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", 0x1000}}, 0x1006) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000002c0)=0x84) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x3) r2 = socket(0x27, 0x6, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000016c0)="4ec5e2047d0c1358e562dba31bcce8a7066e6fb27a8c180cf6019a10765587202e57651ce6b43b96c1096d607d4b580391638f5f1db214d71732b7e81b6383164cda79f39dc42889adcebcde1b3ac2436fff6ff893f2e15f13a74b1138232579d654536436d76513c72ec8f126345e04665e96f2fe6b9521d792d7b28ecb1bda9e3898fd9ad56ecf02ef405cd1b52c479c53b196a59bc45efc1eec0375aa8ca6bb2379d5b6ba2b61405ac973c747e569bcc84364067b2e17e9fe200b181577012d72a353bdcd7afce585efa1f453512a3df579a1702e2a53ee459e1a066e89c25e01b862e7639bd49df2f718a3b3a983408d67e8082899aa1aa466d8779eba873c51b71e3152add980f9d771f7260a1bcfc0b364b5a4aa6cddec81a945fb456b343c2777cd40fbbbf77236d8e74d3aae2d83e684a6f23781935d45ab5be61219f477928df5eefb38c025a27799e3bb338efbdc4b13b678db7b9663c4c8f9b70bb8129c938e11dd6ebf65166123cdea5061ef8008e841526516b8bcca16710ac9cf4cba97fcad2d89da3e6d9dd3c91172f79ddfdb81a16a3d60c745a72361c233f0e1788c91a86b42100320227adb81a3d6cfa0fe553d7eb774df4a9e56241b730ebdb3eb844c3e98f479c5ddda7a9f702adfe27b4176807948df8922aae3a8eb287518ce01e3ef00fde237c3881e25c7efc7be2cf91623edcd605653394c702565ff6938d979752bdade7d7b7d0c60d46ec823470e7a992d90d175eaa417e97b2919923baaf69083017d70419a32d20b9e8ed7270fca086aa0cc519586925f0921c0adeb589518ca8cf68b3bf0e68bc31cede75f6d8bba904bc08ea9c4feeb09f871ff5a57270f5e3e56397f90b0a1bd7927c5161fa71dd46f5a768cb6aaed19a7c60c67bd24d7136e841839156f749c2d5facd749108544bc9126880156e05d4c70907d9faa2b170b1da661e1e6a4313360da0b7f72087fe95b155945a05457f82933d6d5bb5145e53cd070d2b52882d2a4afb157196d162bcb2c54a9f6553da8c3dc7d51b0468268893c5ad8d72a443fda0bbd6ac641ec1ee9e6ac6e14c5e1eb689c75e62477634896d31e9b1eb52deea8646fb408915e29fbe99690f50d8d47111be01488767eb28072693ef6422670a3ba0269d4497fc89f9776b023f4310d57f1be8aaa9fa55c97e5f5482f15a09688a8b514f240326ff3cf03d9aa6dc715d40c18b21b643b89223185cfcf19bbcaacd5b5fe0293ec4abf007f7ad51bd6f9a19f92561a621546a6335edaf0591b9d8e4ab259f5a56b71b32f742027896914bfeca1c6454946695f08c06cbc8a6f5829bba4331885a6ad6ee16e5a99f15c44cff3691d5de1c7e500bd382730f1b54778321c18272068fea207e7e1dd7ef8ce8c3cac5f84a347549969ff1eba684cda889e5e1fbbeda649ae3160bb9a0a1b25b7679d65d60952f03f0b6087efb89cb18c67f2b265dcec4292352a42b692c4eba194e8bbf2a085d8efd9c4102f65376c298d5c579401bf5e3ba21d4ce6e16b9b8872bce659d54762ff632095d6ebe4f8cb83ead5ae986c05b3eb1e41b9557b9fffc0812f891d1a11ec6e4c0f397edb8f381b1b934b48f50dfe0dd69db94a43d45de780ac8e85956aba019ab14de0ba65d0c9af5c5e8502e1983cb9f039f97adb4a7aa34872bf3261fdef205aabeba657fb1f592d80d59406f808cdbe57c682e0588313cb4277c4fde7ed721ffc566b8409e513103a3151215b8c73e3144a987c53dfef41f03b8fec16dc1c57567aac577b6385bde4c95fd97b226a56ff18b4bc6b053e084ad2f8c3ef0f134660cb3d7b00c3e60f6d55f2ad05995101dc47b0c5e5633cad03abc129130208df6b3964699b53eb022809cb51044382bb656c0dfb49a7de0c9d166a499a967bf4772a2146a746dc832745f43048acd1345bb8d74d94406a0e4d11e003d9d1863df7e74323046f7589c0e84716fa82ff411cc7c6ecab1930a309cafa7580684cccdfe0bbe78f5f5055f60e4e350231b2bea57eee11568f545afb04e19ac68d85e806da900283008e9588a52e263000c8cac773007a6314d27591bc5fb7377dd89cd812902eb50d81155f2fc284fd6768473bd24f0d249b3b2e735077f754b967643c30e826c70639e4e75bad431c8bfc44e1bf8e6b431d2acb072a32bee13b8e26e06e71de770f39578ef08067a55e6aac37bd0f0d6f69e043f1353bf26a3ec081f2918e29f7027b64cd6ca96430fbe4e55d6308f1a548b270a5705e64bb04623d23b1479699a7c699f94460187afa5215ff9250d9ad44abb28c7a35333ca833c1edf76963b486f3cfeb3954733803143dcfbcd3e5b8ed2b682a46c036efbf922ea75434ef7a0771c5a5c92936189db532ae4b7c44594c45a92a3d704e9822c788aa8977b995406402f368099585e5cf3f3e817a90c3052f18b3a3b61b957d100149a20339967ea71dbd86c95ec40d1b91e71ce7ed1636b9109af4997c869818b628f5371fd6d3f89ab376310f340daaa15eb70b32a16a4eaba41abdaa323ce5a8308716898b9d4aaba19b302bc6affae6ec634ec9618adb7cce52ee6855177d6602a34218f283791b744256967fde22d5cb8b0ee209e7436ba05d58c0404d523a5f0aba83552b0597390449d987255a6155d86db29bd8b0106cf20850278d41b3e03d0e509c935419087f283bcc8daa0f089ebc4ec6f033f77aad62677540e27f7634256e38a4ef5471f697c57a727af89bb54f7d9759130fdc0f12c3cd93912d5dcf91238a36d06def1e6db8fa6a57224182d70bfaff4fb213d36ce3670c23c72681a57eff388fef01fabab19e95bf2cc80f8fae52c622b1e8b8fc49c610dafa72a204774d678baf1fe8299bae3857be3416078daf2a2ef49e9510f89db9f6b07beeb98e322f00d750d340edaafa07ad1c30017a9e5d12db67005368a99e4cd3f87d9104d6e3a03aab90d7eccfbd5fb83951b066b42eb1ed6bec3aab50e6425f05b3b2d5e842cb2ac74da0754b3d9233faee75fea07ff70cc26cc22b15154c3acfc7b6e5c2d52f3e01ed59adaf92397870f04a7eba7dd7454e4372937a8c0e9ca197c7b45042550163231193635a2640e27f25cab7eb1494c4cf5b52c9dcb09ea9e34be9255df30d533c288dbe1fa891bfaea83f6736e85ce72552aa612d2b4419aae58b92edcf3aec6846a5e67b49f383f9675d6b2ba0ba35c131aa7031c46681fcff0ab6c48bc87a11ef15e77c438846eee65ec49211b6ec8f37c2be75c10248accf9cce132c215da82a96dd6cf83532f57e7c946248b37a06eed66bbbfc50501f6998f9457ad062305e1876c43033f0e06ba83a90f43a2e440d5d85e77387ae7071863aadc865639dfc6eb9fa88a11610e6534037ed704484f8d2b231e5c2ba1177009cea2a98a8f39789da0ffb399d1e9017709d51fe91ef55aec52cf83b1cb3093c0133984c87a5d9f1719c61da27af79d19c94aef55ebce351e0b594864a9d027af6bc834d990ea9e278233e05761795e7c1d56e5fff5b8d501a00d389ceceff45d2bb4ff0db0f601e370b3c34e3d6f9ac7cc6e449e74ed0bce5c8fbc027a8689f025b7f11b0cd87ab1ceb295f1cd07a9663c9d368d78dd5bca878a9a157d8117194940000d45a48312c159802841fb8c99c1dc640f5c98b92a200331eb7d7747eb5245149ae35b88d6b2ae7c55fdfcebc5e1cf763895f7a252850bfa2d6f458b80fc640132358e0bc95dca6a89db5fe20b169a267fa73959a27b0ab038fd09f1982400e3e438572a2cdb9de02f2bc8b155dafc69199fb5c402826e3f4b72f2267fb10d7fc8f68dc246c24e5328dcc1abe6ab2210439c25129d8b4fc668ed985621368be7543fe312f8f72e98f74c09ba3faedc945b95b39bef7c55e0ecc2dfc57bcf1136f4c59093ce254794479184cb9c2aa009e334da2dbab46a7decbab8b4aefd1c7476df9e233160c09dd3f4d731f8b16ef44e10b1f5088cc89d24367b99ff456d727a5001b94dc510a6950001778a77cf0e8252704a95f585ab1ac69aa4ab76b58b2a93c6e710debf4b6181e35e0a955de870adfdf29be2f9168c25fea8480eae47274787461a16cd80590bd521c4b207c2ca35a1a9e3157deee546d52cc34dd8aff0f250a73061fe5ddf90e4d337bcaf48945325bdd5dc90a2e225c55855bd87f28c2f813d205585ad3d422d85df8ef4b06419cc6610ce0ab93a3ff52546c331884a136300a2460551376742cc59900d802fa3bd1e4607535a4a0ecc0388d2486723951e514cdf2fffc2c5d456cf50df0a55fa208ce69db9095f783544ded5bf688440d3f14780d20cf8d457c27de9dc72603514bc2e9ab92537b42c869dc0e6489528aed9874c6d200e9d94f7b7562b6d78332503594afdad8374f46e934f76dccf886463cb59b8c3d88a61627119bb5400179f9543a08ac1b5f81be373b28678e54918bfb14e78fad393cf54d4e5452bcff49351cda4b0e30dda22ee6b14c205187eb8c47b4ca59620d0d37efeafa1e80c99bb7ac743a3e9cb46e8c0257cd13a2befdbfc708458e6a0ef018b3a2523b09883c1e3c22c4fb30c72ddbe72338026e5e21585c3db2894949a12004bd0e9a12f837d057bacf64e5e3168eaf05a83f1c886cde9e9d3f7727612c011ee754b61f6e95920d3ab1e7b62c4fc5407ccc0a7f0d3bc774f24e0d1d611141bf000e60304a953718c87473aea812a78f8f9c130b253580da35d23a071317e5c257a6541ee48c48e55dd2d59f2de6300b6d89d203308d6e328a0df354f0830808943596a01a9b61f1825c7958e914f005f8d9e22239e3ac106144e6eb69d2a1494d2b6d489974e213c89ebad215f2dceaa4267cf7bc1ade126ee4b45e30f41bd663a23446788c94eb9f0e7c06ccb857ee5b43adc7bc380dc59868f157baea4e355835541e829d267ef79aae51c9f975999e86c4b081fc9ec0a9fac98bee1a492708a065a5c979c08ab31ca0deb79c6e54e1480ea93802aad777a0ac5ef330490a7afa31844ee44a3c68a76e9984b6b25df7677d7918826897659584bcd904adbd2fc7d34b1cd39cd3559ee2b01db466adf2189201667b9f5b781e87ea23d5d84190689f0d46f619e14f6a76dbf3d44f73e6dd188e6fc9a016d85dcf01fd735326195d2e31a5395bd70d1aa2ebd745d1f5648bbddaad59afd9fea22c079d653bcea3c0ffe67385a596bbf497612d313c7d57b2b4c0d2870c56da9a9fa4ab646e514c5bfdff2a0c5072c248bcebad76de4fcdd06e2cccbec849872c4c04ace3df688a1084ae40b58d47ce448450d979218a5ebfc4a8b00e993b668748e78dbf46c4eef143c4fab719780bb72ba72e1c00fb7329f1ec9155c074550c7faeebee8b594f00c8d845f0ae1e11b63d61cc7f33a1d78e9df0810eac5382f7117c8a9d6a54af337005b536bf8a5b60c64be9b4ebd0f53236326c752fda86dee72c523db823bc8c2b8a3836d25a2bdd046b00b285dde9cf84287a2595b720c692d807f5f337c79dfd872401d6dbc7bf13fb51c2b3d0f323dc3c6d6cae4e261a3804fc1905d103c4bb086fe471784e7251d51a45f5cb6bb6cb241bf45fdb68f6fbab7813f39324acd0994c1a6d6a29af3acd8adc70dbdb1e5e2e8c993fdb80b69dad6fb57f7384647188c72eb04ba6018435189de9d7426d33bd91edc5ee8bb52fed237ac26fb6cb075e1d922161da20595dda6aa9ebeb6ae9ffdfd8c9875dbf155b9c49f3649da86f6a7925406083d1134c6642dde79dfcc7841052b54687020ef84c1ab4", 0x1000, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000300)={{0xb0, @rand_addr=0x64010102, 0x4e21, 0x3, 'wrr\x00', 0x7, 0xea3, 0x12}, {@remote, 0x4e22, 0x4, 0x2, 0x6}}, 0x44) sendfile(r0, r0, 0x0, 0x24002d00) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RCREATE(r4, &(0x7f0000000380)={0x18, 0x73, 0x2, {{0x8, 0x2, 0x5}, 0x4}}, 0x18) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, "8c098d3b6438c1fbd8180b45d3cc9c164baaee13bf783eb1d66c353f731ae8174ad642085432430c390addf9b2f04d58d3b88e996e773c83fce60fa794a1cc81", "65f436ffca4a06b71c7a963ce778e03a4b090199add92ae18e13b1fbd14dade59e0dbdefaeb3d4c9755b165b06e58e929c10c5a54dbf780080ca9099661800", "e30e5a2a56a49f7cb627fa8ad4bb8aef75848f4aff2fc67a0ff75e1288f59ea9", [0x0, 0xfffffffffffffff9]}) [ 153.480963][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 153.496609][ T8473] device veth0_vlan entered promiscuous mode [ 153.522494][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.526417][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.545281][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.559390][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.574762][ T8473] device veth1_vlan entered promiscuous mode [ 153.606380][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.616688][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.635666][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.643873][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 153.654025][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 153.673014][ T8471] device veth0_vlan entered promiscuous mode [ 153.679219][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.699850][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.710899][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.721880][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 153.747867][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.775729][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.787225][ T8471] device veth1_vlan entered promiscuous mode [ 153.789099][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:03:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200800, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0xfe, 0x8, 0xda, 0x0, 0x0, 0xfffffffffffff001, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x100000000}, 0x14000, 0x1000, 0xfff, 0x4, 0x2, 0x2, 0x8}, 0xffffffffffffffff, 0x0, r0, 0x2) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000380)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x700022d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) [ 153.820803][ T8473] device veth0_macvtap entered promiscuous mode [ 153.834499][ T230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.843401][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 153.859582][ T230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.868239][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 153.876143][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.897822][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.906236][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 153.928523][ T4914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.949039][ T4914] Bluetooth: hci0: command 0x040f tx timeout [ 153.972482][ T8473] device veth1_macvtap entered promiscuous mode [ 154.021411][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.035042][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 154.049006][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.050363][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:03:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200800, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0xfe, 0x8, 0xda, 0x0, 0x0, 0xfffffffffffff001, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x100000000}, 0x14000, 0x1000, 0xfff, 0x4, 0x2, 0x2, 0x8}, 0xffffffffffffffff, 0x0, r0, 0x2) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000380)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x700022d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) [ 154.076107][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 154.118511][ T4593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.156829][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.171511][ T8471] device veth0_macvtap entered promiscuous mode [ 154.186522][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:03:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200800, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x70, 0xfe, 0x8, 0xda, 0x0, 0x0, 0xfffffffffffff001, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_config_ext={0x100000000}, 0x14000, 0x1000, 0xfff, 0x4, 0x2, 0x2, 0x8}, 0xffffffffffffffff, 0x0, r0, 0x2) mount(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000380)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = inotify_init1(0x0) r2 = dup(r1) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x700022d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) [ 154.222546][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.230768][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 154.258837][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 19:03:10 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106d0418c20000000000010902240001000000000904000000030000000921000000012200000920000300040000009c276158fa574a64dd9292c9e34264c11505eea4c881627cf7dd577998eb062e08974fcab5727d3bafaaceb00576535419444ea94673d873266a8d3d0a64319a3a0cffacb6f57c8ce8d40000000000"], 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2400c000) syz_usb_disconnect(r1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000406d042fc540b97cee136301105a000100003000090400000103010000092100010001220180923f6ae3c0d1f93748b35cc6530ef333745fdc03000000edab8f49f65df3a6508b602e38d1578790e2f2551a8dd2"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) syz_usb_ep_write(r3, 0x0, 0x1, &(0x7f0000000500)="8c") [ 154.293359][ T9884] nfs: Unknown parameter '.' [ 154.309350][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.341973][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.379617][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 19:03:11 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff07000000000000000000000000000000000000000000000000000008000d00000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000200000000000000004000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee2336491"], 0x12e) dup2(r0, r1) [ 154.387491][ T4593] Bluetooth: hci3: command 0x040f tx timeout [ 154.428215][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.448382][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.470343][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.497758][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.517825][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 154.537897][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.547461][ T9763] Bluetooth: hci4: command 0x040f tx timeout [ 154.569165][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.590337][ T8471] device veth1_macvtap entered promiscuous mode [ 154.597128][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 154.606745][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 154.627929][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 19:03:11 executing program 1: set_mempolicy(0x1, &(0x7f0000000080)=0x2, 0x3f) unshare(0x0) [ 154.649142][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 154.670845][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.701095][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.711551][ T3693] Bluetooth: hci5: command 0x040f tx timeout [ 154.717293][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 154.724052][ T3693] hid-generic 0000:0000:0000.0001: ignoring exceeding usage max 19:03:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)="97ec58592c7867985a112e8e19de1029b0c1338f1c426396d524746aeb2dd78064cddb6f31ce3bf1e7a31f6054a0206146488b86224588fef41d5c73cb4d2edd34a937684e2869b78f26490d76b5e435e2277949680cc03d511f7a5af496310b0976bd86aac18d657c48054792f110cf37bb6f5d8e24fd3c0536046ae0fd72388a347c8af7315a730c1ea8b98bd7f5022763909dcc42ef7b0bd4f61021766bdb05ff3e2ee0f48f2352b282e8675da0dc55d05afcb7d7df187fe73c18498f32c1b95d60073e9246d363a7d10f2a9880f836098d6aaf60de94cc1cf905ad202d3c7feb3626113aa8c538da3c464c", 0xed) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x3a, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x2}}, 0x20) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) [ 154.757295][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.789145][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.802044][ T3693] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on sz1 [ 154.829845][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.855458][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.877227][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 154.902467][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.927085][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.967397][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 154.974532][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 154.989421][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.014164][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.025500][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.037879][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.050915][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.062724][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.074576][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.085771][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.087426][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 155.098548][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.118916][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 155.121808][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.142184][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.153464][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.161028][ T7] usb 1-1: config 0 descriptor?? [ 155.168480][ T8473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.199509][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 155.199541][ T8473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.221437][ T8473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.244952][ T8473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 19:03:11 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a3119000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000600000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100738d7a310000000000ff07000000000000000000000000000000000000000000000000000008000d00000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000cf0a00000000000000000c000000000000000000200000000000000004000000000000000000000016000000000000000000000000000000000000003b38e967ac8206eaae86b97eec0b2bed1ee2336491"], 0x12e) dup2(r0, r1) [ 155.298379][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.307098][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 155.326423][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.359049][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.377268][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.408561][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.422744][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.444641][ T4593] usb 1-1: USB disconnect, device number 2 [ 155.461894][ T54] hid-generic 0000:0000:0000.0002: ignoring exceeding usage max [ 155.478461][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.502628][ T54] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on sz1 [ 155.514026][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.537283][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.549411][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 155.560560][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.571537][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.587976][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 155.596705][ T9763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 155.608840][ T8471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.621648][ T8471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.631445][ T8471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.640450][ T8471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 19:03:12 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000507000000000000000072030000", @ANYRES32=0x0, @ANYBLOB="00010000000000002c0012000c000100626f6e64000000001c00020008000100040100000a001a"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000080)={0x2}) [ 155.707123][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.727242][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.740539][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.771758][ T9966] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 155.783868][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.794407][ T9966] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 155.803691][ T9966] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (0) [ 155.846130][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.846726][ T9966] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 155.859484][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.882204][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.895693][ T9966] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 155.904684][ T9966] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (0) [ 155.917654][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.925453][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.927286][ T4593] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 155.940606][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 155.963429][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 155.977693][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.985495][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.994270][ T8092] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 19:03:12 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @empty}}}) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x2000000}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000100)=0x4, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r3}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) 19:03:12 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10480, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000240)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x54, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x9091}, 0x40015) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = dup(r6) bind$qrtr(r2, &(0x7f0000000400)={0x2a, 0x3, 0x2}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) 19:03:12 executing program 1: set_mempolicy(0x2, &(0x7f0000000000)=0x80000001, 0x8) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) write$6lowpan_enable(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f0000000080), 0x0, 0x8}, {&(0x7f00000003c0)="6b3daa7dba37393ae1897aa9e185a9511a7ea150aa13070cca6c6fd0a3eba30305390631598c58a79f2969fd7be9ba9de2ff546608bdd9f9fc1d4b7b5858edf04cd7c6ce6070ca8df7bb4e7c4485b161b6f46146c136f313facc47f2fa24462301f306730d3e164b0ccce7ed0d7a9eab75f4f64ff97c60e583187a5471449655d779d32be99ba2da5aa162add97f9c0b54299259f99a4e4145f7f48aee4ae8c888a023009699ed92bd0152884eb00eddecc36215c9084511e7a6290824ce24229d12515dc4c9cfc389dd0af250a5bb623460e90dacdda44c51c5da8cc308a9619d01e4742ce55a651fbdcbb33f73433a37f74be450330be52cb1914b1a6aa31523a44742e9ecc245e3452766ec741b6adc849621dd7618f61962e454c06743bd2de0567baac028d59f872063dc2f934b3498d4f2b9fef59c4ccdde07f276f6b49c69149ad8f96ba25f08c84e3f2dd60e5cae161edf0ca2b8280cab8b068ef5e6ed67399f726a0c741e98f66405e80d929246f4389f3c77a75af81a438ecc4b754f1aca230bb115e75adbfd685634baedb7d9fed4c4a8576c4233c6860a99153026525e422ac60c1c941995a505c41dfe9a5276fac9ba3c02ea84c6bfb14441cef11443950da1cc203a1d9d13aae47492ec513f6655dd970aa9eeb142fc6aea14bed2ea27cdca255f3ba5afba948e1e12fa691cf36a8d48e8ab8963c236456b0574e82fb65c202b370260df504dc69bda62812ae231b8e57dfc2313e4b9f108a0fe18d6770e52e9c552bde9d4b491d183e744ab33977d9a123dabf5847c7de691600e5c9c4e3d4c12617bee43fde76c5d7cf31dda4ae234eb90eab8f61ddce9424c062bd15518478342a3b58d11afdf0f648fb7e3b27a76d7e08e689950a9eb13cc99774dc4f8e316d1c4f6952c496a2e74a381d2e0e5ab1104a65656c0432507c57da75e458e364e2890af0a0bbbfacb2588991f791eda06e9dc0b90c94be81ff2a0c68339df0549cfd271d33950efb7c3e7633d126e874f39b5720f57403a4c0cbf7c2902f7b8f1ac0b9c8ac299763f3d502ce3c11c0c6a572f309d047c57a7b21e6ab38d582005eafe12b273452358c8d7fdf9bfa23113de2c69041e72e938edb3dfefac007c6e5a0715648a74543d01e8268355b29e3b8a2d4aacdc5ef36f85ccb9d719f1e3b9cf095f34f7c0b71d89abf2add05a2279c3f3c609ada0fd8f02c43506c60d271730b850a56b3946c5c6e22809486e0f60e626f875f4556c0defba0b61a4da50165e01f144c9e4f51faba08b304cba9530e4b0cbe90c23fe0797893d5acc4c870a19cdf49683975282b5dc9c876be7475f5ad31cb59800a1e8325e270c898692f89fdf411178d7de7b65e7d966c0b0876042e91500a085c53fd28d0b6fee2755e12b361dc844122ef2250a9340d25963fa257291a624d7c99d919c9356aace39a083edd43562227bf1fa2918336dc95b0a8ab0bdc4f6b514146c0c6c0b9b8bc26c307b3f13e99304d58a2c1a34cd430b255d0c4912cf74891210eb0ff44d7a12d9e039e7de3afb70edd8a2c0246561da8e4333cc967962c52c06b9624fcdfb9125d9a34314cf497b5f112ca667bfac8a243b449c0a9673d945de9d5a365c3134621ecffbad07c6d954529beea2df3eed8dc254856dc2af76552e083dd96d99ccf7abd2f3c9d078807afbb463883c013818f4d2c312726cd99e89e0adf2a0b36b890310612e65780f0678ea42da87005d7387077991ba64eaab14dd359e5ea3c65925397f424a0bb33ae25460ec5499385a88818cde0b6a19f36fcd69d8cf08a88c8bd47c9c621fa2ee252bbc0d7484d4237d8f7e9e814b416e92c0ad511373132addfb83f715e66cd7fccf4a7e7922dbfb21a28b965323e0119506551d2b8535b730f9960bab46b3c7633cced1115ae5690911d7ec5a91a3230c42554d7c8567c48d56e53fdb9dba8e0304b221f1ff0f6f5142a86286b9826813f01b53673b1ae52b50a9277febb1da2d0420afe9fb6cbe8f687bd80bfa355e200b720794c2f8bd9721887d2e79cdff0121b50d33901290ea72dba169ce08823f31bb2a96641969d045772e4cb9329f80b1eaf560b01451b0fb865683d185ffc0834be6b5d716bc74784c4275af84964b9f0e8158f3d4ab09f1228c6548134bc320ae2d39dba452277d180f755deccecf0c55d5c01768025fa88a149d0407d54d4d384694077d7303bea0f6755fc7a7556b266d019ad45514f2fb247ddb253e65083e39a6ce0406323e6acfa98215051c294727768f805b29c2a0bae275e34563f793799f4bfb6957dd46390fd6839d4c2475c317d78ff1744a1bdbf5efb1269b700f4dacb46b3feb905692f68b8f0c942d24e897726178f17563789b09fdc1c63df86e2afcd44df87747b6d47be80e01e12fd8686e513cf063b702dff4a6d4b864708209c5b5ec342e87abeae42d19afe6987bd6208954ae6d500ea226fe103ddae8462794123320aba88e1c5c26d79aae252b24a265d910fae60ef2eb05b29e89797b1b25ea7f7dfcbaf304e6c30e0027a9ea2e71f39824ea8f8b7c4ffb75af7dfef5882ba16b13c1d6ef8dac0a80bf8f27bf46f27a047b7d505b5a5f0adb858a098511c8f3f98f9434463030150792c5f493d2de288c88bf1c7539c27585d3860217301e1b0c2fa65e03da85640971200407fd746e78f8d57bc7855144155ef97689362a026cedf84130c161c7aef6e5ef886f88b08ce27727aab5d69d2412ea4a506ecd2a917188810ebe4fd061fe950f0ac81066dd5ecf63a148779ff450562eac5dd032de92d5a3939f9a82a9d86b8562811835062fdd900e656c4d4009cb3900b6f106b5a55794cff954012c155d8ad2419453a19b9c83b38952bb47e30db5b9ed1c5ffcfa99771488c0eb07d35397ac0c2db6d5f2599e24c10d68023fbb513f4f48dac4de9b19db44aeee7c279a735fa69d7c516699175ac112accb030b75dc975daeef7cc8bfc60adef6567b930c6179e573fdeab1209a8e437cd82840f32d6e77315009a0cf92d326914592285bc22e98217bb4babafb08e15bb156a966990f7be8723699ccf1274cf99981856678240a80175fe91dbf0be79f2cb6351e9557738ee2cb4c47d02ccbdcb94d5a12c1dfef28535312436484a2953458910eaf55c479bdbba5097278cb15eb19c61a4583edc1a729aeb1988351c11e1ae7b83216ed582196856f869af478e16e2eb4d1721769f82b08d030d8f715c7690eccb5ce16e14b18e352572f7160bd2812e51e283f584f60b29b57092e94a46b44d6a172c11aea0379058909ee2618e8d8362760d99c88312eaabc0142bf2b570fe09af4b8d09dfd0f2734b7e8e9477929369a7ffc36bfea62d7b2b2109194e0f40f27876465f1faa4a4258051517cffd12b229f620f553b992b4be1ce9b41c3901ee4eecf04343c8aaa48a813621b417d69ad8b8a8064ef86f5275032287e238a0a7841180410ab942f4def21ef32f2abc8f1747f0017a1e8c28193a251af3f507142e0fbfb58f9b2151deae8ab06545d990c24c33c7293366c8fc3bce173e48f4f5070865aae9f6bdf73fa4bffb703096f28bac6793a98be30255d37198bccb87e239e9da9da80ac178f80a958145c791895c534f4401b7c859acfce66b11457be42ee5b1deb2504463af28bd86d0ff0a658baa7c749c894886af6562f30e422d8ed18668f41e0c6fea310026fd489e1e1222e475a6c3981c3b086732fcc542ee324b7dff9315861775f739d1764e877a11b553d39574b98c86532e954913851107b6a7a26eef1547570fad04bc3db36efc4816b216bce54e56c5a55de6527b65a000b3a79fc2caf4c00064788a31230ec835db415eec1cc2ebd906cfa1772e6d83768a5d009b8707a95a724e7e3d79b129fdb0176af12b4ae1dff459a01afbaf6a8880c35730c5f2793dbbd5562f84b07735bf19db997bd2aeb5a9a77b6ed229ec79b49a84587df8e5cf139f167e5de795e12c6f0fdedc3109b3115ddb1a56b286d593ef2afe524effd65e4ba7f772e9d422faf02469ad69dca8bb3aaf254c823bc4512c85ecf371b225e6f389d5f98f34b05815eba4ab0f6d79b26cad9e25696b0381093724f8cd9f322e63058df394c0b63102e5ae4f4b9808e084183a8bf1813dc6f283cd15021d15459013c696f7970540603581d9b1077b3bafca2d2bcd1e37c51081e7af5889c54449c578f5e51d9fd42f9635f0361fe1097dc6998215773e8c2a60f9366f2ae0fe2e9fae89e08789a78fa0ba3e4bc5c644366ab74f67f006fdf36b33abdfc56306161db7f18688132087125f9018678c6033b79ec03c3488b6001494dc60a1a0c49cc6a61b61413479b604a2d496022ff42e831b756215a590d1eeaaf02e0fa84dd1b310e3f784c3196b085e652b4b2b947589f0fc77f0ec8895ea2b1794997158b6baefcc4f0dd82bf4d601cff5d785978fa0456debc91e8af5cdf67613f7680f43a2752fbec5be52d51aeeed426a8c1889744af9e7c3b6781fc545e2b2eac0c677551744e17d3bba4b8f0d159ba1728848ae55f425d92d6e448e31e1b3f217a228e8684b4de002bd6bd429f3da60e0f8411f086738208b8f77452c5d763d49c28fcc4e03a3dacb02119f1a75bcc25976373214bf91972f2c166ec5f1854b72daf0641e263ba006b904a04071f2957ac0ec78892d91974bbac059dd446018dc04fa74da9d88721fda14ec3167c849b8606603f503aed7db817a519bba8de0846e626c0ccc9f6fc5ccfbc319f5e20df401edecbec04e800596709bce50ee68f6f0fa950eb173bdaff6643f65fdb64a3318d4158d09b8b8c272b04d440ab5c4eb14adfe0e3cf3cce58d9ac49a277fc718c5ea5e0937a68469ad7dd36d3ded18c8d7c080f724ce1aceb6ac8962bfbf5ba5fb65aca1a970b5de583038728ec7b19866021ea7e528d6214359e929415f3da4744fb71dc1b651711bf490cce7830c8f540ddf12ad37fe619e75158467f58f2dcdeaba584f94e1a1bd95eea42c92d217e99a0dd91c46a6e79f5198488709007712951d9fdb347375274afc5fa8fbc7e9b486656e6e3b317b6b51065a1354512249cb8406f014c6fe3a4b0e12a082a937d6f0049dd58b288f5b32249fd7705424cad929ab74bca66dc9283f7ee9cb55141a1f95de455861b09ca8c03be6c87ac93ab889553ae60c63a01b091bd6af671edfdf7a30fe4aed3288875321da1cd5b919a7b9637042a95db77c45c4c8372804ea88fb3200bc69adc4a5dc38987908bd3e51b17d6f15aaa35490c7a0f74920a46cb64568f0a758d1c32e41f878564d591816577c83ae47512701405f4d48b74ce826c4d6dc9774a44626d38e1f521f2518d848c8fa70ee667153cb083752b6459522f1ff49ccc09bfd3ca2f44fce156a5097fff1fee574152c2d8389fc7910a2a00afd68edcb4720e10b74f02a09dcc03ad39ecc969ec6c0e2a07d63c040ae13a2061997aadadfd90fd96583df62dc2f7f1914c43f6cba5495c9f8161512e32f252ee74fe724c36f627978a1618f36160082a8b37fec941c70e686049bff947fb3af9326edacf5e6789c5c60d41057c774e3c48ddfc6166eacea130dbfca91442b75b48602d01866598a863ba6d63b29e2d747cb8080c2001e50742d26f17009a7d36062f11cc5a1079406c557418c498882435f21b979cb9210624cbe3d416207061484704093d4ebebab77df04518d27462ffc8d60f112221994116b382ae6f599cf7d97153f95030ab67ab792f8b1bb41c49", 0x1000, 0x4}], 0x1180087, &(0x7f00000013c0)=ANY=[@ANYBLOB='dmask=00000000000000000007373,namecase=1,iocharset=macgreek,namecase=1,uid<', @ANYRESDEC, @ANYBLOB="2c6673757569643d37363738376635302d306366312d39660e612d336633392d610031346f3262362c6f626a5f747970653d2d2c726f6f74636f6e746578743d726f6f742c006227830a8f70eb5c7fe522c9a73e56938a7173e9341b89435daabbdc3e837657800bab542b8d15e571e2e2788095a7e91b3fbb38362263dc8bf74941d907705bbb73df55683d37289f91fe7ce926b920916c2e0acd2fb79a3ce2b3287a5b571a901007c281f9503aef04ba819ca01e2cd502c1bdb6da96ee1268eeb807739b80ef84fd83a00b1a"]) fchmod(r2, 0x102) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000032001101000000000000000000000000040001003ab1386b78cff82b1d342ebe02ac31374c5e869beecff9bab740cebd53059484947472ac5ba486f060d16a402a17cbdd1bd3d9ea68"], 0x18}}, 0x0) 19:03:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x3e9, 0x400, 0x70bd26, 0x25dfdbfd, {0x4, 0x0, 0x2, 0xffffffffffffffff, 0x80000001, 0xf0, 0x0, 0x1, 0x0, 0x2}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xda00) 19:03:12 executing program 5: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1809010000000000000000000020000079064800000000009500000000000000720f25c4de4f2c23f9443cd7d8f66edfd41d7d91bc1ed86fb88c9f5bb662120baa586fb3572605d68aaf943b658a68d22f97171f8090ae9aaba87a8db9aa2718b6c2c9d4f7069789f4d2f25395d84200c4bdb0b991d1b21c58cfd8715a4eaf946b63489ed36e6aa573df5a75c2455dae03ccaf13eb5973965e7934d096f324755441828724baa8fcf4e53d1e7947695a97c8c61c6333b9b16ea862c778dac6c4cbad5453e16dddce81b0571dd3e649f655944b5dcf"], &(0x7f00000000c0)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 156.074518][ T8092] Bluetooth: hci0: command 0x0419 tx timeout 19:03:12 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0xc, 0x2, [@TCA_TCINDEX_SHIFT={0x8, 0x3, 0x6f90}]}}]}, 0x3c}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x53, 0xff, 0xfffff1fa, 0xfffff801}, 0x10) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 156.139452][T10015] tc_dump_action: action bad kind [ 156.148079][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.149824][ T8092] Bluetooth: hci1: command 0x0419 tx timeout [ 156.177249][ T4593] usb 1-1: Using ep0 maxpacket: 16 [ 156.241146][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.287991][T10039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.297635][ T4593] usb 1-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.00 [ 156.306651][ T4593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.337768][ T4914] Bluetooth: hci2: command 0x0419 tx timeout [ 156.344220][ T4593] usb 1-1: config 0 descriptor?? [ 156.389925][ T4593] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 156.467537][ T4593] Bluetooth: hci3: command 0x0419 tx timeout [ 156.627504][ T4914] Bluetooth: hci4: command 0x0419 tx timeout [ 156.787334][ T4914] Bluetooth: hci5: command 0x0419 tx timeout 19:03:14 executing program 1: unshare(0x40000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x7bcf7917, 0xf30d, 0x5, 0xfffb, 0x0, 0xfffb, 0x2, {0x0, @in6={{0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, [], 0x1}, 0xf07}}, 0x20, 0x3f, 0x64cd4878, 0x1000, 0x20}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x7}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000040)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 19:03:14 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fanotify_init(0x10, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xb2cc, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x800}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3e}}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) 19:03:14 executing program 4: set_mempolicy(0x1, &(0x7f00000000c0)=0x2, 0x8) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x8001, 0x4) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x8040}, 0x0) 19:03:14 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0xa, 0x2, 0x11) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x618282, 0x0) ioctl$SIOCAX25OPTRT(r2, 0x89e7, &(0x7f0000000080)={@null, @null, 0x2, 0x20}) sendmsg$sock(r1, &(0x7f0000000040)={&(0x7f0000000240)=@xdp={0x2c, 0x4, 0x0, 0x2d}, 0x80, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x541b, 0x747003) 19:03:14 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061004c00000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x78) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000100)={0xf9, 0x3, 0x1, 0x800, "931363848b4a137fdf6bd5722fdda622ce02b648237609380afbdeb2916aafd5bd4a2f295803377c16c3c1b2e617d2112b9ceef6929153662e8ce37c70bbba1e2768dd9fd5a0bc1efcf3a3171c4f44372ac6791d872faef66d2e5ca7532ffafe6f08a0a7432d370e6d967d9e06c880aded2e7e2e2618af404987f5c7c9b9b0686ccc46f88897bba252278860fda1a65abee7cf408c2e2af2b91cc6f4b084e7222a1e29bd149519cfb8b69b65b330aff23655c705036cdf1c0dce0ca8589be7d886b3994389e74e688d71be5f3b0d68eeb35b8966928902a6e543ba4c4d52676244"}) 19:03:14 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x30000000000}}, 0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="01000000b7fa68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000140)={0x1, 0x7ab0715dca68fed7, 0x0, {0x0, 0x7530}, {0x0, 0x7530}, {}, 0x2, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "51d5205e4ca4b888d40047c37321760319cfff34bdfeff767c815dad738690b20cf465f6ef18683b77224a9922dd0c52d6f5d97258d9a57813477b6fc92af87b"}}, 0x80}}, 0x0) 19:03:15 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB]) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)="f6", 0xffffffe7, 0xc000, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000140)) mmap(&(0x7f0000492000/0x1000)=nil, 0x1000, 0x0, 0x28011, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 158.290859][ T4914] usb 1-1: USB disconnect, device number 3 [ 158.320865][T10063] IPVS: ftp: loaded support on port[0] = 21 19:03:15 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CHAR_RAW_IOMIN(r2, 0x1278, &(0x7f0000000080)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x20, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x14}]}}]}, 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 19:03:15 executing program 0: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) syz_mount_image$hfs(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0]) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x20200, 0x12) mknodat(r0, &(0x7f0000000280)='./bus\x00', 0x10, 0xfe) getpeername$unix(r1, &(0x7f0000000180), &(0x7f00000000c0)=0x6e) 19:03:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095000000000000009e2776e1f9955e2f3d8c5a90a1ad7cd7e7264e1a5881dbaa405e0ba5f3fc7d816ca01c060f692fc9d9a001f5a3385009dded4507c5e13b7f991b721759aaa398fc34d0dc6b699dcd5d6e1f28979522e3e01543418629887e8a6d716b1039ceccfb43ee2e159030e2300d7814db4d9e83953198e5ea099d3293b2198fbe9f29da68ee08de8039b7fdd45b1175be341ef3572e6ef476ab4b563115e21fc3b2835023ce32c4507f1726a9e965264e256ff700961c882219"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='block_split\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) r2 = syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000003c0)=""/238, 0xee}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x2f, 0x8, 0x6, 0xfff, 0xe, @private1, @ipv4={[], [], @empty}, 0x10, 0x0, 0xfffff001, 0x401}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="5cf0ff80", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf251000000008003c007dad446b05002d000000000008000600", @ANYRES32=0x0, @ANYBLOB="050029000100000008003b00080000000500380001000000050029000000000008000300", @ANYRES32=r4, @ANYBLOB="08003c0001feffff"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) sync() ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000140)={0xf0f046}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000002c0)={0x4, @sliced={0x6680, [0x1, 0xdb2e, 0x400, 0x9, 0xdbc7, 0x81, 0x100, 0x2, 0x5, 0x6e65, 0x4, 0x3, 0x5, 0x2, 0x43b, 0x5, 0x5, 0x1ff, 0xa2f, 0x8, 0xb6, 0x4, 0x7fff, 0xa1, 0x4, 0x8, 0x3, 0x9d5, 0x0, 0xaf, 0x5, 0xa55, 0x4, 0x6, 0x0, 0x4, 0x2, 0x6, 0x7ff, 0x8000, 0x8, 0x8000, 0x401, 0x0, 0x81, 0x82, 0x1ff, 0x81], 0x49d}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={0x0, @empty, @broadcast}, &(0x7f0000000800)=0xc) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000180)={0x2, @vbi={0x3a, 0x7, 0x5, 0x30314442, [0x5, 0x3], [0x7, 0x3], 0x1}}) 19:03:15 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fanotify_init(0x10, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xb2cc, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456}, 0x5) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @erspan={{0xb, 0x1, 'erspan\x00'}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x800}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x30}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x3e}}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x70}}, 0x0) [ 158.531717][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.573389][T10116] overlayfs: unrecognized mount option "01777777777777777777777" or missing value [ 158.603080][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.629096][T10127] overlayfs: unrecognized mount option "01777777777777777777777" or missing value 19:03:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) r4 = socket(0x10, 0x3, 0x0) socket(0xf, 0x0, 0x7c) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="11f8abe3120651502d8781ca3f059aa08126c81b0432249afd0400bac8f4a8336c59506305fc4623e2828f594e545baa841c1c1aecc8da4360f48837c2a2d622322c0b2a803a81a8634880c9573c62144368b7b26f391ba992c5cb46be5699722cb713bbd7bbd1978e40361ad98b3bbc06db2fd79c78591aad957817525d6a2dbb5a15159eb96c90a51567e77c4c60036c11cd550ed07493b2a780b4dda9d37566ec824aea7f2c40122b70de6129114b7fcd44da5f4e92008da41dbb1de8bf0d4d914261d5ec963c", @ANYRES32=r2, @ANYRESDEC=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3cf6d3b5300", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f00000000c0)={0x1, 'gretap0\x00', {}, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="000000000000000001001f000b000100666c6f7765720000140002000600080086dd"], 0x44}}, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r6 = socket(0x1000000010, 0x80002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfff, 0x8040) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_OIF={0x8, 0xb, r7}]}, 0x30}}, 0x0) [ 158.684556][T10121] syz-executor.5 (10121) used greatest stack depth: 9944 bytes left [ 158.709204][T10063] IPVS: ftp: loaded support on port[0] = 21 [ 158.828455][T10146] sctp: [Deprecated]: syz-executor.3 (pid 10146) Use of int in max_burst socket option. [ 158.828455][T10146] Use struct sctp_assoc_value instead [ 158.877331][T10146] sctp: [Deprecated]: syz-executor.3 (pid 10146) Use of int in max_burst socket option. [ 158.877331][T10146] Use struct sctp_assoc_value instead 19:03:15 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:15 executing program 5: perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x0, 0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x10) fcntl$setstatus(r0, 0x4, 0x6900) ftruncate(r0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) lseek(r0, 0x0, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8001) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x5, 0x3, 0x4, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x728df552}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) 19:03:15 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000140)=0x4) io_setup(0x2e, &(0x7f0000000400)=0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r3, 0x1b, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0x89010000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)) dup3(r1, r0, 0x0) 19:03:15 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x8, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000022c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockname$l2tp6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x20) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) syz_io_uring_setup(0x3421, &(0x7f0000000040)={0x0, 0x2b70, 0x0, 0x0, 0x8, 0x0, r1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r6}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x0, 0x4) syz_io_uring_submit(r3, r5, &(0x7f0000001540)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r1, 0x0, &(0x7f0000001500)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @private=0xa010102}, 0x1, 0x1, 0x2, 0x3}}, 0x80, &(0x7f00000014c0)=[{&(0x7f00000004c0)="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", 0x1000}], 0x1, &(0x7f0000002b80)=[{0x10, 0x10a, 0x80000001}, {0xb0, 0x0, 0x7f, "3e508afc2b62a223033e50cd870bcd07836d431ee1cddb5af7593f4c3a5202656115b8baa6edc522b75c71e202a61659e5e9d453825c888dd001245a572da284bff50ec6a19afcad3b6662f940125977831e4ee087dc42529a3859e2096be9d264c330da73474469e7d0e1591fc32d2501169b1792127ce3d402b88fc41bf768ddbc1c01a2a3f9433c91d7df57d5ce476a11d84f262d270f16cc6d17"}, {0x1010, 0x115, 0x7fff, "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"}], 0x10d0}, 0x0, 0x40084, 0x1}, 0x7f) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000002b40)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f0000001580)={0x7a0, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x6f4, 