e2a57732b78b3955bc1498a0c0806456287d3ae8f6a5e902cdd258835e396c3ab714a586e95f3db6f1a47f7435082a12f83b7ea3fa616fd", 0x71}, {&(0x7f0000000380)="88f977ff9cf2ef8830538b6e70d5b73582f9ff77c4e7bcf9d2d46d5467b01f22a00398e1dacedc085197e092fa646fe3693ecd246ccc5f02d080fc7143b2b300e2de36143f3d180b0482f6c771354b925e4c16a1e7f1a8f2f49c538fa7599814db400bd783372c05fb1127c6068b5e702b2a46a3d7e5", 0x76}, {&(0x7f0000000400)="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", 0xfd}, {&(0x7f0000000500)="bb350ba17f64fe89e645b011dd47731eb3d0715657f429fdf8127ffaa0a306bc40e34ab3a008c837ef81ff557c1af97f080cd9953d0d", 0x36}, {&(0x7f0000000540)="763bac9d7e2b5ec022fd161118c84229d881690b93dbfda31ccecfa7cd13fc9a8f69a3ae9e", 0x25}], 0x9, 0x8) setxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@v2={0x3, 0x0, 0x8, 0xfffffeb8, 0x38, "7cede8b710f0b5bc3a331ba58f053dd1614e65b767867c044ffab1be17c54b055db72c5f8d8b71e407b20e5284cf743ed4372c5fcdfd60f7"}, 0x42, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) finit_module(r2, &(0x7f0000000180)='eth0\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/autofs\x00', 0xc000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)={&(0x7f0000000640)='./file0\x00', r8}, 0x10) ioctl$KDSKBLED(r7, 0x4b65, 0x3) 07:36:02 executing program 0: mkdir(&(0x7f0000000140)='./file0/bus\x00', 0x40) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x4, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x13d) prctl$PR_SET_TSC(0x1a, 0x2) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:36:02 executing program 4: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000200)={0x3000, 0x6000, 0x0, 0x0, 0x5d}) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xf7, 0x0, 0x1, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4}, r0, 0x0, r2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$cgroup_int(r5, &(0x7f0000000000)=0x100000001, 0x12) r6 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8, 0xd}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100080002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_delroute={0x2c, 0x19, 0x2, 0x70bd2b, 0x25dfdbff, {0x2, 0x100, 0x20, 0x80, 0x0, 0xaf4651974c0e1d56, 0x2aae2f6d6de6acde, 0x0, 0x2200}, [@RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1b}}, @RTA_GATEWAY={0x8, 0x5, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x814}, 0x8040000) 07:36:02 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r0}, 0x30) process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) 07:36:02 executing program 2: syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000100)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f0000000140)='./file0\x00', 0x200000, 0x100) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2c40706c580b4fd1}, 0xc, &(0x7f0000000400)={&(0x7f0000000a00)={0x290, 0x14, 0x8, 0x30c2, 0x25dfdbfc, {0xf}, [@nested={0xb8, 0x2f, [@typed={0x74, 0x5b, @binary="6ee00646e7174cfaf8887e767aa9f9464736ed72098dc9acf64f016ffa5fc51b48f5750a182c03d8702f3e3146ac292a0e4f6a2e8aad5692ec779887bb2e221ab6f30a0a4155552c38170f2e261f6e670780c341debd7030d892034980ff213e8b261cbbe01f269422ca201ae1420f"}, @typed={0x14, 0x2a, @ipv6=@mcast2}, @generic="e62b288a735169c37ab7d00fb66c6f1d5031af6110961ddbe30a2bc59bda5655e0dac40705aaed05deea5b"]}, @generic="1ba1a4d8b6b43db025bebd284b6dd473fd7dc7a85be338b1201e16b6e594b745cb98271560f38b01b665de83fdd141defb0c1980681914f038d458c5830bfbe0fcc346232acab6a9bc2d27f900b6c73757f243ced97c63095debf0c888a06c90afcf5d586053f379ef2a120d5c556cd54e6a6c623c90849c421680a7fa23805a69e9abd9e0aa0ee984f8a33557d770971b3ffa", @generic="f41308ec4485f328118bec9ec7ad3c883e60c425bdde4e01158b2462183d25c81a3919d3e29b0f97c36a227030953c6829a75bc768aa5c03c5e2561cf74769c0f80a5c0c6f5d624925ada10bbd1473491e26681053c49b66587ddeeaa04548a5aa3d72b3e5d116b76e6533d4b47c9f63a2cd22859a12d5d93ed2c5cd760390eac6a259cb05c7e70e7082c6d82c0711fda9983546a0447d", @generic="963155d72aac764a5326b4a83d02e527191a6f6647189a808b2b925ba23f18becab4790234bf25f8b4cc430039893913e8bbfcb81f6b32e647ceaedc82a3bb423ce285f4289112beec6eef055b697dc85a9cbe6a398e549d0c0a282778c3812e65760ab71af56e80770876255c6d4f7459454481671b97d9ed8e98ecbfe5901269163b5ecbe50cf6c7", @typed={0x4, 0x8d}, @typed={0xc, 0x31, @u64=0x9}]}, 0x290}, 0x1, 0x0, 0x0, 0x91b2fd41ddd0f851}, 0x5) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0x1) sendmsg$nl_generic(r1, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4804080a}, 