0x8, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5f63795012a94868205dbc4e4c4ec5390d90d7f4ad2b50ed157451c4d46dc70f"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b8f2e892534993b379f0bc1a33493930defcf97164d86992b2697484a544ae49"}]}, {0x154, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ALLOWEDIPS={0xf8, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x10000, 0x4b, 0x0, 0x12, 0x6, 0xc, "79bcce10195c3b8b51352c33ee2e11395b9d4797f0c5a980187726877ba0bde27e9914e01de07d028a3455e1bb72ce944cec07fa4c20f3b99dd19f43064875e7", "82599d91cc32a9ed1429cf2bb4bc101f405eb9cf36a1b56328324fdfad6dced77dd67e6f4dc9fc0583186ca3590d49f77d654fcc4f93f3c7fe554938109151e3", "95eacfc9b16f3cde00c33ec2d8d50bf3429dfe813e5c08f571e6084c2c7484a4", [0x7, 0xb64f]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x400000006, 0x1]}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000640)=ANY=[@ANYBLOB="040000000000000000000080ff0f000007000000ff0fc624906e66f32d9fd94a719bf78b69e2e26d6ce5d12281751bf8b12b2a8dfbdac589adc1701252bcf1a4e8c431449c74b5ca1b5c36b5a638e7a4f29fba329b1c3ea0be52efacd20ea81c1ae31a6e2c2c05b73fd8fb7621df86d6ad140dabe9368983fd4802cebe2250083a612a7744a1d889ce6ee85b5cf31747bcf394148ede640ad581fd1e2847eecdba50e71d"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 159.178642][T10179] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 159.182011][ C1] hrtimer: interrupt took 55290 ns [ 159.204581][ T34] audit: type=1804 audit(1604516595.822:2): pid=10177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir977341573/syzkaller.2mrHfQ/7/bus" dev="sda1" ino=15795 res=1 errno=0 19:03:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 159.260452][ T34] audit: type=1804 audit(1604516595.852:3): pid=10177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir977341573/syzkaller.2mrHfQ/7/bus" dev="sda1" ino=15795 res=1 errno=0 19:03:16 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x33, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2b4}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000200)='/dev/video#\x00', 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000240)={0x7f, 0x1, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x0, 0x535c5c30de7ddfc2, 0x1, 0xe7ffffff}) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, 0x0) r2 = dup2(r0, r1) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000380)={@none, 0xd31}) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000040)={0x3, 0x22a2}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x0, 0x1, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f00000003c0)) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x20000000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000340)=0x101, 0x4) delete_module(&(0x7f0000000080)='^:\x00', 0xe00) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000917000000000000ff010000f1f9ff7011f2c9c90000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 19:03:16 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="34030000", @ANYRES16=0x0, @ANYBLOB="5140a2159dc96004df250cdeb7e41e11d19b569ec800000001000000018adfdc787f", @ANYRES32=r1, @ANYBLOB="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"], 0x334}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000068f56cc528d38b1850000000e000000154668620c9134cf794cd376d6bacf8473889f3078e009fb99320cac36c92de06564f0fe008000005e99115c268a10ac0fc79b0335d3fd1b29e1af0b5da520f05ed893965f"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r2}, 0x10) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x100, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000300)) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x248800) [ 159.394430][ T34] audit: type=1804 audit(1604516595.942:4): pid=10180 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir249948365/syzkaller.4JT4Ef/4/bus" dev="sda1" ino=15747 res=1 errno=0 [ 159.528795][ T8092] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 159.563183][ T34] audit: type=1804 audit(1604516595.952:5): pid=10180 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir249948365/syzkaller.4JT4Ef/4/bus" dev="sda1" ino=15747 res=1 errno=0 19:03:16 executing program 0: socket$inet6(0x2, 0xa, 0x300) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x36f, &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x3ff, &(0x7f00000000c0)=0x4) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbe0012dca0f08afdf25060000000a000900aaaaaaaaaaaa000008002b00030000000605e9587875dc919035cc0b0f789ae16f3b689ccd6eda8f69e2e0b73ba69bd94b2c9b91483114abb753a40fb3284b4eba9b75caa6932ad0f4ccb416e67052a89a1dbaccef9e5ff62cfb49411e5aedb06aab09ee54d5add7e03d66b012f707a663ae032611cf4bf8a1747c1033d94bcb0b04ed54555e47ac6fd5ad"], 0x30}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000040) [ 159.735536][ T34] audit: type=1804 audit(1604516596.332:6): pid=10187 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir249948365/syzkaller.4JT4Ef/4/bus" dev="sda1" ino=15747 res=1 errno=0 19:03:16 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x820002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f00000000c0)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) gettid() ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000074d3832128c717d0006706009cf4b89bb64f606d000000000000"]) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) 19:03:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x3ff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) socket(0x10, 0x803, 0x0) sendfile(r2, r3, 0x0, 0x1c575) [ 159.799985][T10225] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 159.817136][ T8092] usb 2-1: Using ep0 maxpacket: 8 19:03:16 executing program 5: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350600000fff07086706000002000000270300000ee60060bf050000000000004f650000000000006503f9ff01000000070700004c0000005f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be9525db67754bb12fe3054ac69a5864ef64f9914953170d2d7ffffff8ecf264e2b84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4d6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b58c500008ee0185473d51b546c087431d7700000006e7c955cfa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab70100010000000000d048cd6002d4519af619e3cca4d69e0dee5eb106774a8f3e6916df85aaf34c4756ad3a6d74ec88158f0200000000c89a960efb735fd552bdc206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1173ba7cbebe174aba210d702a0d237831e5b589ef918f9bbec63222d0ccecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f62ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000004000000000000000000000000bc00713916f674629709e7e78f4ddc211bc390f40e527a6127beebf0bd9d42ca019dd5d022cf74686e9fbe256267fff025a3f5b1afe2c5b11cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f8d2001e03a651bb96589a7eab04871bc47287cd313f00000000000000407d00000000000000000000c59050647802cf86f10000005f37d83f84e98a52fbbecd106425563d80bd0dc5703f37ca363f601ae899a53f6715a0a62a34b0c94cce6994520500000000000000260900000000000000e394ac000000000000000000000000000000437d57defb79ea6a58bc3eeed72913a2f95e1d6a1fc3857ff51b1e3ee00000000000000090867f577cdde2144d9d7a3b9bc43717188cb8426286fc55fc57cc3c6de4aa67babf35070ae282a4f2bf59f46e607f7b8b3b998107f83c1c2173268520465eae865dbfd533b1cb96a00d0490cd5248715c74b6bd02484a961f35c504343d17bd763ff7237ecc317e83b50ceb69e43f1a75ef21b948a98b8b0533edb5840db3d12bfab0aa2f26340f470421667ff59a3f5beb9e9120b6942c0933f2574fbd48ebf50c7ff723ffad1c52d5db5af05a4cc92a972fbd9f1f173dc53448be8386eb8e0af0a50c1b4e4a0588adf7955a0fbf620617a5374a279a0f3a944d2fb7d515eb2bc4067d9d600e7dc167db71959b77c322b3db181aed1cd2926806502a11dca3984ea959bc161ff603bfa050625ccede4c9ae6ef7c6131e39aefa13741976f037c4fb191ffad1343e906a4e283c19abdfc9cf9e50ad46c7e3deb268ad9ab6ee99b0e8e6797432f88d54b5365cb00d65272ca2c01d528e6e33832a839d1151deb3d75b1df9297082e793539b0d74a595865c79afe5b2bd09a4993f70fedf7559cff93c21896f1a4a68c4735ff2ed0c665cbabb1f42162"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100, 0x0, 0xffffffff}, 0x10}, 0x78) ppoll(0x0, 0x6000000000000000, 0x0, 0x0, 0xa000004) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000900)) [ 159.900137][ T34] audit: type=1804 audit(1604516596.412:7): pid=10194 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir977341573/syzkaller.2mrHfQ/7/bus" dev="sda1" ino=15795 res=1 errno=0 [ 159.947311][ T8092] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.995295][ T8092] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.036303][ T8092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.057300][ T34] audit: type=1804 audit(1604516596.412:8): pid=10206 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir977341573/syzkaller.2mrHfQ/7/bus" dev="sda1" ino=15795 res=1 errno=0 [ 160.101228][ T34] audit: type=1804 audit(1604516596.482:9): pid=10230 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir862964818/syzkaller.S8TFo5/9/file0" dev="sda1" ino=15793 res=1 errno=0 [ 160.377619][ T8092] iowarrior 2-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 161.147789][ T4593] usb 2-1: USB disconnect, device number 2 [ 161.169348][ T4593] iowarrior 2-1:1.0: I/O-Warror #0 now disconnected [ 161.947081][ T54] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 162.187063][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 162.327172][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.339435][ T54] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 162.349359][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:03:19 executing program 1: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:19 executing program 0: socket$inet6(0x2, 0xa, 0x300) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x36f, &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x3ff, &(0x7f00000000c0)=0x4) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbe0012dca0f08afdf25060000000a000900aaaaaaaaaaaa000008002b00030000000605e9587875dc919035cc0b0f789ae16f3b689ccd6eda8f69e2e0b73ba69bd94b2c9b91483114abb753a40fb3284b4eba9b75caa6932ad0f4ccb416e67052a89a1dbaccef9e5ff62cfb49411e5aedb06aab09ee54d5add7e03d66b012f707a663ae032611cf4bf8a1747c1033d94bcb0b04ed54555e47ac6fd5ad"], 0x30}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000040) 19:03:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="40022000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000180001801400020076657468305f746f5f7465616d00000014000380100003800c0001800500020000000000"], 0x40}}, 0x0) 19:03:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1d00000000000000240012000c000100627269646765000014000200080005000100000008000100e499"], 0x44}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x2f, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x7, "fc795f", 0x40, 0xf9}) 19:03:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040)=0x3ff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r2, &(0x7f0000001400)="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", 0x600) socket(0x10, 0x803, 0x0) sendfile(r2, r3, 0x0, 0x1c575) 19:03:19 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 162.499190][ T54] iowarrior 2-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 162.525594][ T54] usb 2-1: USB disconnect, device number 3 19:03:19 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) [ 162.553234][ T34] audit: type=1804 audit(1604516599.172:10): pid=10289 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir862964818/syzkaller.S8TFo5/10/file0" dev="sda1" ino=15820 res=1 errno=0 [ 162.587767][ T54] iowarrior 2-1:1.0: I/O-Warror #0 now disconnected 19:03:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1d00000000000000240012000c000100627269646765000014000200080005000100000008000100e499"], 0x44}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x2f, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x7, "fc795f", 0x40, 0xf9}) 19:03:19 executing program 0: socket$inet6(0x2, 0xa, 0x300) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x36f, &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x3ff, &(0x7f00000000c0)=0x4) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbe0012dca0f08afdf25060000000a000900aaaaaaaaaaaa000008002b00030000000605e9587875dc919035cc0b0f789ae16f3b689ccd6eda8f69e2e0b73ba69bd94b2c9b91483114abb753a40fb3284b4eba9b75caa6932ad0f4ccb416e67052a89a1dbaccef9e5ff62cfb49411e5aedb06aab09ee54d5add7e03d66b012f707a663ae032611cf4bf8a1747c1033d94bcb0b04ed54555e47ac6fd5ad"], 0x30}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000040) 19:03:19 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1d00000000000000240012000c000100627269646765000014000200080005000100000008000100e499"], 0x44}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x2f, &(0x7f0000000100)}], 0x492492492492642, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000000c0)={0x4, 0x7, "fc795f", 0x40, 0xf9}) 19:03:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:19 executing program 0: socket$inet6(0x2, 0xa, 0x300) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf2) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x36f, &(0x7f0000000040)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0x3ff, &(0x7f00000000c0)=0x4) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbe0012dca0f08afdf25060000000a000900aaaaaaaaaaaa000008002b00030000000605e9587875dc919035cc0b0f789ae16f3b689ccd6eda8f69e2e0b73ba69bd94b2c9b91483114abb753a40fb3284b4eba9b75caa6932ad0f4ccb416e67052a89a1dbaccef9e5ff62cfb49411e5aedb06aab09ee54d5add7e03d66b012f707a663ae032611cf4bf8a1747c1033d94bcb0b04ed54555e47ac6fd5ad"], 0x30}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000040) [ 162.977034][ T4593] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 162.998792][ T54] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.227773][ T4593] usb 3-1: Using ep0 maxpacket: 8 [ 163.239308][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 163.357059][ T54] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.357358][ T4593] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.367979][ T54] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.391321][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.406724][ T4593] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.425758][ T4593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.647769][ T54] iowarrior 2-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 163.727372][ T4593] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 164.417388][ T54] usb 2-1: USB disconnect, device number 4 [ 164.439043][ T54] iowarrior 2-1:1.0: I/O-Warror #0 now disconnected 19:03:21 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201a5ffffff01000000ff07000000ffffff81000800000000000000004000ffffffbf00000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 19:03:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:21 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x2144c1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x48}) r2 = socket(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x29, &(0x7f0000000080), &(0x7f0000000100)=0x68) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r4) dup3(r6, r0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = socket$bt_cmtp(0x1f, 0x3, 0x5) sendfile(r7, r8, &(0x7f0000000140)=0x7fffffff, 0x9) 19:03:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:21 executing program 1: r0 = socket$inet(0x2, 0xa, 0x4db) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x7) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8000, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) 19:03:21 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000001340)=[{&(0x7f0000000140)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000b9010000000001b9252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011800)="22001e0000000000001e00080000000008807809140b2a3a0802000001000001010022001e0000000000001e00080000000008007809040b2a3a080200000100000101013400200000000000002064000000000000647809140b2a3a0800000001000001120004006900f3111d80b1d4ec726f006c0064002c001f0000000000001e00080000000008007809140b2a3a08020000010000010a00660069006c00650030", 0xa3, 0xf000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="696f636861727365743d6d61637475726b69738b2c00"]) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0) [ 165.052374][T10376] loop5: p1 p2 p3 p4 [ 165.059180][T10376] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 165.112255][T10376] loop5: p3 size 1912633224 extends beyond EOD, truncated 19:03:22 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:22 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @empty, 0x3}, 0x1c) r4 = accept4(r0, 0x0, 0x0, 0x0) connect(r4, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 19:03:22 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x20, 0x300d, 0x2, 0x5, 0x0, 0x1, 0x6}}) r1 = getegid() syz_mount_image$jfs(&(0x7f0000000240)='jfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='quota,gid=', @ANYRESHEX=r1, @ANYBLOB="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"]) 19:03:22 executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0xfff, 0x2003}, {&(0x7f0000000040)="ed41000000100000d4f4655fd556dab21a174f8483433b024ef4655fd5f4655f000000000000040008", 0x29, 0x4200}], 0x0, &(0x7f0000013a00)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x400000, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x75, 0x222, 0x4, 0x2, 0x8, 0xffffffff, 0x20}, 0x9c) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') 19:03:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 165.647079][ T4914] usb 3-1: USB disconnect, device number 2 [ 165.658479][ T4914] iowarrior 3-1:1.0: I/O-Warror #1 now disconnected 19:03:22 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file1,lowerdir=./bus,workdir=./file0,index=on']) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) chdir(&(0x7f0000000540)='./bus/file0\x00') r2 = memfd_create(&(0x7f0000000d00)='\x01\x00\x06\x00\x00\xcb\a\xb4@\xc9\x1c\x92E\xb9\xd0\xe2P\a\n\xb0\x92\xffJ\xe6\x91}\x9cT\xae\xdd\xc8\xf4\x848\x9eg\xfa\xec\xc8\xb4\xcd\xc2R\xf0\xe6f/q\'\'fDV\xf5\xb93O\xcc\xf2\x80\x15\x06\xd1b\x1c\xcc\xce*O\xad\x13l\x95\xc5\xe8\xf9\xdb\x8cm\xef\"~\xa8\xc6\x9e\xb2\x888\x91|7oiSdPB\t\x00\x00\x00\x00\x00\x00\x00\xb8\x10\xd3#<\xac\xb0\xd7\xf0\xe1\x04H9\xf8]\b\x00\x00\x00\x00\x00\x00\x00\xc4\x14\xfb\x9eEnK\x93\xb1\xf7\xb1\xa2\r}\xb9\x1e\x89 \xa1\xe7\x95\xd3\x8c\x8e,\xbeEfq\xe9f\xc5\xf6\x96\xc9A[\x8a\xed<\xf5\x8b\f^\xf0\xf7#Ld\a\x00u\xd4\xf8\x1d5\xda:\xea\x0e)@.\xf6\x05\xf2\xda#7Hu*\xa0#\xda\xc2d\xe1\x1a\x94\x9c\x92\xa4\xa8\xddv\x9c\xaaH\x8ct\xab\x02\x93\xdd\xfd\xf9\n-\xc4/[\xab\x02\x00-\x1f\x10\x81N\xea7]s\xeew&T\x9a\xe8m\xa5X\x06\xa2\xc5Tv[\x9e-g\x94\xccCv\x82\x9b\x05\x85Q2\xbdC\xf9\x95\xb6\x01\x85]\x8c\xa0>\"\xcb\x1d\xb7\x86\n\x1cK\xe0\xebQ\x93\xd5\x048\x00\x00\x00\x00\x00\x00\xc4\xd6\x1e\xd2\"$\x98\xb7b~s\x91\xfe\xb1\xe2X6%\xc6\x91\xaaR\xect\xc373\xd8\xbcO\x9e\xdb\xb1{V\xf6\xff\"\x06\t\xe0\x9bCw\xc9\x99\xd4M\x8e#\xa9nJ\xa7\xfe\x93U\xc9\x9f*\xa2\x91\x9fXr\xa0\x05d\xe7e\xaa;\x19R\x8a(\xb2(\xfc\x9d\x18\xc4\x19\x19\xd0?x\xe7=\x7f,~\x83G\x9eL\xa0\x1a\"\f\r\xe0\xe16Ac\x95\x80\x80\xca.\xd1\xf7XW\xa4]j\xe6\xc8\xd0?\xb6\xccq\f\xed\x06\xc7\x93UTmFX\xce\xcbm_$\x9ca\xa8\xe6\x92YN\xee\xbc\xcd\x86\xb7\xc0\xe9D\xb8\x01\xd1@\xdf\x84\xb9\x85\xe9\xb9\xe7x\xa4\xe9\xd0\xf2t\x19\xc3\xac@B\x94\xbe!\x11~\ak\xc2\xfc\x0e\xce,s\x88N\xeeB,\x90z8\xed~\x02\x85\x13\xf1t\x83E\x92\xd7VD\\\b\xa8\xc8g\xa2\xc6!9\xf9,3\x12\xddD\xde3E?v\x04\x02\xf1\xddA\xb1t\f\x8b\xa86\xae$#2 \x9dFV\xab\x90g\xe7\xb8\x10\x14,\xdf\x88\xc4\xb7.2\xa0\xc3e\xed\x18\x8eoij\xebS\xba\x97\xc6\x96\x1fg\xc5\x8e\x9d\x05:g\xb9\x003\xbb\xab\xb0\x8cj\xeeY <\xf3\xa0t\x94\x16\x84uL\xafPq4\n\xfe\xf7|M\x1e\'\x92o\xa3\x97\xa0^S\xf4\xa6U\xa0\f^-\x97x\xe0\x16\xf1jJ\xf2\xe1\xdb\x80\xf2\xcd\x1a\xd2b\xc6\xfb\xd4\xbd\xc5v[\x1e\x15\x1a&\xce\xd2\f)\x11\xe7}\xd7\x11(\x98i\xf8#];\xebib\x12\xa9\xf6l\xf8a\fp\xa6R\xdeKB\x861\x9a\x9eb\xe9\xa8\x90\xc5R\bi}\xa7\xf5?T1\xc3\xa7\r56\xb82\r\x0f\xd3n(`\xbd\x12\xbf\xf8\xd7\x8bG\xc7\xd3\xb5\xa7\xdc\xef}\xdc\x03\x1a\x9c`\xc6\xf5m\xbf=@$<\xfa\xb4\x94;N\x03\xdd\xc7\x86\xa4\x06\x83e\x95R]\t\x8ai\xdd\xde\x1d*\x15\xb30xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x15, 0x0, 0x8}) syz_genetlink_get_family_id$l2tp(0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x1) mlockall(0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x10000, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000000c0)) 19:03:22 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) wait4(r0, 0x0, 0xc000000f, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) r4 = dup(0xffffffffffffffff) getsockname$packet(r4, 0x0, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f00000001c0)={0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000919773ac5c1757f271d3c232d4b208c138cf07ccc70ea5306429560a64f6b17bd87ecd85a28119c122c0f9282a93e5682d283274fa65a0c333f3b8918738fdb6884fa3c104372fba198f642d", @ANYRES16=r5, @ANYBLOB="00022dbd7000fbdbdf25160000000c009900070000002e0000000a001a00ffffffffffff00000a001a0008021100000100000a001a0008021100000100000a001a0008021100000000000a001a0008021100000100000a0006000802110000010000"], 0x68}, 0x1, 0x0, 0x0, 0x4040800}, 0x20048040) [ 165.928707][T10454] overlayfs: filesystem on './file1' not supported as upperdir 19:03:22 executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000810500"/20, @ANYRESHEX=r3, @ANYBLOB="00000000000000002c0012800e00010069703665727370616e"], 0x4c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0) 19:03:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 166.116973][ T4914] usb 3-1: new high-speed USB device number 3 using dummy_hcd 19:03:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) [ 166.230034][T10470] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.250546][T10467] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.304282][T10470] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.317999][T10467] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.366911][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 166.486974][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 166.527863][ T4914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.537439][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.807340][ T4914] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 167.588248][ T4914] usb 3-1: USB disconnect, device number 3 [ 167.610436][ T4914] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:24 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0a36cc808743ad03ec35ba6dbee6671563bfb6105b4c3242e436ab72adabb24cefe9a7066c282f4dbaa6ba72b5cba6a3bdef96796bc4309bd4199f1cd050857e87d63486da3702dd28971b757ee263da73a64556477940541ee13b5fd58fdb12404cbf62863dfaf188d7f8bbc176b0c58f5966ad83218b8d837d23d958f6221fc0ed29f242bc50c061bfe684e20d017f41d24b17bfb0effefdcc3acb4f5dcd09885e92e184ce7a3abfbb192978305a1500a5c4873d7e59007087bbc0e24a9f6a000000"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) read$FUSE(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)={0x0, 0x3, [@broadcast, @local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0xffffffff, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x1, 0xb7, 0x1fd}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execveat(r4, &(0x7f0000000180)='./bus\x00', &(0x7f0000000440)=[&(0x7f0000000300)='/dev/net/tun\x00', &(0x7f0000000340)='\r\x00', &(0x7f0000000380)='*\x00', &(0x7f00000003c0)=',.@:\'[.(%+\x00', &(0x7f0000000400)='/dev/net/tun\x00'], &(0x7f0000000540)=[&(0x7f00000004c0)='/dev/net/tun\x00', &(0x7f0000000500)='/dev/net/tun\x00'], 0x1000) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x12) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r5, 0x0) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000280)=0x8) 19:03:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) timerfd_create(0x0, 0x80000) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendto$phonet(r1, &(0x7f0000001640)="38db69a3b8c1efa20451b729219cb2a4fbacccbd2f4233578aee9f40f874327ac1241cfb775769979653d5c5021ebef9d011b1a94be05abba297356c0d2ec4258badfbf3522ec413abdf6e5f6a81ee7717d297075799402daefdc02ed10007eea37d2ddb5aa7823f", 0x68, 0x40, &(0x7f00000002c0)={0x23, 0x53, 0x7, 0x4}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000950000000000000021d2657fc93f7dabbfb711e3ac417ced7570af44c0efb4871b36820820d8ffd5298c"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x0, 0x2, 0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000180)={&(0x7f00000016c0)={0x1150, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_TID_CONFIG={0x438, 0x11d, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6721, 0x200, 0x1f, 0xd4, 0xfc00, 0x1, 0x2]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0x5}, {0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x6}, {0x5, 0x5}, {}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x1}, {0x4, 0x3}, {}, {0x2, 0xa}, {0x2, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x1}, {0x0, 0x3}, {0x4}, {0x1, 0x5}, {0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0xa}, {}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x3}, {0x5}, {0x5}, {0x0, 0x6}, {0x3, 0x9}, {0x6}, {0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0x1}, {0x4}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x4}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x6, 0x1}, {0x4, 0x6}, {0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x1}, {0x3, 0x9}, {0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x6, 0x9}, {0x3, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x6, 0x4}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x4, 0x36, 0x5, 0x12, 0x60, 0x72, 0x18, 0x60, 0x18, 0x4, 0x36, 0x18, 0x6c, 0xb, 0x1, 0xc, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0xb, 0x12, 0x30, 0x16, 0x26, 0x36, 0x5, 0xc, 0x9, 0x1, 0x16, 0x60, 0x1b, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x18, 0x6c, 0x9, 0x1b, 0x24, 0x6c, 0x1b, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1ff, 0x8, 0x6, 0x800, 0x81, 0x1ff, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x80, 0x8, 0xfffb, 0x3af7, 0x20, 0x5, 0xe2]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2d, 0x18, 0x16, 0xb, 0x12, 0x4, 0x18, 0x48, 0x3, 0x60, 0x1, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x6c, 0x48, 0x24, 0x1, 0x5, 0x2, 0x4, 0x48, 0x0, 0x3, 0x24, 0x1b, 0xb, 0x1, 0x48, 0x9, 0xc, 0x4, 0x3, 0x9, 0x67, 0xc, 0xc, 0xaf33d64227f75da6, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x8b69, 0x81, 0xff, 0x3, 0x9, 0x7ff, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x6, 0x12, 0xc, 0xb, 0x2, 0x30, 0x36, 0x0, 0xb, 0x30, 0x5, 0x12, 0x5, 0x65, 0x36, 0x24, 0x1b, 0x3]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x1ff, 0x983, 0x7, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x2f, 0x6, 0x9, 0x78, 0x16, 0x9]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xef5, 0x2, 0x81, 0x10, 0x71, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xaa3, 0x1, 0x20, 0xda1, 0x1fd, 0x3, 0xff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x48, 0x6, 0x1b, 0x4, 0x2, 0x4, 0x1b, 0x48, 0x4, 0x16, 0x5, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0xb, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x101, 0x5, 0x8, 0x3, 0x9, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x1, 0x4, 0x30, 0x9, 0x18, 0x60, 0x16, 0x0, 0x9, 0x48, 0x30, 0x9, 0x30, 0x67, 0x36, 0x2, 0xb1958269a631b506, 0x36, 0x18, 0x9, 0xb, 0x4, 0x0, 0xc, 0x36, 0x0, 0x1, 0x10, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x3}, {0x1, 0x3}, {}, {0x6, 0x6}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {}, {0x7, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {}, {0x2, 0x6}, {0x2, 0x8}, {0x7, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x9}, {0x6, 0x3}, {0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x3}, {0x1}, {0x4, 0x6}, {0x5, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x5}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x4}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x5}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x4, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x7}, {0x2, 0x5}, {0x1}, {0x5}, {0x3, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xfeff, 0x3, 0x1f, 0x6, 0x7ff, 0x200]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0x6}, {0x6, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x6}, {0x5, 0x3}, {0x1}, {0x3, 0x8}, {0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0xa}, {0x7, 0x5}, {0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x4, 0x4}, {0x7}, {0x4, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x2, 0x5}, {0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0xa}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x354, 0x11d, 0x0, 0x1, [{0x274, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x2, 0x18, 0xb, 0x24, 0x6, 0x60, 0x1, 0x9, 0x6c, 0x0, 0x16, 0xc, 0x0, 0x1, 0x60, 0x5, 0x1b, 0x60, 0x4, 0x18, 0xb, 0x4, 0x2, 0x12, 0x2, 0x0, 0x16, 0x1b, 0x6, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0x9, 0x5, 0x1f, 0x4, 0x3, 0x81]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x24, 0x6, 0x30, 0x6c, 0x24, 0x1, 0xc, 0x4e, 0x30, 0x9, 0x2, 0x16, 0x48, 0x12, 0x18, 0x2, 0x25, 0xb, 0x4, 0x4, 0x0, 0x1b, 0x5, 0xc, 0x5, 0x5]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0x3}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x9}, {0x6, 0x8}, {0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x18, 0x24, 0x5, 0x1b, 0x12, 0x52, 0x6, 0x0, 0x0, 0x1, 0x3, 0x16, 0x36, 0x36, 0x8b5f2da90e3869c6]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {}, {0x1, 0x1}, {0x4, 0x5}, {0x6}, {0x0, 0x4}, {}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x6, 0x5}, {0x7, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x7}, {0x3, 0x2}, {0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x6}, {0x2, 0x9}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x3, 0x5}, {0x5, 0x5}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x8}, {}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x4, 0x8}, {0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x6}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x7}, {0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x6}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x1}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x7}, {0x3, 0x4}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x3, 0x7}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x6, 0x9}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0xa}, {0x3, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x30, 0x12, 0x18, 0x5, 0x1b, 0x1b, 0x0, 0x36, 0x1b, 0x36, 0x48, 0x16, 0x9, 0x12, 0x6, 0x2f, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0xb, 0x9, 0x16, 0x6, 0x30, 0x5, 0x3]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x2d18f48cb33a6e93, 0x60, 0x9, 0x2]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0x0, 0x8000, 0x401, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x0, 0x7, 0x6, 0x3, 0x1, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d62, 0x81, 0x5, 0x1ff, 0x0, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x81, 0x6, 0x8, 0x3f, 0xe00, 0xffc1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf65c, 0x1, 0x805e, 0x3, 0x7, 0x6, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1ff, 0x13f, 0x9, 0x7, 0x0, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x60, 0x6, 0x6, 0x5, 0x36, 0x3, 0x0, 0x30, 0xb, 0xc, 0x0, 0x30, 0x48, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x60, 0x60, 0x0, 0x18, 0x3, 0x12, 0x18, 0x5, 0x6, 0xc, 0x1, 0x0, 0x36, 0x6, 0x24, 0x60, 0x18, 0x6, 0x24, 0x3a, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x7}, {0x4, 0x4}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x5, 0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x7}, {0x4}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0xa}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x6c, 0x30, 0x4, 0x1a, 0x4, 0x24, 0x1, 0xb, 0x4, 0x30, 0x16, 0x2, 0x6c, 0x36, 0x1, 0x1, 0x5, 0x16, 0x30, 0x48, 0x9, 0x2, 0x3, 0x12, 0x9]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x5, 0x2, 0x3, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x30, 0x60, 0x48, 0xc, 0x2f, 0x50, 0x30, 0x4c, 0x6, 0x9, 0xb, 0x9, 0x1, 0x6, 0x12, 0xc, 0x6c, 0xb, 0x30, 0x18, 0x1, 0x6c, 0x16, 0x6, 0x2, 0x1b, 0x5, 0x18, 0x4, 0x48]}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c8, 0x11d, 0x0, 0x1, [{0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x9}, {}, {0x0, 0x4}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x1}, {0x6, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x7}, {0x2, 0x9}, {0x3, 0x9}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x6}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x9}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x36, 0x1, 0xb, 0x48, 0x24, 0x60, 0x30, 0x4, 0x18, 0x30, 0x18, 0x3, 0x6, 0x6, 0x4a, 0x2f, 0xf, 0x12, 0x9, 0x6, 0x9, 0x16, 0x2, 0xb, 0x60, 0x24, 0x22, 0x21, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1f, 0x4, 0x4, 0x74f5, 0x81, 0x5a7f, 0x1]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x6c, 0x18, 0xb, 0x12, 0x36, 0x4, 0x18, 0x36, 0x1b, 0x0, 0xaf9098d37157306e, 0x49]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x9}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {}, {0x7, 0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1}, {0x6, 0x9}, {0x2, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x3}, {0x4}, {0x2, 0x9}, {0x7, 0x4}, {0x2}, {0x6}, {0x2, 0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x3}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x0, 0x6}, {0x5}, {0x7, 0x7}, {0x2, 0x4}, {0x4, 0x4}, {0x0, 0x8}, {0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x5, 0x9}, {0x6, 0x9}, {0x3, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x24, 0x36, 0x36, 0x1, 0x16, 0x2, 0x30, 0x24, 0x4, 0x16, 0x18, 0x1, 0x48, 0x3f, 0x36, 0x6c, 0x6c]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x138, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x5}, {0x3, 0x5}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0xa}, {0x3, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x6}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x7}, {0x2, 0x9}, {0x6, 0x7}, {0x5, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x2}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x7}, {0x4, 0x2}, {0x5, 0x3}, {0x2, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x2, 0x9}, {0x6}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x1a}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x6}, {0x7, 0x4}, {0x2}, {0x7, 0x8}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x6}, {0x4, 0x5}, {0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x9, 0x0, 0xc, 0xb, 0x1d, 0x18, 0x24, 0x30]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x0, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x3, 0x48, 0x48, 0x11, 0x4]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x12, 0x12, 0x16, 0x4, 0x5, 0xc, 0x1b, 0x6c, 0x6, 0x30, 0x0, 0x6, 0x5, 0x9, 0x1, 0x24, 0x48, 0x12, 0x48, 0x4, 0xc, 0x3a]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9, 0x43, 0x1, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2, 0x7fff, 0x3, 0x3, 0xc437, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x6dc, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0xf800, 0x1f, 0xff31, 0x101, 0x3, 0x2]}}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e, 0x0, 0x1, 0xfeff, 0x5, 0x0, 0xfff9, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7f, 0x2, 0x100, 0x80, 0x4, 0x101, 0xf2]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0xb, 0x2, 0x12, 0x4, 0x60, 0x5, 0x4, 0x18, 0x9, 0x12, 0x4, 0x6, 0x6c, 0x5, 0x16, 0x12, 0x18, 0x6, 0x24, 0x18, 0x38, 0x1b, 0x6, 0x24, 0x12, 0x5, 0x24, 0xc, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x20, 0x7, 0x7, 0x81, 0x8, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x5, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x5}, {0x5, 0x7}, {0x2}, {0x3, 0xa}, {0x3, 0xa}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x6, 0x8}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x1}, {0x6}, {0x5, 0x1}, {0x7, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x4}, {0x1, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0x3f, 0xf9, 0x800, 0xffff, 0xbb7, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x48}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x37c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x108, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x9c, 0x64cc, 0x400, 0x2c, 0x101, 0x6]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x5}, {0x5, 0x2}, {0x1}, {0x3, 0x6}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {}, {0x2}, {0x4, 0x2}, {0x5}, {0x1, 0x5}, {0x7}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x8}, {0x6, 0x2}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0x6}, {0x2, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x5}, {0x0, 0x8}, {}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x1}, {0x2, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x1}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x6}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x7}, {0x5, 0x1}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x4}, {0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1, 0x5}, {0x4}, {0x7}, {0x7, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x0, 0x5, 0x1b, 0x9, 0xc, 0x6c, 0x60]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x6, 0x9, 0x1e, 0xc, 0x60, 0xb, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x4}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x1f}, {0x3, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x7}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x7}, {0x4, 0x3}, {0x5}, {0x1, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x4, 0x9}, {0x4, 0x9}, {0x5, 0x5}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x9, 0x6, 0x1, 0x8, 0x9, 0xb003, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x9, 0x36, 0x24, 0xb, 0x48, 0x9, 0x6, 0xd]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x0, 0x0, 0x1, 0x16, 0x1b, 0x6, 0x9, 0x4, 0x16, 0x24, 0x30, 0x30, 0x48, 0x48, 0xc, 0x1, 0x30, 0x6c, 0x3a, 0x4, 0x48]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0xa}, {0x1}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x1}, {0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x2, 0xa}, {0x7, 0xa}, {0x4, 0xa}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x6}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d40, 0x2, 0x9, 0x6, 0x2, 0x3, 0x4, 0x3fe]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x2, 0x3}, {0x0, 0x1e}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {0x5, 0x9}, {0x6, 0x4}, {0x7, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x6, 0x4}, {0x5, 0x3}, {0x6, 0x9}, {0x7, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x8, 0x1f, 0x788, 0x6fc7, 0x0, 0x918f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x8, 0x20, 0x7c1, 0x5, 0x3273, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x6, 0x16, 0x12, 0x5, 0x18, 0x5, 0x36, 0x60, 0x6c, 0x60, 0x6c, 0x30, 0x36, 0xc, 0x6, 0x5, 0x2, 0x1b, 0x6, 0x24, 0xb, 0x30, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x8001, 0xc, 0xfff9, 0xfffe, 0xc3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x6447235dfc94f364, 0x7e, 0x36, 0x24, 0x16, 0x9, 0x4, 0x24, 0x6c, 0x63, 0x24, 0x60, 0x1, 0x3, 0xc, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x2, 0x16, 0x24, 0x48, 0x16, 0x1, 0x48]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x7}, {0x2, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x6}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x4}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x3}, {0x2, 0x8}, {0x6, 0x4}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x5}, {0x7, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x4}, {0x3, 0x9}, {0x1, 0x5}, {0x7, 0x9}, {0x7}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0xa}, {0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x7, 0x6}, {0x5, 0x9}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x1}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x7}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x2, 0x4}, {}, {0x2}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x6}, {0x2}, {0x3}, {0x6, 0x8}, {0x5}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x9}, {0x2, 0x9}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x6, 0x16, 0xc, 0x30, 0x5, 0xb, 0x3, 0x4, 0x6c, 0x9, 0x2, 0x12, 0xb, 0x4, 0x48, 0x0, 0xc, 0x1b, 0x4, 0x5, 0xb, 0x5, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x6}, {0x7, 0x4}, {0x1, 0x9}, {0x6, 0x4}, {0x5, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x28000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9ac6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x6}, {0x3, 0x5}, {0x3, 0x3}, {0x4, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x6}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x7}, {0x6, 0x6}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x36, 0x48, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x60, 0x5, 0x14, 0x40, 0x1b, 0x2, 0x16, 0x36, 0x1, 0x2, 0x24, 0x9, 0x5, 0x16, 0x2, 0x48, 0x1b, 0x12, 0x1b, 0x3, 0x60, 0xb, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x7f, 0x2, 0x8001, 0x48, 0xb4b, 0x9]}}, @NL80211_TXRATE_HT={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbb}]}]}]}, 0x1150}, 0x1, 0x0, 0x0, 0x20008811}, 0x20008040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 19:03:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:24 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb09dd60a0f00000083a000000000000000000000000000000000c1e0200000000000000000001800090780000000000000000"], 0x0) 19:03:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@empty, @multicast2}, &(0x7f0000000100)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b8050000000f01c10f46a78900000066ba2100b067ee4066ba2000b000eeedb9800000c00f3266bac0000f3066b808008ed0660f38806f000f011c268ee0", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4c7]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x200}, 0x8) 19:03:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) timerfd_create(0x0, 0x80000) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendto$phonet(r1, &(0x7f0000001640)="38db69a3b8c1efa20451b729219cb2a4fbacccbd2f4233578aee9f40f874327ac1241cfb775769979653d5c5021ebef9d011b1a94be05abba297356c0d2ec4258badfbf3522ec413abdf6e5f6a81ee7717d297075799402daefdc02ed10007eea37d2ddb5aa7823f", 0x68, 0x40, &(0x7f00000002c0)={0x23, 0x53, 0x7, 0x4}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000950000000000000021d2657fc93f7dabbfb711e3ac417ced7570af44c0efb4871b36820820d8ffd5298c"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000300)={0x0, 0x2, 0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000180)={&(0x7f00000016c0)={0x1150, r3, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_TID_CONFIG={0x438, 0x11d, 0x0, 0x1, [{0x12c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcd}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6721, 0x200, 0x1f, 0xd4, 0xfc00, 0x1, 0x2]}}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x1}, {0x2, 0x7}, {0x6, 0x8}, {0x5, 0x5}, {0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x6}, {0x5, 0x5}, {}, {0x1, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x3, 0x1}, {0x4, 0x3}, {}, {0x2, 0xa}, {0x2, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x2, 0x1}, {0x1}, {0x0, 0x3}, {0x4}, {0x1, 0x5}, {0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0xa}, {}, {0x5, 0x9}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x8}, {0x7}, {0x0, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x1, 0x3}, {0x5}, {0x5}, {0x0, 0x6}, {0x3, 0x9}, {0x6}, {0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0x1}, {0x4}]}]}, @NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x50, 0x2, [{0x5, 0x4}, {0x1, 0x1}, {0x3, 0x5}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x6}, {0x6, 0x1}, {0x4, 0x6}, {0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x3}, {0x2, 0x2}, {0x7, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x4}, {0x1, 0x1}, {0x3, 0x9}, {0x1}, {0x3, 0x1}, {0x1, 0x4}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x2, 0x6}, {0x3, 0x9}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x6, 0x9}, {0x3, 0x6}, {0x6, 0x8}, {0x5, 0x3}, {0x6, 0x4}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x3, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x2, 0x8}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x3}, {0x7, 0x7}, {0x2, 0x1}, {0x6, 0x4}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x6}, {0x5, 0x4}, {0x7, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x5}, {0x3, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x1}, {0x3, 0x4}, {0x0, 0x7}, {0x3, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x5, 0x4, 0x36, 0x5, 0x12, 0x60, 0x72, 0x18, 0x60, 0x18, 0x4, 0x36, 0x18, 0x6c, 0xb, 0x1, 0xc, 0xc, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x60, 0xb, 0x12, 0x30, 0x16, 0x26, 0x36, 0x5, 0xc, 0x9, 0x1, 0x16, 0x60, 0x1b, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x4}]}, {0x218, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x18, 0x6c, 0x9, 0x1b, 0x24, 0x6c, 0x1b, 0x0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xb0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1ff, 0x8, 0x6, 0x800, 0x81, 0x1ff, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x80, 0x8, 0xfffb, 0x3af7, 0x20, 0x5, 0xe2]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x4, 0x5}, {0x7, 0x6}, {0x5, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0x7}, {0x6, 0x8}, {0x2, 0x3}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x7}, {0x2, 0xa}, {0x4, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2d, 0x18, 0x16, 0xb, 0x12, 0x4, 0x18, 0x48, 0x3, 0x60, 0x1, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6c, 0x6c, 0x48, 0x24, 0x1, 0x5, 0x2, 0x4, 0x48, 0x0, 0x3, 0x24, 0x1b, 0xb, 0x1, 0x48, 0x9, 0xc, 0x4, 0x3, 0x9, 0x67, 0xc, 0xc, 0xaf33d64227f75da6, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x8b69, 0x81, 0xff, 0x3, 0x9, 0x7ff, 0x4]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x6, 0x12, 0xc, 0xb, 0x2, 0x30, 0x36, 0x0, 0xb, 0x30, 0x5, 0x12, 0x5, 0x65, 0x36, 0x24, 0x1b, 0x3]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7, 0x3, 0x1ff, 0x983, 0x7, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x2f, 0x6, 0x9, 0x78, 0x16, 0x9]}]}, @NL80211_BAND_5GHZ={0x90, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xef5, 0x2, 0x81, 0x10, 0x71, 0x4, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0xaa3, 0x1, 0x20, 0xda1, 0x1fd, 0x3, 0xff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x48, 0x6, 0x1b, 0x4, 0x2, 0x4, 0x1b, 0x48, 0x4, 0x16, 0x5, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0xb, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x101, 0x5, 0x8, 0x3, 0x9, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x16, 0x1, 0x4, 0x30, 0x9, 0x18, 0x60, 0x16, 0x0, 0x9, 0x48, 0x30, 0x9, 0x30, 0x67, 0x36, 0x2, 0xb1958269a631b506, 0x36, 0x18, 0x9, 0xb, 0x4, 0x0, 0xc, 0x36, 0x0, 0x1, 0x10, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x1}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x3}, {0x1, 0x3}, {}, {0x6, 0x6}, {0x4, 0x2}, {0x3, 0x3}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {}, {0x7, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x7, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x1}, {0x0, 0xa}, {0x6, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {}, {0x2, 0x6}, {0x2, 0x8}, {0x7, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x4, 0x9}, {0x6, 0x3}, {0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x9}, {0x3, 0x8}, {0x1, 0xa}, {0x2, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x3}, {0x1}, {0x4, 0x6}, {0x5, 0x2}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xd0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xb0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x6, 0x5}, {0x6, 0x1}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x4, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x4}, {0x0, 0x2}, {0x7, 0x7}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0xa}, {0x3, 0x4}, {0x2, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x6, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0x5}, {0x4, 0x6}, {0x7, 0x9}, {0x5, 0x1}, {0x4, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x2, 0x4}, {0x4, 0xa}, {0x4, 0x4}, {0x1, 0x9}, {0x4, 0x2}, {0x4, 0x7}, {0x2, 0x7}, {0x2, 0x5}, {0x1}, {0x5}, {0x3, 0x6}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x6}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x9}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6, 0xfeff, 0x3, 0x1f, 0x6, 0x7ff, 0x200]}}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0xa}, {0x0, 0x6}, {0x1, 0x3}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x2}, {0x7, 0x4}, {0x0, 0x6}, {0x1, 0x8}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0xa}, {0x2, 0x6}, {0x6, 0x7}, {0x6, 0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x7, 0x8}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x4}, {0x0, 0x1}, {0x3, 0x6}, {0x5, 0x3}, {0x1}, {0x3, 0x8}, {0x5}, {0x6, 0x3}, {0x0, 0x3}, {0x7, 0xa}, {0x7, 0x5}, {0x1}, {0x1, 0x1}, {0x6}, {0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x0, 0x9}, {0x6, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x4, 0x4}, {0x7}, {0x4, 0x9}, {0x2, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x8}, {0x2, 0x5}, {0x1}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0xa}, {0x1, 0x5}, {0x5, 0xa}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0xa}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x354, 0x11d, 0x0, 0x1, [{0x274, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x2, 0x18, 0xb, 0x24, 0x6, 0x60, 0x1, 0x9, 0x6c, 0x0, 0x16, 0xc, 0x0, 0x1, 0x60, 0x5, 0x1b, 0x60, 0x4, 0x18, 0xb, 0x4, 0x2, 0x12, 0x2, 0x0, 0x16, 0x1b, 0x6, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1ff, 0x9, 0x5, 0x1f, 0x4, 0x3, 0x81]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x30, 0x24, 0x6, 0x30, 0x6c, 0x24, 0x1, 0xc, 0x4e, 0x30, 0x9, 0x2, 0x16, 0x48, 0x12, 0x18, 0x2, 0x25, 0xb, 0x4, 0x4, 0x0, 0x1b, 0x5, 0xc, 0x5, 0x5]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x2, 0x7}, {0x2, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0xa}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0x3}, {0x7, 0x9}, {0x5, 0x5}, {0x0, 0x2}, {0x1, 0x9}, {0x0, 0x8}, {0x7, 0x9}, {0x6, 0x8}, {0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x18, 0x24, 0x5, 0x1b, 0x12, 0x52, 0x6, 0x0, 0x0, 0x1, 0x3, 0x16, 0x36, 0x36, 0x8b5f2da90e3869c6]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x7, 0x4}, {0x1, 0x8}, {0x2, 0x9}, {0x6, 0x5}, {0x4, 0xa}, {0x2, 0xa}, {0x5, 0x4}, {0x7, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {}, {0x1, 0x1}, {0x4, 0x5}, {0x6}, {0x0, 0x4}, {}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x3, 0x2}, {0x6, 0x5}, {0x7, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x5}, {0x7}, {0x3, 0x2}, {0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x2, 0x4}, {0x4, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x1, 0x9}, {0x6}, {0x2, 0x9}, {0x7, 0x2}, {0x6, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x3, 0x5}, {0x5, 0x5}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x8}, {}, {0x1, 0x1}, {0x4, 0x4}, {0x5, 0x5}, {0x4, 0x8}, {0x2}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x2}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x0, 0x9}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0x6}, {0x7, 0x6}, {0x4, 0x5}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x3}, {0x6, 0x7}, {0x2}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x6}, {0x1, 0xa}, {0x7, 0x8}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x8}, {0x1}, {0x0, 0x6}, {0x6, 0x8}, {0x5, 0x7}, {0x0, 0x1}, {0x5, 0x2}, {0x7}, {0x3, 0x4}, {0x5, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x4, 0x6}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x3, 0x7}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x4}, {0x6, 0x4}, {0x7, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x2, 0x1}, {0x6, 0x9}, {0x4, 0x9}, {0x2, 0x6}, {0x7, 0x6}, {0x2, 0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x7}, {0x5, 0xa}, {0x3, 0x4}, {0x2, 0x2}, {0x5, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1, 0x30, 0x12, 0x18, 0x5, 0x1b, 0x1b, 0x0, 0x36, 0x1b, 0x36, 0x48, 0x16, 0x9, 0x12, 0x6, 0x2f, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x5, 0xb, 0x9, 0x16, 0x6, 0x30, 0x5, 0x3]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x2d18f48cb33a6e93, 0x60, 0x9, 0x2]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x3, 0x0, 0x8000, 0x401, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x0, 0x7, 0x6, 0x3, 0x1, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5d62, 0x81, 0x5, 0x1ff, 0x0, 0x0, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x81, 0x6, 0x8, 0x3f, 0xe00, 0xffc1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf65c, 0x1, 0x805e, 0x3, 0x7, 0x6, 0x7, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x1ff, 0x13f, 0x9, 0x7, 0x0, 0x0, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x60, 0x6, 0x6, 0x5, 0x36, 0x3, 0x0, 0x30, 0xb, 0xc, 0x0, 0x30, 0x48, 0x6c]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x60, 0x60, 0x0, 0x18, 0x3, 0x12, 0x18, 0x5, 0x6, 0xc, 0x1, 0x0, 0x36, 0x6, 0x24, 0x60, 0x18, 0x6, 0x24, 0x3a, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x2}, {0x6, 0x4}, {0x0, 0xa}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x7, 0x4}, {0x0, 0x1}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {}, {0x2, 0x2}, {0x0, 0x7}, {0x7, 0x9}, {0x3, 0x5}, {0x1, 0x7}, {0x5, 0x9}, {0x3, 0x9}, {0x4, 0x3}, {0x1, 0xa}, {0x2, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x7}, {0x4, 0x4}, {0x5, 0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x5, 0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x3, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x4}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x3}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0x4}, {0x4, 0x3}, {0x1, 0x4}, {0x7}, {0x4}, {0x0, 0x6}, {0x6, 0x6}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0xa}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x6}, {0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x6c, 0x30, 0x4, 0x1a, 0x4, 0x24, 0x1, 0xb, 0x4, 0x30, 0x16, 0x2, 0x6c, 0x36, 0x1, 0x1, 0x5, 0x16, 0x30, 0x48, 0x9, 0x2, 0x3, 0x12, 0x9]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x5, 0x2, 0x3, 0x18, 0xb]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x30, 0x60, 0x48, 0xc, 0x2f, 0x50, 0x30, 0x4c, 0x6, 0x9, 0xb, 0x9, 0x1, 0x6, 0x12, 0xc, 0x6c, 0xb, 0x30, 0x18, 0x1, 0x6c, 0x16, 0x6, 0x2, 0x1b, 0x5, 0x18, 0x4, 0x48]}]}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c8, 0x11d, 0x0, 0x1, [{0x168, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x118, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x6, 0x6}, {0x1, 0x3}, {0x6, 0x3}, {0x5, 0xa}, {0x7, 0x4}, {0x1, 0xa}, {0x7, 0x5}, {0x4, 0x9}, {}, {0x0, 0x4}, {0x6, 0x2}, {0x5, 0x6}, {0x5, 0x8}, {0x1, 0x3}, {0x1}, {0x6, 0x3}, {0x3, 0x2}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x2}, {0x1, 0xa}, {0x6, 0x2}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x8}, {0x1, 0x7}, {0x3, 0xa}, {0x7, 0x2}, {0x6, 0x7}, {0x2, 0x9}, {0x3, 0x9}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x2, 0x8}, {0x3, 0xa}, {0x4, 0x3}, {0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x2}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x6}, {0x7, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x0, 0x9}]}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x36, 0x1, 0xb, 0x48, 0x24, 0x60, 0x30, 0x4, 0x18, 0x30, 0x18, 0x3, 0x6, 0x6, 0x4a, 0x2f, 0xf, 0x12, 0x9, 0x6, 0x9, 0x16, 0x2, 0xb, 0x60, 0x24, 0x22, 0x21, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1f, 0x4, 0x4, 0x74f5, 0x81, 0x5a7f, 0x1]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x6c, 0x18, 0xb, 0x12, 0x36, 0x4, 0x18, 0x36, 0x1b, 0x0, 0xaf9098d37157306e, 0x49]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x9}, {0x4, 0x3}, {0x4, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {}, {0x7, 0x3}, {0x1, 0x5}, {0x2, 0x3}, {0x5, 0x6}, {0x4, 0xa}, {0x1, 0x1}, {0x6, 0x1}, {0x4, 0x1}, {0x1}, {0x6, 0x9}, {0x2, 0x7}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {}, {0x0, 0x5}, {0x1, 0x2}, {0x5, 0x3}, {0x0, 0xa}, {0x5, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x1}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x3}, {0x4}, {0x2, 0x9}, {0x7, 0x4}, {0x2}, {0x6}, {0x2, 0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0x1}, {0x3, 0x3}, {0x6, 0x1}, {0x2, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x2, 0x9}, {0x0, 0x6}, {0x5}, {0x7, 0x7}, {0x2, 0x4}, {0x4, 0x4}, {0x0, 0x8}, {0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x9}, {0x5, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x1, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x3, 0x6}, {0x5, 0x9}, {0x6, 0x9}, {0x3, 0x4}, {0x2, 0x4}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x24, 0x36, 0x36, 0x1, 0x16, 0x2, 0x30, 0x24, 0x4, 0x16, 0x18, 0x1, 0x48, 0x3f, 0x36, 0x6c, 0x6c]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xab}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x84}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x26}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}]}, {0x138, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x58}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xb8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x3}, {0x3, 0x3}, {0x1, 0x2}, {0x5}, {0x3, 0x5}, {0x0, 0x9}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x6, 0x9}, {0x1, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0xa}, {0x3, 0x9}, {0x4, 0x4}, {0x2, 0x1}, {0x6}, {0x3, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x7}, {0x0, 0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0x7}, {0x1, 0x8}, {0x7}, {0x2, 0x9}, {0x6, 0x7}, {0x5, 0x6}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x8}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x8}, {0x2}, {0x6, 0x3}, {0x6, 0x3}, {0x6, 0xa}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x1}, {0x6, 0x3}, {0x5, 0x4}, {0x3, 0x6}, {0x4, 0x3}, {0x1, 0x1}, {0x2, 0x7}, {0x4, 0x2}, {0x5, 0x3}, {0x2, 0x1}, {0x2, 0x9}, {0x1, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x2, 0x9}, {0x6}, {0x7, 0xa}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x7, 0x2}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x1a}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x6}, {0x7, 0x4}, {0x2}, {0x7, 0x8}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0x6}, {0x4, 0x5}, {0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x9, 0x0, 0xc, 0xb, 0x1d, 0x18, 0x24, 0x30]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x24, 0x0, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6c, 0x3, 0x48, 0x48, 0x11, 0x4]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x3, 0x12, 0x12, 0x16, 0x4, 0x5, 0xc, 0x1b, 0x6c, 0x6, 0x30, 0x0, 0x6, 0x5, 0x9, 0x1, 0x24, 0x48, 0x12, 0x48, 0x4, 0xc, 0x3a]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x9, 0x43, 0x1, 0x5, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x2, 0x7fff, 0x3, 0x3, 0xc437, 0x9, 0x5]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x6dc, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000000000}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}]}, {0x130, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xec, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0xf800, 0x1f, 0xff31, 0x101, 0x3, 0x2]}}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2e, 0x0, 0x1, 0xfeff, 0x5, 0x0, 0xfff9, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x7f, 0x2, 0x100, 0x80, 0x4, 0x101, 0xf2]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0xb, 0x2, 0x12, 0x4, 0x60, 0x5, 0x4, 0x18, 0x9, 0x12, 0x4, 0x6, 0x6c, 0x5, 0x16, 0x12, 0x18, 0x6, 0x24, 0x18, 0x38, 0x1b, 0x6, 0x24, 0x12, 0x5, 0x24, 0xc, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x20, 0x7, 0x7, 0x81, 0x8, 0x3, 0x3]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x6}, {0x0, 0x1}, {0x5, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x6}, {0x6, 0x7}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x1, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x5}, {0x5, 0x7}, {0x2}, {0x3, 0xa}, {0x3, 0xa}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x1, 0x5}, {0x0, 0x5}, {0x5, 0x5}, {0x2, 0x5}, {0x1, 0x2}, {0x2}, {0x7, 0xa}, {0x5, 0x1}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x6, 0x8}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x8}, {0x2, 0x7}, {0x5, 0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0x7}, {0x1}, {0x6}, {0x5, 0x1}, {0x7, 0x9}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x4}, {0x1, 0x7}, {0x3, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc000, 0x3f, 0xf9, 0x800, 0xffff, 0xbb7, 0x2, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}]}, {0x3cc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x48}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x37c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x108, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x9c, 0x64cc, 0x400, 0x2c, 0x101, 0x6]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x6}, {0x6, 0x8}, {0x7, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x5, 0x5}, {0x5, 0x2}, {0x1}, {0x3, 0x6}, {0x5, 0x6}, {0x7, 0x4}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x7, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x5}, {}, {0x2}, {0x4, 0x2}, {0x5}, {0x1, 0x5}, {0x7}, {0x6, 0xa}, {0x7, 0xa}, {0x2, 0x9}, {0x6, 0x8}, {0x6, 0x2}, {0x3, 0x9}, {0x5, 0xa}, {0x4, 0x6}, {0x2, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x9}, {0x5}, {0x0, 0x8}, {}, {0x7, 0x7}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x1}, {0x2, 0x5}, {0x6, 0x6}, {0x6, 0x2}, {0x1, 0x7}, {0x7, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x8}, {0x2, 0x1}, {0x0, 0x7}, {0x0, 0x9}, {0x4, 0x4}, {0x4, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x3, 0x1}, {0x4, 0xa}, {0x1, 0x5}, {0x0, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x4, 0x2}, {0x5, 0x2}, {0x3, 0x7}, {0x0, 0x4}, {0x7, 0x3}, {0x3, 0x6}, {0x1, 0x1}, {0x5, 0x9}, {0x2, 0x6}, {0x4, 0x2}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x4}, {0x0, 0x8}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x7, 0x6}, {0x5, 0x2}, {0x7}, {0x5, 0x1}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x4}, {0x4}, {0x1, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x7}, {0x7, 0x3}, {0x6, 0x5}, {0x3, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1, 0x5}, {0x4}, {0x7}, {0x7, 0x7}, {0x1, 0x2}, {0x4, 0x9}, {0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6c, 0x0, 0x5, 0x1b, 0x9, 0xc, 0x6c, 0x60]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x6, 0x9, 0x1e, 0xc, 0x60, 0xb, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x2, 0x4}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x1}, {0x3, 0x7}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x7}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x2, 0x7}, {0x3, 0xa}, {0x1, 0x3}, {0x1, 0x1f}, {0x3, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x5}, {0x5, 0x2}, {0x3, 0x1}, {0x7, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x7}, {0x6, 0x2}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x2, 0x7}, {0x4, 0x3}, {0x5}, {0x1, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x6, 0x2}, {0x4, 0x9}, {0x4, 0x9}, {0x5, 0x5}]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x9, 0x6, 0x1, 0x8, 0x9, 0xb003, 0x9]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x9, 0x36, 0x24, 0xb, 0x48, 0x9, 0x6, 0xd]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x3, 0x0, 0x0, 0x1, 0x16, 0x1b, 0x6, 0x9, 0x4, 0x16, 0x24, 0x30, 0x30, 0x48, 0x48, 0xc, 0x1, 0x30, 0x6c, 0x3a, 0x4, 0x48]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3f, 0x2, [{0x5, 0xa}, {0x2, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x7, 0x5}, {0x7, 0x2}, {0x5, 0x7}, {0x2, 0x8}, {0x6, 0x5}, {0x1, 0x9}, {0x5, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x8}, {0x4, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x3, 0x3}, {0x7, 0x6}, {0x1, 0xa}, {0x1}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0xa}, {0x6, 0x1}, {0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x1, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x2, 0x8}, {0x2, 0xa}, {0x7, 0xa}, {0x4, 0xa}, {0x2, 0x1}, {0x1}, {0x0, 0x2}, {0x1, 0x5}, {0x2, 0x6}, {0x4, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x5}, {0x6, 0xa}, {0x6, 0x6}]}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2d40, 0x2, 0x9, 0x6, 0x2, 0x3, 0x4, 0x3fe]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x6, 0x5}, {0x2, 0x8}, {0x1, 0x5}, {0x4, 0x5}, {0x6, 0x3}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x3}, {0x2}, {0x4, 0x9}, {0x7, 0xa}, {0x2, 0x3}, {0x0, 0x1e}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x7, 0x8}, {0x1, 0x8}, {0x4, 0x4}, {0x5, 0x9}, {0x6, 0x4}, {0x7, 0x6}, {0x3, 0x3}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x1}, {0x6, 0x4}, {0x5, 0x3}, {0x6, 0x9}, {0x7, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x0, 0x8}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x800, 0x8, 0x1f, 0x788, 0x6fc7, 0x0, 0x918f]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x8, 0x20, 0x7c1, 0x5, 0x3273, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x6, 0x16, 0x12, 0x5, 0x18, 0x5, 0x36, 0x60, 0x6c, 0x60, 0x6c, 0x30, 0x36, 0xc, 0x6, 0x5, 0x2, 0x1b, 0x6, 0x24, 0xb, 0x30, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x8001, 0xc, 0xfff9, 0xfffe, 0xc3, 0x5]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x6447235dfc94f364, 0x7e, 0x36, 0x24, 0x16, 0x9, 0x4, 0x24, 0x6c, 0x63, 0x24, 0x60, 0x1, 0x3, 0xc, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x60, 0x2, 0x16, 0x24, 0x48, 0x16, 0x1, 0x48]}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x6, 0x3}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x3, 0x5}, {0x4, 0x9}, {0x6}, {0x6, 0x5}, {0x6, 0x5}, {0x5, 0x5}, {0x0, 0x9}, {0x6, 0x3}, {0x2, 0x5}, {0x6, 0x1}, {0x7}, {0x2, 0xa}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x1, 0x7}, {0x6}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0xa}, {0x2, 0x5}, {0x4, 0x9}, {0x3, 0x8}, {0x7, 0x3}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x6}, {0x2, 0x4}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x7, 0x4}, {0x5, 0x1}, {0x1, 0x7}, {0x4, 0x5}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x4}, {0x2}, {0x0, 0x9}, {0x3, 0x8}, {0x7}, {0x4, 0x4}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x3}, {0x2, 0x8}, {0x6, 0x4}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x7}, {0x3, 0x7}, {0x0, 0x7}, {0x5, 0x9}, {0x6, 0x9}, {0x1, 0x2}, {0x5}, {0x7, 0x7}, {0x7, 0x2}, {0x4, 0x3}, {0x6, 0x6}, {0x4}, {0x3, 0x9}, {0x1, 0x5}, {0x7, 0x9}, {0x7}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x8}, {0x3, 0x4}, {0x6, 0x3}, {0x7, 0x6}, {0x4, 0xa}, {0x6}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x5}, {0x3, 0x4}, {0x0, 0x3}, {0x3, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x7, 0x6}, {0x5, 0x9}, {0x4, 0x1}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x5}, {0x3, 0x1}, {0x3, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x7}, {0x6, 0x2}, {0x1}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x7}, {0x3, 0x7}, {0x5, 0x8}, {0x7, 0x9}, {0x1, 0x4}, {0x0, 0x8}, {0x3, 0x7}, {0x5, 0x9}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x1}, {0x7}, {0x1, 0x9}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0x3}, {0x7, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x0, 0x3}, {0x2, 0x4}, {}, {0x2}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0xa}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x6}, {0x2}, {0x3}, {0x6, 0x8}, {0x5}, {0x1, 0xa}, {0x3, 0x8}, {0x3, 0x9}, {0x2, 0x9}, {0x6, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0xa}, {0x0, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x18, 0x6, 0x16, 0xc, 0x30, 0x5, 0xb, 0x3, 0x4, 0x6c, 0x9, 0x2, 0x12, 0xb, 0x4, 0x48, 0x0, 0xc, 0x1b, 0x4, 0x5, 0xb, 0x5, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x6}, {0x7, 0x4}, {0x1, 0x9}, {0x6, 0x4}, {0x5, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x87}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x28000000000000}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9ac6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x34}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x88, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x1}, {0x1, 0x6}, {0x5, 0x3}, {0x6, 0x9}, {0x0, 0x5}, {0x2, 0x5}, {0x6, 0x2}, {0x7, 0x6}, {0x4, 0x2}, {0x6, 0x5}, {0x2, 0x2}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x9}, {0x4, 0x3}, {0x7, 0xa}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x9}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x6}, {0x3, 0x5}, {0x3, 0x3}, {0x4, 0xa}, {0x6, 0x4}, {0x6, 0x6}, {0x6, 0x5}, {0x0, 0x1}, {0x6}, {0x7, 0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x7}, {0x6, 0x6}]}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x12, 0x36, 0x48, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6c, 0x60, 0x5, 0x14, 0x40, 0x1b, 0x2, 0x16, 0x36, 0x1, 0x2, 0x24, 0x9, 0x5, 0x16, 0x2, 0x48, 0x1b, 0x12, 0x1b, 0x3, 0x60, 0xb, 0x1b, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1, 0x7f, 0x2, 0x8001, 0x48, 0xb4b, 0x9]}}, @NL80211_TXRATE_HT={0x4}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xbb}]}]}]}, 0x1150}, 0x1, 0x0, 0x0, 0x20008811}, 0x20008040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 168.351428][T10535] kvm: pic: level sensitive irq not supported [ 168.351481][T10535] kvm: pic: non byte read 19:03:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000791108000000000095000000000000006948ed0117f40ca9b7b19e37c15c7e498050d5545fe86113f586a458dc2fc3a7e2200f4b71a3d921bce7d986cb8a9b2d1066f98ce406086347f5b3bf8b78b6c0853a9acf5c6db8664b598355e625f17779fb31edb95b538ec152ad16"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:03:25 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) 19:03:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:25 executing program 5: sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="77882f111a000011b2f1b183180f24c487d3b38cccbee9c230c3b73076129bb076f2e8f9eb909890d514da9ae23b344f6413c242a07ae09b7cd4b9ed15143e90b3e31e4303fb5ac3f0dedc09c78a882fdd59d68e190285b7e475cb1a1bfb5a30d3c77d6708b46aaf288da47b6e15c763c57bb01755e37a136018500587ccaf7dd3229c33e3fb600cc7aab1f9044dbb0f9b72ef83c7fa75d588a7061249137d11a3163e0eb6b38315dff9a6a7583b7bf3e5370dcbea"], 0x34}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r1, 0x0, 0x100005003) [ 168.476854][ T8092] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 168.601021][ T34] audit: type=1804 audit(1604516605.222:11): pid=10558 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir249948365/syzkaller.4JT4Ef/15/cgroup.controllers" dev="sda1" ino=15847 res=1 errno=0 [ 168.748212][ T8092] usb 3-1: Using ep0 maxpacket: 8 [ 168.850560][ T34] audit: type=1804 audit(1604516605.472:12): pid=10562 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir249948365/syzkaller.4JT4Ef/15/cgroup.controllers" dev="sda1" ino=15847 res=1 errno=0 [ 168.877539][ T8092] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 168.896843][ T8092] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 168.905863][ T8092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.178481][ T8092] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 169.937489][ T8092] usb 3-1: USB disconnect, device number 4 [ 169.958581][ T8092] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 19:03:27 executing program 0: r0 = socket$kcm(0x2, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='fib_table_lookup\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000002040)={&(0x7f0000000b40)={0x2, 0x0, @rand_addr=0x88}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000000b00)='Q', 0xcb68}], 0x2b}, 0x5c) 19:03:27 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0x1) r2 = open(&(0x7f0000000140)='./bus\x00', 0x14503e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x212}, 0x16, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000080)=0x80000000, 0x8) io_submit(r3, 0x20000000000000d7, &(0x7f0000000e00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000340)='b', 0x1, 0x0, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x0, 0x4, 0x0, 0x3}]) 19:03:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) 19:03:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88000, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x1, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x0, @empty, 0x80000001}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r2) [ 170.505026][ T34] audit: type=1800 audit(1604516607.123:13): pid=10595 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15888 res=0 errno=0 19:03:27 executing program 5: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, {&(0x7f0000000080)=""/17, 0x11, &(0x7f00000003c0)=""/87, 0x2, 0x4}}, 0x48) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000240)={'syz'}, &(0x7f0000000680)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93cb0725be6027d152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308", 0xc0, 0xfffffffffffffffe) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000041, &(0x7f0000000740)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}, {@access_client='access=client'}, {@posixacl='posixacl'}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@fowner_lt={'fowner<', r4}}, {@smackfsroot={'smackfsroot', 0x3d, '{'}}, {@subj_role={'subj_role'}}, {@permit_directio='permit_directio'}]}}) ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, &(0x7f0000000180)=0x4) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r5, 0x9c, 0x1000}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'tgr160\x00'}}, &(0x7f0000000300)="edf7452fcd220fd95e2743453f836453783c83d857e1d24f34e0cb44e90c1cb3af3a468e62115d793af73ed84ae8a53983db268d12a374b633816e571bbeb4954d7be37f5bee6a6250c71679ff3eb089fa391096cc5b1c8f24c6b33401344a2912c8b43efdf441eb511befaa6e650c117b7736ebcf8e47e9c59e72caea1990c8db4b4ed671d012c88c2352f4cdec264fdb4565bacd7e4c0e9199f7f3", &(0x7f0000001740)=""/4096) 19:03:27 executing program 0: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x2000000, 0x20}, 0xc) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 170.539630][ T34] audit: type=1800 audit(1604516607.123:14): pid=10595 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=15888 res=0 errno=0 19:03:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000340)={0x2, 0x0, 0x9, 0x401, 0x1}, 0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x0, 0x4000000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRESOCT, @ANYRES16, @ANYRESDEC=r2, @ANYRESHEX=r1, @ANYRES64, @ANYRESOCT, @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x1b, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0x2200, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r6, 0xc0286415, &(0x7f0000000440)={&(0x7f0000ffb000/0x2000)=nil, 0x101, 0x5, 0x7}) syz_usb_ep_write(0xffffffffffffffff, 0x2, 0x31, &(0x7f0000000480)="6fa0cddbcf3b56c946658bee61a985a593b33f7655e209ccd6dc1665665a75a98c0e3fb64a66284a2c6132f7555dda4e28") r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf25010000000000000008410000004c00188000000175647000"/98], 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='block_bio_remap\x00', r5}, 0x10) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x248800) 19:03:27 executing program 5: ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0xd, &(0x7f0000000200)=[{&(0x7f0000010000)="eb769045584641542020200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000010000000000008000000008000000880000000f00000005000000341234120001000009030180", 0x70}, {&(0x7f0000010100)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x1e0}, {&(0x7f0000010200)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x3e0}, {&(0x7f0000010300)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x5e0}, {&(0x7f0000010400)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x7e0}, {&(0x7f0000010500)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x9e0}, {&(0x7f0000010600)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xbe0}, {&(0x7f0000010700)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xde0}, {&(0x7f0000010800)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0xfe0}, {&(0x7f0000010900)="00000000000000000000000000000000000000000000000000000000000055aa", 0x20, 0x11a0}, {&(0x7f0000010a00)="00ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac191100ac1911", 0x200, 0x1600}, {&(0x7f0000011800)="f8ffffffffffffffffffffff04000000ffffffffffffffff", 0x18, 0x10000}, {&(0x7f0000013100)="030000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000200000002", 0x39, 0x14000}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="dafbfbe19d2b539a21ecbe4a9e23590efb966fbf4287edee4a5e67a27b985c40f73d46150ccd87782d9799ab558fc25da74a6f7c82e79604348b220b1f1553d8d8c6323c4be099485b3b173f0be06ae5d42f89a4", @ANYRESDEC=0x0, @ANYRES32=r0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1015c2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0}) r3 = eventfd2(0x1, 0x80000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000001c0)={r2, 0x0, r3, 0x8, 0x80000}) mkdirat(r1, &(0x7f0000000340)='./file2\x00', 0x0) semget$private(0x0, 0x3, 0x8) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self\x00', 0x1, 0x0) [ 170.705174][ T34] audit: type=1800 audit(1604516607.323:15): pid=10615 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15892 res=0 errno=0 19:03:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:27 executing program 0: syz_mount_image$ocfs2(&(0x7f0000000000)='ocfs2\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x40, &(0x7f0000000200)=[{&(0x7f0000010000)="02020202020202027468697320697320616e206f6366733220766f6c756d650002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d6500020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d650002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202024f43465356320000dd5926d5ffffffff0000000000100000000000000000000000000000000000000000000031000000000000000000000046c3655f0000000046c3655f00000000000000000000000002000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000017ca0f419d030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a0000001400000000000000000046c3655f00000000000000000300000058bf00000700000011000000000000001200000000000000090000000c00000002000000a5fbc80b0800"/1312, 0x520}, {&(0x7f0000010600)="0000000000000000000000000000000003f25287f69846a2af3ac34b258e02be00000000000000000000000000000000000000000000000000010000aa6b08f03767974c9378dcc300"/96, 0x60, 0x540}, {&(0x7f0000010700)="47524f5550303100c001000eb4040000dd5926d500000000000000000000000017000000000000000800000000000000648100d7610400000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00"/384, 0x180, 0x1000}, {&(0x7f0000010900)="47524f5550303100c0011001f6000000dd5926d500000000000000000000000014000000000000001000000000000000165accc5360100000000000000000000ffffff0300"/96, 0x60, 0x2000}, {&(0x7f0000010a00)="494e4f4445303100dd5926d5ffff0100000000000000000000000000000000003801000000000000ed4103001100000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000011000000000000000000000000000000dd5926d5000000000000000000000000000000000000010000000000000000009a0eb1f766070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038010000000000001100000000000000100001022e0000001100000000000000100002022e2e0000614200000000000018010a026c6f73742b666f756e640000", 0x100, 0x2200}, {&(0x7f0000010b00)="494e4f4445303100dd5926d5ffff0200000000000100000000000000000000000004000000000000ed4104001100000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000012000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000030c280975a04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000002001000000000000", 0xe0, 0x2400}, {&(0x7f0000010c00)="494e4f4445303100dd5926d5ffff0300000000000000000000000000000000000000000000000000a48101001100000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000013000000000000000000000000000000dd5926d500000000000000000000000000000000000000000000000000000000c98dd852c1060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300"/224, 0xe0, 0x2600}, {&(0x7f0000010d00)="494e4f4445303100dd5926d5ffff0400000000002200000000000000000000000020020000000000a48101009104000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000014000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000065ac88a7130700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000001001000022000800130001000000000000000000f6000000100100001000000000000000", 0xe0, 0x2800}, {&(0x7f0000010e00)="494e4f4445303100dd5926d5ffff0500000000000100000000000000000000000010000000000000a48101001100000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000015000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000007bdcdf4ed07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000002842000000000000", 0xe0, 0x2a00}, {&(0x7f0000010f00)="494e4f4445303100dd5926d5ffff0600000000002000000000000000000000000000020000000000a48101001102000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000016000000000000000000000000000000dd5926d5000000000000000000000000000000000000000000000000000000004a2a0e715400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000200000002801000000000000", 0xe0, 0x2c00}, {&(0x7f0000011000)="494e4f4445303100dd5926d5ffff0700000000000010000000000000000000000000000100000000a48101009104000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000017000000000000000000000000000000dd5926d500000000000000000000000000000000000000000000000000000000fb62a429ee0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d09000000100000000e0100130002000000000000000000b4040000000e00000800000000000000ff01000000020000007000"/256, 0x100, 0x2e00}, {&(0x7f0000011100)="494e4f4445303100dd5926d5ffff080000000000010000000000000000000000000e000000000000a48101001110000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000018000000000000000000000000000000dd5926d500000000000000000000000000000000000000000000000000000000ebc9a7057104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000003042000000000000", 0xe0, 0x3000}, {&(0x7f0000011200)="494e4f4445303100dd5926d5ffff090000000000010000000000000000000000000e000000000000a48101001110000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000019000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000056b3145e9e06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000004842000000000000", 0xe0, 0x3200}, {&(0x7f0000011300)="494e4f4445303100dd5926d5ffff0a00000000000000000000000000000000003801000000000000ed4102001100000046c3655f0000000046c3655f0000000046c3655f0000000000000000000000001a000000000000000000000000000000dd5926d500000000000000000000000000000000000001000000000000000000a350100dd7050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038010000000000001a00000000000000100001022e0000001200000000000000280102022e2e00"/256, 0x100, 0x3400}, {&(0x7f0000011400)="494e4f4445303100dd5926d5ffff0b00000000000000000000000000000000003801000000000000ed4102001100000046c3655f0000000046c3655f0000000046c3655f0000000000000000000000001b000000000000000000000000000000dd5926d500000000000000000000000000000000000001000000000000000000c14a77a168010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038010000000000001b00000000000000100001022e0000001200000000000000280102022e2e00"/256, 0x100, 0x3600}, {&(0x7f0000011500)="494e4f4445303100dd5926d5ffff0c00000000000000000000000000000000000000000000000000a48101009104000046c3655f0000000046c3655f0000000046c3655f0000000000000000000000001c000000000000000000000000000000dd5926d5000000000000000000000000000000000000000000000000000000001eba309ddb0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108001300"/224, 0xe0, 0x3800}, {&(0x7f0000011600)="494e4f4445303100dd5926d5ffff0d00000000000000000000000000000000000000000000000000a48101009104000046c3655f0000000046c3655f0000000046c3655f0000000000000000000000001d000000000000000000000000000000dd5926d5000000000000000000000000000000000000000000000000000000006bd49eff280400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108001300"/224, 0xe0, 0x3a00}, {&(0x7f0000011700)="494e4f4445303100dd5926d5ffff0e00000000000001000000000000000000000000100000000000a48101009104000046c3655f0000000046c3655f0000000046c3655f0000000000000000000000001e000000000000000000000000000000dd5926d500000000000000000000000000000000000000000000000000000000ea9660f927050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000008000000010800130001000000000000000000fe070000000800006042000000000000", 0xe0, 0x3c00}, {&(0x7f0000011800)="494e4f4445303100dd5926d5ffff0f00000000000000000000000000000000000000000000000000a48101009104000046c3655f0000000046c3655f0000000046c3655f0000000000000000000000001f000000000000000000000000000000dd5926d5000000000000000000000000000000000000000000000000000000008108c23add0600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108001300"/224, 0xe0, 0x3e00}, {&(0x7f0000011900)="494e4f4445303100dd5926d5ffff1000000000000004000000000000000000000000400000000000a48101001101000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000020000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000096dfe35c1400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000000400002802000000000000", 0xe0, 0x4000}, {&(0x7f0000011a00)="494e4f4445303100dd5926d5ffff1100000000000004000000000000000000000000400000000000a48101001101000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000021000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000008d2e0803e04000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000000400002822000000000000", 0xe0, 0x4200}, {&(0x7f0000011b00)="494e4f4445303100dd5926d5ffff1200000000000000000000000000000000000000000000000000a4810100d100000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000022000000000000000000000000000000dd5926d500000000000000000000000000000000000000000000000000000000e50cdd6f44040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300100"/224, 0xe0, 0x4400}, {&(0x7f0000011c00)="494e4f4445303100dd5926d5ffff1300000000000000000000000000000000000000000000000000a4810100d100000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000023000000000000000000000000000000dd5926d5000000000000000000000000000000000000000000000000000000009062730db7060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300100"/224, 0xe0, 0x4600}, {&(0x7f0000011d00)="494e4f4445303100dd5926d5ffff1400000000000000000000000000000000000000000000000000a48101001108000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000024000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000008b081cb1903000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002700"/224, 0xe0, 0x4800}, {&(0x7f0000011e00)="494e4f4445303100dd5926d5ffff1500000000000000000000000000000000000000000000000000a48101001108000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000025000000000000000000000000000000dd5926d5000000000000000000000000000000000000000000000000000000007dde2fa9ea01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002700"/224, 0xe0, 0x4a00}, {&(0x7f0000011f00)="494e4f4445303100dd5926d5ffff1600000000000100000000000000000000000004000000000000a48101001110000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000026000000000000000000000000000000dd5926d5000000000000000000000000000000000000000000000000000000009799483e2c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000003842000000000000", 0xe0, 0x4c00}, {&(0x7f0000012000)="494e4f4445303100dd5926d5ffff1700000000000100000000000000000000000004000000000000a48101001110000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000027000000000000000000000000000000dd5926d5000000000000000000000000000000000000000000000000000000002ae3fb65c302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000004042000000000000", 0xe0, 0x4e00}, {&(0x7f0000012100)="494e4f4445303100dd5926d5ffff1800000000000100000000000000000000000004000000000000a48101001110000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000028000000000000000000000000000000dd5926d50000000000000000000000000000000000000000000000000000000063595bc61704000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000005042000000000000", 0xe0, 0x5000}, {&(0x7f0000012200)="494e4f4445303100dd5926d5ffff1900000000000100000000000000000000000004000000000000a48101001110000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000029000000000000000000000000000000dd5926d500000000000000000000000000000000000000000000000000000000025048322b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000005842000000000000", 0xe0, 0x5200}, {&(0x7f0000012300)="1200000000000000100001022e0000001200000000000000100002022e2e0000130000000000000018000a016261645f626c6f636b730000140000000000000020001201676c6f62616c5f696e6f64655f616c6c6f630000150000000000000014000801736c6f745f6d617016000000000000001800090168656172746265617400000017000000000000001c000d01676c6f62616c5f6269746d6170000000180000000000000018000b016171756f74612e7573657200190000000000000018000c016171756f74612e67726f75701a000000000000001c000f026f727068616e5f6469723a30303030001b000000000000001c000f026f727068616e5f6469723a30303031001c0000000000000020001101657874656e745f616c6c6f633a303030300000001d0000000000000020001101657874656e745f616c6c6f633a303030310000001e000000000000001c001001696e6f64655f616c6c6f633a303030301f000000000000001c001001696e6f64655f616c6c6f633a30303031200000000000000018000c016a6f75726e616c3a30303030210000000000000028000c016a6f75726e616c3a30303031000000000000000000000000000000000000000000000000400000000000000044495254524c310000000000000000000000000000000000200100000000000012000000000000000f57a726730a000022000000000000001c0010016c6f63616c5f616c6c6f633a3030303023000000000000001c0010016c6f63616c5f616c6c6f633a303030312400000000000000200011017472756e636174655f6c6f673a303030300000002500000000000000200011017472756e636174655f6c6f673a3030303100000026000000000000001c0010016171756f74612e757365723a3030303027000000000000001c0010016171756f74612e757365723a303030312800000000000000200011016171756f74612e67726f75703a303030300000002900000000000000f00011016171756f74612e67726f75703a3030303100"/768, 0x300, 0x24000}, {&(0x7f0000012600)="0000000000000000400000000000000044495254524c310000000000000000000000000000000000210100000000000012000000000000003a14f337bd020000", 0x40, 0x243c0}, {&(0x7f0000012700)="c03b3998000000040000000000000200000020000000000200000001000000010000000000000000000000000000000003f25287f69846a2af3ac34b258e02be0000000100"/96, 0x60, 0x45000}, {&(0x7f0000012800)="c03b3998000000040000000000000200000020000000000200000001000000010000000000000000000000000000000003f25287f69846a2af3ac34b258e02be0000000100"/96, 0x60, 0x445000}, {&(0x7f0000012900)="7024f50c00000000803a0900803a0900102700000700000000000000060000003801000000000000ed4103001100000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000011000000000000000000000000000000dd5926d500000000000000000000000000000000000001000000000000000000c208792f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000038010000000000001100000000000000100001022e0000001100000000000000280102022e2e00"/256, 0x100, 0x846000}, {&(0x7f0000012a00)="0000000000000000000000000000000000000000000000002a9c2816560400000200"/64, 0x40, 0x8461e0}, {&(0x7f0000012b00)="000000000000000000000000000000000000000000000000d73cb06d050000000300"/64, 0x40, 0x8463e0}, {&(0x7f0000012c00)="000000000000000000000000000000000000000000000000ffe7c27d060000000400"/64, 0x40, 0x8465e0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000027e69e0c060000000500"/64, 0x40, 0x8467e0}, {&(0x7f0000012e00)="0000000000000000000000000000000000000000000000000f3dec1c050000000600"/64, 0x40, 0x8469e0}, {&(0x7f0000012f00)="00000000000000000000000000000000000000000000000077507b2c03000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x846be0}, {&(0x7f0000013000)="000000000000000000000000000000000000000000000000d35683df02010000", 0x20, 0x846de0}, {&(0x7f0000013100)="c024f50c0000000001000000010000000200"/32, 0x20, 0x847000}, {&(0x7f0000013200)="00000000000000000000000000000000000000000000000087544ce5bc000000", 0x20, 0x8471e0}, {&(0x7f0000013300)="000000000000000000000000000000000000000000000000878a554d00000000", 0x20, 0x8473e0}, {&(0x7f0000013400)="c024f50c0000000001000000010000000200"/32, 0x20, 0x848000}, {&(0x7f0000013500)="00000000000000000000000000000000000000000000000087544ce5bc000000", 0x20, 0x8481e0}, {&(0x7f0000013600)="000000000000000000000000000000000000000000000000878a554d00000000", 0x20, 0x8483e0}, {&(0x7f0000013700)="7124f50c00000000803a0900803a090010270000070000000000000006000000000e000000000000a48101001110000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000018000000000000000000000000000000dd5926d500000000000000000000000000000000000000000000000000000000ebc9a7057104000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000130001000000000000000000000000000000010000003042000000000000", 0xe0, 0x849000}, {&(0x7f0000013800)="0000000000000000000000000000000000000000000000002c4354d3aa0400000200"/64, 0x40, 0x8491e0}, {&(0x7f0000013900)="000000000000000000000000000000000000000000000000d73cb06d050000000300"/64, 0x40, 0x8493e0}, {&(0x7f0000013a00)="000000000000000000000000000000000000000000000000ffe7c27d060000000400"/64, 0x40, 0x8495e0}, {&(0x7f0000013b00)="00000000000000000000000000000000000000000000000027e69e0c060000000500"/64, 0x40, 0x8497e0}, {&(0x7f0000013c00)="0000000000000000000000000000000000000000000000000f3dec1c050000000600"/64, 0x40, 0x8499e0}, {&(0x7f0000013d00)="00000000000000000000000000000000000000000000000077507b2c03000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x849be0}, {&(0x7f0000013e00)="000000000000000000000000000000000000000000000000d35683df02010000", 0x20, 0x849de0}, {&(0x7f0000013f00)="c124f50c0000000001000000010000000200"/32, 0x20, 0x84a000}, {&(0x7f0000014000)="000000000000000000000000000000000000000000000000af8f3ef5bf000000", 0x20, 0x84a1e0}, {&(0x7f0000014100)="000000000000000000000000000000000000000000000000878a554d00000000", 0x20, 0x84a3e0}, {&(0x7f0000014200)="c124f50c0000000001000000010000000200"/32, 0x20, 0x84b000}, {&(0x7f0000014300)="000000000000000000000000000000000000000000000000af8f3ef5bf000000", 0x20, 0x84b1e0}, {&(0x7f0000014400)="000000000000000000000000000000000000000000000000878a554d00000000", 0x20, 0x84b3e0}, {&(0x7f0000014500)="47524f555030310000010008fe070000dd5926d50000000000000000000000001e0000000000000060420000000000009f21f10b0400000000000000000000000300"/96, 0x60, 0x84c000}, {&(0x7f0000014600)="494e4f4445303100dd5926d500000100000000000000000000000000000000003801000000000000ed4102000100000046c3655f0000000046c3655f0000000046c3655f00000000000000000000000061420000000000000000000000000000dd5926d5000000000000000000000000000000000000010000000000000000003ef4d59dd6040000000000000000000000000000000000006042000000000000000000000000000000000000000000000000000000000000000000000000000038010000000000006142000000000000100001022e0000001100000000000000280102022e2e00"/256, 0x100, 0x84c200}, {&(0x7f0000014700)="47524f5550303100c0010002ff010100dd5926d500000000000000000000000017000000000000000070000000000000fd6eb0215203000000000000000000000100"/96, 0x60, 0xe00000}], 0x0, &(0x7f0000014800)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) [ 170.775604][T10627] exfat: Unknown parameter '+S!J#YoBJ^g{\@' [ 170.796847][ T9763] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 170.852372][T10627] exfat: Unknown parameter '+S!J#YoBJ^g{\@' [ 170.862918][T10633] (syz-executor.0,10633,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 170.875286][T10633] (syz-executor.0,10633,0):ocfs2_fill_super:1190 ERROR: status = -22 [ 170.972115][T10633] (syz-executor.0,10633,0):ocfs2_parse_options:1481 ERROR: Invalid heartbeat mount options [ 170.984158][T10633] (syz-executor.0,10633,0):ocfs2_fill_super:1190 ERROR: status = -22 [ 171.056828][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 171.187040][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.206767][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.215865][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.517163][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:03:30 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 19:03:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) 19:03:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$ax25_int(r1, 0x101, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_any='access=any'}], [], 0x6b}}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f00000000c0), 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x8080, 0x0) getsockname$unix(r0, &(0x7f0000000340)=@abs, &(0x7f00000001c0)=0x6e) getsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) 19:03:30 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)='.