0xc, &(0x7f00000007c0)={&(0x7f00000004c0)={0x2c4, 0x42, 0x10, 0x70bd28, 0x25dfdbfc, {0x14}, [@typed={0x14, 0x47, @ipv6=@dev={0xfe, 0x80, [], 0xd}}, @nested={0x1cc, 0x42, [@generic="606e8d30b672704bb672f48f6e0dfd3790b063579c581d53045e84947139e987db63f8e6e7b492c924caf1edd69c4878d5741d", @generic="7f8d7265cfac3373a37ef2ab9a3582d09f2bad9e0276dc23a4a6679c131efecb25f5c5dd56218d2c763fe1c76f9bb2be5ffc20d91f267bf53d5b4bcdc9cabf8bbe143e8e4af955ffb355b4e264d7", @generic="952a364dacffb27bb65d49e2852789517ef1a1267cb6cc8b532337a9ed7263710695b1fe4931f02f884d71700b4039c643b5d204460e0c24943895753702419ab578ff750757d30bad18d0e3be94a334488ecc282ffe888738d76ac1779fb0abb723af7499d7adb1201c472daaaae478b5460c094798dc3e101031759498101ae50d1f7c", @typed={0x8, 0x95, @pid=r2}, @generic="8640e29d6e4a949d82677f58da1259e1bc43d7973164d583661966c2c7b1f7a0d3f5aaae0da25e63fa5148f67b8431c53f2ca0962ec9bdaaaa25100da6ddf74160216185df3a83fce3138fff90f2406e880005660735f3441f7568b947f8b43491e5c2de9e7ad7bb60273d22f28487358fc6af11afa91322a2d3b7ddfadfa0284696ea37689ed4698879bdf165d27f45fd5f15222b32de7475eb05536a2d1c27fb5993c76d2b38d872d8324cca61d258f4c3b18106d48b1dcadd5f"]}, @nested={0x90, 0x28, [@generic="755514a7e0c63f7d5b1396248e0e55071f5fc9", @generic="9b28e43a207216c54c6de7a45e9d298b141a49611329197d8aadaea97953e0f77ff2c5b049d24bd6549dbb4d41e7e80a057fb4237cd28e2509d4c8e9936f5e9caebc2e5671f4dfbe34b8168b8632f37c4a3ba05e29fe94bfe668ee83f62358ae5d16", @generic="95149c171ca9207e1947384f449afea988ae714b"]}, @generic="a27146088860523499727790e29b19ab97381342d7721850d76fef10988b17514f0cf5414717c4bfe44a2864", @typed={0x8, 0x50, @ipv4=@empty}, @typed={0xc, 0x63, @u64=0x9}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x1}, 0x1) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000880)='/dev/autofs\x00', 0x21a800, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000008c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, &(0x7f0000000980)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000009c0)={r7, 0x9, 0x20}, 0xc) 07:36:02 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f000095dffc)=0x42) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r5, 0xffffffff}, 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e23, 0x7, @local, 0x2b}}}, 0x84) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 802.161179] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 802.167659] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 802.198997] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 802.203893] kobject: 'kvm' (ffff888219ff24d0): kobject_uevent_env 07:36:02 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x8, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 802.210544] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 802.218931] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 802.249783] kobject: 'kvm' (ffff888219ff24d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' 07:36:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x909, 0x141840) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:newrole_exec_t:s0\x00', 0x24, 0x1) sendmsg$sock(r3, &(0x7f0000000780)={&(0x7f0000000180)=@sco={0x1f, {0x7, 0x8, 0x65, 0x80, 0x4, 0xc1}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000002c0)="c491f2ab774984a518de5af6e0677a89e5cbcfdb0ac4bd07365b3616f733a1a8a6ab1f6cd77026f565c34617497e0ceceffabd74eed87a05dfebee17b874223251ebab65dfa93da1d439d5ab2e0b99b097c370410acbfba1c151f4bc8a8bcbe6e01763da184424373fb9e7987ccd8b89d01e5ec140b22dba3d4dbee13a8a5a48b38054f46d1f2858243c9591fed370d05be7d57ad148edb8aa542aab9cc85ad7939b075c185b8b5eb86e516a2a188de5f47c15486cc951a4b1b4eea8142affd2ac18659102dd3a51bdf49a1ca5232ede0fe89f15912850027ff7d316b5715599fc0b5a07575d306c221d17cd", 0xec}, {&(0x7f0000000200)="968d6c2dc568b68c1acfda34719128a8ed720a2a3739de8cae3681448395afd4ca15c189042b71e927abd41f3e40930783521cba50db6040d701b5", 0x3b}, {&(0x7f00000003c0)="8d70aefbe2d195a7840da421c38469145f9025b5322495f658e30de0dd8e0be6871bf0464e853bce8257dcc847e482236e4f682dc180e263bce50d096a757fa6d1c328304d6dfbb4583fd718a1a33d7a61b746c0222b7ff4cf0e882c8b31a4306aa40bf66e04df972c188a4d0ba2d44a37ecf0bc5d7f5d0328f48992759b942dbcb9006112097a07bad3337b7785b36b64b0a2a23832bef0d1dee0b13c64d69d8022172b8b1d8088de337a114aae34430d15bf200ef166bfe234d7763fcd6d148e938b34f2e4c4be47e6f2bb1c38756b8444e599f01f52d2584b26135df182a002390cbbaf6134e9b54f6cc62a9c6997", 