\x00\x00\x00@\x00\x00\x00#', 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000013800)) truncate(&(0x7f0000000040)='./file0\x00', 0x80000000) 19:03:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:30 executing program 1: r0 = syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x800000000000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010a00)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000005002000000000250252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c1001000000000000000001120000000022001601", 0xa0, 0x8800}, {&(0x7f0000000240)="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", 0x14d, 0x8affd}], 0x0, &(0x7f000001fa00)) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 173.480854][ T4914] usb 3-1: USB disconnect, device number 5 [ 173.514100][ T4914] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:30 executing program 5: r0 = syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000340)=[{&(0x7f0000000140)="0400050900f0000066617400040409000200027400f801", 0x17}], 0x0, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) fcntl$dupfd(r2, 0x406, r0) fcntl$setstatus(r1, 0x4, 0x44c02) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) write$evdev(r1, &(0x7f0000000280)=[{{0x0, 0x2710}, 0x15}], 0x18) io_submit(r3, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 173.547573][T10678] isofs_fill_super: root inode is not a directory. Corrupted media? 19:03:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) fsmount(r3, 0x0, 0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20000008000000008400000002000000000000020000000000000000", @ANYRES32=0x0], 0x20}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x10, &(0x7f00000001c0), 0x8) [ 173.602638][T10682] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 173.615844][T10678] isofs_fill_super: root inode is not a directory. Corrupted media? [ 173.625648][T10682] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 19:03:30 executing program 1: pipe2(&(0x7f0000000000), 0x84000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x765) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 173.689549][T10700] attempt to access beyond end of device [ 173.689549][T10700] loop5: rw=2049, want=64, limit=60 [ 173.700536][T10700] attempt to access beyond end of device [ 173.700536][T10700] loop5: rw=0, want=64, limit=60 [ 173.741118][T10709] attempt to access beyond end of device [ 173.741118][T10709] loop5: rw=2049, want=72, limit=60 19:03:30 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in=@multicast2, @in=@broadcast}, {@in6=@mcast2, 0x0, 0x3c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x104}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1401000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x194, 0x2, 0x2, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={[], [], @multicast1}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x13}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x9a}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x101}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x10000}, @CTA_EXPECT_FLAGS={0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0x20004811}, 0x40000) prctl$PR_GET_SECUREBITS(0x1b) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 19:03:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 173.820827][T10723] sctp: [Deprecated]: syz-executor.0 (pid 10723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.820827][T10723] Use struct sctp_sack_info instead [ 173.926707][ T4914] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 174.166724][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 174.286962][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.297934][ T4914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 174.307828][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.563745][T10750] sctp: [Deprecated]: syz-executor.0 (pid 10750) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.563745][T10750] Use struct sctp_sack_info instead [ 174.580762][ T4914] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:03:33 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 19:03:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) syz_open_pts(r0, 0x4e0000) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) 19:03:33 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) open$dir(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400), 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x141142, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x3, 0x5, 0x1, 0x0, 0x80, 0x4ae, 0x8, 0x9bbb, 0x6, 0x2, 0x80, 0x8, 0xe77, 0x0, 0x2, 0x0, {0x9, 0x3}, 0xe0, 0x5}}) write$UHID_INPUT(r1, &(0x7f0000001440), 0xfffffc41) fadvise64(r1, 0x0, 0xe7000000, 0x4) 19:03:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:33 executing program 0: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file1\x00', 0x0, 0x7, &(0x7f0000000540)=[{&(0x7f00000000c0)="ca53c87d3e734a9bea997399f12b1214414df32c438656dfabf2fe83df9feac6ff578172eb9457496ff0f7d0856fe58224d0e665c61b52d8e45a74c22790e62cb075f190fdc0464849da4c78c9730eefa0a42ff424fc6dc71e5529a3121d8aa3032a94d50d29cf30f5ea73430529569368d5b456af8e05b11ff8211d4ca0ebc103653cfa00f9ed433aac36265a8786c55a979dcd8c8a01deea", 0x99, 0x6}, {&(0x7f0000000180)="74d217f7c7a602587fbc28d05bf4096410be5801d0921224891fac3e119780e3fa78022d507efcd17516f4176796db75742be834449ba34a3b68cc66770bd6b71ea6", 0x42, 0x80}, {&(0x7f0000000200)="0ba6622865e1f95f13d5ce201d1b28daf64474994ef0ad60018cfde2", 0x1c, 0x7}, {&(0x7f0000000240)="cd92cea3c90f63cfd48d1df3e2e17eb6", 0x10, 0x1}, {&(0x7f0000000600)="eb5a0ea4716dfaa524ef4e406b46c9ea87754c17de18777925e37571629e34c148a303c4b51f94a678988ec0c193bac9dc063fdcbe4503d40ffa1a928c2596ed72474b11b6adfd5d484babdefe5740361a73dcd142a31760bc861eb73c6dbe962c17681c5e8cd96b8b7783ab47b8786edd275ec125678a2ba0dcaa89bae6e32e1d0b60c64819661bde2c12784816cf42afe0bdbb8b31951e0893c15e43bbc95fcc28c28feed6b415ab59037ab9f79901dc928721968386c778d8840a4653c77b1fa0b7f8d35df3f3242566b5fbac25551c890007b30355f89b5f64720b7acc611c070a2c97937a83528a397debc9b2e224c7", 0xf2, 0x2ffffffffffffffc}, {&(0x7f0000000380)="b66689b2f65fa7b5cb3bac747f1f0633e863926deafac558397107a1cbacfae747a05020e8a2bc31ed7bf417192fdedb27bf76036f49ea48ae4a1e9524d779d6ab914f33681263e1883ed12e1478f0d85058362ee7243c6785b8691c4351f33e10398c9c470f4b035f7143d48e63e2cdc8122986463faaee9ea133d9e805fcc39021b36a52b728f89dd7b639b52670380e9d31fd3a907c4fb8ae0bdf9be529b6efec2c83a582303c0d1e23f911e0d5a72fce37bf749bfb9612996a57647e47bab10c2255006d5c69b6b3f792ee1fcd34", 0xd0, 0x80000001}, {&(0x7f0000000480)="14df517dfd8a67b7793a83a7669939ccf274cc577508bd2f835e4902006f22ca0d4a5f73409129d8d6a511033584b2ad8d8f61e78dd00cc4cecd1f8e6cd3d39d00804817ca5a6f004edb9e44a1186c11b92dcde9357644045247b2494d83b6900151c238364a06b61e04ea9dbd3998a8afd61b77f7463080bb256001fbe106ab97a2a102a195e4bb32d7ed4acc11cbb065a3547752f664ab0adeb08b954fb649295cca4adb7ac0e6", 0xa8, 0xffffffffffff0001}], 0x40, &(0x7f0000000080)={[{@locktable={'locktable', 0x3d, '-\xad-%'}}]}) [ 176.556766][ T4914] usb 3-1: USB disconnect, device number 6 [ 176.577039][ T4914] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:33 executing program 5: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001700), 0x0, &(0x7f0000001800)={[{@part={'part'}}, {@dir_umask={'dir_umask'}}, {@file_umask={'file_umask'}}, {@part={'part'}}, {@creator={'creator', 0x3d, "a39eef3a"}}, {@umask={'umask'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@dir_umask={'dir_umask'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x81, 0x2010, 0x2, 0x7, 0x1, 0x2, 0x4}}) [ 176.634086][T10776] gfs2: not a GFS2 filesystem [ 176.690129][T10776] gfs2: not a GFS2 filesystem 19:03:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000280)={0x0, 0x2d2, 0x94}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000180)=""/229, 0xe5}], 0x1, 0x2628, 0x0) [ 176.758892][T10793] hfs: can't find a HFS filesystem on dev loop5 [ 176.823772][T10793] hfs: can't find a HFS filesystem on dev loop5 19:03:33 executing program 5: r0 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x38, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="35bfa96018cbdf6fb73cd0d9a0faac6cb9fc0ef6f16a3edfbff6725bb91d9f392d767afd1d9431d4ac0368bdaec23babb0ea71e97ef1a47deb16ebbf115e811001292c7581dc29f4613f2d1e1c0124bd0499b63b0d9d4eccb7e15c78eb9ff6b8babcb7b4667b2134d5e9300bb41d30d3a729a8a9716dcc1d70ee9ae0f7afc323", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e657665000010000280060005004e2300000400060008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000000)={0x13}) 19:03:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 177.038301][ T4914] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 177.256759][ T34] audit: type=1800 audit(1604516613.883:16): pid=10792 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="sda1" ino=15931 res=0 errno=0 [ 177.276996][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 177.396803][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.407923][ T4914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 177.418184][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.697068][ T4914] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:03:36 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:36 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x40040000000ad}, 0x0) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f00000002c0)=' ', 0x1) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x10010000004e20}, 0x1c) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000300)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000507400000000080010000000000", @ANYRES32=0x0, @ANYBLOB="40900400449a010030001280080001007369740024000280060011004e2200000800030000000004060012004e240000050004000300000008000a00", @ANYRES32=0x0, @ANYBLOB="c84bc2"], 0x58}, 0x1, 0x0, 0x0, 0x24000051}, 0x0) 19:03:36 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) syz_mount_image$befs(&(0x7f00000002c0)='befs\x00', &(0x7f00000003c0)='./file0\x00', 0x9, 0x4, &(0x7f0000000640)=[{&(0x7f0000000400)="e4ed05d305a588407fd2f7152ea8d4cd1d1c36e7a358669d534f3ee6a2ce96228a24ddfb771a04cfb30794dc0b7b661139d564", 0x33, 0x3f}, {&(0x7f0000000480)="f218878356", 0x5, 0xb0c}, {&(0x7f00000004c0)="93101efc8406a57498681761ce412f1c9904d8db26e37ce0557dd0aa13ad747a25fa57f18aff7ceb08b4ab0a21f89ed6602ad8da73956b314f71c655cead8941af7a036ac20efbe94f0d8e30d63173fddb705aad18a4d3e56ed8067c407bb6bf1e17308816c3deff1752bf06a851ab3bac867371a8cc937720a6784aa689b834e75183887c8607d229b239e1d7692a121c984eb02399292f9bde4f394b36cc131d0d43f6525ef609ed75d84dff8823e81c00d62431a3b0efb57a3d9efedb809ec3cb5b9bdb779d5e33c5ac307df077c7ea0b061492028a968d3ef0", 0xdb, 0x7fff}, {&(0x7f00000005c0)="b3555983275465c81be6f7f3840ef73b93d2330defdf6ca96df975a7a9dcd9d421961e5e2fd2f4c2b255ca172f72e71a03ad031cb615b935394323f56588b4a3c8933887acf26d41f46d2e9e4535c35d3d49f6a56181913aee9d72d0ea46abdbcf9d9b6f4a59cb8c975a206068df8dc93c30170e06ae", 0x76}], 0x11a040e, &(0x7f00000006c0)={[{'configfs\x00'}, {}, {'\x92'}, {'configfs\x00'}, {'y\x00'}, {'y\x00'}], [{@euid_gt={'euid>', r1}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'trusted.overlay.origin\x00'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@euid_eq={'euid'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x36, 0x64, 0x64, 0x62, 0x36, 0x0, 0x36], 0x2d, [0x37, 0x63, 0x63, 0x34], 0x2d, [0x36, 0x61, 0x38, 0x64], 0x2d, [0x65, 0x63, 0x35, 0x33], 0x2d, [0x38, 0x63, 0x65, 0x66, 0x62, 0x61, 0x62, 0x37]}}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x66, 0x64, 0x63, 0x31, 0x66, 0x33, 0x31], 0x2d, [0x61, 0x35, 0x61, 0x30], 0x2d, [0x61, 0x35, 0x63, 0x34], 0x2d, [0x30, 0x30, 0x35], 0x2d, [0x32, 0x38, 0x66, 0x37, 0x35, 0x62, 0x64, 0x65]}}}, {@smackfsroot={'smackfsroot', 0x3d, '\x9d$$\\'}}, {@dont_measure='dont_measure'}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x10) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f0000000380)='./file1\x00', 0x0) r2 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000001600)='./bus/file0\x00', &(0x7f0000001640)='trusted.overlay.origin\x00', &(0x7f0000001680)='y\x00', 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c11f1726b6469723d2e2f66696c65312c6c6f7765726469723d2e2f66696c6530"]) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000340)=0x6) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 19:03:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 179.608174][ T4914] usb 3-1: USB disconnect, device number 7 [ 179.626909][ T4914] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:36 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x51f) write$binfmt_script(r0, &(0x7f0000002980)=ANY=[@ANYBLOB="2321202e2f66696c653020676342c62bbfcc5f8120d5b9934c3987844bb9210e5820637a6714ec2aeda675c414"], 0x1e1) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000001b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5\xfa\xff\xff\xff\xff\xff\xff\xff\xe2\xe3\x02)s\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x90?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00'/453, &(0x7f0000000c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfTf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xff\xff\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d(B\x99\x94\xca\xc5\xca\x12\xef\xc1\x9a7\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xdb\xca\v\xf0\xb0e-\xab\x95\xd1\x84\x88\xa0\xa2d\xfbc+r\xfa\x8du7\b\x06qk\xd9K\x85\x1eD*\xb5\x83\x13\xaf\xa4\xeds\r\x1b\xa8\xae\x8a0}\x81aT[U\x8a\xce\xa2K\x05\x8c\x82x\x11\x91V\xb9\x1c\x01\x1d\xfe\x1f+\x95U\rZ2'], &(0x7f0000001ac0)=[&(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000840)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000001000)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\x95u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf4\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4\xb5\x05\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x95\x03\xf30\n^\xb1~\x9d=d\x96\xfe\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbcT\xf9_\xd4\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\x06\x06\xe8\x80\xef\xdf\x87\xd8S\xcca\xb9\xb4:\x19t\xa2`Li\xe4\xe3\xa6P\xbc\xc6 \xfaoD\xf7TlC:p\xf3\xc1\td\vO\xcc\xcf\x89\xcb\xd7\xca\xfa\x12B\xa5\x87\x7f\xb4Kh^\xcdO\xb8\xd86j\x93A\x95\x00\x8d\x1dX\xf8\x19\xd7\x8f$\xad3l\xdc\f\xed\xb5NP\x1f\f\xfc\x83C\xa8\xbbA\x87\xcfiT]w\x8b\x06>', &(0x7f0000001240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000000640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xe6,\xf9\xec\x84R\xc2\x02\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=f\xf3\xca\'\xa8\x1b\xae\xff\xbe\xf9\xe7\xed34\x1c\xd1\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000a40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) [ 179.717436][T10855] overlayfs: overlapping lowerdir path 19:03:36 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004100)={{0x14}, [@NFT_MSG_NEWSETELEM={0x3ddc, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x370, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x358, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "f16dbfa6cdfacf9b7be7ff102234c905954d5c5e8392015c14d5065145d92c227b2803b3dc43cc5fc65dc6e725d8bc2f920ce2d9924d8abb92e51226241a859d0cf0111f86997c3340d8e244d0c835ee91b5d729ab7319075a33399ff110cdca8b97667a45aad301dc1e09c2b825be3f5073b1c9369c95a2186c680601bfefba88c22b1e54a56eb2594cc99406cede6dfbfd6f14430f0d47b81e8c4df4f0d488e3e89da3b7c1fb27f9f0a3e03fb503e8b4181007e362c47d5e244e343198b128e86251b8a555f46179b8c56cf6fd903428e0"}, @NFTA_DATA_VALUE={0xa0, 0x1, "71a95109c2daecc7bcee571b691685fc153f639aee4ffead0162f14d9c54d6280d243d35c5ef158ea0dfc229ef0204cb6a9ba1be340a08eb6d93fc5ecbf7149665ed178ec0d42ef1a860a9d615f999376791fe1ac03945ed55e91872f5bae4cdd8afdfa7970bb99e19ffb88b1b489e0753c68243a6c010e98503b4442521d298efbc8dd2011fe7c65d61e6d0cf62115afbbe1611c46ed79f6d8f53e4"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x800}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x67fc}, @NFTA_SET_ELEM_USERDATA={0x3d, 0x6, 0x1, 0x0, "757ec8c6ad4f1f1b5b412e9877963268f07a95b319ca7986efba21ef23f7ac81558e8205957d3f67c135dfce9a9d8df8d689c9ba23d4f1e53f"}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "b4fd66123ae7288e71c280eaf7e9685991620581d57689c8fb2bae8db3871bbe4d063d5d682310ec2ff19c2f0fc15f5fd55a5792e04d740653e900841cdf3730"}]}, @NFTA_SET_ELEM_USERDATA={0x84, 0x6, 0x1, 0x0, "f7930bb3842156cca8a0dcddc9774a9fea2e0481b1ebbba76ca718859ad8c9ab7bfe78e43986cdcee1128e3de1a700e22441f81213197cffa377b5d0b04b322f6892015644a9823ef4bd4e7fefccaf06ca257d14bac06963d0bf262f01105beaf09153c870422f2888dbdd0ef30bd6b52a72b2e2f07a5ef426994c34f8218677"}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1ffc, 0x3, 0x0, 0x1, [{0x16cc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf5, 0x1, "4d2b944f8ae623b0c05e037c2f5c4f2f7ce866fdac699eaabd9f61c47eb9d0b39176502bd27f482d364d0b0450a233da51471fc842c199d7b6b72f82a69f0512e8e66e98dc86045501ba10561715102bbceb85d1b530854411862ed33a248bb2eaf3d9cc55d12d69bc58e934c619a92800dbd6862322a4091fb27a166cf0f7b3e1d7d53d097e036ee251726e803c3853009553a3757a528b233c977d8d8335bbcdddbd91d562fc0726b82e1cd0942fdee73de0e238ea0d55b48ced9aa3e26ec98bb29a7b95a6932eed12b63cc746884b1fc32e1f6de1e192eac31304650b0b3d7a8b133e2c7676ee97cc6314dde7d62759"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "b4cd392f70cd77df40f5520c7cbdaca79d6e80dd646e7b181cae4ddaec168fe9e39fc7da96fb23a553de621835061a880ff7ce65d21965720e98195b0e8ad1e069d664b8b5d937c13a355b7e7a36ea6c26816a56f07bcfc10e064dfd0606bacc728aee77cf430785b6a9701e1a2f69edb3e11d78b13a"}, @NFTA_DATA_VALUE={0x46, 0x1, "0a158dc090f7c84b93a8c320c3aeb01afc9b929534ee7cc82367dc9fcc177b391e49ff9d5ee86c30d98aa1636db05d629e2f12d98fc20a30308851354b7ca2fc369c"}, @NFTA_DATA_VALUE={0xd2, 0x1, "7929efca4c3c6a6c1ef320a4103b1a9bd5b9ac1c3a37ea1aa778a14aee7811357d73f296bc2418c84db35731446582347a1ef3340b64bc0cde2a0578509f50068c23ad0865bfa51bd967913279d4b42d4f8fdac6366f6870784e4ee89f846d6eceb2991068a695708bac75936512fc170a12e38aa3004701c2f3a67c4c8eb09e18648fb69de118628845d7dde4b97897920720568a7df7f55530ee19eecc206f68d9613d5aeb8c515208c0cb22899fffa38b2f8c566cd9f5632cb597c0ee05a82a9c2d164c1e4a66abc66e77f557"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_DATA={0xe0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY={0x1278, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "f07da7d74d590fc64bab55bdcf03644b8b0d89748e16f6cfef4ac64db729d29c8462cd0cfbfa56f4e88b5fd69e770045df56af1f8b7494f77a297e2e88ff64e9b4921ce5437ff8e7d670812a7f5e9f23135568b4fcbb7c42f0"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xfa, 0x1, "44cde028988b8dfd1a27b3f41dc7954c5627e681fc80993f37593dd90b6085c599775a4d92eb155f9e5cfcdc16d4b1bb291a13fb31199769d03beb75ca14ccce5de459602b5cbd4fb53a966fdbbbb7af243ad6763b5b0e62272fabda07c73e3eff6c274321271e7f80d3d425b3b77934382ddc0ba8c5118f8bb77a727d265acccd805d3d6297f943f76cdf88649300356531741e6942bc087185381ef05d67b8b4f05cffde680a7e881cd33bc66a4b67ce4c6ed5ae3a2836ad194672debfae98baeb0cf38a4e911c28d2dabb3ad92115311255cecdd8a04a5291859eee3bbc95b18fc11ad89a23b0556d8920172c0e0451280fffe9dd"}, @NFTA_DATA_VALUE={0xcd, 0x1, "100b65fd9bd76f7d388aa57d985ed3f1cf3cbff2561b590669658a2bda8b4372669736dd1700fc1be464485dc90e176dd3aea8b0eff5dfa5ff551bb7fd5c8b5c8bafd3ed9b6d99ca866593475f5ebdb48901185c701c6ab035ffb0ddaa0f376a03dbf9f48baccb67c00f75c849eb35572de3ccfd4babb2a84e7130100c2bd3fc4b4675ed26bd4ca414a500144cb8a5329bdbae4485d254dbf93ba4344bc464acbbb16a6f22b3e7a3c24256ee3ae72867027aaae033460afaffe89967aed1afe876f90d0e589c62e674"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x92c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2d4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xea, 0x1, "15d338a8c66277d6f5dc17a500cc2e735f11e2833acbf5520df9e10b76f601975daf1ebe35acac5ec8b43ef62ea1221a647ef75d295145033cc3fccb055e03543299284f1b722ec7e85a4fad2186c441b8b2a86574a6f8449463d0cf6c0907ead1fc029e0839b87ebdab0ed14f372e6f4767a90c28de337f38b78a596ee234406772618fa9f82a22fed0a47d1de6c1302e40b8aa4d5a892c211e671a3a83f762a0f02d453b34a70aac868bc3a4ef62ec754fa44d4c966390033c87ce2e2fe6ed3c4e07756231cd0df6f83bd6145ff0ac3a2f77560be47e51f606a5213d0e8dbf5cf395212ff3"}, @NFTA_DATA_VALUE={0xf1, 0x1, "c407d940ef9126f9e8e13179a509d273d592b88209dd766908b4dc886238a24a3760c11522d169e937877c5070198c6c138aec46a06d1533ab49cbdf306f2da5c8bebf11a3c2acb996a429e5e86e32d7540192f25624704e788357ae68c6eed75749d06aec68774050178d122c31b818bc39f497ef6062975b544cf89aaf1bce2cf8669299a4ea9d0ca1033fe351f36e300debb7715fc41a28938f687fe9953568a64c381c6167ed3c7460ea327499ee69533dee13fb3e0455ff03d79d522e74450e8042a915dd540388d9bcb0ac9bd77c4a22fec824942920a0725ccca870d39392dba19fa6bd292949d59050"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x2ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "ee0c2aeea39fe1c081f785fca19b3370ead49c314e548f1acf5c33"}, @NFTA_DATA_VALUE={0xcd, 0x1, "f97e2fe53d24103da2c8ee83ee44d6b8e5eaac53a9d2e49c6251a759f17bbb92c52d90c341b8621f49b8ffccf42247220f5327503668bcee6b6e96cb2c7cb49a936bfa7ed244b1825f6a3c49458122bb752e94f5a0bb60b3aa4d44973b6e219a7d4df8513fabb4e68ebc069668bf7eeb0faaba69657130bc085420ab145701deb5c8d2431400366622536cd361f5ca045b7f6df534df905e052642009ba1aaa8d7ea5097f4e7b03c22659c86631cb28a67401fcc1dbcbda8f681a751b0444bf953b64b77545b8e7165"}, @NFTA_DATA_VALUE={0xa2, 0x1, "dc290ca077b84d1bf7d5e6fa0c7f1b2a77d54ccbd8870915818e2e267b93ad5edff6e56ade34c6dba96229fea1ab6ea6467d8c1e3a2bcbf9238438bc6f27a9aaa329bb9452b7a70d47c51f185e9c7bb1ea42d2314cc1be058fe62e30d8c91f218350853f3386ee71f9c4739de73a26fa9c23a1457e74a7b73571c21dfe921a530be363d5e6e74985029aec7d697afd9adef469c683560353bb08f645de47"}, @NFTA_DATA_VALUE={0xe4, 0x1, "92f52949c08791fbeae85c2daff8fb622bc92a8c595098bda095a98c69850201eea57bed72db833e9f48fae33457996d81f072e4e55e08fde052c915f0b6582dfaadd23bb3c4fb214c33fef32ed48a3ee7f0b1e6de4969de74f92017df8c2e58ea1e1285b7bb3a770aaaf76a5b1af0ffc75cc8f8b80eb464349cec6f1d65cc50854288f7d213690bb76a79253b124cb4824e9125f9c0af9dbb1e769177a3b893735339ff12d0ec507637ef74c69667446916a49875f1db988f68d6436ff6be66a4401259cb21abc9db49e40d2ead3e28de15476f697ec014391bab10ce3855f0"}, @NFTA_DATA_VALUE={0x6d, 0x1, "7fb2245efee44d8a1349130bf78727ca88706cad51b680c9a1bd6f553a9fb60daf50375a03e9027a22a7214a58489379875ef00c307e3c021f4b98948618f7c7e663e91d49441fd57f80d33356fe4cdd18cc83206ab65962eb8f0e3c51258e33a2a0394e7364933daf"}]}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "890bb2e903d98ef4a459206eef326a14f2cbfaffcca75e726dea5479a80a270ed8ff75fcc6da88e633a7ec26fdde50b400d547944707b664446df2c51a38aff06fd31c048d7c3218d13e0b3a1c7b68004eff6a70e42def30e7cfe1ab65f88a4a616cd5cc9dd336defcb6319c6e5bebe717aa924e19bcc297edae5593e8fa48275c88a8c30314181d5ca4f0f0d1937d62bfa7"}, @NFTA_SET_ELEM_KEY_END={0x1a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x74, 0x1, "552883ab66671db85999395a824681bb49aac2286fe6118f0d2d857981e8908cc1f7771e419e95ee22405b6bb57be63861e2fe3bbabdcee579be87ef0aa99c576484cea94d17e8d7c7542b48c757d3e3a9535f4809d6a68bd28506dc3007caea384b9f35b01116a8a6891659fc236dc6"}, @NFTA_DATA_VALUE={0xd, 0x1, "8325e9848559dcf96e"}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_USERDATA={0xd0, 0x6, 0x1, 0x0, "bf725fa4e02422a9c63097383b124c8098c521b1451addd5b1dceb798e3c1a1f3f8bf7de819cc7ba5bc1ab647564014ad44e43e7dd41a5ebd827f3e17739044f7c806ee724a46df8cce7c1893c0c3fef564527cb1a0628a7157f7b2e7d76fa49a15572ce721655a8e307d657ca24670b5f7329f2141cee994ca8f36ee4f15a85f3c4a373fda38eae48946a559d0c6e7406a528ebadc8fbd7c0f4cc9962b86a4a50b5cc3abf60564175d2afda3b6008689ad97628e66519817f38eba61e668577d699c400ca120d31ff08fb95"}, @NFTA_SET_ELEM_USERDATA={0x43, 0x6, 0x1, 0x0, "ad41c2e91c0ff81de230448bf54fa54e84267022345909a179c167be4c950c3e5c6651b94e2fd9f94b37b6305c86ea48b201b1ac4af846d74d96f6c7ffa1ce"}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a20, 0x3, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffff}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x85, 0x6, 0x1, 0x0, "5dfeef3f4ea30b34ff35afd567d534f9a07faa8fa60b3c25f5943be73644950ece810a23c9403739c86021c92d59a3b19c0bf943e90057f3b29aa89ddc9b6ac829ec55051b7714a9fd54774bac31fb71b3a42cde8adf04e401ed1a5b665e73c4d5b95365e399fab2521a22721dff60ac6bbef67aee4f35a231ed5ec5d0ef5d6669"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x52a0}]}, {0x3ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_USERDATA={0xd2, 0x6, 0x1, 0x0, "17087a5a98d95e06ea46ad69924e48d868d77037ec6c03a62bc58fdcc4cf6e1ab8a204c0999a9d7cfd228f4b59cafa247b042eced6c5572946c7a5dd163e19eca307c420d787de1d807fcd75f6181b4fd77631867a1f9a783f14d4c7df14c631d688ddccce2eb59b3b1235700c1537e45787e42136ca7791f70217280cc3bf0e3521b93dc7a5b320e9edabbd72784c01995abaab59b85d7bdf4b8e70ce35d189197e9d5b3b3a631f1a5e79969b10137d9b050b9f6e5c3326fdb7e0226843ec01f418ca3590ad7d39eae37c13b7fa"}, @NFTA_SET_ELEM_USERDATA={0x34, 0x6, 0x1, 0x0, "60969a4b4e74e7f3f656b30c24039d069ab98abe9f2121c17723efab32536abf9bb551eb5274f4c12e3f78de92c949ef"}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x288, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xbf, 0x1, "7f9496e25045a73d6539dfecd2b06fb062230f28ff4ee50cdd509546340948da1c490b0c86cf0ae169c1b97fd4737763b9b161d4451d0c256008e0d2d9b25698c21293a772ec8143ea60b795de520f1b32c5b563449f0b24a2679b73742c803c27a7f03fc2af889449f49fc64fe6c1a555bcbed30b16ee4a1de5ada4577b8d622e2944b36b5005139bf410657b9c3869cf4e51691a89c67769809f956cdcd8c2933fc0d8cf5b6a28ce580fd15783d8b039c4b08ca6e26034efa1cf"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x3d, 0x1, "6407ee9985809240aec0600f458c49dac1ccd67e43f212ef988b30919d4dec00ee4b85cae014f156925b1f383b2732b00609ef818346496e08"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x35, 0x1, "2bd7257614053002d438af3f8610a91a3b1c41cfef7bc0e924d145378fbeef5a32230db92baef74a63b2ca6480520e1e66"}, @NFTA_DATA_VALUE={0x99, 0x1, "1a28e9f07195510faf3fb5ad34bd272319376db580bf175847e9d8ce61807ee14137a887e48a60c54068381fa1a291b404abc0bff4ad6de05ae7c7d99d8422f3340763d2a5bb03b4873b52592e50d4556b6075c73cb443f7553bb9d3a2089c8d9bfa2a697f4f4d810b4cb2be076653c4893416571b936b1bfcbc692c5b5ea2a5a9833046487aeacde5ae6b9b39efc52a75457daf33"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x1160, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xde, 0x1, "32b790f13c068b292b65fdced07c42181424fcfca777d4e503573ffabf850cfe8f15696302addb44f13ac152d1465f1741e474082424ff87cb07fbf8d1c18de93699a4751d71d811a1616b7f1d6a35d4d3fa9cae9906d6e53beaca261d8855c3f83cda2ec12cf8cf6077beda28d06e9e8efe0a6ece366c145cbf69b4c1c0de150838ed395f2c380dc259f002ddf11d3c44d5f9007626cd6c1e9cb06e6409868dae19b856553c62d87c973e20ff185331d902abe21e05da3b7df8d06bb433e57b4a01f7f665f8ef36d70f8018b8c60186a4cd06edc1a6c781da09"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_USERDATA={0x56, 0x6, 0x1, 0x0, "b02346bc0453e1c7d5b938c6f465e42c73a157bfe1ff68707e0adf457edc36181b79a8920a6900747cd92aab0384e89920b40b1db1a9a4d0b09a29666067cd64dcc59a2c8e2f8ae209944649371eef5863c0"}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x68, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x64, 0x1, "5a8abe580eff531cc5651a80d417c327b1103004089d35a98ce43e4a9d783d704152479f99bd84c2d06e3549abcd714cdd3cd9fe1038b7c346feda8cd4955d66ceb22deffc159fd761e8705a520791569ce4af8676ff1c86813b388dc7ae62f1"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x37c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "724d4b96943fb98ad1e568abaf6031f515394285439fbc43a4ad"}, @NFTA_SET_ELEM_KEY_END={0x348, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0x25, 0x1, "9f3512c9d95aaea8b00cd4f1258094d3e4e5fe6ddcc2e640e6f66444ab9eb13dc1"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa7, 0x1, "ea8154a8d41c4c20a5f4ad018b66259dbb1368484e284cdfaeef1c19ac2b7df663f5d2e0eeaf262a9343b817e20d1c139422aa0d59fd38638ead99f86e27b68f83ba2852a85d8628378646a98a1a8fd0eca465b1e1309481dc3b07c49b4ff9ea1fb0a53f6739d6df87139456c287bd4f1b9735c11d1f879054f785ed3abf8bac16cddb56a939363949f47dafcfb27a948e5826f2f9a244bdeb54da1c0f65957500dfd1"}, @NFTA_DATA_VALUE={0xf2, 0x1, "38e0e44ca8fa3e444b8d7cf765fc7f93462f62f1fb28c52a9521884f4cd9c68b59266e10d804971b6ea60f76207855b3daa19e317c372f24d95b388a633678325d524504f1c5e60017c9c091c834c9f05fb743a1d20c6900bed2dbf5c7f290657a5ba7aecf49a01cd86006cf8e8afc3e85e6fd8b0c9a0ac2b97d8af82622259d7469f669e850c1f414bd2e22d2393a0f308c5600808098e1f11a96900f228d405e7cf8d6e866346043f424eabce5ca2c9442fc33fe6f43d1678fb13825b2f56e6b0628ac4b68b79f1045f2a46f1ad1e8918be587f8fbee99ce6674a072ade10d87019223f52a81aeb76408d9c9d3"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}], {0x14}}, 0x3e04}, 0x1, 0x0, 0x0, 0x5}, 0x80) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x11) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x4, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004001}, 0x20040800) 19:03:36 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x51f) write$binfmt_script(r0, &(0x7f0000002980)=ANY=[@ANYBLOB="2321202e2f66696c653020676342c62bbfcc5f8120d5b9934c3987844bb9210e5820637a6714ec2aeda675c414"], 0x1e1) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000001b00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5\xfa\xff\xff\xff\xff\xff\xff\xff\xe2\xe3\x02)s\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x90?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\x00'/453, &(0x7f0000000c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfTf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xff\xff\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d(B\x99\x94\xca\xc5\xca\x12\xef\xc1\x9a7\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xdb\xca\v\xf0\xb0e-\xab\x95\xd1\x84\x88\xa0\xa2d\xfbc+r\xfa\x8du7\b\x06qk\xd9K\x85\x1eD*\xb5\x83\x13\xaf\xa4\xeds\r\x1b\xa8\xae\x8a0}\x81aT[U\x8a\xce\xa2K\x05\x8c\x82x\x11\x91V\xb9\x1c\x01\x1d\xfe\x1f+\x95U\rZ2'], &(0x7f0000001ac0)=[&(0x7f0000002100)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000840)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000001000)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\x95u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf4\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4\xb5\x05\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x95\x03\xf30\n^\xb1~\x9d=d\x96\xfe\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbcT\xf9_\xd4\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\x06\x06\xe8\x80\xef\xdf\x87\xd8S\xcca\xb9\xb4:\x19t\xa2`Li\xe4\xe3\xa6P\xbc\xc6 \xfaoD\xf7TlC:p\xf3\xc1\td\vO\xcc\xcf\x89\xcb\xd7\xca\xfa\x12B\xa5\x87\x7f\xb4Kh^\xcdO\xb8\xd86j\x93A\x95\x00\x8d\x1dX\xf8\x19\xd7\x8f$\xad3l\xdc\f\xed\xb5NP\x1f\f\xfc\x83C\xa8\xbbA\x87\xcfiT]w\x8b\x06>', &(0x7f0000001240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a', &(0x7f0000000640)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000440)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac\xe6,\xf9\xec\x84R\xc2\x02\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=f\xf3\xca\'\xa8\x1b\xae\xff\xbe\xf9\xe7\xed34\x1c\xd1\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000a40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) 19:03:36 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000100)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x105f, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000000)) 19:03:36 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f00000002c0)=[{0x0}]) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000000c0)={0x6, 'veth0_to_bond\x00', {0x5}, 0x6}) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00', @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e000000002800028006000100000000001c0003800c00010000000000000000000c000100000000000000000008000500", @ANYRES32=r3, @ANYBLOB="1452e8abc2d060ec2b6a1aef8d6992922671d5d735d958a8efb170eab48531a00f1fb85cdec805b4787dca9cebd05e"], 0x60}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, 0x0, 0xd0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000140)=0xe968) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 19:03:36 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 180.106624][ T4914] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 180.376520][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 180.536634][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.548453][ T4914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.558376][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.818416][ T4914] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:03:39 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:39 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x640, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0xffff, 0x80000000, 0x6}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) recvfrom$rxrpc(r3, &(0x7f0000000000)=""/200, 0xc8, 0x12042, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) write(r1, &(0x7f0000004200)='t', 0xffffff6b) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0x311000, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000380)={0x0, 0x94, "19b4d3f808af254fe83527876bfdc891539445909b75ca578e8cc888970dcc4b3efbc754a4b0fc8efe13a60d2ef32d740d850d0ec181bf8528c64dfea4c4886560d36842044f0bfbda05512eec6a0914310a9b22955fbaf0d0b001d08ddf357a592e0f382ce717cd8b7c0512f7f09aae9a030009771682684a93557e34b8a68da5796570e43d26e2b813b3ea9f5285b4614f3b2e"}, &(0x7f00000002c0)=0x9c) syz_fuse_handle_req(r1, &(0x7f0000008380)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x10, 0xffffffe4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) futimesat(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0xea60}}) 19:03:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000001f3f000100000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) 19:03:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 182.688124][ T54] usb 3-1: USB disconnect, device number 8 [ 182.696697][ T54] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:39 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:39 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') [ 183.086430][ T3693] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 183.156450][ T54] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 183.175636][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 183.212243][T10960] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 19:03:39 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:39 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r3, 0x4}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2fd, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030700009e40f088641fffffe103004000638477fbac14143fe0004301c699da153f08a0e6e380f6010ef683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x5b00}, 0x28) [ 183.326443][ T3693] usb 1-1: Using ep0 maxpacket: 8 [ 183.408246][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 183.446613][ T3693] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.463724][ T3693] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.497811][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.539741][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.558162][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.576844][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.778111][ T3693] iowarrior 1-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.856725][ T54] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 19:03:42 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r1, r3}}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x78, &(0x7f0000000380)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x800, @loopback}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e21, 0x2, @remote, 0xffffffff}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000480)={0xe, 0x18, 0x4, 0x9, r8}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001800dd8d000000000000000002600000000000fe02000100000c00090008000000f54a87f050cacab1defe28278674aa0935e40032984ee6f3b52bbaeca0bbf8908b52ab7fb8b54abcf8b5e10057f3b847df58c02e8ab02e91503752d1012136f80870d8a3eae077815a54a8aefbb4374a2e19e243f9c167d17a3c1d98d88b4dc2bdfed28cd646f2540f585f975432a7478c7c618718633036accc4abd32505b41820e6c64f9730dcd8e6c8c9c6dea0992a598c51e40ec5671177208fa1f32a60761c1868a3bbef13a6bca0ff31d565b53ff2f86c931", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xff63) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x28, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x2}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x2, 0x0, r10}}]}, 0x28}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f00000004c0)="be2352e319edc58d216754f23da72e047641ee203ad119a8dddce32eab84d1fd13fad13ba1a28b45a37be58933ea0c7376db981cb3b7fe9ba670594c2be5190c60ff811d1be957090bf93d1460f4c91cc41597396107dce5db27c8ce4dc6a94343d40757534477fa1411b7ed") 19:03:42 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000340)='\x00\x00\x00\x00\x00\x00z\x9b\xb0\xe8t%\xfc\x96L\x82\xdb', 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000deeb7bba00281213bd5d74dafc20380003"], 0x3c) write$binfmt_misc(r0, &(0x7f0000001600)=ANY=[], 0x1004) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x2004c800) 19:03:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 185.746460][ T54] usb 3-1: USB disconnect, device number 9 [ 185.758383][ T54] iowarrior 3-1:1.0: I/O-Warror #1 now disconnected 19:03:42 executing program 0: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000000)="38f87095df78b45ed5b8aca9c780c3f7fd3614e7d00f6ab2b464b11f49ffabec50e4a858d208b23198e3536402b7cbae4927d2ecec2682f7e55bab56ec1141aa6c07288da97f00e181c6c539c81cba11242294808923e3f2b3bfaab1ee71817026b1c53e923dadc932ced74f796ab5af050ae557eb17d72cbb87d18d86f1ed9bfb47990528f4de7180c093cf5282a9db2cc080") r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f000000fb40)=[{{&(0x7f00000006c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000054c0)=[@hopopts={{0x18, 0x29, 0x4}}], 0x18}}], 0x1, 0x0) [ 185.796639][ T8092] usb 1-1: USB disconnect, device number 4 [ 185.817372][ T8092] iowarrior 1-1:1.0: I/O-Warror #0 now disconnected [ 185.851231][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 185.885896][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 19:03:42 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = getpgid(0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000140)="47182645c66bdbdfce07a980691d02fc49bcfc799c6846e54a8847f2d4ad114208043f102c66fa5029cdd6f76e0aa3955c1ed418568b545e9de4ee6da206b5aa620803c1f869b39c60410e567a0613e3922647ea8c5c181e99e446742474f2f2dda2f39ef5fa44d78f1be48b5a1c0671f20eb6eccaf0564ec15c5005b7928198504abf0c1de08eada27cc86e2e64f91b92df4ed7b5a69c046a95c857d341e17e7f38125c821394836c8b1e95eff74c55f820ce3267ee") perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x8400, 0x0, 0x0, 0x6, 0x0, 0x10000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x4240a2a0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000240)={r3, 0x3, 0x20, "cc4653c4b6261e08fcf8e39df45bc229730e"}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x5c54f59e, 0x9, 0x39b, 0x1ff, 0x11, "ee4dc02abe1f9dafbc8ca33a61bf14f1d5ece1"}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 19:03:42 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000100029bd5a00000000000000030000000c00010017"], 0x20}}, 0x0) r4 = socket(0x10, 0x800000000080002, 0x10) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)=0x1000) sendmmsg$alg(r4, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 19:03:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000180)="e3e3e099ac30562abe7505fb664d476b3e5d3027ff80b72640264e69b21767d3b4", 0x21, 0x600}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='co-ep\x00\x00\x00 \x00\x00\x00']) mkdirat(r2, &(0x7f0000000040)='./file1\x00', 0x0) [ 185.921541][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 185.943600][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 186.003916][T11052] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 19:03:42 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000507062ba6000000000000000000", @ANYRES32=0x0, @ANYBLOB="417df0e616b0dc6d1c0012800b0001006d616373656300000c0002800500090003"], 0x3c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x20) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 186.078898][T11058] FAT-fs (loop5): Unrecognized mount option "co-ep" or missing value [ 186.129422][T11058] FAT-fs (loop5): Unrecognized mount option "co-ep" or missing value 19:03:42 executing program 5: unshare(0xc020400) setuid(0x0) r0 = getpid() socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="440f20c0350e000000c4e37d1daea80000000f450fad8e0a800000f080450097b9800000c00f3235000800000f30480fc79d0400000066baf80cb818dfee86ef66bafc0c66edc744240000000000c744240203000000c7442406000000000f011c24d9f00f21e8b98a0300000f32", 0x6e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 186.266357][ T54] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 186.526347][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 186.676421][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.696019][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.716327][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.976839][ T54] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:03:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_getres(0x3, &(0x7f0000000000)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x4e0, 0x360, 0x0, 0x148, 0x360, 0x148, 0x448, 0x240, 0x240, 0x448, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x13e, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 19:03:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x100) dup2(r1, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:45 executing program 5: unshare(0xc020400) setuid(0x0) r0 = getpid() socket$inet_udplite(0x2, 0x2, 0x88) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="440f20c0350e000000c4e37d1daea80000000f450fad8e0a800000f080450097b9800000c00f3235000800000f30480fc79d0400000066baf80cb818dfee86ef66bafc0c66edc744240000000000c744240203000000c7442406000000000f011c24d9f00f21e8b98a0300000f32", 0x6e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:03:45 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = getpgid(0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000140)="47182645c66bdbdfce07a980691d02fc49bcfc799c6846e54a8847f2d4ad114208043f102c66fa5029cdd6f76e0aa3955c1ed418568b545e9de4ee6da206b5aa620803c1f869b39c60410e567a0613e3922647ea8c5c181e99e446742474f2f2dda2f39ef5fa44d78f1be48b5a1c0671f20eb6eccaf0564ec15c5005b7928198504abf0c1de08eada27cc86e2e64f91b92df4ed7b5a69c046a95c857d341e17e7f38125c821394836c8b1e95eff74c55f820ce3267ee") perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x8400, 0x0, 0x0, 0x6, 0x0, 0x10000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x4240a2a0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000240)={r3, 0x3, 0x20, "cc4653c4b6261e08fcf8e39df45bc229730e"}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x5c54f59e, 0x9, 0x39b, 0x1ff, 0x11, "ee4dc02abe1f9dafbc8ca33a61bf14f1d5ece1"}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 19:03:45 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) [ 188.836603][ T9763] usb 3-1: USB disconnect, device number 10 [ 188.852063][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:45 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_getres(0x3, &(0x7f0000000000)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x4e0, 0x360, 0x0, 0x148, 0x360, 0x148, 0x448, 0x240, 0x240, 0x448, 0x240, 0x3, 0x0, {[{{@ip={@local, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'team_slave_0\x00'}, 0x0, 0x2f8, 0x360, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x35, 0x2, 0x0, 0x0, 0x0, 0x13e, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@common=@unspec=@connmark={{0x30, 'connmark\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) [ 188.896692][T11121] xt_bpf: check failed: parse error 19:03:45 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = getpgid(0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_FONT(r5, 0x4b61, &(0x7f0000000140)="47182645c66bdbdfce07a980691d02fc49bcfc799c6846e54a8847f2d4ad114208043f102c66fa5029cdd6f76e0aa3955c1ed418568b545e9de4ee6da206b5aa620803c1f869b39c60410e567a0613e3922647ea8c5c181e99e446742474f2f2dda2f39ef5fa44d78f1be48b5a1c0671f20eb6eccaf0564ec15c5005b7928198504abf0c1de08eada27cc86e2e64f91b92df4ed7b5a69c046a95c857d341e17e7f38125c821394836c8b1e95eff74c55f820ce3267ee") perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xf}, 0x8400, 0x0, 0x0, 0x6, 0x0, 0x10000}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x4240a2a0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000240)={r3, 0x3, 0x20, "cc4653c4b6261e08fcf8e39df45bc229730e"}) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x5c54f59e, 0x9, 0x39b, 0x1ff, 0x11, "ee4dc02abe1f9dafbc8ca33a61bf14f1d5ece1"}) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) [ 188.999892][T11134] xt_bpf: check failed: parse error 19:03:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:45 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x100) dup2(r1, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 189.267750][ T9763] usb 3-1: new high-speed USB device number 11 using dummy_hcd 19:03:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 189.508208][ T9763] usb 3-1: Using ep0 maxpacket: 8 19:03:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x100) dup2(r1, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 189.626574][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 189.643355][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 189.664447][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:03:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="0300", 0x2, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x20, 0x0, 0x1, 0x0, 0x0, 0x41bf, 0x41000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x3, 0x9) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000980)={0xe, 0x0, {0xbd, @usage=0xff, 0x0, 0x20d, 0x7f, 0x2, 0x2, 0x647f, 0x84, @struct={0x0, 0x2}, 0x200, 0x6, [0x401, 0xbd8, 0x10000, 0x1, 0x4, 0x2]}, {0x7, @struct={0xf3a6, 0x4}, 0x0, 0x6, 0xffffffffffffffc0, 0x80000001, 0xffff, 0x2, 0x1, @struct={0x1, 0x51e3}, 0x101, 0x4, [0xfffffffffffffffe, 0x8, 0x3a5, 0x4c52, 0x7, 0x5]}, {0x1, @struct={0x8, 0xa70d}, 0x0, 0x3, 0x2, 0x2, 0x100000000, 0x7ff, 0x10, @usage, 0x0, 0x6a3, [0x6, 0x3, 0x2, 0x3ff, 0xffffffff, 0x2]}, {0x19a5751, 0x0, 0x3}}) recvmmsg(0xffffffffffffffff, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/207, 0xcf}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = signalfd4(r0, &(0x7f0000000040)={[0x4]}, 0x8, 0x800) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x29, 0x81, 0x8, 0x0, 0xd, @remote, @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x40, 0x80000001, 0x8}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf250600000008002c0024a8000005002f000000000008003b00030000000a000900580d366d80ea000008002c000100000008000600", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4800) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 19:03:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 189.750567][T11164] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 189.807175][T11164] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! 19:03:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 189.865654][T11164] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 189.943095][T11176] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated! [ 189.948746][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 189.966378][T11176] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota [ 190.727559][ T9763] usb 3-1: USB disconnect, device number 11 [ 190.746712][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:47 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x1, [0x0]}) syz_usb_connect(0x1, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ca38a20847053522389d000000010902120001000000000904"], 0x0) 19:03:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) ftruncate(r0, 0x40) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0xd, &(0x7f0000000140), 0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2000, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000180)={0x2, [0xbf11, 0x8], 0x585b}, 0x10) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0xe1b7, 0x6], 0x3, 0xb548, 0xfffffffb, 0x1ff, 0x8, 0x80000000, 0x7, {0xe20b, 0xb3, 0x8000, 0x1, 0x80, 0x4, 0x7d6, 0x5, 0x9, 0x9d78, 0x5, 0x6, 0x9, 0x7fffffff, "f70f254424bba655e8ec75996e3c6ad172f0936f6773a46768d1b538d4c12718"}}) 19:03:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:47 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 191.321721][T11212] sctp: [Deprecated]: syz-executor.1 (pid 11212) Use of int in maxseg socket option. [ 191.321721][T11212] Use struct sctp_assoc_value instead [ 191.379217][T11220] sctp: [Deprecated]: syz-executor.1 (pid 11220) Use of int in maxseg socket option. [ 191.379217][T11220] Use struct sctp_assoc_value instead 19:03:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x10c00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/51, 0x33}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 19:03:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r3, 0x2}], 0x1, 0x100) dup2(r1, r3) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 191.607946][ T54] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 191.616285][ T3693] usb 1-1: new low-speed USB device number 5 using dummy_hcd 19:03:48 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 191.846222][ T54] usb 3-1: Using ep0 maxpacket: 8 19:03:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 191.966752][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.977964][ T3693] usb 1-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice=9d.38 [ 191.996626][ T3693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.009537][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 19:03:48 executing program 1: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004, 0x0, @perf_bp={0x0}, 0x10c00, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ptrace$getregset(0x4204, 0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/51, 0x33}) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[], 0x9) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) [ 192.040499][ T3693] usb 1-1: config 0 descriptor?? [ 192.054563][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.109250][ T3693] usbtest 1-1:0.0: EZ-USB device [ 192.114201][ T3693] usbtest 1-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 192.316726][ T9763] usb 1-1: USB disconnect, device number 5 [ 192.357725][ T54] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 193.147228][ T9763] usb 3-1: USB disconnect, device number 12 [ 193.177850][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:50 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) syz_mount_image$tmpfs(&(0x7f0000000000)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24b6422, &(0x7f0000000500)=ANY=[@ANYBLOB='7id=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x500000c, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x9}}, {@allow_other='allow_other'}], [{@audit='audit'}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@smackfstransmute={'smackfstransmute'}}, {@euid_gt={'euid>', r5}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x65, 0x64, 0x64, 0x39, 0x64, 0x34, 0x56], 0x2d, [0x66, 0x38, 0x33, 0x65], 0x2d, [0x31, 0x34, 0x33, 0x65], 0x2d, [0x64, 0x37, 0x66, 0x37], 0x2d, [0x38, 0x64, 0x34, 0x38, 0x35, 0x31, 0x39, 0x37]}}}, {@hash='hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x32, 0x31, 0x63, 0x33, 0x35, 0x30, 0x31], 0x2d, [0x6b, 0x34, 0x65, 0x31], 0x2d, [0x0, 0x33, 0x63, 0x35], 0x2d, [0x63, 0x62, 0x34, 0x30], 0x2d, [0x64, 0x0, 0x66, 0xb, 0x65, 0x33, 0x64, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, '}@:,'}}]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000240)="1080", 0x2, r6) request_key(&(0x7f0000000280)='cifs.spnego\x00', &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='*,:]\'O-)}\x00', r6) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, 0x400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r9}]}, 0x40}}, 0x0) [ 193.703288][T11287] fuse: Bad value for 'fd' [ 193.785147][T11305] fuse: Bad value for 'fd' 19:03:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000200)=0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0xfffffffffffffffd, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000900)={"01a0e43f7b78288aceb27138251f841b2d07bad22dfa6d0ff0476f0cc9d0d4bba90d43ab66415cbacba7de89ca203a4bb4e1e7b5602621e6e0a1e04e6e8a9f44d22945b5e002f9f3c9ff397c588841bf160300634808905a8615a1cf2c451dac143266bb4558a1b4e2a44321b1cdeb4f4670b0e90711569c5f1ad6265ae9d8bfe7bf01efccd4a2df8beb0699b7513bb2c933328e92e63cb0ab62948e5aba142509ed8dedde95b1735dbf671bd50ddce94236dc828b992c905c413a159573de26894c1b9e927e61420523731c9522cc0c15797534c69e6292f9bbc77a6d97ee1d8ef4f07de17ece7304414ded690e20b1d092c30399b86f878f60294aa6bd72c634b7dfb68b52638608bb4ef448f9a7470cfeddc06eecee84d105220ddcb5e5faa8b0c7a392ed99aa70994d596713e4efd5316d80f4008863de66476823c440a98901273ef33614bf6e719ea0053d86024c16fdd4a2e997601112114f1a397485a379a1a48576f990b10c0f862aeb19105fad5376adffa0aba70120e9f329ba61388eeb0f711bb7b558c4c8f598688bd9889d44423eb8495f772638f8b3f0828c8122b0a0ba42cb6fb5626f80a7ffe263b72b8867a4a25c0a2b6db21b442ae52b710e0024e62267d30a1662ea9d76b4ebe4be663c71f04d872a9c7db18c99a67f736647e2691570e9cd4f8e96a88e542194fb84255e71a90deee6cc21b2d8286274d7b4224575f9aedc5b676b1507cbf595c71857f95f97966de0bb7e58c84358e7746e9cd0d0a3a0afb779c8af814b67fe35d0a4fabf698fbe1033da70786d9963efaad98b6cf5e361c42ee9c62bd4eff83b713681f0cff051333e0c7f5e0b80e4916d49755f2f833d3b184d6c40f693f89929cd8dc162e0f14ac8dd24fd183abd7620444c36920137ac125eb1074b5e3d10f5be6757fdd570a7c7215ce287a6d9dc5552f3e8cdbb1475c472e18900029768eafda60a27d5f9e33679e81e0dddc9a2efb166b418e1f5cf582cfe338c310b0b46adcc8961f335c1fec7e3468cb7aa6bb66b3e64cbd706b1f89e3a6a2f20e2b625b74eecc0f353b5c4d73ba900ce830038b4d70a0f3d4d1e98c18f28a736ebefb661e6db64eb7e4f9f17a5f1046632bda2fd3890f8d33eb22ff11e1f397e802dea33cd1bce6165ddd07cdfb44ddf31c0d21cfbf61832a56edf54c256564be934440629ffffffffffffffffd78872b47f25e5682a06aac18e49c5bf57923000e83ec2c4be9e5f38824a517009f5d918730739fa74ffa2f50edb98bd257000bdcaf57a541349620bda57af82135be568fc0ecec604514c1da768cc03e4a790cc0510b42c77b9ca86907b27394ec8f72fd175d72ea76c17379c7f00"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f00000001c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:03:50 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 194.046718][ T3693] usb 3-1: new high-speed USB device number 13 using dummy_hcd 19:03:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 194.173532][T11328] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2062928573 (4125857146 ns) > initial count (1913579056 ns). Using initial count to start timer. [ 194.245313][T11335] kvm [11324]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 [ 194.258645][T11335] kvm [11324]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000037 [ 194.316189][ T3693] usb 3-1: Using ep0 maxpacket: 8 [ 194.332522][T11328] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2062928573 (4125857146 ns) > initial count (1913579056 ns). Using initial count to start timer. [ 194.382178][T11341] kvm [11324]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000024 [ 194.439028][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.468553][ T3693] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 19:03:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 194.498741][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.766951][ T3693] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 195.548634][ T7] usb 3-1: USB disconnect, device number 13 [ 195.567732][ T7] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:52 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:52 executing program 1: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) mount$9p_fd(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl'}]}}) 19:03:52 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) open_tree(r5, &(0x7f0000000040)='./bus\x00', 0x80000) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000080)) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000280)={{}, 0x0, 0xc, @inherit={0x70, &(0x7f0000001540)=ANY=[@ANYBLOB="0000000500000000000000f506000000070000080000000000000017000000000000000400000000000000060000000000000007000000000000000300000000000000c6060000000000001b0000000000000014000000000000e1e9afa5747c2f3670320df61c6ed9d3004f75157130ff3d609d18e9244b50"]}, @subvolid=0x3ff}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000540)={{}, 0x0, 0x10, @inherit={0x60, &(0x7f0000000000)={0x1, 0x3, 0x1ff, 0x6, {0x10, 0x2, 0x7, 0x401, 0x4}, [0x20, 0xd9, 0x6]}}, @subvolid=0x4}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000040)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000040)={"0763dccd70efd79e305edf49a5c35cf7", 0x0, 0x0, {0x4, 0xa6e}, {0xfffffffffffffffe, 0x1}, 0x8ee, [0x4, 0x3, 0x7f, 0x81, 0xfff, 0x7, 0x637b, 0x57, 0x1, 0x8, 0x3c0b, 0x6, 0x7fffffff, 0x5, 0x7, 0x5]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f00000001c0)) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[], 0x1) dup3(r6, r0, 0x0) setxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000140)=@ng, 0x2, 0x0) finit_module(r6, 0x0, 0x0) 19:03:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:52 executing program 1: r0 = socket$inet6(0x10, 0x2, 0x3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x7800, 0x4, 0x8, 0x8001, {{0x1a, 0x4, 0x0, 0x8, 0x68, 0x65, 0x0, 0x5, 0x4, 0x0, @rand_addr=0x64010102, @multicast2, {[@generic={0x86, 0x12, "c1c4d3bb72adea40d4ceb7efb3d9d5e2"}, @timestamp_prespec={0x44, 0x24, 0x3c, 0x3, 0x3, [{@remote, 0x2}, {@multicast1, 0x20}, {@multicast1, 0x61ba5072}, {@private=0xa010102, 0x9}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0xb, [0xfff, 0x1, 0xfffffff8, 0x5, 0x4, 0xfffffff8]}]}}}}}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{0x4c, 0x0, 0x0, 0xffffffff}, {0xa, 0xfd}]}, 0x10) 19:03:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 196.172922][ T34] audit: type=1804 audit(1604516632.793:17): pid=11384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir273478775/syzkaller.wUn62o/41/bus" dev="sda1" ino=16026 res=1 errno=0 [ 196.173505][T11384] Module has invalid ELF header 19:03:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020000000000000000060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 196.260588][ T34] audit: type=1804 audit(1604516632.853:18): pid=11384 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir273478775/syzkaller.wUn62o/41/bus" dev="sda1" ino=16026 res=1 errno=0 [ 196.322254][T11405] input: syz1 as /devices/virtual/input/input5 [ 196.396149][T11246] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 196.636092][T11246] usb 3-1: Using ep0 maxpacket: 8 [ 196.756154][T11246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.767305][T11246] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 196.776975][T11246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.047975][T11246] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 197.113264][T11415] input: syz1 as /devices/virtual/input/input6 [ 197.247402][ T7] usb 3-1: USB disconnect, device number 14 [ 197.253979][ T7] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:54 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:54 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x3, 0x6, 0xacf) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000340), 0x2, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x80000000, 0x2) dup2(r2, r1) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/97, 0x61, 0x40000000, 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x1cf, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) 19:03:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x100) dup2(0xffffffffffffffff, r1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:54 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020000000000000000060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:03:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 198.001974][T11460] input: syz1 as /devices/virtual/input/input7 19:03:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:54 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x100) dup2(0xffffffffffffffff, r1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 198.326042][ T9763] usb 3-1: new high-speed USB device number 15 using dummy_hcd 19:03:55 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 198.606060][ T9763] usb 3-1: Using ep0 maxpacket: 8 19:03:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 198.746603][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 198.763663][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 198.793052][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.067796][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 199.267336][ T9763] usb 3-1: USB disconnect, device number 15 [ 199.274026][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:56 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:56 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x100) dup2(0xffffffffffffffff, r1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:56 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020000000000000000060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:03:56 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x3, 0x6, 0xacf) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000340), 0x2, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x80000000, 0x2) dup2(r2, r1) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/97, 0x61, 0x40000000, 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x1cf, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) 19:03:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 200.029394][T11534] input: syz1 as /devices/virtual/input/input8 19:03:56 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x100) dup2(r0, r1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 200.325989][ T4593] usb 3-1: new high-speed USB device number 16 using dummy_hcd 19:03:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 200.586045][ T4593] usb 3-1: Using ep0 maxpacket: 8 19:03:57 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x100) dup2(r0, r1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 200.736493][ T4593] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.769911][ T4593] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.813740][ T4593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:03:57 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020000000000000000060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:03:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 200.943278][T11573] input: syz1 as /devices/virtual/input/input9 [ 201.126152][ T4593] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 201.317052][T11246] usb 3-1: USB disconnect, device number 16 [ 201.323673][T11246] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:03:58 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:58 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x3, 0x6, 0xacf) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000340), 0x2, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x80000000, 0x2) dup2(r2, r1) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/97, 0x61, 0x40000000, 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x1cf, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) 19:03:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:58 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1, 0x2}], 0x1, 0x100) dup2(r0, r1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020000000000000000060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) [ 202.060517][T11613] input: syz1 as /devices/virtual/input/input10 19:03:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:03:59 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:03:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020000000000000000060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) 19:03:59 executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x3, 0x6, 0xacf) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, &(0x7f0000000340), 0x2, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x3) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x80000000, 0x2) dup2(r2, r1) recvfrom$ax25(0xffffffffffffffff, &(0x7f00000002c0)=""/97, 0x61, 0x40000000, 0x0, 0x0) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x5) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x1cf, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) [ 202.929778][T11653] input: syz1 as /devices/virtual/input/input11 19:03:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:03:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:00 executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r1 = dup3(r0, r0, 0x80000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020000000000000000060006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000) 19:04:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:00 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 203.806919][T11688] input: syz1 as /devices/virtual/input/input12 19:04:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:00 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:00 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:00 executing program 1: sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x8a, @private0={0xfc, 0x0, [], 0x1}, 0x1}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14, 0x80000) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3325}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x64}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000240)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', r1, 0x2f, 0x20, 0x7, 0x3ff, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev={0xfe, 0x80, [], 0x42}, 0x1, 0x7800, 0x400, 0x2}}) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x3c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000001) r8 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 19:04:01 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) [ 204.351661][T11712] device vlan2 entered promiscuous mode [ 204.366388][T11712] device batadv0 entered promiscuous mode [ 204.383916][T11712] device batadv0 left promiscuous mode 19:04:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 204.532630][T11712] device vlan2 entered promiscuous mode [ 204.543743][T11712] device batadv0 entered promiscuous mode [ 204.562404][T11712] device batadv0 left promiscuous mode 19:04:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 204.707747][T11742] input: syz1 as /devices/virtual/input/input13 19:04:01 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:01 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:01 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 205.551432][T11789] input: syz1 as /devices/virtual/input/input14 19:04:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:02 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 205.878270][T11806] input: syz1 as /devices/virtual/input/input15 19:04:02 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:02 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:02 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 206.415480][T11832] input: syz1 as /devices/virtual/input/input16 19:04:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:03 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:03 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) [ 206.762338][T11852] input: syz1 as /devices/virtual/input/input17 19:04:03 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:03 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 207.095565][ T54] usb 3-1: new high-speed USB device number 17 using dummy_hcd 19:04:03 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 207.270827][T11879] input: syz1 as /devices/virtual/input/input18 [ 207.297358][ T54] usb 3-1: device descriptor read/64, error 18 19:04:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 207.567232][ T54] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 207.592068][T11900] input: syz1 as /devices/virtual/input/input19 19:04:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 207.755601][ T54] usb 3-1: device descriptor read/64, error 18 19:04:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 207.875538][ T54] usb usb3-port1: attempt power cycle [ 208.585377][ T54] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 208.765378][ T54] usb 3-1: device descriptor read/8, error -61 [ 209.035240][ T54] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 209.205327][ T54] usb 3-1: device descriptor read/8, error -61 [ 209.325242][ T54] usb usb3-port1: unable to enumerate USB device 19:04:06 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:06 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:06 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 209.862796][T11942] input: syz1 as /devices/virtual/input/input21 [ 209.866350][T11940] input: syz1 as /devices/virtual/input/input20 19:04:06 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:06 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 210.285275][ T54] usb 3-1: new high-speed USB device number 21 using dummy_hcd 19:04:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 210.495135][ T54] usb 3-1: device descriptor read/64, error 18 [ 210.794376][ T54] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 210.994952][ T54] usb 3-1: device descriptor read/64, error 18 [ 211.114950][ T54] usb usb3-port1: attempt power cycle [ 211.824838][ T54] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 212.035157][ T54] usb 3-1: device descriptor read/8, error -61 [ 212.304931][ T54] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 212.474937][ T54] usb 3-1: device descriptor read/8, error -61 [ 212.594714][ T54] usb usb3-port1: unable to enumerate USB device 19:04:09 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) 19:04:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 212.923501][T12009] input: syz1 as /devices/virtual/input/input22 [ 212.933250][T12008] input: syz1 as /devices/virtual/input/input23 19:04:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 213.128938][T12029] input: syz1 as /devices/virtual/input/input24 19:04:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 213.282244][T12042] input: syz1 as /devices/virtual/input/input25 19:04:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 213.346798][ T7] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 213.565830][ T7] usb 3-1: device descriptor read/64, error 18 [ 213.854512][ T7] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 214.074433][ T7] usb 3-1: device descriptor read/64, error 18 [ 214.194475][ T7] usb usb3-port1: attempt power cycle [ 214.924514][ T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 215.144283][ T7] usb 3-1: device descriptor read/8, error -61 [ 215.424384][ T7] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 215.594412][ T7] usb 3-1: device descriptor read/8, error -61 [ 215.714304][ T7] usb usb3-port1: unable to enumerate USB device 19:04:12 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x0, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) 19:04:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 215.992367][T12073] input: syz1 as /devices/virtual/input/input27 19:04:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 216.454116][ T9763] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 216.644548][ T9763] usb 3-1: device descriptor read/64, error 18 [ 216.924076][ T9763] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 217.134008][ T9763] usb 3-1: device descriptor read/64, error 18 [ 217.254048][ T9763] usb usb3-port1: attempt power cycle [ 217.963877][ T9763] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 218.134015][ T9763] usb 3-1: device descriptor read/8, error -61 [ 218.403836][ T9763] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 218.574001][ T9763] usb 3-1: device descriptor read/8, error -61 [ 218.693774][ T9763] usb usb3-port1: unable to enumerate USB device 19:04:15 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:15 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) dup3(r0, r0, 0x80000) 19:04:15 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 219.056088][T12125] input: syz1 as /devices/virtual/input/input33 19:04:15 executing program 0: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 219.465451][ T4593] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 219.663599][ T4593] usb 3-1: device descriptor read/64, error 18 [ 219.943611][ T4593] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 220.133930][ T4593] usb 3-1: device descriptor read/64, error 18 [ 220.254549][ T4593] usb usb3-port1: attempt power cycle [ 220.973421][ T4593] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 221.153958][ T4593] usb 3-1: device descriptor read/8, error -61 [ 221.423346][ T4593] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 221.593855][ T4593] usb 3-1: device descriptor read/8, error -61 [ 221.723305][ T4593] usb usb3-port1: unable to enumerate USB device 19:04:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:18 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x0, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 222.066480][T12171] input: syz1 as /devices/virtual/input/input34 19:04:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 222.503416][ T3693] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 222.705114][ T3693] usb 3-1: device descriptor read/64, error 18 [ 222.983146][ T3693] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 223.173107][ T3693] usb 3-1: device descriptor read/64, error 18 [ 223.294799][ T3693] usb usb3-port1: attempt power cycle [ 224.002998][ T3693] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 224.174667][ T3693] usb 3-1: device descriptor read/8, error -61 [ 224.443050][ T3693] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 224.614475][ T3693] usb 3-1: device descriptor read/8, error -61 [ 224.742890][ T3693] usb usb3-port1: unable to enumerate USB device 19:04:21 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x0, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 225.161015][T12229] input: syz1 as /devices/virtual/input/input41 19:04:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 225.582842][ T4593] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 225.862833][ T4593] usb 3-1: Using ep0 maxpacket: 8 [ 226.012919][ T4593] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.023069][ T4593] usb 3-1: config 0 has no interfaces? [ 226.028588][ T4593] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 226.037934][ T4593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.046857][ T4593] usb 3-1: config 0 descriptor?? 19:04:24 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x0, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 228.190572][ T8093] usb 3-1: USB disconnect, device number 41 19:04:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 228.357707][T12296] input: syz1 as /devices/virtual/input/input49 19:04:25 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 228.662369][ T8093] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 228.932312][ T8093] usb 3-1: Using ep0 maxpacket: 8 [ 229.052469][ T8093] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.062766][ T8093] usb 3-1: config 0 has no interfaces? [ 229.068296][ T8093] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 229.078820][ T8093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.089482][ T8093] usb 3-1: config 0 descriptor?? 19:04:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x0, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 231.252095][ T4593] usb 3-1: USB disconnect, device number 42 19:04:27 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 231.311141][T12338] input: syz1 as /devices/virtual/input/input52 19:04:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:28 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:28 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 231.782285][ T4593] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 232.041954][ T4593] usb 3-1: Using ep0 maxpacket: 8 [ 232.162224][ T4593] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.172815][ T4593] usb 3-1: config 0 has no interfaces? [ 232.178373][ T4593] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.188279][ T4593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.197540][ T4593] usb 3-1: config 0 descriptor?? 19:04:31 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010100000109040000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(0x0, 0x0, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 234.350555][ T7] usb 3-1: USB disconnect, device number 43 19:04:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 234.438065][T12397] input: syz1 as /devices/virtual/input/input53 19:04:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 234.853581][ T7] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 235.121562][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 235.263473][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.275430][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.288375][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.333201][ T7] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:34 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010100000109040000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(0x0, 0x0, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 237.433845][ T7] usb 3-1: USB disconnect, device number 44 19:04:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 237.685177][T12476] input: syz1 as /devices/virtual/input/input61 [ 237.971219][ T7] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 238.251186][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 238.393145][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.403532][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 238.412972][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.472523][ T7] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:37 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b00010100000109040000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:37 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(0x0, 0x0, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 240.570945][ T8093] usb 3-1: USB disconnect, device number 45 19:04:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 19:04:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 240.668588][T12519] input: syz1 as /devices/virtual/input/input63 19:04:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 19:04:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) [ 240.866169][T12539] input: syz1 as /devices/virtual/input/input66 [ 240.980819][ T8093] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 241.230794][ T8093] usb 3-1: Using ep0 maxpacket: 8 [ 241.350798][ T8093] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.360944][ T8093] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.369971][ T8093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.412281][ T8093] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:40 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d00"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040), 0x0, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 243.610568][ T8093] usb 3-1: USB disconnect, device number 46 19:04:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 243.664987][T12580] input: syz1 as /devices/virtual/input/input67 [ 243.687256][T12586] input: syz1 as /devices/virtual/input/input68 19:04:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 243.800977][T12604] input: syz1 as /devices/virtual/input/input71 [ 243.825880][T12608] input: syz1 as /devices/virtual/input/input72 19:04:40 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 243.923808][T12622] input: syz1 as /devices/virtual/input/input74 [ 243.928112][T12624] input: syz1 as /devices/virtual/input/input75 [ 244.080477][ T8093] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 244.330541][ T8093] usb 3-1: Using ep0 maxpacket: 8 [ 244.450560][ T8093] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.460725][ T8093] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 244.473956][ T8093] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 244.483334][ T8093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.532101][ T8093] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:43 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d00"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040), 0x0, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 246.680250][ T8093] usb 3-1: USB disconnect, device number 47 [ 246.750442][T12674] input: syz1 as /devices/virtual/input/input76 [ 246.756664][T12673] input: syz1 as /devices/virtual/input/input77 [ 246.771069][T12678] input: syz1 as /devices/virtual/input/input78 19:04:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 246.943466][T12702] input: syz1 as /devices/virtual/input/input79 [ 246.956237][T12703] input: syz1 as /devices/virtual/input/input80 19:04:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040), 0x0, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 247.107251][T12718] input: syz1 as /devices/virtual/input/input81 [ 247.128391][T12722] input: syz1 as /devices/virtual/input/input82 [ 247.140398][ T8093] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 247.382005][ T8093] usb 3-1: Using ep0 maxpacket: 8 [ 247.500358][ T8093] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.516440][ T8093] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 247.558825][ T8093] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 247.595078][ T8093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.661615][ T8093] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:46 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d00"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) 19:04:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 249.759901][ T54] usb 3-1: USB disconnect, device number 48 [ 249.814939][T12766] input: syz1 as /devices/virtual/input/input83 [ 249.824021][T12767] input: syz1 as /devices/virtual/input/input84 [ 249.839334][T12772] input: syz1 as /devices/virtual/input/input85 19:04:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 249.965249][T12790] input: syz1 as /devices/virtual/input/input86 19:04:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 250.063972][T12798] input: syz1 as /devices/virtual/input/input87 19:04:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 250.207652][T12811] input: syz1 as /devices/virtual/input/input88 [ 250.220176][ T54] usb 3-1: new high-speed USB device number 49 using dummy_hcd 19:04:46 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 250.355832][T12823] input: syz1 as /devices/virtual/input/input89 [ 250.469773][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 250.589771][ T54] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.599969][ T54] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.613958][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 250.624177][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.671287][ T54] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:49 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d00090582"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:49 