0xf0}, {&(0x7f0000000240)="a21df49655e98495ce34872794c1923aea666b4bb9cc5eafe59789faf623bbc1978f2acf901a5db01e5d490b", 0x2c}, {&(0x7f00000004c0)="1168a7bbf1455e1b469e9401e888bb74df8238fafc8452286fbb233dc5ea9df73433fc9d8ba620c31b683f816db2477a69d44fba446bdb4ea49a5eb9ecbc864da7417e9719576fd4ee731aa2e918539df5f6a2d3e389d5cdecc423b6d0e0e3e884b42c9e8929fecab5da8632251ff9a39917c5ed22bf2cf212ed630f0181f7ee80c001fa72711d8b1c2e6f1d9f60f7c9d598807f8b9fb03757b7a7dcad07b3dd70a7f688c2aead9adf2ba0eb69366f6626263c4ffd2049a69e600d86638df96a3961af388b1c24fdfddb010505aca0d4e5242141", 0xd4}, {&(0x7f00000005c0)="070d606147418cc597c815413286bfa6eb038ca14b3d98e95a8e46456ec2a9ea3881cdfd", 0x24}, {&(0x7f0000000600)="31ba482dc45593851c342c8a53cfdb343b8b471c93dff4cfd20d52c7e31896985c868aa10b3d266e6e7ad343da617e59f1214951ee4c79ece7f7c4d0cb8172fa23f6764ba6e562c878806f671fc8ce4c4cab03d965138d71", 0x58}], 0x7, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0x13d}}, @timestamping={{0x14, 0x1, 0x25, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0xc74c}}], 0x48}, 0x20000040) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x8) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x3, 0x6, 0x0, 0x0, 0x3}, 0x3df, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0}) 07:36:02 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000000000004a1, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) fgetxattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00', &(0x7f0000000100)=""/178, 0xb2) r4 = fcntl$dupfd(r3, 0x0, r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000001c0)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0000000000280012000c0001007665746800000000180002001400010000000000f3523327282e71ffced6e880dd42c47292c72098862332d50506350452724de325", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) fcntl$getown(r9, 0x9) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) inotify_init1(0xc0400) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000000)=0xb48) [ 802.270139] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env [ 802.283174] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 802.298647] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 802.309425] kobject: 'kvm' (ffff888219ff24d0): kobject_uevent_env 07:36:02 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) getpid() process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 802.319453] kobject: 'kvm' (ffff888219ff24d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 802.348400] kobject: 'veth330' (ffff888013838eb0): kobject_add_internal: parent: 'net', set: 'devices' [ 802.348413] kobject: 'loop3' (ffff8880a4ac4220): kobject_uevent_env 07:36:02 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:02 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 802.351367] kobject: 'veth330' (ffff888013838eb0): kobject_uevent_env [ 802.377984] kobject: 'kvm' (ffff888219ff24d0): kobject_uevent_env [ 802.386596] kobject: 'loop3' (ffff8880a4ac4220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 802.397395] kobject: 'kvm' (ffff888219ff24d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 802.407449] kobject: 'veth330' (ffff888013838eb0): fill_kobj_path: path = '/devices/virtual/net/veth330' 07:36:02 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 802.423868] kobject: 'loop2' (ffff8880a4a4c1a0): kobject_uevent_env [ 802.435481] kobject: 'kvm' (ffff888219ff24d0): kobject_uevent_env [ 802.443154] kobject: 'kvm' (ffff888219ff24d0): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 802.447151] kobject: 'loop2' (ffff8880a4a4c1a0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 802.454699] kobject: 'queues' (ffff888042555f48): kobject_add_internal: parent: 'veth330', set: '' 07:36:02 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) readlinkat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=""/111, 0x6f) [ 802.494063] kobject: 'loop3' (ffff8880a4ac4220): kobject_uevent_env [ 802.498215] kobject: 'queues' (ffff888042555f48): kobject_uevent_env [ 802.512652] kobject: 'queues' (ffff888042555f48): kobject_uevent_env: filter function caused the event to drop! [ 802.515862] kobject: 'loop3' (ffff8880a4ac4220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 802.527499] kobject: 'rx-0' (ffff88805e8320d0): kobject_add_internal: parent: 'queues', set: 