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) [ 252.841030][ T3693] usb 3-1: USB disconnect, device number 49 19:04:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 252.898616][T12865] input: syz1 as /devices/virtual/input/input92 [ 252.899418][T12862] input: syz1 as /devices/virtual/input/input91 19:04:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:49 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 253.088244][T12886] input: syz1 as /devices/virtual/input/input95 [ 253.114387][T12889] input: syz1 as /devices/virtual/input/input96 19:04:49 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:49 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 253.203913][T12903] input: syz1 as /devices/virtual/input/input97 [ 253.310653][ T3693] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 253.569463][ T3693] usb 3-1: Using ep0 maxpacket: 8 [ 253.689750][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 253.714889][ T3693] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.724607][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.770843][ T3693] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:52 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d00090582"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:52 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) [ 255.899319][ T9763] usb 3-1: USB disconnect, device number 50 19:04:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 255.957217][T12944] input: syz1 as /devices/virtual/input/input98 [ 255.967537][T12947] input: syz1 as /devices/virtual/input/input99 [ 255.981589][T12949] input: syz1 as /devices/virtual/input/input100 19:04:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:52 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:52 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x0) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 256.110198][T12972] input: syz1 as /devices/virtual/input/input101 [ 256.117900][T12973] input: syz1 as /devices/virtual/input/input102 [ 256.399158][ T9763] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 256.679128][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 256.819422][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.829220][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 256.838276][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.900767][ T9763] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:55 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d00090582"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:55 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(0xffffffffffffffff, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:55 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 258.999059][ T54] usb 3-1: USB disconnect, device number 51 19:04:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 259.057117][T13027] input: syz1 as /devices/virtual/input/input103 [ 259.081200][T13033] input: syz1 as /devices/virtual/input/input104 [ 259.088628][T13035] input: syz1 as /devices/virtual/input/input105 19:04:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:55 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 259.193008][T13056] input: syz1 as /devices/virtual/input/input106 19:04:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 259.297809][T13069] input: syz1 as /devices/virtual/input/input108 [ 259.458854][ T54] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 259.698870][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 259.820678][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 259.830447][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 259.839948][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.890311][ T54] iowarrior 3-1:1.0: no interrupt-in endpoint found 19:04:58 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d0009058203"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:04:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(0xffffffffffffffff, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:04:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:58 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 262.048844][ T54] usb 3-1: USB disconnect, device number 52 19:04:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:58 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 262.096427][T13106] input: syz1 as /devices/virtual/input/input109 [ 262.116537][T13111] input: syz1 as /devices/virtual/input/input111 19:04:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:04:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:04:58 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 262.229759][T13131] input: syz1 as /devices/virtual/input/input113 [ 262.498613][ T54] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 262.738540][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 262.858717][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.871182][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 262.881596][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.890934][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.158867][ T54] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 263.905650][T13166] iowarrior 3-1:1.0: Error -90 while submitting URB 19:05:01 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d0009058203"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(0xffffffffffffffff, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:01 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 265.107483][ T3693] usb 3-1: USB disconnect, device number 53 [ 265.114199][ T3693] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 265.155218][T13182] input: syz1 as /devices/virtual/input/input114 [ 265.170038][T13183] input: syz1 as /devices/virtual/input/input115 19:05:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:01 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 265.271823][T13204] input: syz1 as /devices/virtual/input/input118 [ 265.339770][T13215] input: syz1 as /devices/virtual/input/input119 [ 265.599881][ T3693] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 265.868268][ T3693] usb 3-1: Using ep0 maxpacket: 8 [ 266.018509][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 266.029388][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 266.039929][ T3693] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 266.049351][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.320192][ T3693] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 267.065438][T13247] iowarrior 3-1:1.0: Error -90 while submitting URB 19:05:04 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d0009058203"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:04 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:04 executing program 4: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) [ 268.188121][ T7] usb 3-1: USB disconnect, device number 54 [ 268.222440][ T7] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:04 executing program 4: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:04 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 268.256257][T13261] input: syz1 as /devices/virtual/input/input121 [ 268.268073][T13265] input: syz1 as /devices/virtual/input/input122 19:05:04 executing program 4: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 19:05:05 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 268.668079][ T7] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 268.958379][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 269.098036][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.108967][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.127975][ T7] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 269.145729][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.418425][ T7] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 270.165087][T13323] iowarrior 3-1:1.0: Error -90 while submitting URB 19:05:07 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 19:05:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:07 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) 19:05:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 271.267866][ T9763] usb 3-1: USB disconnect, device number 55 [ 271.274534][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:07 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) 19:05:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 271.346978][T13342] input: syz1 as /devices/virtual/input/input123 [ 271.359007][T13344] input: syz1 as /devices/virtual/input/input124 19:05:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 271.405665][T13355] input: syz1 as /devices/virtual/input/input125 19:05:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 271.577850][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 271.583858][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 271.597760][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 271.613690][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 271.627796][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 271.637819][ T7] Bluetooth: hci5: command 0x0406 tx timeout [ 271.767746][ T9763] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 272.037786][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 272.167921][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 272.186199][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 272.195975][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.448009][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 272.659553][ T9763] usb 3-1: USB disconnect, device number 56 [ 272.666310][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:10 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, 0xffffffffffffffff) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) 19:05:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) 19:05:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 273.410669][T13420] input: syz1 as /devices/virtual/input/input129 [ 273.418693][T13421] input: syz1 as /devices/virtual/input/input130 [ 273.425906][T13422] input: syz1 as /devices/virtual/input/input132 19:05:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:10 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 273.708793][T13456] input: syz1 as /devices/virtual/input/input138 [ 273.718140][ T9763] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 273.957575][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 274.087672][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.098639][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 274.108378][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.388328][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 274.588478][ T54] usb 3-1: USB disconnect, device number 57 [ 274.597760][ T54] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:11 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) 19:05:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 19:05:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:11 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 275.341535][T13509] input: syz1 as /devices/virtual/input/input139 [ 275.384407][T13516] input: syz1 as /devices/virtual/input/input140 [ 275.389782][T13517] input: syz1 as /devices/virtual/input/input141 [ 275.400683][T13518] input: syz1 as /devices/virtual/input/input142 19:05:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 275.580725][T13541] input: syz1 as /devices/virtual/input/input143 [ 275.627757][ T54] usb 3-1: new high-speed USB device number 58 using dummy_hcd 19:05:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 275.868755][ T54] usb 3-1: Using ep0 maxpacket: 8 19:05:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 275.989118][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.015376][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 276.047390][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.072187][T13565] input: syz1 as /devices/virtual/input/input144 19:05:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) [ 276.242960][T13582] input: syz1 as /devices/virtual/input/input145 [ 276.339464][ T54] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 276.540276][ T54] usb 3-1: USB disconnect, device number 58 [ 276.547571][ T54] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:13 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2, 0x2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) 19:05:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) [ 277.283922][T13621] input: syz1 as /devices/virtual/input/input146 [ 277.293877][T13619] input: syz1 as /devices/virtual/input/input147 [ 277.312079][T13628] input: syz1 as /devices/virtual/input/input148 19:05:14 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 277.577280][ T3693] usb 3-1: new high-speed USB device number 59 using dummy_hcd 19:05:14 executing program 5 (fault-call:6 fault-nth:0): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 277.827814][ T3693] usb 3-1: Using ep0 maxpacket: 8 [ 277.847948][T13656] FAULT_INJECTION: forcing a failure. [ 277.847948][T13656] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 277.863318][T13656] CPU: 1 PID: 13656 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 277.872079][T13656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 277.882130][T13656] Call Trace: [ 277.885488][T13656] dump_stack+0x116/0x15d [ 277.889868][T13656] should_fail+0x231/0x240 [ 277.894278][T13656] should_fail_usercopy+0x16/0x20 [ 277.899292][T13656] _copy_from_user+0x1c/0xd0 [ 277.903909][T13656] __copy_msghdr_from_user+0x42/0x340 [ 277.909266][T13656] ? __fget_light+0x219/0x260 [ 277.913920][T13656] __sys_sendmmsg+0x20f/0x4b0 [ 277.918575][T13656] ? kstrtoull+0x30e/0x350 [ 277.922981][T13656] ? kstrtouint_from_user+0x104/0x130 [ 277.928409][T13656] ? __rcu_read_unlock+0x51/0x220 [ 277.933410][T13656] ? fsnotify_perm+0x59/0x2d0 [ 277.938140][T13656] ? __fsnotify_parent+0x21f/0x460 [ 277.943261][T13656] ? get_pid_task+0x90/0xc0 [ 277.947745][T13656] ? __sb_end_write+0x7f/0xc0 [ 277.952404][T13656] ? vfs_write+0x492/0x690 [ 277.956854][T13656] ? __fget_light+0x219/0x260 [ 277.961541][T13656] ? fput+0x2d/0x130 [ 277.965419][T13656] ? ksys_write+0x157/0x180 [ 277.969904][T13656] __x64_sys_sendmmsg+0x53/0x60 [ 277.974731][T13656] do_syscall_64+0x39/0x80 [ 277.979188][T13656] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 277.985065][T13656] RIP: 0033:0x45deb9 [ 277.988946][T13656] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.008527][T13656] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 278.016915][T13656] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 19:05:14 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 278.024863][T13656] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 278.032855][T13656] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 278.040805][T13656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.048761][T13656] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:14 executing program 5 (fault-call:6 fault-nth:1): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 278.139806][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 278.147402][T13670] input: syz1 as /devices/virtual/input/input149 [ 278.163837][ T3693] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 278.171722][T13674] FAULT_INJECTION: forcing a failure. [ 278.171722][T13674] name failslab, interval 1, probability 0, space 0, times 1 [ 278.174226][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.205447][T13674] CPU: 0 PID: 13674 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 278.205665][T13677] FAULT_INJECTION: forcing a failure. [ 278.205665][T13677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.214273][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.214276][T13674] Call Trace: [ 278.214294][T13674] dump_stack+0x116/0x15d [ 278.214314][T13674] should_fail+0x231/0x240 [ 278.249364][T13674] __should_failslab+0x81/0x90 [ 278.254120][T13674] should_failslab+0x5/0x20 [ 278.258612][T13674] slab_pre_alloc_hook+0x20/0xb0 [ 278.263538][T13674] kmem_cache_alloc+0x4d/0x280 [ 278.268286][T13674] ? dst_alloc+0x112/0x2c0 [ 278.272696][T13674] dst_alloc+0x112/0x2c0 [ 278.276918][T13674] __mkroute_output+0x3bf/0xcc0 [ 278.281745][T13674] ? tomoyo_profile+0x17/0x30 [ 278.286486][T13674] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 278.292378][T13674] ip_route_output_flow+0xaf/0x160 [ 278.297519][T13674] udp_sendmsg+0xfc5/0x15e0 [ 278.302013][T13674] ? ip_do_fragment+0xfa0/0xfa0 [ 278.306844][T13674] ? __fsnotify_parent+0x21f/0x460 [ 278.311975][T13674] ? aa_sock_msg_perm+0x87/0x120 [ 278.316893][T13674] inet_sendmsg+0x5f/0x80 [ 278.321202][T13674] ? inet_send_prepare+0x210/0x210 [ 278.326339][T13674] ____sys_sendmsg+0x352/0x4c0 [ 278.331132][T13674] ? import_iovec+0xb8/0xd0 [ 278.335674][T13674] __sys_sendmmsg+0x335/0x4b0 [ 278.340406][T13674] ? kstrtoull+0x30f/0x350 [ 278.344819][T13674] ? kstrtouint_from_user+0x104/0x130 [ 278.350177][T13674] ? __rcu_read_unlock+0x51/0x220 [ 278.355195][T13674] ? fsnotify_perm+0x59/0x2d0 [ 278.359872][T13674] ? __fsnotify_parent+0x21f/0x460 [ 278.365013][T13674] ? get_pid_task+0x90/0xc0 [ 278.369500][T13674] ? __sb_end_write+0x7f/0xc0 [ 278.374222][T13674] ? vfs_write+0x492/0x690 [ 278.378634][T13674] ? __fget_light+0x219/0x260 [ 278.383314][T13674] ? fput+0x2d/0x130 [ 278.387264][T13674] ? ksys_write+0x157/0x180 [ 278.391761][T13674] __x64_sys_sendmmsg+0x53/0x60 [ 278.396602][T13674] do_syscall_64+0x39/0x80 [ 278.401002][T13674] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 278.406880][T13674] RIP: 0033:0x45deb9 [ 278.410765][T13674] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.430385][T13674] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 278.438868][T13674] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 278.446832][T13674] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 278.454800][T13674] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 278.462885][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.470844][T13674] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 278.478842][T13677] CPU: 1 PID: 13677 Comm: syz-executor.0 Not tainted 5.10.0-rc2-syzkaller #0 [ 278.487599][T13677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.497773][T13677] Call Trace: [ 278.501165][T13677] dump_stack+0x116/0x15d [ 278.505477][T13677] should_fail+0x231/0x240 [ 278.509872][T13677] should_fail_usercopy+0x16/0x20 [ 278.514937][T13677] _copy_from_user+0x1c/0xd0 [ 278.519517][T13677] iovec_from_user+0x1ab/0x2d0 [ 278.524371][T13677] ? kstrtoull+0x30e/0x350 [ 278.528775][T13677] __import_iovec+0x52/0x280 [ 278.533361][T13677] import_iovec+0xb8/0xd0 [ 278.537758][T13677] do_readv+0x108/0x280 [ 278.541946][T13677] ? __fget_light+0x219/0x260 [ 278.546627][T13677] ? fput+0x2d/0x130 [ 278.550507][T13677] ? ksys_write+0x157/0x180 [ 278.555027][T13677] __x64_sys_readv+0x41/0x50 [ 278.559675][T13677] do_syscall_64+0x39/0x80 [ 278.564091][T13677] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 278.569968][T13677] RIP: 0033:0x45deb9 [ 278.573869][T13677] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 278.593463][T13677] RSP: 002b:00007fb31989dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 278.601870][T13677] RAX: ffffffffffffffda RBX: 0000000000026c80 RCX: 000000000045deb9 [ 278.609832][T13677] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 278.617801][T13677] RBP: 00007fb31989dca0 R08: 0000000000000000 R09: 0000000000000000 [ 278.625878][T13677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.633848][T13677] R13: 00007fff2397551f R14: 00007fb31989e9c0 R15: 000000000118bfd4 [ 278.649060][ T3693] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 278.706882][ T3693] usb 3-1: USB disconnect, device number 59 [ 278.739171][ T3693] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:16 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) 19:05:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:16 executing program 5 (fault-call:6 fault-nth:2): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:16 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 279.438650][T13710] FAULT_INJECTION: forcing a failure. [ 279.438650][T13710] name failslab, interval 1, probability 0, space 0, times 0 [ 279.440066][T13713] input: syz1 as /devices/virtual/input/input151 [ 279.460280][T13714] input: syz1 as /devices/virtual/input/input152 [ 279.471888][T13710] CPU: 0 PID: 13710 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 279.480661][T13710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.490706][T13710] Call Trace: [ 279.493996][T13710] dump_stack+0x116/0x15d [ 279.498415][T13710] should_fail+0x231/0x240 [ 279.502841][T13710] __should_failslab+0x81/0x90 [ 279.507628][T13710] should_failslab+0x5/0x20 [ 279.512134][T13710] slab_pre_alloc_hook+0x20/0xb0 [ 279.517208][T13710] kmem_cache_alloc_node+0x5c/0x260 [ 279.522402][T13710] ? __alloc_skb+0x98/0x2d0 [ 279.526903][T13710] __alloc_skb+0x98/0x2d0 [ 279.531614][T13710] alloc_skb_with_frags+0x90/0x370 [ 279.536718][T13710] ? _raw_spin_unlock_irq+0x22/0x40 [ 279.541940][T13710] ? finish_task_switch+0x81/0x280 [ 279.547047][T13710] sock_alloc_send_pskb+0x3c2/0x470 [ 279.552234][T13710] sock_alloc_send_skb+0x2d/0x40 [ 279.557176][T13710] __ip_append_data+0x12fb/0x1ca0 [ 279.562381][T13710] ? __mkroute_output+0x7bd/0xcc0 [ 279.567402][T13710] ? ip_do_fragment+0xfa0/0xfa0 [ 279.572255][T13710] ip_make_skb+0x139/0x2c0 [ 279.576674][T13710] ? ip_do_fragment+0xfa0/0xfa0 [ 279.578861][T13727] FAULT_INJECTION: forcing a failure. [ 279.578861][T13727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.581525][T13710] udp_sendmsg+0x13ff/0x15e0 [ 279.599116][T13710] ? ip_do_fragment+0xfa0/0xfa0 [ 279.603977][T13710] ? aa_sock_msg_perm+0x87/0x120 [ 279.608957][T13710] inet_sendmsg+0x5f/0x80 [ 279.613290][T13710] ? inet_send_prepare+0x210/0x210 [ 279.618392][T13710] ____sys_sendmsg+0x352/0x4c0 [ 279.623164][T13710] ? import_iovec+0xb8/0xd0 [ 279.627657][T13710] __sys_sendmmsg+0x335/0x4b0 [ 279.632329][T13710] ? kstrtoull+0x30f/0x350 [ 279.636790][T13710] ? kstrtouint_from_user+0x104/0x130 [ 279.642156][T13710] ? __rcu_read_unlock+0x51/0x220 [ 279.648134][T13710] ? fsnotify_perm+0x59/0x2d0 [ 279.652798][T13710] ? __fsnotify_parent+0x21f/0x460 [ 279.657930][T13710] ? get_pid_task+0x90/0xc0 [ 279.662429][T13710] ? __sb_end_write+0x7f/0xc0 [ 279.667105][T13710] ? vfs_write+0x492/0x690 [ 279.671531][T13710] ? __fget_light+0x219/0x260 [ 279.676193][T13710] ? fput+0x2d/0x130 [ 279.680076][T13710] ? ksys_write+0x157/0x180 [ 279.684576][T13710] __x64_sys_sendmmsg+0x53/0x60 [ 279.689522][T13710] do_syscall_64+0x39/0x80 [ 279.693941][T13710] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 279.699840][T13710] RIP: 0033:0x45deb9 [ 279.703722][T13710] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.723362][T13710] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 279.731762][T13710] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 279.739831][T13710] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 279.747794][T13710] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 279.755773][T13710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.763726][T13710] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 279.771689][T13727] CPU: 1 PID: 13727 Comm: syz-executor.0 Not tainted 5.10.0-rc2-syzkaller #0 19:05:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 279.780451][T13727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.790500][T13727] Call Trace: [ 279.793791][T13727] dump_stack+0x116/0x15d [ 279.798115][T13727] should_fail+0x231/0x240 [ 279.802607][T13727] should_fail_usercopy+0x16/0x20 [ 279.807626][T13727] _copy_to_user+0x1c/0x90 [ 279.812102][T13727] input_event_to_user+0x165/0x1c0 [ 279.817210][T13727] uinput_read+0x371/0x690 [ 279.821618][T13727] do_iter_read+0x2be/0x4b0 [ 279.826103][T13727] do_readv+0x13d/0x280 [ 279.830240][T13727] ? fput+0x2d/0x130 [ 279.834122][T13727] ? ksys_write+0x157/0x180 19:05:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 279.838645][T13727] __x64_sys_readv+0x41/0x50 [ 279.843220][T13727] do_syscall_64+0x39/0x80 [ 279.847626][T13727] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 279.853507][T13727] RIP: 0033:0x45deb9 [ 279.857391][T13727] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 279.876991][T13727] RSP: 002b:00007fb31987cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 279.885401][T13727] RAX: ffffffffffffffda RBX: 0000000000026c80 RCX: 000000000045deb9 [ 279.893368][T13727] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 279.901383][T13727] RBP: 00007fb31987cca0 R08: 0000000000000000 R09: 0000000000000000 [ 279.909345][T13727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.917303][T13727] R13: 00007fff2397551f R14: 00007fb31987d9c0 R15: 000000000118c07c 19:05:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 279.951587][T13739] input: syz1 as /devices/virtual/input/input155 19:05:16 executing program 5 (fault-call:6 fault-nth:3): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 280.002046][T13745] input: syz1 as /devices/virtual/input/input156 [ 280.043446][T13753] FAULT_INJECTION: forcing a failure. [ 280.043446][T13753] name failslab, interval 1, probability 0, space 0, times 0 [ 280.057388][T13753] CPU: 0 PID: 13753 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 280.066146][T13753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.076191][T13753] Call Trace: [ 280.079521][T13753] dump_stack+0x116/0x15d [ 280.083846][T13753] should_fail+0x231/0x240 [ 280.087050][ T8093] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 280.088264][T13753] ? alloc_skb_with_frags+0x90/0x370 [ 280.088318][T13753] __should_failslab+0x81/0x90 [ 280.105838][T13753] should_failslab+0x5/0x20 [ 280.110330][T13753] slab_pre_alloc_hook+0x20/0xb0 [ 280.115257][T13753] ? alloc_skb_with_frags+0x90/0x370 [ 280.120632][T13753] kmem_cache_alloc_node_trace+0x61/0x240 [ 280.126340][T13753] ? __kmalloc_node_track_caller+0x30/0x40 [ 280.132142][T13753] ? alloc_skb_with_frags+0x90/0x370 [ 280.137465][T13753] __kmalloc_node_track_caller+0x30/0x40 [ 280.143249][T13753] __alloc_skb+0xd2/0x2d0 [ 280.147571][T13753] alloc_skb_with_frags+0x90/0x370 [ 280.152668][T13753] ? _raw_spin_unlock_irq+0x22/0x40 [ 280.157991][T13753] ? finish_task_switch+0x81/0x280 [ 280.163091][T13753] sock_alloc_send_pskb+0x3c2/0x470 [ 280.168294][T13753] sock_alloc_send_skb+0x2d/0x40 [ 280.173236][T13753] __ip_append_data+0x12fb/0x1ca0 [ 280.178292][T13753] ? __mkroute_output+0x7bd/0xcc0 [ 280.183317][T13753] ? ip_do_fragment+0xfa0/0xfa0 [ 280.188169][T13753] ip_make_skb+0x139/0x2c0 [ 280.192582][T13753] ? ip_do_fragment+0xfa0/0xfa0 [ 280.197442][T13753] udp_sendmsg+0x13ff/0x15e0 [ 280.202052][T13753] ? ip_do_fragment+0xfa0/0xfa0 [ 280.206912][T13753] ? aa_sock_msg_perm+0x87/0x120 [ 280.211863][T13753] inet_sendmsg+0x5f/0x80 [ 280.216181][T13753] ? inet_send_prepare+0x210/0x210 [ 280.221281][T13753] ____sys_sendmsg+0x352/0x4c0 [ 280.226045][T13753] ? import_iovec+0xb8/0xd0 [ 280.230569][T13753] __sys_sendmmsg+0x335/0x4b0 [ 280.235249][T13753] ? kstrtoull+0x30f/0x350 [ 280.239663][T13753] ? kstrtouint_from_user+0x104/0x130 [ 280.245021][T13753] ? __rcu_read_unlock+0x51/0x220 [ 280.250040][T13753] ? fsnotify_perm+0x59/0x2d0 [ 280.254706][T13753] ? __fsnotify_parent+0x21f/0x460 [ 280.259833][T13753] ? get_pid_task+0x90/0xc0 [ 280.264399][T13753] ? __sb_end_write+0x7f/0xc0 [ 280.269073][T13753] ? vfs_write+0x492/0x690 [ 280.273473][T13753] ? __fget_light+0x219/0x260 [ 280.278124][T13753] ? fput+0x2d/0x130 [ 280.281991][T13753] ? ksys_write+0x157/0x180 [ 280.286469][T13753] __x64_sys_sendmmsg+0x53/0x60 [ 280.291300][T13753] do_syscall_64+0x39/0x80 [ 280.295695][T13753] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 280.301562][T13753] RIP: 0033:0x45deb9 [ 280.305439][T13753] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.325050][T13753] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.327027][ T8093] usb 3-1: Using ep0 maxpacket: 8 [ 280.333542][T13753] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 280.333550][T13753] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 280.333705][T13753] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 280.362694][T13753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 280.370655][T13753] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 280.467153][ T8093] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.478189][ T8093] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 280.488551][ T8093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.767392][ T8093] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 280.969195][ T3693] usb 3-1: USB disconnect, device number 60 [ 280.975842][ T3693] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:18 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:18 executing program 5 (fault-call:6 fault-nth:4): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 19:05:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:18 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 281.723918][T13799] input: syz1 as /devices/virtual/input/input157 [ 281.730760][T13797] input: syz1 as /devices/virtual/input/input158 [ 281.732397][T13801] input: syz1 as /devices/virtual/input/input159 [ 281.744898][T13803] FAULT_INJECTION: forcing a failure. [ 281.744898][T13803] name failslab, interval 1, probability 0, space 0, times 0 [ 281.760758][T13803] CPU: 1 PID: 13803 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 281.769521][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.779575][T13803] Call Trace: [ 281.782886][T13803] dump_stack+0x116/0x15d [ 281.787223][T13803] should_fail+0x231/0x240 [ 281.791710][T13803] __should_failslab+0x81/0x90 [ 281.796467][T13803] should_failslab+0x5/0x20 [ 281.800982][T13803] slab_pre_alloc_hook+0x20/0xb0 [ 281.805913][T13803] kmem_cache_alloc+0x4d/0x280 [ 281.810688][T13803] ? __nf_conntrack_alloc+0xc0/0x270 [ 281.815993][T13803] __nf_conntrack_alloc+0xc0/0x270 [ 281.821201][T13803] init_conntrack+0x178/0xa90 [ 281.825886][T13803] nf_conntrack_in+0x37f/0xad4 [ 281.830657][T13803] ipv4_conntrack_local+0xc2/0x120 [ 281.835838][T13803] ? ipv4_conntrack_in+0x20/0x20 [ 281.840847][T13803] nf_hook_slow+0x72/0x170 [ 281.845258][T13803] __ip_local_out+0x282/0x2a0 [ 281.849973][T13803] ? __ip_local_out+0x2a0/0x2a0 [ 281.854815][T13803] ip_send_skb+0x2c/0xe0 [ 281.859058][T13803] udp_send_skb+0x619/0x850 [ 281.863559][T13803] udp_sendmsg+0x142c/0x15e0 [ 281.868226][T13803] ? ip_do_fragment+0xfa0/0xfa0 [ 281.873110][T13803] ? aa_sock_msg_perm+0x87/0x120 [ 281.878025][T13803] inet_sendmsg+0x5f/0x80 [ 281.882329][T13803] ? inet_send_prepare+0x210/0x210 [ 281.887446][T13803] ____sys_sendmsg+0x352/0x4c0 [ 281.892188][T13803] ? import_iovec+0xb8/0xd0 [ 281.896673][T13803] __sys_sendmmsg+0x335/0x4b0 [ 281.901439][T13803] ? kstrtoull+0x30f/0x350 [ 281.905830][T13803] ? kstrtouint_from_user+0x104/0x130 [ 281.911174][T13803] ? __rcu_read_unlock+0x51/0x220 [ 281.916203][T13803] ? fsnotify_perm+0x59/0x2d0 [ 281.920919][T13803] ? __fsnotify_parent+0x21f/0x460 [ 281.926188][T13803] ? get_pid_task+0x90/0xc0 [ 281.930740][T13803] ? __sb_end_write+0x7f/0xc0 [ 281.935395][T13803] ? vfs_write+0x492/0x690 [ 281.939790][T13803] ? __fget_light+0x219/0x260 [ 281.944452][T13803] ? fput+0x2d/0x130 [ 281.948389][T13803] ? ksys_write+0x157/0x180 [ 281.952875][T13803] __x64_sys_sendmmsg+0x53/0x60 [ 281.957734][T13803] do_syscall_64+0x39/0x80 [ 281.962193][T13803] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 281.968080][T13803] RIP: 0033:0x45deb9 [ 281.971950][T13803] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.991695][T13803] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 282.000083][T13803] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 282.008029][T13803] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 282.015976][T13803] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 19:05:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 282.023951][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 282.031898][T13803] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:18 executing program 5 (fault-call:6 fault-nth:5): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 282.150065][T13829] FAULT_INJECTION: forcing a failure. [ 282.150065][T13829] name failslab, interval 1, probability 0, space 0, times 0 [ 282.165293][T13830] input: syz1 as /devices/virtual/input/input160 [ 282.177606][T13829] CPU: 0 PID: 13829 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 282.186405][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.196439][T13829] Call Trace: [ 282.199710][T13829] dump_stack+0x116/0x15d [ 282.204029][T13829] should_fail+0x231/0x240 [ 282.208462][T13829] __should_failslab+0x81/0x90 [ 282.213200][T13829] should_failslab+0x5/0x20 [ 282.217786][T13829] slab_pre_alloc_hook+0x20/0xb0 [ 282.222775][T13829] __kmalloc_track_caller+0x71/0x2c0 [ 282.228056][T13829] ? nf_ct_ext_add+0x145/0x1f0 [ 282.232951][T13829] krealloc+0x3f/0xa0 [ 282.236924][T13829] nf_ct_ext_add+0x145/0x1f0 [ 282.241531][T13829] init_conntrack+0x521/0xa90 [ 282.246204][T13829] nf_conntrack_in+0x37f/0xad4 [ 282.251168][T13829] ipv4_conntrack_local+0xc2/0x120 [ 282.256384][T13829] ? ipv4_conntrack_in+0x20/0x20 [ 282.261325][T13829] nf_hook_slow+0x72/0x170 [ 282.265734][T13829] __ip_local_out+0x282/0x2a0 [ 282.270476][T13829] ? __ip_local_out+0x2a0/0x2a0 [ 282.275310][T13829] ip_send_skb+0x2c/0xe0 [ 282.279545][T13829] udp_send_skb+0x619/0x850 [ 282.284045][T13829] udp_sendmsg+0x142c/0x15e0 [ 282.288663][T13829] ? ip_do_fragment+0xfa0/0xfa0 [ 282.293527][T13829] ? aa_sock_msg_perm+0x87/0x120 [ 282.298456][T13829] inet_sendmsg+0x5f/0x80 [ 282.302839][T13829] ? inet_send_prepare+0x210/0x210 [ 282.307945][T13829] ____sys_sendmsg+0x352/0x4c0 [ 282.312704][T13829] ? import_iovec+0xb8/0xd0 [ 282.317197][T13829] __sys_sendmmsg+0x335/0x4b0 [ 282.321871][T13829] ? kstrtoull+0x30f/0x350 [ 282.326290][T13829] ? kstrtouint_from_user+0x104/0x130 [ 282.331674][T13829] ? __rcu_read_unlock+0x51/0x220 [ 282.336694][T13829] ? fsnotify_perm+0x59/0x2d0 [ 282.341362][T13829] ? __fsnotify_parent+0x21f/0x460 [ 282.346471][T13829] ? get_pid_task+0x90/0xc0 [ 282.350970][T13829] ? __sb_end_write+0x7f/0xc0 [ 282.355643][T13829] ? vfs_write+0x492/0x690 [ 282.360059][T13829] ? __fget_light+0x219/0x260 [ 282.364735][T13829] ? fput+0x2d/0x130 [ 282.368670][T13829] ? ksys_write+0x157/0x180 [ 282.373163][T13829] __x64_sys_sendmmsg+0x53/0x60 [ 282.378021][T13829] do_syscall_64+0x39/0x80 [ 282.382445][T13829] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 282.388398][T13829] RIP: 0033:0x45deb9 [ 282.392329][T13829] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.411926][T13829] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 282.420317][T13829] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 282.428276][T13829] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 282.436234][T13829] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 282.444179][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 282.452135][T13829] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 282.466881][ T9763] usb 3-1: new high-speed USB device number 61 using dummy_hcd 19:05:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:19 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) [ 282.530740][T13816] FAULT_INJECTION: forcing a failure. [ 282.530740][T13816] name failslab, interval 1, probability 0, space 0, times 0 [ 282.570993][T13816] CPU: 0 PID: 13816 Comm: syz-executor.0 Not tainted 5.10.0-rc2-syzkaller #0 [ 282.578598][T13845] input: syz1 as /devices/virtual/input/input161 [ 282.579775][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.579779][T13816] Call Trace: [ 282.579804][T13816] dump_stack+0x116/0x15d [ 282.603966][T13816] should_fail+0x231/0x240 [ 282.608386][T13816] __should_failslab+0x81/0x90 [ 282.613144][T13816] should_failslab+0x5/0x20 [ 282.617641][T13816] slab_pre_alloc_hook+0x20/0xb0 [ 282.622570][T13816] ? dev_uevent_filter+0x70/0x70 [ 282.627502][T13816] kmem_cache_alloc_trace+0x52/0x280 [ 282.632828][T13816] ? kobject_uevent_env+0x197/0xc10 [ 282.638012][T13816] ? kernfs_put+0x39/0x300 [ 282.642499][T13816] ? dev_uevent_filter+0x70/0x70 [ 282.647466][T13816] kobject_uevent_env+0x197/0xc10 [ 282.652552][T13816] ? _raw_spin_unlock_irq+0x22/0x40 [ 282.657874][T13816] ? device_pm_check_callbacks+0x633/0x650 [ 282.663706][T13816] kobject_uevent+0x18/0x20 [ 282.668199][T13816] device_del+0x98e/0xa20 [ 282.672518][T13816] cdev_device_del+0x17/0x90 [ 282.677096][T13816] evdev_disconnect+0x2e/0x70 [ 282.681796][T13816] __input_unregister_device+0x1ef/0x330 [ 282.687426][T13816] ? __fsnotify_parent+0x21f/0x460 [ 282.692526][T13816] input_unregister_device+0x79/0xb0 [ 282.697804][T13816] uinput_destroy_device+0x4a7/0x4e0 [ 282.703078][T13816] ? uinput_open+0xf0/0xf0 [ 282.707485][T13816] uinput_release+0x24/0x30 [ 282.711971][T13816] __fput+0x243/0x4d0 [ 282.715947][T13816] ____fput+0x11/0x20 [ 282.719926][T13816] task_work_run+0x8e/0x110 [ 282.724426][T13816] get_signal+0x3eb/0x1510 [ 282.728909][T13816] ? do_readv+0x241/0x280 [ 282.733289][T13816] arch_do_signal+0x25/0x260 [ 282.737870][T13816] ? fput+0x2d/0x130 [ 282.741876][T13816] exit_to_user_mode_prepare+0xde/0x170 [ 282.747438][T13816] syscall_exit_to_user_mode+0x16/0x30 [ 282.752889][T13816] do_syscall_64+0x45/0x80 [ 282.757303][T13816] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 282.763187][T13816] RIP: 0033:0x45deb9 [ 282.767089][T13816] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.782801][T13853] input: syz1 as /devices/virtual/input/input162 [ 282.786681][T13816] RSP: 002b:00007fb31987cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 282.786693][T13816] RAX: fffffffffffffe00 RBX: 0000000000026c80 RCX: 000000000045deb9 [ 282.786707][T13816] RDX: 0000000000000001 RSI: 0000000020000640 RDI: 0000000000000003 [ 282.817387][T13816] RBP: 00007fb31987cca0 R08: 0000000000000000 R09: 0000000000000000 [ 282.825403][T13816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.833389][T13816] R13: 00007fff2397551f R14: 00007fb31987d9c0 R15: 000000000118c07c [ 282.968373][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 283.086886][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.086905][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 283.086916][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.337219][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 283.549475][ T9763] usb 3-1: USB disconnect, device number 61 [ 283.559606][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:20 executing program 5 (fault-call:6 fault-nth:6): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:20 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) [ 284.290637][T13905] input: syz1 as /devices/virtual/input/input163 [ 284.298929][T13907] input: syz1 as /devices/virtual/input/input164 [ 284.310864][T13906] input: syz1 as /devices/virtual/input/input165 [ 284.324360][T13909] FAULT_INJECTION: forcing a failure. [ 284.324360][T13909] name failslab, interval 1, probability 0, space 0, times 0 [ 284.337016][T13909] CPU: 1 PID: 13909 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 284.345762][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.355813][T13909] Call Trace: [ 284.359107][T13909] dump_stack+0x116/0x15d [ 284.363430][T13909] should_fail+0x231/0x240 [ 284.367990][T13909] __should_failslab+0x81/0x90 [ 284.372768][T13909] should_failslab+0x5/0x20 [ 284.377268][T13909] slab_pre_alloc_hook+0x20/0xb0 [ 284.382198][T13909] kmem_cache_alloc+0x4d/0x280 19:05:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 284.386963][T13909] ? skb_clone+0x131/0x1e0 [ 284.391379][T13909] skb_clone+0x131/0x1e0 [ 284.395620][T13909] dev_queue_xmit_nit+0x1ad/0x5d0 [ 284.400640][T13909] xmit_one+0x71/0x2e0 [ 284.404758][T13909] __dev_queue_xmit+0xeef/0x1510 [ 284.409757][T13909] ? __rcu_read_unlock+0x3a/0x220 [ 284.414860][T13909] dev_queue_xmit+0x13/0x20 [ 284.419365][T13909] ip_finish_output2+0xb09/0xba0 [ 284.424323][T13909] __ip_finish_output+0x3d8/0x430 [ 284.429349][T13909] ip_finish_output+0x39/0x160 [ 284.434104][T13909] ip_output+0xf6/0x1a0 [ 284.438255][T13909] ? ip_mc_finish_output+0x260/0x260 [ 284.443535][T13909] ip_send_skb+0x6e/0xe0 [ 284.447791][T13909] udp_send_skb+0x619/0x850 [ 284.452354][T13909] udp_sendmsg+0x142c/0x15e0 [ 284.456942][T13909] ? ip_do_fragment+0xfa0/0xfa0 [ 284.461794][T13909] ? aa_sock_msg_perm+0x87/0x120 [ 284.466732][T13909] inet_sendmsg+0x5f/0x80 [ 284.471097][T13909] ? inet_send_prepare+0x210/0x210 [ 284.476200][T13909] ____sys_sendmsg+0x352/0x4c0 [ 284.480999][T13909] ? import_iovec+0xb8/0xd0 [ 284.485551][T13909] __sys_sendmmsg+0x335/0x4b0 [ 284.490233][T13909] ? kstrtoull+0x30f/0x350 [ 284.495081][T13909] ? kstrtouint_from_user+0x104/0x130 [ 284.500446][T13909] ? __rcu_read_unlock+0x51/0x220 [ 284.505477][T13909] ? fsnotify_perm+0x59/0x2d0 [ 284.510153][T13909] ? __fsnotify_parent+0x21f/0x460 [ 284.515275][T13909] ? get_pid_task+0x90/0xc0 [ 284.519822][T13909] ? __sb_end_write+0x7f/0xc0 [ 284.524490][T13909] ? vfs_write+0x492/0x690 [ 284.528909][T13909] ? __fget_light+0x219/0x260 [ 284.533585][T13909] ? fput+0x2d/0x130 [ 284.537476][T13909] ? ksys_write+0x157/0x180 [ 284.541972][T13909] __x64_sys_sendmmsg+0x53/0x60 [ 284.547774][T13909] do_syscall_64+0x39/0x80 [ 284.552314][T13909] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 284.558203][T13909] RIP: 0033:0x45deb9 [ 284.562093][T13909] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 284.563222][T13930] input: syz1 as /devices/virtual/input/input166 [ 284.581717][T13909] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 284.581729][T13909] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 284.581736][T13909] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 284.581742][T13909] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 284.581749][T13909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 284.581755][T13909] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:21 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 284.743298][T13943] input: syz1 as /devices/virtual/input/input167 19:05:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 284.786723][ T9763] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 284.826437][T13953] input: syz1 as /devices/virtual/input/input168 19:05:21 executing program 5 (fault-call:6 fault-nth:7): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 284.898168][T13960] input: syz1 as /devices/virtual/input/input169 [ 284.930205][T13967] FAULT_INJECTION: forcing a failure. [ 284.930205][T13967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.943463][T13967] CPU: 1 PID: 13967 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 284.952237][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.962286][T13967] Call Trace: [ 284.965583][T13967] dump_stack+0x116/0x15d [ 284.969960][T13967] should_fail+0x231/0x240 [ 284.974442][T13967] should_fail_usercopy+0x16/0x20 [ 284.979460][T13967] _copy_from_user+0x1c/0xd0 [ 284.984057][T13967] __copy_msghdr_from_user+0x42/0x340 [ 284.989417][T13967] ? import_iovec+0xb8/0xd0 [ 284.993912][T13967] __sys_sendmmsg+0x20f/0x4b0 [ 284.998612][T13967] ? kstrtoull+0x30f/0x350 [ 285.003019][T13967] ? kstrtouint_from_user+0x104/0x130 [ 285.008375][T13967] ? __rcu_read_unlock+0x51/0x220 [ 285.013388][T13967] ? fsnotify_perm+0x59/0x2d0 [ 285.018060][T13967] ? __fsnotify_parent+0x21f/0x460 [ 285.023169][T13967] ? get_pid_task+0x90/0xc0 [ 285.027658][T13967] ? __sb_end_write+0x7f/0xc0 [ 285.032404][T13967] ? vfs_write+0x492/0x690 [ 285.036886][T13967] ? __fget_light+0x219/0x260 [ 285.041619][T13967] ? fput+0x2d/0x130 [ 285.045573][T13967] ? ksys_write+0x157/0x180 [ 285.050067][T13967] __x64_sys_sendmmsg+0x53/0x60 [ 285.054917][T13967] do_syscall_64+0x39/0x80 [ 285.059325][T13967] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 285.065212][T13967] RIP: 0033:0x45deb9 [ 285.069097][T13967] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.088700][T13967] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.097141][T13967] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 285.105139][T13967] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 285.113088][T13967] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 285.121056][T13967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 285.129112][T13967] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:21 executing program 5 (fault-call:6 fault-nth:8): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:21 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x100) dup2(r0, r1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 285.206640][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 285.228223][T13981] input: syz1 as /devices/virtual/input/input170 [ 285.240574][T13984] input: syz1 as /devices/virtual/input/input171 [ 285.241662][T13986] FAULT_INJECTION: forcing a failure. [ 285.241662][T13986] name failslab, interval 1, probability 0, space 0, times 0 [ 285.261616][T13986] CPU: 1 PID: 13986 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 285.270397][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.280442][T13986] Call Trace: [ 285.283742][T13986] dump_stack+0x116/0x15d [ 285.288079][T13986] should_fail+0x231/0x240 [ 285.292494][T13986] __should_failslab+0x81/0x90 [ 285.297243][T13986] should_failslab+0x5/0x20 [ 285.301745][T13986] slab_pre_alloc_hook+0x20/0xb0 [ 285.306675][T13986] kmem_cache_alloc+0x4d/0x280 [ 285.311858][T13986] ? dst_alloc+0x112/0x2c0 [ 285.316256][T13986] dst_alloc+0x112/0x2c0 [ 285.320489][T13986] __mkroute_output+0x3bf/0xcc0 [ 285.325383][T13986] ? ip_output+0xf6/0x1a0 [ 285.329774][T13986] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 285.335662][T13986] ? udp_send_skb+0x6e4/0x850 [ 285.340343][T13986] ip_route_output_flow+0xaf/0x160 [ 285.345524][T13986] udp_sendmsg+0xfc5/0x15e0 [ 285.350018][T13986] ? ip_do_fragment+0xfa0/0xfa0 [ 285.354864][T13986] ? aa_sock_msg_perm+0x87/0x120 [ 285.359840][T13986] inet_sendmsg+0x5f/0x80 [ 285.364157][T13986] ? inet_send_prepare+0x210/0x210 [ 285.369258][T13986] ____sys_sendmsg+0x352/0x4c0 [ 285.374027][T13986] ? import_iovec+0xb8/0xd0 [ 285.378572][T13986] __sys_sendmmsg+0x335/0x4b0 [ 285.383355][T13986] ? kstrtoull+0x30f/0x350 [ 285.387765][T13986] ? kstrtouint_from_user+0x104/0x130 [ 285.393131][T13986] ? __rcu_read_unlock+0x51/0x220 [ 285.398148][T13986] ? fsnotify_perm+0x59/0x2d0 [ 285.402944][T13986] ? __fsnotify_parent+0x21f/0x460 [ 285.408065][T13986] ? get_pid_task+0x90/0xc0 [ 285.412565][T13986] ? __sb_end_write+0x7f/0xc0 [ 285.417235][T13986] ? vfs_write+0x492/0x690 [ 285.421730][T13986] ? __fget_light+0x219/0x260 [ 285.426420][T13986] ? fput+0x2d/0x130 [ 285.430305][T13986] ? ksys_write+0x157/0x180 [ 285.434805][T13986] __x64_sys_sendmmsg+0x53/0x60 [ 285.439692][T13986] do_syscall_64+0x39/0x80 [ 285.444107][T13986] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 285.449991][T13986] RIP: 0033:0x45deb9 [ 285.453876][T13986] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 285.473473][T13986] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 285.482060][T13986] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 285.490025][T13986] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 285.498105][T13986] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 285.506097][T13986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 285.514120][T13986] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 285.607852][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.624277][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.639237][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.898450][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 286.023361][T14004] input: syz1 as /devices/virtual/input/input172 [ 286.877946][ T9763] usb 3-1: USB disconnect, device number 62 [ 286.897331][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:24 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:24 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:24 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x100) dup2(r0, r1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:24 executing program 5 (fault-call:6 fault-nth:9): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x20000362}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 287.427819][T14047] input: syz1 as /devices/virtual/input/input173 [ 287.436093][T14048] input: syz1 as /devices/virtual/input/input174 [ 287.455040][T14053] FAULT_INJECTION: forcing a failure. [ 287.455040][T14053] name failslab, interval 1, probability 0, space 0, times 0 [ 287.469396][T14053] CPU: 1 PID: 14053 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 19:05:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 287.478175][T14053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.488228][T14053] Call Trace: [ 287.491521][T14053] dump_stack+0x116/0x15d [ 287.495853][T14053] should_fail+0x231/0x240 [ 287.500272][T14053] __should_failslab+0x81/0x90 [ 287.505087][T14053] should_failslab+0x5/0x20 [ 287.509589][T14053] slab_pre_alloc_hook+0x20/0xb0 [ 287.514524][T14053] kmem_cache_alloc_node+0x5c/0x260 [ 287.518133][T14064] input: syz1 as /devices/virtual/input/input175 [ 287.519765][T14053] ? __rcu_read_unlock+0x51/0x220 [ 287.519856][T14053] ? __alloc_skb+0x98/0x2d0 [ 287.535650][T14053] ? get_order+0x30/0x30 [ 287.539889][T14053] __alloc_skb+0x98/0x2d0 [ 287.544211][T14053] alloc_skb_with_frags+0x90/0x370 [ 287.549395][T14053] ? xmit_one+0x173/0x2e0 [ 287.553721][T14053] sock_alloc_send_pskb+0x3c2/0x470 [ 287.558966][T14053] sock_alloc_send_skb+0x2d/0x40 [ 287.563892][T14053] __ip_append_data+0x12fb/0x1ca0 [ 287.568971][T14053] ? __mkroute_output+0x7bd/0xcc0 [ 287.573996][T14053] ? ip_do_fragment+0xfa0/0xfa0 [ 287.578838][T14053] ip_make_skb+0x139/0x2c0 [ 287.583255][T14053] ? ip_do_fragment+0xfa0/0xfa0 [ 287.588129][T14053] udp_sendmsg+0x13ff/0x15e0 [ 287.592719][T14053] ? ip_do_fragment+0xfa0/0xfa0 [ 287.597646][T14053] ? aa_sock_msg_perm+0x87/0x120 [ 287.602580][T14053] inet_sendmsg+0x5f/0x80 [ 287.606901][T14053] ? inet_send_prepare+0x210/0x210 [ 287.612027][T14053] ____sys_sendmsg+0x352/0x4c0 [ 287.616780][T14053] ? import_iovec+0xb8/0xd0 [ 287.621273][T14053] __sys_sendmmsg+0x335/0x4b0 [ 287.625958][T14053] ? kstrtoull+0x30f/0x350 [ 287.630450][T14053] ? kstrtouint_from_user+0x104/0x130 [ 287.635819][T14053] ? __rcu_read_unlock+0x51/0x220 [ 287.640839][T14053] ? fsnotify_perm+0x59/0x2d0 [ 287.645575][T14053] ? __fsnotify_parent+0x21f/0x460 [ 287.650767][T14053] ? get_pid_task+0x90/0xc0 [ 287.655271][T14053] ? __sb_end_write+0x7f/0xc0 [ 287.659996][T14053] ? vfs_write+0x492/0x690 [ 287.664410][T14053] ? __fget_light+0x219/0x260 [ 287.669079][T14053] ? fput+0x2d/0x130 [ 287.672971][T14053] ? ksys_write+0x157/0x180 [ 287.677555][T14053] __x64_sys_sendmmsg+0x53/0x60 [ 287.682408][T14053] do_syscall_64+0x39/0x80 [ 287.686829][T14053] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 287.692715][T14053] RIP: 0033:0x45deb9 [ 287.696688][T14053] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 287.716313][T14053] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 19:05:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:24 executing program 5 (fault-call:6 fault-nth:10): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:24 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r1 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x100) dup2(r0, r1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 287.724779][T14053] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 287.732747][T14053] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 287.740696][T14053] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 287.748645][T14053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 287.756691][T14053] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 287.825919][T14081] input: syz1 as /devices/virtual/input/input176 [ 287.840554][T14083] FAULT_INJECTION: forcing a failure. [ 287.840554][T14083] name failslab, interval 1, probability 0, space 0, times 0 [ 287.853422][T14083] CPU: 0 PID: 14083 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 287.862200][T14083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 287.872248][T14083] Call Trace: [ 287.875587][T14083] dump_stack+0x116/0x15d [ 287.879919][T14083] should_fail+0x231/0x240 [ 287.884326][T14083] ? alloc_skb_with_frags+0x90/0x370 [ 287.889610][T14083] __should_failslab+0x81/0x90 [ 287.894366][T14083] should_failslab+0x5/0x20 [ 287.898869][T14083] slab_pre_alloc_hook+0x20/0xb0 [ 287.903827][T14083] ? alloc_skb_with_frags+0x90/0x370 [ 287.909108][T14083] kmem_cache_alloc_node_trace+0x61/0x240 [ 287.914826][T14083] ? __kmalloc_node_track_caller+0x30/0x40 [ 287.920706][T14083] ? alloc_skb_with_frags+0x90/0x370 [ 287.925984][T14083] __kmalloc_node_track_caller+0x30/0x40 [ 287.931609][T14083] __alloc_skb+0xd2/0x2d0 [ 287.935931][T14083] alloc_skb_with_frags+0x90/0x370 [ 287.941039][T14083] sock_alloc_send_pskb+0x3c2/0x470 [ 287.946229][T14083] sock_alloc_send_skb+0x2d/0x40 [ 287.951202][T14083] __ip_append_data+0x12fb/0x1ca0 [ 287.956262][T14083] ? __mkroute_output+0x7bd/0xcc0 [ 287.961281][T14083] ? ip_do_fragment+0xfa0/0xfa0 [ 287.966125][T14083] ip_make_skb+0x139/0x2c0 [ 287.970536][T14083] ? ip_do_fragment+0xfa0/0xfa0 [ 287.975383][T14083] udp_sendmsg+0x13ff/0x15e0 [ 287.979980][T14083] ? ip_do_fragment+0xfa0/0xfa0 [ 287.984830][T14083] ? aa_sock_msg_perm+0x87/0x120 [ 287.989761][T14083] inet_sendmsg+0x5f/0x80 [ 287.994161][T14083] ? inet_send_prepare+0x210/0x210 [ 287.999261][T14083] ____sys_sendmsg+0x352/0x4c0 [ 288.004018][T14083] ? import_iovec+0xb8/0xd0 [ 288.008518][T14083] __sys_sendmmsg+0x335/0x4b0 [ 288.013192][T14083] ? kstrtoull+0x30f/0x350 [ 288.017617][T14083] ? kstrtouint_from_user+0x104/0x130 [ 288.022984][T14083] ? __rcu_read_unlock+0x51/0x220 [ 288.028015][T14083] ? fsnotify_perm+0x59/0x2d0 [ 288.032683][T14083] ? __fsnotify_parent+0x21f/0x460 [ 288.037845][T14083] ? get_pid_task+0x90/0xc0 [ 288.042403][T14083] ? __sb_end_write+0x7f/0xc0 [ 288.047073][T14083] ? vfs_write+0x492/0x690 [ 288.051489][T14083] ? __fget_light+0x219/0x260 [ 288.056199][T14083] ? fput+0x2d/0x130 [ 288.060105][T14083] ? ksys_write+0x157/0x180 [ 288.064583][T14083] __x64_sys_sendmmsg+0x53/0x60 [ 288.069412][T14083] do_syscall_64+0x39/0x80 [ 288.073870][T14083] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 288.079733][T14083] RIP: 0033:0x45deb9 [ 288.083723][T14083] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.103382][T14083] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 288.111801][T14083] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 19:05:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r0, 0x0, 0x0) 19:05:24 executing program 5 (fault-call:6 fault-nth:11): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 288.119780][T14083] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 288.127732][T14083] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 288.135694][T14083] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 288.143654][T14083] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 288.156605][ T4914] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 288.240733][T14098] FAULT_INJECTION: forcing a failure. [ 288.240733][T14098] name failslab, interval 1, probability 0, space 0, times 0 [ 288.253357][T14098] CPU: 0 PID: 14098 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 288.262194][T14098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 288.272240][T14098] Call Trace: [ 288.275532][T14098] dump_stack+0x116/0x15d [ 288.279889][T14098] should_fail+0x231/0x240 [ 288.284407][T14098] __should_failslab+0x81/0x90 [ 288.289169][T14098] should_failslab+0x5/0x20 [ 288.293667][T14098] slab_pre_alloc_hook+0x20/0xb0 [ 288.298690][T14098] kmem_cache_alloc+0x4d/0x280 [ 288.303451][T14098] ? skb_clone+0x131/0x1e0 [ 288.307880][T14098] skb_clone+0x131/0x1e0 [ 288.312113][T14098] dev_queue_xmit_nit+0x1ad/0x5d0 [ 288.317128][T14098] xmit_one+0x71/0x2e0 [ 288.321187][T14098] __dev_queue_xmit+0xeef/0x1510 [ 288.326108][T14098] ? __rcu_read_unlock+0x3a/0x220 [ 288.331119][T14098] dev_queue_xmit+0x13/0x20 [ 288.335623][T14098] ip_finish_output2+0xb09/0xba0 [ 288.340560][T14098] __ip_finish_output+0x3d8/0x430 [ 288.345579][T14098] ip_finish_output+0x39/0x160 [ 288.350332][T14098] ip_output+0xf6/0x1a0 [ 288.354485][T14098] ? ip_mc_finish_output+0x260/0x260 [ 288.359768][T14098] ip_send_skb+0x6e/0xe0 [ 288.364043][T14098] udp_send_skb+0x619/0x850 [ 288.368543][T14098] udp_sendmsg+0x142c/0x15e0 [ 288.373124][T14098] ? ip_do_fragment+0xfa0/0xfa0 [ 288.377982][T14098] ? aa_sock_msg_perm+0x87/0x120 [ 288.382916][T14098] inet_sendmsg+0x5f/0x80 [ 288.387300][T14098] ? inet_send_prepare+0x210/0x210 [ 288.392417][T14098] ____sys_sendmsg+0x352/0x4c0 [ 288.397174][T14098] ? import_iovec+0xb8/0xd0 [ 288.401700][T14098] __sys_sendmmsg+0x335/0x4b0 [ 288.406391][T14098] ? kstrtoull+0x30f/0x350 [ 288.410918][T14098] ? kstrtouint_from_user+0x104/0x130 [ 288.416341][T14098] ? __rcu_read_unlock+0x51/0x220 [ 288.421477][T14098] ? fsnotify_perm+0x59/0x2d0 [ 288.426256][T14098] ? __fsnotify_parent+0x21f/0x460 [ 288.431487][T14098] ? get_pid_task+0x90/0xc0 [ 288.436053][T14098] ? __sb_end_write+0x7f/0xc0 [ 288.440705][T14098] ? vfs_write+0x492/0x690 [ 288.445171][T14098] ? __fget_light+0x219/0x260 [ 288.449830][T14098] ? fput+0x2d/0x130 [ 288.453764][T14098] ? ksys_write+0x157/0x180 [ 288.458249][T14098] __x64_sys_sendmmsg+0x53/0x60 [ 288.463486][T14098] do_syscall_64+0x39/0x80 [ 288.467885][T14098] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 288.473814][T14098] RIP: 0033:0x45deb9 [ 288.477691][T14098] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 288.497287][T14098] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 288.505736][T14098] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 288.513721][T14098] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 288.521677][T14098] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 288.529639][T14098] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 288.537592][T14098] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 288.696448][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 288.836580][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.847482][ T4914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.857192][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.126883][ T4914] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 290.117136][ T4914] usb 3-1: USB disconnect, device number 63 [ 290.138088][ T4914] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:27 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x7ffff000}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r0, 0x0, 0x0) 19:05:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:27 executing program 5 (fault-call:6 fault-nth:12): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 290.681668][T14151] FAULT_INJECTION: forcing a failure. [ 290.681668][T14151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.698971][T14152] input: syz1 as /devices/virtual/input/input178 [ 290.706125][T14153] input: syz1 as /devices/virtual/input/input179 [ 290.706953][T14154] input: syz1 as /devices/virtual/input/input180 [ 290.714458][T14151] CPU: 0 PID: 14151 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 290.728318][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.738491][T14151] Call Trace: [ 290.741940][T14151] dump_stack+0x116/0x15d [ 290.746249][T14151] should_fail+0x231/0x240 [ 290.750638][T14151] should_fail_usercopy+0x16/0x20 [ 290.755723][T14151] _copy_from_user+0x1c/0xd0 [ 290.760341][T14151] __copy_msghdr_from_user+0x42/0x340 [ 290.765767][T14151] ? import_iovec+0xb8/0xd0 [ 290.770262][T14151] __sys_sendmmsg+0x20f/0x4b0 [ 290.774945][T14151] ? kstrtoull+0x30f/0x350 [ 290.779366][T14151] ? kstrtouint_from_user+0x104/0x130 [ 290.784735][T14151] ? __rcu_read_unlock+0x51/0x220 [ 290.789754][T14151] ? fsnotify_perm+0x59/0x2d0 [ 290.795005][T14151] ? __fsnotify_parent+0x21f/0x460 [ 290.800113][T14151] ? get_pid_task+0x90/0xc0 [ 290.804616][T14151] ? __sb_end_write+0x7f/0xc0 [ 290.809287][T14151] ? vfs_write+0x492/0x690 [ 290.813700][T14151] ? __fget_light+0x219/0x260 [ 290.818395][T14151] ? fput+0x2d/0x130 [ 290.822277][T14151] ? ksys_write+0x157/0x180 [ 290.826812][T14151] __x64_sys_sendmmsg+0x53/0x60 [ 290.831665][T14151] do_syscall_64+0x39/0x80 [ 290.836075][T14151] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 290.842003][T14151] RIP: 0033:0x45deb9 [ 290.845932][T14151] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 290.865567][T14151] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.874022][T14151] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 19:05:27 executing program 5 (fault-call:6 fault-nth:13): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:27 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r0, 0x0, 0x0) [ 290.882087][T14151] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 290.890123][T14151] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 290.898661][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 290.906629][T14151] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 290.955762][T14176] FAULT_INJECTION: forcing a failure. [ 290.955762][T14176] name failslab, interval 1, probability 0, space 0, times 0 [ 290.973821][T14176] CPU: 0 PID: 14176 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 290.982622][T14176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 290.986204][ T3693] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 290.993116][T14176] Call Trace: [ 290.993137][T14176] dump_stack+0x116/0x15d [ 290.993155][T14176] should_fail+0x231/0x240 [ 290.993176][T14176] __should_failslab+0x81/0x90 [ 291.017408][T14176] should_failslab+0x5/0x20 [ 291.021969][T14176] slab_pre_alloc_hook+0x20/0xb0 [ 291.027017][T14176] kmem_cache_alloc+0x4d/0x280 [ 291.031777][T14176] ? dst_alloc+0x112/0x2c0 [ 291.036186][T14176] dst_alloc+0x112/0x2c0 [ 291.040436][T14176] __mkroute_output+0x3bf/0xcc0 [ 291.045283][T14176] ? ip_output+0xf6/0x1a0 [ 291.049608][T14176] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 291.055514][T14176] ? udp_send_skb+0x6e4/0x850 [ 291.060185][T14176] ip_route_output_flow+0xaf/0x160 [ 291.065298][T14176] udp_sendmsg+0xfc5/0x15e0 [ 291.069800][T14176] ? ip_do_fragment+0xfa0/0xfa0 [ 291.074657][T14176] ? aa_sock_msg_perm+0x87/0x120 [ 291.079637][T14176] inet_sendmsg+0x5f/0x80 [ 291.084063][T14176] ? inet_send_prepare+0x210/0x210 [ 291.089170][T14176] ____sys_sendmsg+0x352/0x4c0 [ 291.094363][T14176] ? import_iovec+0xb8/0xd0 [ 291.098894][T14176] __sys_sendmmsg+0x335/0x4b0 [ 291.103574][T14176] ? kstrtoull+0x30f/0x350 [ 291.108162][T14176] ? kstrtouint_from_user+0x104/0x130 [ 291.113592][T14176] ? __rcu_read_unlock+0x51/0x220 [ 291.118704][T14176] ? fsnotify_perm+0x59/0x2d0 [ 291.123389][T14176] ? __fsnotify_parent+0x21f/0x460 [ 291.128503][T14176] ? get_pid_task+0x90/0xc0 [ 291.133001][T14176] ? __sb_end_write+0x7f/0xc0 [ 291.137731][T14176] ? vfs_write+0x492/0x690 [ 291.142255][T14176] ? __fget_light+0x219/0x260 [ 291.147019][T14176] ? fput+0x2d/0x130 [ 291.150889][T14176] ? ksys_write+0x157/0x180 [ 291.155443][T14176] __x64_sys_sendmmsg+0x53/0x60 [ 291.160268][T14176] do_syscall_64+0x39/0x80 [ 291.164661][T14176] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 291.170544][T14176] RIP: 0033:0x45deb9 [ 291.174415][T14176] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.193999][T14176] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 19:05:27 executing program 5 (fault-call:6 fault-nth:14): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 291.202412][T14176] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 291.210363][T14176] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 291.218330][T14176] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 291.226278][T14176] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 291.234243][T14176] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 291.248085][ T3693] usb 3-1: Using ep0 maxpacket: 8 [ 291.292253][T14186] FAULT_INJECTION: forcing a failure. [ 291.292253][T14186] name failslab, interval 1, probability 0, space 0, times 0 [ 291.305970][T14186] CPU: 1 PID: 14186 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 291.314726][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 291.324764][T14186] Call Trace: [ 291.328053][T14186] dump_stack+0x116/0x15d [ 291.332380][T14186] should_fail+0x231/0x240 [ 291.336863][T14186] __should_failslab+0x81/0x90 [ 291.341616][T14186] should_failslab+0x5/0x20 [ 291.346102][T14186] slab_pre_alloc_hook+0x20/0xb0 [ 291.351026][T14186] kmem_cache_alloc_node+0x5c/0x260 [ 291.356231][T14186] ? __rcu_read_unlock+0x51/0x220 [ 291.361230][T14186] ? __alloc_skb+0x98/0x2d0 [ 291.365710][T14186] ? packet_sock_destruct+0xc0/0xc0 [ 291.370887][T14186] __alloc_skb+0x98/0x2d0 [ 291.375192][T14186] alloc_skb_with_frags+0x90/0x370 [ 291.380277][T14186] ? xmit_one+0x173/0x2e0 [ 291.384581][T14186] sock_alloc_send_pskb+0x3c2/0x470 [ 291.389834][T14186] sock_alloc_send_skb+0x2d/0x40 [ 291.395197][T14186] __ip_append_data+0x12fb/0x1ca0 [ 291.400249][T14186] ? __mkroute_output+0x7bd/0xcc0 [ 291.405267][T14186] ? ip_do_fragment+0xfa0/0xfa0 [ 291.410097][T14186] ip_make_skb+0x139/0x2c0 [ 291.414501][T14186] ? ip_do_fragment+0xfa0/0xfa0 [ 291.419336][T14186] udp_sendmsg+0x13ff/0x15e0 [ 291.423904][T14186] ? ip_do_fragment+0xfa0/0xfa0 [ 291.428757][T14186] ? aa_sock_msg_perm+0x87/0x120 [ 291.433670][T14186] inet_sendmsg+0x5f/0x80 [ 291.437983][T14186] ? inet_send_prepare+0x210/0x210 [ 291.443074][T14186] ____sys_sendmsg+0x352/0x4c0 [ 291.447832][T14186] ? import_iovec+0xb8/0xd0 [ 291.452308][T14186] __sys_sendmmsg+0x335/0x4b0 [ 291.456959][T14186] ? kstrtoull+0x30f/0x350 [ 291.461357][T14186] ? kstrtouint_from_user+0x104/0x130 [ 291.466707][T14186] ? __rcu_read_unlock+0x51/0x220 [ 291.471745][T14186] ? fsnotify_perm+0x59/0x2d0 [ 291.476401][T14186] ? __fsnotify_parent+0x21f/0x460 [ 291.481516][T14186] ? get_pid_task+0x90/0xc0 [ 291.486007][T14186] ? __sb_end_write+0x7f/0xc0 [ 291.490678][T14186] ? vfs_write+0x492/0x690 [ 291.495140][T14186] ? __fget_light+0x219/0x260 [ 291.499876][T14186] ? fput+0x2d/0x130 [ 291.503762][T14186] ? ksys_write+0x157/0x180 [ 291.508255][T14186] __x64_sys_sendmmsg+0x53/0x60 [ 291.513082][T14186] do_syscall_64+0x39/0x80 [ 291.517501][T14186] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 291.523368][T14186] RIP: 0033:0x45deb9 [ 291.527290][T14186] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 291.547088][T14186] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 291.555480][T14186] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 291.563430][T14186] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 291.571390][T14186] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 291.579407][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 291.587380][T14186] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:28 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 291.646245][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 19:05:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xffffffffffffffff}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 291.686848][ T3693] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 291.700329][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.733767][T14202] input: syz1 as /devices/virtual/input/input182 [ 291.735629][T14206] input: syz1 as /devices/virtual/input/input183 [ 291.755087][T14212] input: syz1 as /devices/virtual/input/input184 [ 291.822456][T14219] input: syz1 as /devices/virtual/input/input185 [ 291.966520][ T3693] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 292.977176][T11246] usb 3-1: USB disconnect, device number 64 [ 292.987832][T11246] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected 19:05:30 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 19:05:30 executing program 5 (fault-call:6 fault-nth:15): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x8) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) 19:05:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) [ 293.523592][T14261] input: syz1 as /devices/virtual/input/input186 [ 293.538138][T14267] input: syz1 as /devices/virtual/input/input187 [ 293.545531][T14265] input: syz1 as /devices/virtual/input/input188 [ 293.553818][T14268] FAULT_INJECTION: forcing a failure. [ 293.553818][T14268] name failslab, interval 1, probability 0, space 0, times 0 [ 293.572009][T14268] CPU: 0 PID: 14268 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 293.580815][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.590881][T14268] Call Trace: [ 293.594289][T14268] dump_stack+0x116/0x15d [ 293.598712][T14268] should_fail+0x231/0x240 [ 293.603130][T14268] ? alloc_skb_with_frags+0x90/0x370 [ 293.608413][T14268] __should_failslab+0x81/0x90 [ 293.613181][T14268] should_failslab+0x5/0x20 [ 293.617679][T14268] slab_pre_alloc_hook+0x20/0xb0 [ 293.622612][T14268] ? alloc_skb_with_frags+0x90/0x370 [ 293.627901][T14268] kmem_cache_alloc_node_trace+0x61/0x240 [ 293.633626][T14268] ? __kmalloc_node_track_caller+0x30/0x40 [ 293.639427][T14268] ? alloc_skb_with_frags+0x90/0x370 [ 293.644754][T14268] __kmalloc_node_track_caller+0x30/0x40 [ 293.650437][T14268] __alloc_skb+0xd2/0x2d0 [ 293.654760][T14268] alloc_skb_with_frags+0x90/0x370 [ 293.659867][T14268] ? xmit_one+0x173/0x2e0 [ 293.664262][T14268] sock_alloc_send_pskb+0x3c2/0x470 [ 293.669534][T14268] sock_alloc_send_skb+0x2d/0x40 [ 293.674466][T14268] __ip_append_data+0x12fb/0x1ca0 [ 293.679482][T14268] ? __mkroute_output+0x7bd/0xcc0 [ 293.684498][T14268] ? ip_do_fragment+0xfa0/0xfa0 [ 293.689425][T14268] ip_make_skb+0x139/0x2c0 [ 293.693834][T14268] ? ip_do_fragment+0xfa0/0xfa0 [ 293.698737][T14268] udp_sendmsg+0x13ff/0x15e0 [ 293.703381][T14268] ? ip_do_fragment+0xfa0/0xfa0 [ 293.708414][T14268] ? aa_sock_msg_perm+0x87/0x120 [ 293.713358][T14268] inet_sendmsg+0x5f/0x80 [ 293.717731][T14268] ? inet_send_prepare+0x210/0x210 [ 293.722817][T14268] ____sys_sendmsg+0x352/0x4c0 [ 293.727564][T14268] ? import_iovec+0xb8/0xd0 [ 293.732045][T14268] __sys_sendmmsg+0x335/0x4b0 [ 293.736761][T14268] ? kstrtoull+0x30f/0x350 [ 293.741153][T14268] ? kstrtouint_from_user+0x104/0x130 [ 293.746541][T14268] ? __rcu_read_unlock+0x51/0x220 [ 293.751542][T14268] ? fsnotify_perm+0x59/0x2d0 [ 293.756209][T14268] ? __fsnotify_parent+0x21f/0x460 [ 293.761306][T14268] ? get_pid_task+0x90/0xc0 [ 293.765786][T14268] ? __sb_end_write+0x7f/0xc0 [ 293.770472][T14268] ? vfs_write+0x492/0x690 [ 293.774943][T14268] ? __fget_light+0x219/0x260 [ 293.779594][T14268] ? fput+0x2d/0x130 [ 293.783461][T14268] ? ksys_write+0x157/0x180 [ 293.787993][T14268] __x64_sys_sendmmsg+0x53/0x60 [ 293.792907][T14268] do_syscall_64+0x39/0x80 [ 293.797302][T14268] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 293.803217][T14268] RIP: 0033:0x45deb9 [ 293.807087][T14268] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.826667][T14268] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 293.835062][T14268] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 293.843052][T14268] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 293.850999][T14268] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 293.858946][T14268] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 293.866892][T14268] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:30 executing program 5 (fault-call:6 fault-nth:16): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) [ 293.927908][T14289] FAULT_INJECTION: forcing a failure. [ 293.927908][T14289] name failslab, interval 1, probability 0, space 0, times 0 [ 293.940649][T14289] CPU: 1 PID: 14289 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 293.949464][T14289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.959631][T14289] Call Trace: [ 293.962900][T14289] dump_stack+0x116/0x15d [ 293.967218][T14289] should_fail+0x231/0x240 [ 293.971630][T14289] __should_failslab+0x81/0x90 [ 293.976393][T14289] should_failslab+0x5/0x20 [ 293.980884][T14289] slab_pre_alloc_hook+0x20/0xb0 [ 293.985810][T14289] kmem_cache_alloc+0x4d/0x280 [ 293.990741][T14289] ? skb_clone+0x131/0x1e0 [ 293.995204][T14289] skb_clone+0x131/0x1e0 [ 293.999441][T14289] dev_queue_xmit_nit+0x1ad/0x5d0 [ 294.004474][T14289] xmit_one+0x71/0x2e0 [ 294.008559][T14289] __dev_queue_xmit+0xeef/0x1510 [ 294.013560][T14289] ? __rcu_read_unlock+0x3a/0x220 [ 294.018578][T14289] dev_queue_xmit+0x13/0x20 [ 294.023078][T14289] ip_finish_output2+0xb09/0xba0 [ 294.028010][T14289] __ip_finish_output+0x3d8/0x430 [ 294.033062][T14289] ip_finish_output+0x39/0x160 [ 294.037823][T14289] ip_output+0xf6/0x1a0 [ 294.042000][T14289] ? ip_mc_finish_output+0x260/0x260 [ 294.047272][T14289] ip_send_skb+0x6e/0xe0 [ 294.051521][T14289] udp_send_skb+0x619/0x850 [ 294.056071][T14289] udp_sendmsg+0x142c/0x15e0 [ 294.060658][T14289] ? ip_do_fragment+0xfa0/0xfa0 [ 294.065583][T14289] ? aa_sock_msg_perm+0x87/0x120 [ 294.070514][T14289] inet_sendmsg+0x5f/0x80 [ 294.074843][T14289] ? inet_send_prepare+0x210/0x210 [ 294.079942][T14289] ____sys_sendmsg+0x352/0x4c0 [ 294.084782][T14289] ? import_iovec+0xb8/0xd0 [ 294.089330][T14289] __sys_sendmmsg+0x335/0x4b0 [ 294.094095][T14289] ? kstrtoull+0x30f/0x350 [ 294.098496][T14289] ? kstrtouint_from_user+0x104/0x130 [ 294.103857][T14289] ? __rcu_read_unlock+0x51/0x220 [ 294.108860][T14289] ? fsnotify_perm+0x59/0x2d0 [ 294.113517][T14289] ? __fsnotify_parent+0x21f/0x460 [ 294.118626][T14289] ? get_pid_task+0x90/0xc0 [ 294.123193][T14289] ? __sb_end_write+0x7f/0xc0 [ 294.127974][T14289] ? vfs_write+0x492/0x690 [ 294.132446][T14289] ? __fget_light+0x219/0x260 [ 294.137186][T14289] ? fput+0x2d/0x130 [ 294.141073][T14289] ? ksys_write+0x157/0x180 [ 294.145559][T14289] __x64_sys_sendmmsg+0x53/0x60 [ 294.150386][T14289] do_syscall_64+0x39/0x80 [ 294.154781][T14289] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 294.160703][T14289] RIP: 0033:0x45deb9 [ 294.164596][T14289] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 294.184198][T14289] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 294.192682][T14289] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 294.200634][T14289] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 294.208622][T14289] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 294.216578][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 19:05:30 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) [ 294.224533][T14289] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:30 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) 19:05:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x300) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 294.306113][ T8093] usb 3-1: new high-speed USB device number 65 using dummy_hcd 19:05:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) [ 294.390864][T14314] input: syz1 as /devices/virtual/input/input190 [ 294.400010][T14312] input: syz1 as /devices/virtual/input/input191 [ 294.417600][T14316] input: syz1 as /devices/virtual/input/input192 [ 294.585945][ T8093] usb 3-1: Using ep0 maxpacket: 8 [ 294.737529][ T8093] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.751123][ T8093] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 294.760501][ T8093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.027662][ T8093] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:05:33 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:33 executing program 5 (fault-call:6 fault-nth:17): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:33 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x7ffff000}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:33 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)="636a11afae175e90572b51b789245bfef2fdb1f4853f88502df4540d003d411fe351360ce6f7191f64f62245aa949a3166f600afc7cbd6726186afe1dbc32443919aad36f29c5d5a023ac3355a4498b67399065b38898ea2a13a8f8ef46ed8471aa18f8465181ee5363c84dc3b86cab444b21b5d27b76e20b476269c9809e1050bd328c9dabab5d0942cb40e82313266e2c58194b088a06367423b55617d7e23d1783059d4b66525326d", 0xaa, r0}, 0x68) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000380)) read(r1, &(0x7f00000001c0)=""/155, 0x9b) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) 19:05:33 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, 0x0, 0x0) [ 296.774691][ T9763] usb 3-1: USB disconnect, device number 65 [ 296.790860][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 296.843472][T14381] input: syz1 as /devices/virtual/input/input194 [ 296.850850][T14380] input: syz1 as /devices/virtual/input/input195 [ 296.861391][T14384] FAULT_INJECTION: forcing a failure. [ 296.861391][T14384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.879593][T14386] input: syz1 as /devices/virtual/input/input196 [ 296.887456][T14384] CPU: 0 PID: 14384 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 296.896266][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 296.906314][T14384] Call Trace: [ 296.909605][T14384] dump_stack+0x116/0x15d [ 296.913927][T14384] should_fail+0x231/0x240 [ 296.918338][T14384] should_fail_usercopy+0x16/0x20 [ 296.923448][T14384] _copy_from_user+0x1c/0xd0 [ 296.928074][T14384] __copy_msghdr_from_user+0x42/0x340 [ 296.933439][T14384] ? import_iovec+0xb8/0xd0 [ 296.937940][T14384] __sys_sendmmsg+0x20f/0x4b0 [ 296.942697][T14384] ? kstrtoull+0x30f/0x350 [ 296.945532][T14392] input: syz1 as /devices/virtual/input/input197 [ 296.947162][T14384] ? kstrtouint_from_user+0x104/0x130 [ 296.947170][T14384] ? __rcu_read_unlock+0x51/0x220 [ 296.947188][T14384] ? fsnotify_perm+0x59/0x2d0 [ 296.968594][T14384] ? __fsnotify_parent+0x21f/0x460 [ 296.973713][T14384] ? get_pid_task+0x90/0xc0 [ 296.978218][T14384] ? __sb_end_write+0x7f/0xc0 [ 296.983843][T14384] ? vfs_write+0x492/0x690 [ 296.988255][T14384] ? __fget_light+0x219/0x260 [ 296.992924][T14384] ? fput+0x2d/0x130 [ 296.996805][T14384] ? ksys_write+0x157/0x180 [ 297.001416][T14384] __x64_sys_sendmmsg+0x53/0x60 [ 297.006260][T14384] do_syscall_64+0x39/0x80 [ 297.010672][T14384] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 297.016603][T14384] RIP: 0033:0x45deb9 [ 297.020493][T14384] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:05:33 executing program 5 (fault-call:6 fault-nth:18): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 297.040092][T14384] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 297.048496][T14384] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 297.056461][T14384] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 297.064474][T14384] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 297.072468][T14384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 297.080419][T14384] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 297.147931][T14404] FAULT_INJECTION: forcing a failure. [ 297.147931][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 297.160883][T14404] CPU: 0 PID: 14404 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 297.169714][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.179761][T14404] Call Trace: [ 297.183046][T14404] dump_stack+0x116/0x15d [ 297.187385][T14404] should_fail+0x231/0x240 [ 297.191829][T14404] __should_failslab+0x81/0x90 [ 297.196569][T14404] should_failslab+0x5/0x20 [ 297.201047][T14404] slab_pre_alloc_hook+0x20/0xb0 [ 297.206010][T14404] kmem_cache_alloc+0x4d/0x280 [ 297.210859][T14404] ? dst_alloc+0x112/0x2c0 [ 297.215295][T14404] dst_alloc+0x112/0x2c0 [ 297.219593][T14404] __mkroute_output+0x3bf/0xcc0 [ 297.224422][T14404] ? ip_output+0xf6/0x1a0 [ 297.228813][T14404] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 297.234796][T14404] ? udp_send_skb+0x6e4/0x850 [ 297.239591][T14404] ip_route_output_flow+0xaf/0x160 [ 297.244681][T14404] udp_sendmsg+0xfc5/0x15e0 [ 297.249160][T14404] ? ip_do_fragment+0xfa0/0xfa0 [ 297.254038][T14404] ? aa_sock_msg_perm+0x87/0x120 [ 297.258982][T14404] inet_sendmsg+0x5f/0x80 [ 297.263359][T14404] ? inet_send_prepare+0x210/0x210 [ 297.268473][T14404] ____sys_sendmsg+0x352/0x4c0 [ 297.273285][T14404] ? import_iovec+0xb8/0xd0 [ 297.277766][T14404] __sys_sendmmsg+0x335/0x4b0 [ 297.282420][T14404] ? kstrtoull+0x30f/0x350 [ 297.286811][T14404] ? kstrtouint_from_user+0x104/0x130 [ 297.292154][T14404] ? __rcu_read_unlock+0x51/0x220 [ 297.297229][T14404] ? fsnotify_perm+0x59/0x2d0 [ 297.301932][T14404] ? __fsnotify_parent+0x21f/0x460 [ 297.307051][T14404] ? get_pid_task+0x90/0xc0 [ 297.311533][T14404] ? __sb_end_write+0x7f/0xc0 [ 297.316222][T14404] ? vfs_write+0x492/0x690 [ 297.320620][T14404] ? __fget_light+0x219/0x260 [ 297.325334][T14404] ? fput+0x2d/0x130 [ 297.329214][T14404] ? ksys_write+0x157/0x180 [ 297.333703][T14404] __x64_sys_sendmmsg+0x53/0x60 [ 297.338564][T14404] do_syscall_64+0x39/0x80 [ 297.342970][T14404] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 297.348839][T14404] RIP: 0033:0x45deb9 [ 297.352717][T14404] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.372307][T14404] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 297.380710][T14404] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 297.388671][T14404] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 19:05:34 executing program 5 (fault-call:6 fault-nth:19): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 297.396698][T14404] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 297.404665][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 297.412623][T14404] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 297.460596][T14408] FAULT_INJECTION: forcing a failure. [ 297.460596][T14408] name failslab, interval 1, probability 0, space 0, times 0 [ 297.473304][T14408] CPU: 0 PID: 14408 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 297.482052][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.492104][T14408] Call Trace: [ 297.495417][T14408] dump_stack+0x116/0x15d [ 297.499747][T14408] should_fail+0x231/0x240 [ 297.504152][T14408] __should_failslab+0x81/0x90 [ 297.508911][T14408] should_failslab+0x5/0x20 [ 297.513416][T14408] slab_pre_alloc_hook+0x20/0xb0 [ 297.518374][T14408] kmem_cache_alloc_node+0x5c/0x260 [ 297.523593][T14408] ? __rcu_read_unlock+0x51/0x220 [ 297.528592][T14408] ? __alloc_skb+0x98/0x2d0 [ 297.533251][T14408] ? packet_direct_xmit+0x140/0x140 [ 297.538455][T14408] __alloc_skb+0x98/0x2d0 [ 297.542816][T14408] alloc_skb_with_frags+0x90/0x370 [ 297.547974][T14408] ? xmit_one+0x173/0x2e0 [ 297.552283][T14408] sock_alloc_send_pskb+0x3c2/0x470 [ 297.557575][T14408] sock_alloc_send_skb+0x2d/0x40 [ 297.562515][T14408] __ip_append_data+0x12fb/0x1ca0 [ 297.567655][T14408] ? __mkroute_output+0x7bd/0xcc0 [ 297.572666][T14408] ? ip_do_fragment+0xfa0/0xfa0 [ 297.577503][T14408] ip_make_skb+0x139/0x2c0 [ 297.582063][T14408] ? ip_do_fragment+0xfa0/0xfa0 [ 297.586952][T14408] udp_sendmsg+0x13ff/0x15e0 [ 297.591523][T14408] ? ip_do_fragment+0xfa0/0xfa0 [ 297.596432][T14408] ? aa_sock_msg_perm+0x87/0x120 [ 297.601346][T14408] inet_sendmsg+0x5f/0x80 [ 297.605656][T14408] ? inet_send_prepare+0x210/0x210 [ 297.610749][T14408] ____sys_sendmsg+0x352/0x4c0 [ 297.615495][T14408] ? import_iovec+0xb8/0xd0 [ 297.619993][T14408] __sys_sendmmsg+0x335/0x4b0 [ 297.624768][T14408] ? kstrtoull+0x30f/0x350 [ 297.629206][T14408] ? kstrtouint_from_user+0x104/0x130 [ 297.634570][T14408] ? __rcu_read_unlock+0x51/0x220 [ 297.634588][T14408] ? fsnotify_perm+0x59/0x2d0 [ 297.644280][T14408] ? __fsnotify_parent+0x21f/0x460 [ 297.649377][T14408] ? get_pid_task+0x90/0xc0 [ 297.653878][T14408] ? __sb_end_write+0x7f/0xc0 [ 297.658570][T14408] ? vfs_write+0x492/0x690 [ 297.663029][T14408] ? __fget_light+0x219/0x260 [ 297.667703][T14408] ? fput+0x2d/0x130 [ 297.671582][T14408] ? ksys_write+0x157/0x180 [ 297.676062][T14408] __x64_sys_sendmmsg+0x53/0x60 [ 297.680969][T14408] do_syscall_64+0x39/0x80 [ 297.685373][T14408] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 297.691240][T14408] RIP: 0033:0x45deb9 [ 297.695186][T14408] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 297.714774][T14408] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 297.723164][T14408] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 297.731229][T14408] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 297.739293][T14408] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 297.747268][T14408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000013 19:05:34 executing program 5 (fault-call:6 fault-nth:20): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 297.755292][T14408] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:34 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x7ffff000}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9861]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x5, 0x9a000000}) [ 297.852467][T14424] FAULT_INJECTION: forcing a failure. [ 297.852467][T14424] name failslab, interval 1, probability 0, space 0, times 0 [ 297.881294][T14429] input: syz1 as /devices/virtual/input/input199 [ 297.888750][T14430] input: syz1 as /devices/virtual/input/input200 [ 297.891294][T14424] CPU: 1 PID: 14424 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 297.903848][T14424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 297.913898][T14424] Call Trace: [ 297.917212][T14424] dump_stack+0x116/0x15d [ 297.921653][T14424] should_fail+0x231/0x240 [ 297.926103][T14424] ? alloc_skb_with_frags+0x90/0x370 [ 297.931372][T14424] __should_failslab+0x81/0x90 [ 297.936125][T14424] should_failslab+0x5/0x20 [ 297.940700][T14424] slab_pre_alloc_hook+0x20/0xb0 [ 297.945638][T14424] ? alloc_skb_with_frags+0x90/0x370 [ 297.950914][T14424] kmem_cache_alloc_node_trace+0x61/0x240 [ 297.955730][ T9763] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 297.956692][T14424] ? __kmalloc_node_track_caller+0x30/0x40 [ 297.956747][T14424] ? alloc_skb_with_frags+0x90/0x370 [ 297.977317][T14428] input: syz1 as /devices/virtual/input/input201 [ 297.978103][T14424] __kmalloc_node_track_caller+0x30/0x40 [ 297.978123][T14424] __alloc_skb+0xd2/0x2d0 [ 297.994364][T14424] alloc_skb_with_frags+0x90/0x370 [ 297.999482][T14424] ? xmit_one+0x173/0x2e0 [ 298.003859][T14424] sock_alloc_send_pskb+0x3c2/0x470 [ 298.009056][T14424] sock_alloc_send_skb+0x2d/0x40 [ 298.014000][T14424] __ip_append_data+0x12fb/0x1ca0 [ 298.019018][T14424] ? __mkroute_output+0x7bd/0xcc0 [ 298.024036][T14424] ? ip_do_fragment+0xfa0/0xfa0 [ 298.028921][T14424] ip_make_skb+0x139/0x2c0 [ 298.033332][T14424] ? ip_do_fragment+0xfa0/0xfa0 [ 298.038170][T14424] udp_sendmsg+0x13ff/0x15e0 [ 298.042747][T14424] ? ip_do_fragment+0xfa0/0xfa0 [ 298.047598][T14424] ? aa_sock_msg_perm+0x87/0x120 [ 298.052523][T14424] inet_sendmsg+0x5f/0x80 [ 298.056844][T14424] ? inet_send_prepare+0x210/0x210 [ 298.061944][T14424] ____sys_sendmsg+0x352/0x4c0 [ 298.066700][T14424] ? import_iovec+0xb8/0xd0 [ 298.071209][T14424] __sys_sendmmsg+0x335/0x4b0 [ 298.075882][T14424] ? kstrtoull+0x30f/0x350 [ 298.080288][T14424] ? kstrtouint_from_user+0x104/0x130 [ 298.085643][T14424] ? __rcu_read_unlock+0x51/0x220 [ 298.090680][T14424] ? fsnotify_perm+0x59/0x2d0 [ 298.095412][T14424] ? __fsnotify_parent+0x21f/0x460 [ 298.100531][T14424] ? get_pid_task+0x90/0xc0 [ 298.105034][T14424] ? __sb_end_write+0x7f/0xc0 [ 298.109725][T14424] ? vfs_write+0x492/0x690 [ 298.114195][T14424] ? __fget_light+0x219/0x260 [ 298.118902][T14424] ? fput+0x2d/0x130 [ 298.122790][T14424] ? ksys_write+0x157/0x180 [ 298.127284][T14424] __x64_sys_sendmmsg+0x53/0x60 [ 298.132130][T14424] do_syscall_64+0x39/0x80 [ 298.136550][T14424] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 298.142440][T14424] RIP: 0033:0x45deb9 [ 298.146328][T14424] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 298.165995][T14424] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 298.174407][T14424] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 298.182374][T14424] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 298.190341][T14424] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 298.195706][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 298.198361][T14424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 298.198376][T14424] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 298.315732][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.326670][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.353351][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.616264][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:05:37 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:37 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 19:05:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:37 executing program 5 (fault-call:6 fault-nth:21): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:37 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400)='/dev/video1\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000480)={0x0, 0x20, [0x8, 0x4, 0x9, 0x55], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x4, [0x5, 0x20, 0x2, 0x1]}, &(0x7f0000000140)=0xc) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000180)=0x68) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) gettid() getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9861]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000040)={0x5, 0x9a000000}) [ 300.362781][ T4914] usb 3-1: USB disconnect, device number 66 [ 300.385207][ T4914] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 300.434234][T14491] input: syz1 as /devices/virtual/input/input203 [ 300.446367][T14490] input: syz1 as /devices/virtual/input/input204 [ 300.453446][T14492] FAULT_INJECTION: forcing a failure. [ 300.453446][T14492] name failslab, interval 1, probability 