'queues' 07:36:02 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 802.550931] kobject: 'rx-0' (ffff88805e8320d0): kobject_uevent_env [ 802.565497] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 802.572958] kobject: 'rx-0' (ffff88805e8320d0): fill_kobj_path: path = '/devices/virtual/net/veth330/queues/rx-0' [ 802.585292] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:36:02 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x1}, 0x8) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)) 07:36:02 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 802.596981] kobject: 'tx-0' (ffff88808ecfecd8): kobject_add_internal: parent: 'queues', set: 'queues' [ 802.612221] kobject: 'tx-0' (ffff88808ecfecd8): kobject_uevent_env [ 802.622185] kobject: 'tx-0' (ffff88808ecfecd8): fill_kobj_path: path = '/devices/virtual/net/veth330/queues/tx-0' [ 802.628623] kobject: 'loop3' (ffff8880a4ac4220): kobject_uevent_env [ 802.644673] kobject: 'loop3' (ffff8880a4ac4220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 802.651394] kobject: 'batman_adv' (ffff8880a5018780): kobject_add_internal: parent: 'veth330', set: '' [ 802.671021] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 802.689060] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 802.704573] kobject: 'veth331' (ffff88809487cdb0): kobject_add_internal: parent: 'net', set: 'devices' [ 802.714481] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 802.714506] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 802.716205] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 802.725737] kobject: 'veth331' (ffff88809487cdb0): kobject_uevent_env [ 802.746003] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 802.748306] kobject: 'veth331' (ffff88809487cdb0): fill_kobj_path: path = '/devices/virtual/net/veth331' [ 802.820544] kobject: 'queues' (ffff88808ed4c448): kobject_add_internal: parent: 'veth331', set: '' [ 802.870971] kobject: 'queues' (ffff88808ed4c448): kobject_uevent_env [ 802.913923] kobject: 'queues' (ffff88808ed4c448): kobject_uevent_env: filter function caused the event to drop! [ 802.959176] kobject: 'rx-0' (ffff88805e832190): kobject_add_internal: parent: 'queues', set: 'queues' [ 802.992631] kobject: 'rx-0' (ffff88805e832190): kobject_uevent_env 07:36:03 executing program 1: process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}, {&(0x7f0000000500)=""/200, 0xc8}], 0x8, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) 07:36:03 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x14) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x11, "a05e4cc4d2431ad119e5e780be561b0723af"}, 0x14, 0x2) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) 07:36:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x406, r1) r4 = getpid() r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x12d3e2, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f00000000c0)={r6, r3, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 803.005917] kobject: 'rx-0' (ffff88805e832190): fill_kobj_path: path = '/devices/virtual/net/veth331/queues/rx-0' [ 803.019267] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env [ 803.033049] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 803.040215] kobject: 'tx-0' (ffff88805fc38558): kobject_add_internal: parent: 'queues', set: 'queues' [ 803.082950] kobject: 'tx-0' (ffff88805fc38558): kobject_uevent_env [ 803.113945] kobject: 'tx-0' (ffff88805fc38558): fill_kobj_path: path = '/devices/virtual/net/veth331/queues/tx-0' 07:36:03 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa4, 0x6, 0x0, 0x5, 0x8}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:03 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) 07:36:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) getpeername$tipc(r3, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="01002600e4f4a39acd26548bebb12a2d55c6359826ef6fc7582fb757b7f37d2216e5c0f2c83d9b0d7293"]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:03 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x442, 0x8) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7f, 0x109000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) [ 803.147426] kobject: 'loop0' (ffff888099fb2660): kobject_uevent_env [ 803.151570] kobject: 'batman_adv' (ffff888024050300): kobject_add_internal: parent: 'veth331', set: '' [ 803.155085] kobject: 'loop0' (ffff888099fb2660): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 803.178534] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:36:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xfffffffffffffe21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 803.240823] kobject: 'loop4' (ffff8880a4af4b20): kobject_uevent_env [ 803.253846] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 803.266996] kobject: 'loop4' (ffff8880a4af4b20): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:36:03 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) 07:36:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0x48, &(0x7f0000000080)="46f67ec8c9aa1f3ed37c644caf4f518928a795a1930ff2044807cb01f53fec2c0cb0bc3a06454b97dd5c59c67796b5e58d057675757c26299ecdb12a5b6c205d14aa955759eb8d81", 0xcd, 0x0, &(0x7f0000000100)="eaad44e514c61c3e7962f58e4f6db9716e907836647f11e3c0b62209297313a1bcb91f714bf623a1c92b7dc9a39e696d7c5c10b0e07f2d3a05d95d166e19d34a492ca1a7fbf962187fe9ec85a4ffa71a295c09cc7858c76caf7d89b65710b387ec5411ca88878c27517683aa056a8526e641e9b6be5c0e6c05de46e817321f56df399a4ea55080f0ce41797a9d55c033bd9d3d2d122cae5ec9559f03d3a8032dc445cf31539bcbd1282a76af2e3d012469ffca4bd6780272d8334ce9ce1e4990818210b2536d6837e2daedb22c"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 07:36:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x9, 0x1}, 0x0, 0x26, &(0x7f0000000080)="771ca3391329ee3c5c4f39b75a3baeb1e014e6f3e5779139b72d1e166bfb37ed", 0x20, 0x96912cd, 0x6, 0x0, 0x800, 0x9, &(0x7f00000000c0)="f75c"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000000)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 07:36:03 executing program 4: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) [ 803.317278] kobject: 'loop3' (ffff8880a4ac4220): kobject_uevent_env [ 803.325760] kobject: 'loop3' (ffff8880a4ac4220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 803.343488] kobject: 'loop5' (ffff8880a4b57420): kobject_uevent_env 07:36:03 executing program 0: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0/bus\x00', 0x40, 0x0) stat(&(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000680)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0xdbd9, 0x1, 0xf67, 0xfffffff8}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) [ 803.365241] kobject: 'loop5' (ffff8880a4b57420): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 803.385500] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. 07:36:03 executing program 1: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) 07:36:03 executing program 4: process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) 07:36:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x909, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x2}, 0xfffffffd, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x5c}, 0x8, 0x0, 0xf31, 0x0, 0x0, 0x8, 0x0}) 07:36:03 executing program 5: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SMI(r5, 0xaeb7) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x2) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)={@remote, @loopback, 0x0, 0x7, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @local, @remote, @remote, @rand_addr=0xfff, @empty]}, 0x2c) [ 803.419008] kobject: 'loop1' (ffff8880a49f4120): kobject_uevent_env [ 803.442389] kobject: 'loop1' (ffff8880a49f4120): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 803.461792] kobject: 'loop3' (ffff8880a4ac4220): kobject_uevent_env 07:36:03 executing program 1: process_vm_readv(0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/87, 0x57}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000200)=""/39, 0x27}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000380)}, {&(0x7f00000018c0)=""/54, 0x36}, {&(0x7f0000000400)=""/195, 0xc3}], 0x7, &(0x7f0000001880)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000880)=""/4096, 0x1000}], 0x3, 0x0) 07:36:03 executing program 3: r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000100)={0x9, "291f64fa33fe3a7400ed5bfb445f094e5c691645c2b85962d8b769ef2060b8fb", 0x2}) r4 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r7, 0x80045300, &(0x7f0000000080)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x6, 0x0, 0x0, 0x60}, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 803.498932] kobject: 'loop3' (ffff8880a4ac4220): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 80