0, space 0, times 0 [ 300.466248][T14492] CPU: 0 PID: 14492 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 300.475012][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 300.485065][T14492] Call Trace: [ 300.488353][T14492] dump_stack+0x116/0x15d [ 300.492681][T14492] should_fail+0x231/0x240 [ 300.497179][T14492] __should_failslab+0x81/0x90 [ 300.501945][T14492] should_failslab+0x5/0x20 [ 300.506639][T14492] slab_pre_alloc_hook+0x20/0xb0 [ 300.511626][T14492] kmem_cache_alloc+0x4d/0x280 [ 300.516392][T14492] ? skb_clone+0x131/0x1e0 [ 300.520801][T14492] skb_clone+0x131/0x1e0 [ 300.525037][T14492] dev_queue_xmit_nit+0x1ad/0x5d0 [ 300.530060][T14492] xmit_one+0x71/0x2e0 [ 300.534126][T14492] __dev_queue_xmit+0xeef/0x1510 [ 300.539194][T14492] ? __rcu_read_unlock+0x3a/0x220 [ 300.544295][T14492] dev_queue_xmit+0x13/0x20 [ 300.548902][T14492] ip_finish_output2+0xb09/0xba0 [ 300.553843][T14492] __ip_finish_output+0x3d8/0x430 [ 300.558865][T14492] ip_finish_output+0x39/0x160 [ 300.563619][T14492] ip_output+0xf6/0x1a0 [ 300.567776][T14492] ? ip_mc_finish_output+0x260/0x260 [ 300.573204][T14492] ip_send_skb+0x6e/0xe0 [ 300.574249][T14494] input: syz1 as /devices/virtual/input/input205 [ 300.577450][T14492] udp_send_skb+0x619/0x850 [ 300.577463][T14492] udp_sendmsg+0x142c/0x15e0 [ 300.577555][T14492] ? ip_do_fragment+0xfa0/0xfa0 [ 300.597711][T14492] ? aa_sock_msg_perm+0x87/0x120 [ 300.602663][T14492] inet_sendmsg+0x5f/0x80 [ 300.606993][T14492] ? inet_send_prepare+0x210/0x210 [ 300.612095][T14492] ____sys_sendmsg+0x352/0x4c0 [ 300.612109][T14492] ? import_iovec+0xb8/0xd0 [ 300.612127][T14492] __sys_sendmmsg+0x335/0x4b0 [ 300.626076][T14492] ? kstrtoull+0x30f/0x350 [ 300.630498][T14492] ? kstrtouint_from_user+0x104/0x130 [ 300.635867][T14492] ? __rcu_read_unlock+0x51/0x220 [ 300.640962][T14492] ? fsnotify_perm+0x59/0x2d0 [ 300.645666][T14492] ? __fsnotify_parent+0x21f/0x460 [ 300.650787][T14492] ? get_pid_task+0x90/0xc0 [ 300.655285][T14492] ? __sb_end_write+0x7f/0xc0 [ 300.659956][T14492] ? vfs_write+0x492/0x690 [ 300.664449][T14492] ? __fget_light+0x219/0x260 [ 300.668412][T14495] input: syz1 as /devices/virtual/input/input206 [ 300.669120][T14492] ? fput+0x2d/0x130 [ 300.679437][T14492] ? ksys_write+0x157/0x180 [ 300.683935][T14492] __x64_sys_sendmmsg+0x53/0x60 [ 300.688804][T14492] do_syscall_64+0x39/0x80 [ 300.693290][T14492] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 300.699178][T14492] RIP: 0033:0x45deb9 [ 300.703076][T14492] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 300.722658][T14492] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 19:05:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 300.731108][T14492] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 300.739105][T14492] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 300.747123][T14492] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 300.755071][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 300.763053][T14492] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 300.842757][T14525] input: syz1 as /devices/virtual/input/input207 19:05:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:37 executing program 5 (fault-call:6 fault-nth:22): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:37 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 301.109532][T14545] FAULT_INJECTION: forcing a failure. [ 301.109532][T14545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.125490][ T4914] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 301.135758][T14545] CPU: 0 PID: 14545 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 301.144520][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 301.154571][T14545] Call Trace: [ 301.157863][T14545] dump_stack+0x116/0x15d [ 301.162196][T14545] should_fail+0x231/0x240 [ 301.166614][T14545] should_fail_usercopy+0x16/0x20 [ 301.171643][T14545] _copy_from_user+0x1c/0xd0 [ 301.176230][T14545] __copy_msghdr_from_user+0x42/0x340 [ 301.181669][T14545] ? import_iovec+0xb8/0xd0 [ 301.186197][T14545] __sys_sendmmsg+0x20f/0x4b0 [ 301.190982][T14545] ? kstrtoull+0x30f/0x350 [ 301.195417][T14545] ? kstrtouint_from_user+0x104/0x130 [ 301.200785][T14545] ? __rcu_read_unlock+0x51/0x220 [ 301.205807][T14545] ? fsnotify_perm+0x59/0x2d0 [ 301.210460][T14545] ? __fsnotify_parent+0x21f/0x460 [ 301.215556][T14545] ? get_pid_task+0x90/0xc0 [ 301.220034][T14545] ? __sb_end_write+0x7f/0xc0 [ 301.224696][T14545] ? vfs_write+0x492/0x690 [ 301.229241][T14545] ? __fget_light+0x219/0x260 [ 301.233913][T14545] ? fput+0x2d/0x130 [ 301.237807][T14545] ? ksys_write+0x157/0x180 [ 301.242363][T14545] __x64_sys_sendmmsg+0x53/0x60 [ 301.243775][T14506] input: syz1 as /devices/virtual/input/input212 [ 301.247206][T14545] do_syscall_64+0x39/0x80 [ 301.247218][T14545] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 301.247237][T14545] RIP: 0033:0x45deb9 [ 301.267689][T14545] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 301.287301][T14545] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 301.295690][T14545] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 301.303729][T14545] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 301.311745][T14545] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 301.319784][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 301.327756][T14545] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 301.555470][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 301.675545][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.686540][ T4914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 301.696424][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.965967][ T4914] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:05:40 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 19:05:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:40 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)="636a11afae175e90572b51b789245bfef2fdb1f4853f88502df4540d003d411fe351360ce6f7191f64f62245aa949a3166f600afc7cbd6726186afe1dbc32443919aad36f29c5d5a023ac3355a4498b67399065b38898ea2a13a8f8ef46ed8471aa18f8465181ee5363c84dc3b86cab444b21b5d27b76e20b476269c9809e1050bd328c9dabab5d0942cb40e82313266e2c58194b088a06367423b55617d7e23d1783059d4b66525326d", 0xaa, r0}, 0x68) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000380)) read(r1, &(0x7f00000001c0)=""/155, 0x9b) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:40 executing program 5 (fault-call:6 fault-nth:23): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:40 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 19:05:40 executing program 0: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) read(r9, &(0x7f00000001c0)=""/155, 0x9b) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 303.715430][T11246] usb 3-1: USB disconnect, device number 67 [ 303.733029][T11246] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 303.787326][T14601] input: syz1 as /devices/virtual/input/input213 [ 303.812660][T14605] FAULT_INJECTION: forcing a failure. [ 303.812660][T14605] name failslab, interval 1, probability 0, space 0, times 0 [ 303.814348][T14602] input: syz1 as /devices/virtual/input/input215 19:05:40 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 303.842714][T14605] CPU: 1 PID: 14605 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 303.851501][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 303.861553][T14605] Call Trace: [ 303.864845][T14605] dump_stack+0x116/0x15d [ 303.869170][T14605] should_fail+0x231/0x240 [ 303.873647][T14605] __should_failslab+0x81/0x90 [ 303.878425][T14605] should_failslab+0x5/0x20 [ 303.882933][T14605] slab_pre_alloc_hook+0x20/0xb0 [ 303.887872][T14605] kmem_cache_alloc+0x4d/0x280 [ 303.893063][T14605] ? dst_alloc+0x112/0x2c0 [ 303.897525][T14605] dst_alloc+0x112/0x2c0 [ 303.901757][T14605] __mkroute_output+0x3bf/0xcc0 [ 303.906638][T14605] ? ip_output+0xf6/0x1a0 [ 303.910968][T14605] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 303.915088][T14615] input: syz1 as /devices/virtual/input/input216 [ 303.916856][T14605] ? udp_send_skb+0x6e4/0x850 [ 303.916915][T14605] ip_route_output_flow+0xaf/0x160 [ 303.932987][T14605] udp_sendmsg+0xfc5/0x15e0 [ 303.937493][T14605] ? ip_do_fragment+0xfa0/0xfa0 [ 303.942417][T14605] ? aa_sock_msg_perm+0x87/0x120 [ 303.947345][T14605] inet_sendmsg+0x5f/0x80 [ 303.951678][T14605] ? inet_send_prepare+0x210/0x210 [ 303.956857][T14605] ____sys_sendmsg+0x352/0x4c0 [ 303.961719][T14605] ? import_iovec+0xb8/0xd0 [ 303.966224][T14605] __sys_sendmmsg+0x335/0x4b0 [ 303.970930][T14605] ? kstrtoull+0x30f/0x350 [ 303.975346][T14605] ? kstrtouint_from_user+0x104/0x130 [ 303.980719][T14605] ? __rcu_read_unlock+0x51/0x220 [ 303.985760][T14605] ? fsnotify_perm+0x59/0x2d0 [ 303.990539][T14605] ? __fsnotify_parent+0x21f/0x460 [ 303.995652][T14605] ? get_pid_task+0x90/0xc0 [ 304.000170][T14605] ? __sb_end_write+0x7f/0xc0 [ 304.004848][T14605] ? vfs_write+0x492/0x690 [ 304.009316][T14605] ? __fget_light+0x219/0x260 [ 304.014084][T14605] ? fput+0x2d/0x130 [ 304.017991][T14605] ? ksys_write+0x157/0x180 [ 304.022497][T14605] __x64_sys_sendmmsg+0x53/0x60 [ 304.027348][T14605] do_syscall_64+0x39/0x80 [ 304.031767][T14605] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 304.037651][T14605] RIP: 0033:0x45deb9 [ 304.041569][T14605] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.061173][T14605] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 304.069576][T14605] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 304.077715][T14605] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 304.085684][T14605] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 19:05:40 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 304.093648][T14605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000017 [ 304.101637][T14605] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:40 executing program 5 (fault-call:6 fault-nth:24): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:40 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 304.185548][T14634] FAULT_INJECTION: forcing a failure. [ 304.185548][T14634] name failslab, interval 1, probability 0, space 0, times 0 [ 304.205825][T14634] CPU: 1 PID: 14634 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 304.214663][T14634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 304.224712][T14634] Call Trace: [ 304.228002][T14634] dump_stack+0x116/0x15d [ 304.232404][T14634] should_fail+0x231/0x240 [ 304.236817][T14634] __should_failslab+0x81/0x90 [ 304.241572][T14634] should_failslab+0x5/0x20 [ 304.246065][T14634] slab_pre_alloc_hook+0x20/0xb0 [ 304.251002][T14634] kmem_cache_alloc_node+0x5c/0x260 [ 304.256197][T14634] ? __rcu_read_unlock+0x51/0x220 [ 304.261224][T14634] ? __alloc_skb+0x98/0x2d0 [ 304.265816][T14634] ? packet_direct_xmit+0x140/0x140 [ 304.271015][T14634] __alloc_skb+0x98/0x2d0 [ 304.275339][T14634] alloc_skb_with_frags+0x90/0x370 [ 304.280447][T14634] ? xmit_one+0x173/0x2e0 [ 304.284797][T14634] sock_alloc_send_pskb+0x3c2/0x470 [ 304.290095][T14634] sock_alloc_send_skb+0x2d/0x40 [ 304.295116][T14634] __ip_append_data+0x12fb/0x1ca0 [ 304.300134][T14634] ? __mkroute_output+0x7bd/0xcc0 [ 304.305180][T14634] ? ip_do_fragment+0xfa0/0xfa0 [ 304.310028][T14634] ip_make_skb+0x139/0x2c0 [ 304.314438][T14634] ? ip_do_fragment+0xfa0/0xfa0 [ 304.319323][T14634] udp_sendmsg+0x13ff/0x15e0 [ 304.323980][T14634] ? ip_do_fragment+0xfa0/0xfa0 [ 304.328829][T14634] ? aa_sock_msg_perm+0x87/0x120 19:05:40 executing program 1: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 304.334014][T14634] inet_sendmsg+0x5f/0x80 [ 304.338335][T14634] ? inet_send_prepare+0x210/0x210 [ 304.343431][T14634] ____sys_sendmsg+0x352/0x4c0 [ 304.348215][T14634] ? import_iovec+0xb8/0xd0 [ 304.352716][T14634] __sys_sendmmsg+0x335/0x4b0 [ 304.357394][T14634] ? kstrtoull+0x30f/0x350 [ 304.361807][T14634] ? kstrtouint_from_user+0x104/0x130 [ 304.367171][T14634] ? __rcu_read_unlock+0x51/0x220 [ 304.372193][T14634] ? fsnotify_perm+0x59/0x2d0 [ 304.376863][T14634] ? __fsnotify_parent+0x21f/0x460 [ 304.381991][T14634] ? get_pid_task+0x90/0xc0 19:05:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 304.386488][T14634] ? __sb_end_write+0x7f/0xc0 [ 304.391231][T14634] ? vfs_write+0x492/0x690 [ 304.395649][T14634] ? __fget_light+0x219/0x260 [ 304.400341][T14634] ? fput+0x2d/0x130 [ 304.404232][T14634] ? ksys_write+0x157/0x180 [ 304.408750][T14634] __x64_sys_sendmmsg+0x53/0x60 [ 304.413603][T14634] do_syscall_64+0x39/0x80 [ 304.418025][T14634] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 304.423912][T14634] RIP: 0033:0x45deb9 [ 304.427853][T14634] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 304.447457][T14634] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 304.455871][T14634] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 304.463938][T14634] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 304.471909][T14634] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 304.479869][T14634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 304.487842][T14634] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 304.607602][T14652] input: syz1 as /devices/virtual/input/input217 [ 304.705262][T11246] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 304.945314][T11246] usb 3-1: Using ep0 maxpacket: 8 [ 305.065466][T11246] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 305.076399][T11246] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 305.086231][T11246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.357021][T11246] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:05:43 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 19:05:43 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:43 executing program 5 (fault-call:6 fault-nth:25): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:43 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e20a0df62bfaa6c916476e85004c4f14093c4010b5ea73cd85face3728ddd731f6f4c8c873", 0x49) 19:05:43 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) 19:05:43 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 307.115485][ T4914] usb 3-1: USB disconnect, device number 68 [ 307.130098][ T4914] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 307.173317][T14695] input: syz1 as /devices/virtual/input/input218 [ 307.190953][T14700] input: syz1 as /devices/virtual/input/input219 [ 307.191981][T14696] FAULT_INJECTION: forcing a failure. [ 307.191981][T14696] name failslab, interval 1, probability 0, space 0, times 0 [ 307.226315][T14696] CPU: 0 PID: 14696 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 307.235076][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.245187][T14696] Call Trace: [ 307.248502][T14696] dump_stack+0x116/0x15d [ 307.252834][T14696] should_fail+0x231/0x240 [ 307.257255][T14696] ? alloc_skb_with_frags+0x90/0x370 [ 307.262531][T14696] __should_failslab+0x81/0x90 [ 307.267361][T14696] should_failslab+0x5/0x20 [ 307.271862][T14696] slab_pre_alloc_hook+0x20/0xb0 [ 307.276794][T14696] ? alloc_skb_with_frags+0x90/0x370 [ 307.282112][T14696] kmem_cache_alloc_node_trace+0x61/0x240 [ 307.287897][T14696] ? __kmalloc_node_track_caller+0x30/0x40 [ 307.293692][T14696] ? alloc_skb_with_frags+0x90/0x370 [ 307.298972][T14696] __kmalloc_node_track_caller+0x30/0x40 [ 307.304909][T14696] __alloc_skb+0xd2/0x2d0 [ 307.309234][T14696] alloc_skb_with_frags+0x90/0x370 [ 307.314343][T14696] sock_alloc_send_pskb+0x3c2/0x470 [ 307.319586][T14696] sock_alloc_send_skb+0x2d/0x40 [ 307.324517][T14696] __ip_append_data+0x12fb/0x1ca0 [ 307.329630][T14696] ? __mkroute_output+0x7bd/0xcc0 [ 307.334648][T14696] ? ip_do_fragment+0xfa0/0xfa0 [ 307.339496][T14696] ip_make_skb+0x139/0x2c0 [ 307.343922][T14696] ? ip_do_fragment+0xfa0/0xfa0 [ 307.348758][T14696] udp_sendmsg+0x13ff/0x15e0 [ 307.353332][T14696] ? ip_do_fragment+0xfa0/0xfa0 [ 307.358159][T14696] ? aa_sock_msg_perm+0x87/0x120 [ 307.363071][T14696] inet_sendmsg+0x5f/0x80 [ 307.367380][T14696] ? inet_send_prepare+0x210/0x210 [ 307.372545][T14696] ____sys_sendmsg+0x352/0x4c0 [ 307.377355][T14696] ? import_iovec+0xb8/0xd0 [ 307.381889][T14696] __sys_sendmmsg+0x335/0x4b0 [ 307.386546][T14696] ? kstrtoull+0x30f/0x350 [ 307.390941][T14696] ? kstrtouint_from_user+0x104/0x130 [ 307.396298][T14696] ? __rcu_read_unlock+0x51/0x220 [ 307.401300][T14696] ? fsnotify_perm+0x59/0x2d0 [ 307.405953][T14696] ? __fsnotify_parent+0x21f/0x460 [ 307.411116][T14696] ? get_pid_task+0x90/0xc0 [ 307.415595][T14696] ? __sb_end_write+0x7f/0xc0 [ 307.420247][T14696] ? vfs_write+0x492/0x690 [ 307.424705][T14696] ? __fget_light+0x219/0x260 [ 307.429364][T14696] ? fput+0x2d/0x130 [ 307.433235][T14696] ? ksys_write+0x157/0x180 [ 307.437712][T14696] __x64_sys_sendmmsg+0x53/0x60 [ 307.442537][T14696] do_syscall_64+0x39/0x80 [ 307.447112][T14696] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 307.452976][T14696] RIP: 0033:0x45deb9 [ 307.456875][T14696] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:05:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 307.476457][T14696] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.484856][T14696] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 307.492805][T14696] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 307.500808][T14696] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 307.508756][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000019 [ 307.516703][T14696] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:44 executing program 5 (fault-call:6 fault-nth:26): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 307.608861][T14719] FAULT_INJECTION: forcing a failure. [ 307.608861][T14719] name failslab, interval 1, probability 0, space 0, times 0 [ 307.621519][T14719] CPU: 1 PID: 14719 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 307.630473][T14719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.640519][T14719] Call Trace: [ 307.643848][T14719] dump_stack+0x116/0x15d [ 307.648177][T14719] should_fail+0x231/0x240 [ 307.652588][T14719] __should_failslab+0x81/0x90 19:05:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 307.657342][T14719] should_failslab+0x5/0x20 [ 307.657353][T14719] slab_pre_alloc_hook+0x20/0xb0 [ 307.657371][T14719] kmem_cache_alloc+0x4d/0x280 [ 307.671530][T14719] ? skb_clone+0x131/0x1e0 [ 307.675942][T14719] skb_clone+0x131/0x1e0 [ 307.680259][T14719] dev_queue_xmit_nit+0x1ad/0x5d0 [ 307.685279][T14719] xmit_one+0x71/0x2e0 [ 307.689346][T14719] __dev_queue_xmit+0xeef/0x1510 [ 307.694279][T14719] ? __rcu_read_unlock+0x3a/0x220 [ 307.699305][T14719] dev_queue_xmit+0x13/0x20 [ 307.703815][T14719] ip_finish_output2+0xb09/0xba0 [ 307.708756][T14719] __ip_finish_output+0x3d8/0x430 [ 307.713857][T14719] ip_finish_output+0x39/0x160 [ 307.718695][T14719] ip_output+0xf6/0x1a0 [ 307.722986][T14719] ? ip_mc_finish_output+0x260/0x260 [ 307.728279][T14719] ip_send_skb+0x6e/0xe0 [ 307.732520][T14719] udp_send_skb+0x619/0x850 [ 307.737026][T14719] udp_sendmsg+0x142c/0x15e0 [ 307.741605][T14719] ? ip_do_fragment+0xfa0/0xfa0 [ 307.746460][T14719] ? aa_sock_msg_perm+0x87/0x120 [ 307.751422][T14719] inet_sendmsg+0x5f/0x80 [ 307.755785][T14719] ? inet_send_prepare+0x210/0x210 [ 307.760922][T14719] ____sys_sendmsg+0x352/0x4c0 [ 307.765676][T14719] ? import_iovec+0xb8/0xd0 [ 307.770173][T14719] __sys_sendmmsg+0x335/0x4b0 [ 307.774878][T14719] ? kstrtoull+0x30f/0x350 [ 307.779371][T14719] ? kstrtouint_from_user+0x104/0x130 [ 307.784768][T14719] ? __rcu_read_unlock+0x51/0x220 [ 307.789795][T14719] ? fsnotify_perm+0x59/0x2d0 [ 307.794462][T14719] ? __fsnotify_parent+0x21f/0x460 [ 307.799597][T14719] ? get_pid_task+0x90/0xc0 [ 307.804169][T14719] ? __sb_end_write+0x7f/0xc0 [ 307.808843][T14719] ? vfs_write+0x492/0x690 [ 307.813256][T14719] ? __fget_light+0x219/0x260 [ 307.817951][T14719] ? fput+0x2d/0x130 [ 307.821858][T14719] ? ksys_write+0x157/0x180 [ 307.826357][T14719] __x64_sys_sendmmsg+0x53/0x60 [ 307.831204][T14719] do_syscall_64+0x39/0x80 [ 307.835685][T14719] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 307.841573][T14719] RIP: 0033:0x45deb9 [ 307.845454][T14719] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 307.865070][T14719] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.873479][T14719] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 307.875091][ T4914] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 307.881441][T14719] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 307.881450][T14719] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 19:05:44 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 307.881457][T14719] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001a [ 307.881465][T14719] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 307.945724][T11246] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 308.185329][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 308.205066][T11246] usb 4-1: Using ep0 maxpacket: 8 [ 308.305047][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.316309][ T4914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 308.326635][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.335166][T11246] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.347765][T11246] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 308.357658][T11246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.595494][ T4914] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 308.624233][T11246] iowarrior 4-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 310.346296][ T4914] usb 3-1: USB disconnect, device number 69 [ 310.365621][ T4914] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 310.386433][ T4593] usb 4-1: USB disconnect, device number 2 19:05:47 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 19:05:47 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040)) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cachefiles\x00', 0x700, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000005c0)={0x6, 0x8, {0x52, 0x9, 0x4, {0x1f, 0x7}, {0x8, 0x7}, @period={0x5a, 0x4, 0x8, 0x7, 0x0, {0x7, 0x8001, 0x2, 0xf796}, 0x1, &(0x7f0000000580)=[0x21]}}, {0x51, 0x20, 0x2, {0x7, 0xcc}, {0x7f, 0x3f}, @rumble={0x1, 0x1}}}) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x128, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x27e85b5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ee42911}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b38c7be}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x741ea39}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62daaaa6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xecac391}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cc4fedc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b9cdd6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ab74c2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x10}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c50d363}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ce870c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040804) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:47 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) read(r9, &(0x7f00000001c0)=""/155, 0x9b) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:47 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x300) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:47 executing program 5 (fault-call:6 fault-nth:27): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 310.393058][ T4593] iowarrior 4-1:1.0: I/O-Warror #1 now disconnected 19:05:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 310.453802][T14786] input: syz1 as /devices/virtual/input/input225 [ 310.461423][T14790] input: syz1 as /devices/virtual/input/input226 [ 310.468969][T14791] input: syz1 as /devices/virtual/input/input227 [ 310.482558][T14792] FAULT_INJECTION: forcing a failure. [ 310.482558][T14792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.512674][T14792] CPU: 1 PID: 14792 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 310.521444][T14792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.531493][T14792] Call Trace: [ 310.534787][T14792] dump_stack+0x116/0x15d [ 310.539106][T14792] should_fail+0x231/0x240 [ 310.543516][T14792] should_fail_usercopy+0x16/0x20 [ 310.548531][T14792] _copy_from_user+0x1c/0xd0 [ 310.553115][T14792] __copy_msghdr_from_user+0x42/0x340 [ 310.558474][T14792] ? import_iovec+0xb8/0xd0 [ 310.563014][T14792] __sys_sendmmsg+0x20f/0x4b0 [ 310.567692][T14792] ? kstrtoull+0x30f/0x350 [ 310.572147][T14792] ? kstrtouint_from_user+0x104/0x130 [ 310.577535][T14792] ? __rcu_read_unlock+0x51/0x220 [ 310.582547][T14792] ? fsnotify_perm+0x59/0x2d0 [ 310.587238][T14792] ? __fsnotify_parent+0x21f/0x460 [ 310.592473][T14792] ? get_pid_task+0x90/0xc0 [ 310.596981][T14792] ? __sb_end_write+0x7f/0xc0 [ 310.601651][T14792] ? vfs_write+0x492/0x690 [ 310.606058][T14792] ? __fget_light+0x219/0x260 [ 310.610718][T14792] ? fput+0x2d/0x130 [ 310.614604][T14792] ? ksys_write+0x157/0x180 [ 310.619095][T14792] __x64_sys_sendmmsg+0x53/0x60 [ 310.623948][T14792] do_syscall_64+0x39/0x80 [ 310.628367][T14792] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 310.634246][T14792] RIP: 0033:0x45deb9 [ 310.638131][T14792] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 19:05:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 310.657770][T14792] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 310.666253][T14792] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 310.674224][T14792] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 310.682210][T14792] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 310.690211][T14792] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 310.698178][T14792] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:47 executing program 5 (fault-call:6 fault-nth:28): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 310.834669][T14822] FAULT_INJECTION: forcing a failure. [ 310.834669][T14822] name failslab, interval 1, probability 0, space 0, times 0 [ 310.862737][T14822] CPU: 1 PID: 14822 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 310.871592][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.871596][T14822] Call Trace: 19:05:47 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 310.871622][T14822] dump_stack+0x116/0x15d [ 310.889284][T14822] should_fail+0x231/0x240 [ 310.893702][T14822] __should_failslab+0x81/0x90 [ 310.898483][T14822] should_failslab+0x5/0x20 [ 310.902986][T14822] slab_pre_alloc_hook+0x20/0xb0 [ 310.908053][T14822] kmem_cache_alloc+0x4d/0x280 [ 310.912812][T14822] ? dst_alloc+0x112/0x2c0 [ 310.917274][T14822] dst_alloc+0x112/0x2c0 [ 310.921510][T14822] __mkroute_output+0x3bf/0xcc0 [ 310.926365][T14822] ? ip_output+0xf6/0x1a0 [ 310.930690][T14822] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 310.934355][T14830] input: syz1 as /devices/virtual/input/input232 [ 310.936570][T14822] ? udp_send_skb+0x6e4/0x850 [ 310.936586][T14822] ip_route_output_flow+0xaf/0x160 [ 310.936647][T14822] udp_sendmsg+0xfc5/0x15e0 [ 310.936664][T14822] ? ip_do_fragment+0xfa0/0xfa0 [ 310.962163][T14822] ? aa_sock_msg_perm+0x87/0x120 [ 310.967084][T14822] inet_sendmsg+0x5f/0x80 [ 310.971385][T14822] ? inet_send_prepare+0x210/0x210 [ 310.976473][T14822] ____sys_sendmsg+0x352/0x4c0 [ 310.981285][T14822] ? import_iovec+0xb8/0xd0 [ 310.985763][T14822] __sys_sendmmsg+0x335/0x4b0 [ 310.990423][T14822] ? kstrtoull+0x30f/0x350 [ 310.994916][T14822] ? kstrtouint_from_user+0x104/0x130 [ 311.000315][T14822] ? __rcu_read_unlock+0x51/0x220 [ 311.005326][T14822] ? fsnotify_perm+0x59/0x2d0 [ 311.010059][T14822] ? __fsnotify_parent+0x21f/0x460 [ 311.015224][T14822] ? get_pid_task+0x90/0xc0 [ 311.019703][T14822] ? __sb_end_write+0x7f/0xc0 [ 311.024354][T14822] ? vfs_write+0x492/0x690 [ 311.028756][T14822] ? __fget_light+0x219/0x260 [ 311.033407][T14822] ? fput+0x2d/0x130 [ 311.037287][T14822] ? ksys_write+0x157/0x180 [ 311.043608][T14822] __x64_sys_sendmmsg+0x53/0x60 [ 311.048494][T14822] do_syscall_64+0x39/0x80 [ 311.052894][T14822] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 311.058760][T14822] RIP: 0033:0x45deb9 [ 311.062680][T14822] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.082262][T14822] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 311.090652][T14822] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 311.098729][T14822] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 311.106678][T14822] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 311.114626][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001c [ 311.122573][T14822] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 311.256125][T14820] input: syz1 as /devices/virtual/input/input233 [ 311.294822][ T4914] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 311.554821][ T4914] usb 3-1: Using ep0 maxpacket: 8 [ 311.694861][ T4914] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.705766][ T4914] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 311.716147][ T4914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.975568][ T4914] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:05:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) 19:05:50 executing program 5 (fault-call:6 fault-nth:29): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:50 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x4000]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:50 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00), 0x0) 19:05:50 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:50 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) read(r9, &(0x7f00000001c0)=""/155, 0x9b) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 313.725478][ T4593] usb 3-1: USB disconnect, device number 70 [ 313.755506][ T4593] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 313.811798][T14888] FAULT_INJECTION: forcing a failure. [ 313.811798][T14888] name failslab, interval 1, probability 0, space 0, times 0 [ 313.818360][T14892] input: syz1 as /devices/virtual/input/input234 [ 313.834594][T14890] input: syz1 as /devices/virtual/input/input235 [ 313.835492][T14891] input: syz1 as /devices/virtual/input/input236 [ 313.841517][T14888] CPU: 0 PID: 14888 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 313.856030][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.866076][T14888] Call Trace: [ 313.869424][T14888] dump_stack+0x116/0x15d [ 313.873760][T14888] should_fail+0x231/0x240 [ 313.878169][T14888] __should_failslab+0x81/0x90 [ 313.883056][T14888] should_failslab+0x5/0x20 [ 313.887572][T14888] slab_pre_alloc_hook+0x20/0xb0 [ 313.892532][T14888] kmem_cache_alloc_node+0x5c/0x260 [ 313.897763][T14888] ? __rcu_read_unlock+0x51/0x220 [ 313.902783][T14888] ? __alloc_skb+0x98/0x2d0 [ 313.907275][T14888] ? packet_direct_xmit+0x140/0x140 [ 313.912465][T14888] __alloc_skb+0x98/0x2d0 [ 313.916786][T14888] alloc_skb_with_frags+0x90/0x370 [ 313.921890][T14888] ? xmit_one+0x173/0x2e0 [ 313.926209][T14888] sock_alloc_send_pskb+0x3c2/0x470 [ 313.931457][T14888] sock_alloc_send_skb+0x2d/0x40 [ 313.936388][T14888] __ip_append_data+0x12fb/0x1ca0 [ 313.941412][T14888] ? __mkroute_output+0x7bd/0xcc0 [ 313.946510][T14888] ? ip_do_fragment+0xfa0/0xfa0 [ 313.951402][T14888] ip_make_skb+0x139/0x2c0 [ 313.955879][T14888] ? ip_do_fragment+0xfa0/0xfa0 [ 313.960743][T14888] udp_sendmsg+0x13ff/0x15e0 [ 313.965322][T14888] ? ip_do_fragment+0xfa0/0xfa0 [ 313.970169][T14888] ? aa_sock_msg_perm+0x87/0x120 [ 313.975103][T14888] inet_sendmsg+0x5f/0x80 [ 313.979615][T14888] ? inet_send_prepare+0x210/0x210 [ 313.984722][T14888] ____sys_sendmsg+0x352/0x4c0 [ 313.989502][T14888] ? import_iovec+0xb8/0xd0 [ 313.994010][T14888] __sys_sendmmsg+0x335/0x4b0 [ 313.998683][T14888] ? kstrtoull+0x30f/0x350 [ 314.003107][T14888] ? kstrtouint_from_user+0x104/0x130 [ 314.008477][T14888] ? __rcu_read_unlock+0x51/0x220 [ 314.013501][T14888] ? fsnotify_perm+0x59/0x2d0 [ 314.018174][T14888] ? __fsnotify_parent+0x21f/0x460 [ 314.023281][T14888] ? get_pid_task+0x90/0xc0 [ 314.027947][T14888] ? __sb_end_write+0x7f/0xc0 [ 314.032611][T14888] ? vfs_write+0x492/0x690 [ 314.037022][T14888] ? __fget_light+0x219/0x260 [ 314.041679][T14888] ? fput+0x2d/0x130 [ 314.045562][T14888] ? ksys_write+0x157/0x180 [ 314.050058][T14888] __x64_sys_sendmmsg+0x53/0x60 [ 314.054904][T14888] do_syscall_64+0x39/0x80 [ 314.059376][T14888] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 314.065373][T14888] RIP: 0033:0x45deb9 [ 314.069289][T14888] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.088920][T14888] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 314.097314][T14888] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 314.105271][T14888] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 19:05:50 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) [ 314.113236][T14888] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 314.121225][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001d [ 314.129254][T14888] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:50 executing program 5 (fault-call:6 fault-nth:30): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 314.228183][T14922] FAULT_INJECTION: forcing a failure. [ 314.228183][T14922] name failslab, interval 1, probability 0, space 0, times 0 [ 314.254973][T14922] CPU: 0 PID: 14922 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 314.263878][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.273909][T14922] Call Trace: [ 314.277228][T14922] dump_stack+0x116/0x15d [ 314.281533][T14922] should_fail+0x231/0x240 [ 314.285924][T14922] ? alloc_skb_with_frags+0x90/0x370 [ 314.291246][T14922] __should_failslab+0x81/0x90 [ 314.295988][T14922] should_failslab+0x5/0x20 [ 314.300577][T14922] slab_pre_alloc_hook+0x20/0xb0 [ 314.305577][T14922] ? alloc_skb_with_frags+0x90/0x370 [ 314.310943][T14922] kmem_cache_alloc_node_trace+0x61/0x240 [ 314.316661][T14922] ? __kmalloc_node_track_caller+0x30/0x40 [ 314.322488][T14922] ? alloc_skb_with_frags+0x90/0x370 [ 314.327939][T14922] __kmalloc_node_track_caller+0x30/0x40 [ 314.333575][T14922] __alloc_skb+0xd2/0x2d0 [ 314.337976][T14922] alloc_skb_with_frags+0x90/0x370 [ 314.343077][T14922] ? xmit_one+0x173/0x2e0 [ 314.347407][T14922] sock_alloc_send_pskb+0x3c2/0x470 [ 314.352607][T14922] sock_alloc_send_skb+0x2d/0x40 [ 314.357535][T14922] __ip_append_data+0x12fb/0x1ca0 [ 314.362588][T14922] ? __mkroute_output+0x7bd/0xcc0 [ 314.367769][T14922] ? ip_do_fragment+0xfa0/0xfa0 [ 314.372659][T14922] ip_make_skb+0x139/0x2c0 [ 314.377063][T14922] ? ip_do_fragment+0xfa0/0xfa0 [ 314.381895][T14922] udp_sendmsg+0x13ff/0x15e0 [ 314.386537][T14922] ? ip_do_fragment+0xfa0/0xfa0 [ 314.391372][T14922] ? aa_sock_msg_perm+0x87/0x120 [ 314.396283][T14922] inet_sendmsg+0x5f/0x80 [ 314.400588][T14922] ? inet_send_prepare+0x210/0x210 [ 314.405671][T14922] ____sys_sendmsg+0x352/0x4c0 [ 314.410414][T14922] ? import_iovec+0xb8/0xd0 [ 314.414959][T14922] __sys_sendmmsg+0x335/0x4b0 [ 314.419682][T14922] ? kstrtoull+0x30f/0x350 [ 314.424138][T14922] ? kstrtouint_from_user+0x104/0x130 [ 314.429570][T14922] ? __rcu_read_unlock+0x51/0x220 [ 314.434580][T14922] ? fsnotify_perm+0x59/0x2d0 [ 314.439258][T14922] ? __fsnotify_parent+0x21f/0x460 [ 314.444401][T14922] ? get_pid_task+0x90/0xc0 [ 314.448915][T14922] ? __sb_end_write+0x7f/0xc0 [ 314.453634][T14922] ? vfs_write+0x492/0x690 [ 314.458028][T14922] ? __fget_light+0x219/0x260 [ 314.462716][T14922] ? fput+0x2d/0x130 [ 314.466591][T14922] ? ksys_write+0x157/0x180 [ 314.471074][T14922] __x64_sys_sendmmsg+0x53/0x60 [ 314.476069][T14922] do_syscall_64+0x39/0x80 [ 314.480484][T14922] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 314.486353][T14922] RIP: 0033:0x45deb9 [ 314.490470][T14922] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.510061][T14922] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 314.518528][T14922] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 19:05:51 executing program 5 (fault-call:6 fault-nth:31): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 314.526493][T14922] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 314.534439][T14922] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 314.542413][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 314.550482][T14922] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 314.612792][T14928] FAULT_INJECTION: forcing a failure. [ 314.612792][T14928] name failslab, interval 1, probability 0, space 0, times 0 [ 314.625435][T14928] CPU: 0 PID: 14928 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 314.634187][T14928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.644244][T14928] Call Trace: [ 314.647532][T14928] dump_stack+0x116/0x15d [ 314.651855][T14928] should_fail+0x231/0x240 [ 314.656327][T14928] __should_failslab+0x81/0x90 [ 314.661160][T14928] should_failslab+0x5/0x20 [ 314.665665][T14928] slab_pre_alloc_hook+0x20/0xb0 [ 314.670602][T14928] kmem_cache_alloc+0x4d/0x280 [ 314.675364][T14928] ? skb_clone+0x131/0x1e0 [ 314.679794][T14928] skb_clone+0x131/0x1e0 [ 314.684048][T14928] dev_queue_xmit_nit+0x1ad/0x5d0 [ 314.689136][T14928] xmit_one+0x71/0x2e0 [ 314.693213][T14928] __dev_queue_xmit+0xeef/0x1510 [ 314.698151][T14928] ? __rcu_read_unlock+0x3a/0x220 [ 314.703214][T14928] dev_queue_xmit+0x13/0x20 [ 314.707740][T14928] ip_finish_output2+0xb09/0xba0 [ 314.712692][T14928] __ip_finish_output+0x3d8/0x430 [ 314.717754][T14928] ip_finish_output+0x39/0x160 [ 314.722552][T14928] ip_output+0xf6/0x1a0 [ 314.726704][T14928] ? ip_mc_finish_output+0x260/0x260 [ 314.731986][T14928] ip_send_skb+0x6e/0xe0 [ 314.736215][T14928] udp_send_skb+0x619/0x850 [ 314.740710][T14928] udp_sendmsg+0x142c/0x15e0 [ 314.745394][T14928] ? ip_do_fragment+0xfa0/0xfa0 [ 314.750263][T14928] ? aa_sock_msg_perm+0x87/0x120 [ 314.755184][T14928] inet_sendmsg+0x5f/0x80 19:05:51 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 314.759548][T14928] ? inet_send_prepare+0x210/0x210 [ 314.764650][T14928] ____sys_sendmsg+0x352/0x4c0 [ 314.769408][T14928] ? import_iovec+0xb8/0xd0 [ 314.773912][T14928] __sys_sendmmsg+0x335/0x4b0 [ 314.778585][T14928] ? kstrtoull+0x30f/0x350 [ 314.783046][T14928] ? kstrtouint_from_user+0x104/0x130 [ 314.788413][T14928] ? __rcu_read_unlock+0x51/0x220 [ 314.793433][T14928] ? fsnotify_perm+0x59/0x2d0 [ 314.797307][T14943] input: syz1 as /devices/virtual/input/input238 [ 314.798108][T14928] ? __fsnotify_parent+0x21f/0x460 [ 314.809620][T14928] ? get_pid_task+0x90/0xc0 [ 314.814440][T14928] ? __sb_end_write+0x7f/0xc0 [ 314.819116][T14928] ? vfs_write+0x492/0x690 [ 314.823680][T14928] ? __fget_light+0x219/0x260 [ 314.828737][T14928] ? fput+0x2d/0x130 [ 314.832629][T14928] ? ksys_write+0x157/0x180 [ 314.837179][T14928] __x64_sys_sendmmsg+0x53/0x60 [ 314.842456][T14928] do_syscall_64+0x39/0x80 [ 314.847198][T14928] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 314.853076][T14928] RIP: 0033:0x45deb9 [ 314.856949][T14928] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.876534][T14928] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 314.884988][T14928] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 314.892939][T14928] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 314.900888][T14928] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 19:05:51 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 314.908916][T14928] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001f [ 314.916864][T14928] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:51 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) read(r9, &(0x7f00000001c0)=""/155, 0x9b) readv(r9, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 314.978582][T14953] input: syz1 as /devices/virtual/input/input239 [ 314.995903][ T4593] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 315.006518][ T54] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 315.076237][T14959] input: syz1 as /devices/virtual/input/input240 19:05:51 executing program 5 (fault-call:6 fault-nth:32): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 315.210205][T14969] FAULT_INJECTION: forcing a failure. [ 315.210205][T14969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.225079][T14969] CPU: 1 PID: 14969 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 315.233842][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.234586][ T4593] usb 3-1: Using ep0 maxpacket: 8 [ 315.243884][T14969] Call Trace: [ 315.243956][T14969] dump_stack+0x116/0x15d [ 315.243975][T14969] should_fail+0x231/0x240 [ 315.261081][T14969] should_fail_usercopy+0x16/0x20 [ 315.266103][T14969] _copy_from_user+0x1c/0xd0 [ 315.270734][T14969] __copy_msghdr_from_user+0x42/0x340 [ 315.276278][T14969] ? import_iovec+0xb8/0xd0 [ 315.280774][T14969] __sys_sendmmsg+0x20f/0x4b0 [ 315.285694][T14969] ? kstrtoull+0x30f/0x350 [ 315.290096][T14969] ? kstrtouint_from_user+0x104/0x130 [ 315.295484][T14969] ? __rcu_read_unlock+0x51/0x220 [ 315.300516][T14969] ? fsnotify_perm+0x59/0x2d0 [ 315.305183][T14969] ? __fsnotify_parent+0x21f/0x460 [ 315.310354][T14969] ? get_pid_task+0x90/0xc0 [ 315.314867][T14969] ? __sb_end_write+0x7f/0xc0 [ 315.319530][T14969] ? vfs_write+0x492/0x690 [ 315.323947][T14969] ? __fget_light+0x219/0x260 [ 315.328597][T14969] ? fput+0x2d/0x130 [ 315.332474][T14969] ? ksys_write+0x157/0x180 [ 315.336953][T14969] __x64_sys_sendmmsg+0x53/0x60 [ 315.341779][T14969] do_syscall_64+0x39/0x80 [ 315.346194][T14969] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 315.352086][T14969] RIP: 0033:0x45deb9 [ 315.356042][T14969] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.374601][ T4593] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.375634][T14969] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.375646][T14969] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 315.375664][T14969] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 19:05:52 executing program 5 (fault-call:6 fault-nth:33): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 315.386847][ T4593] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 315.394882][T14969] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 315.394890][T14969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 315.394924][T14969] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 315.434568][ T54] usb 4-1: Using ep0 maxpacket: 8 [ 315.436439][ T4593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.521335][T14975] FAULT_INJECTION: forcing a failure. [ 315.521335][T14975] name failslab, interval 1, probability 0, space 0, times 0 [ 315.537320][T14975] CPU: 0 PID: 14975 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 315.546111][T14975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.556161][T14975] Call Trace: [ 315.559444][T14975] dump_stack+0x116/0x15d [ 315.563749][T14975] should_fail+0x231/0x240 [ 315.568276][T14975] __should_failslab+0x81/0x90 [ 315.573024][T14975] should_failslab+0x5/0x20 [ 315.577607][T14975] slab_pre_alloc_hook+0x20/0xb0 [ 315.582569][T14975] kmem_cache_alloc+0x4d/0x280 [ 315.587335][T14975] ? dst_alloc+0x112/0x2c0 [ 315.591780][T14975] dst_alloc+0x112/0x2c0 [ 315.596036][T14975] __mkroute_output+0x3bf/0xcc0 [ 315.600864][T14975] ? ip_output+0xf6/0x1a0 [ 315.605166][T14975] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 315.611031][T14975] ? udp_send_skb+0x6e4/0x850 [ 315.615685][T14975] ip_route_output_flow+0xaf/0x160 [ 315.620770][T14975] udp_sendmsg+0xfc5/0x15e0 [ 315.625246][T14975] ? ip_do_fragment+0xfa0/0xfa0 [ 315.630101][T14975] ? aa_sock_msg_perm+0x87/0x120 [ 315.635013][T14975] inet_sendmsg+0x5f/0x80 [ 315.639318][T14975] ? inet_send_prepare+0x210/0x210 [ 315.644402][T14975] ____sys_sendmsg+0x352/0x4c0 [ 315.649160][T14975] ? import_iovec+0xb8/0xd0 [ 315.653637][T14975] __sys_sendmmsg+0x335/0x4b0 [ 315.658300][T14975] ? kstrtoull+0x30f/0x350 [ 315.662709][T14975] ? kstrtouint_from_user+0x104/0x130 [ 315.668108][T14975] ? __rcu_read_unlock+0x51/0x220 [ 315.673105][T14975] ? fsnotify_perm+0x59/0x2d0 [ 315.677754][T14975] ? __fsnotify_parent+0x21f/0x460 [ 315.682839][T14975] ? get_pid_task+0x90/0xc0 [ 315.687333][T14975] ? __sb_end_write+0x7f/0xc0 [ 315.692000][T14975] ? vfs_write+0x492/0x690 [ 315.696391][T14975] ? __fget_light+0x219/0x260 [ 315.701059][T14975] ? fput+0x2d/0x130 [ 315.704942][T14975] ? ksys_write+0x157/0x180 [ 315.709459][T14975] __x64_sys_sendmmsg+0x53/0x60 [ 315.714284][T14975] do_syscall_64+0x39/0x80 [ 315.718674][T14975] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 315.724568][T14975] RIP: 0033:0x45deb9 [ 315.728607][T14975] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.748227][T14975] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 315.756633][T14975] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 315.764581][T14975] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 315.772545][T14975] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 315.780493][T14975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000021 [ 315.788439][T14975] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 315.802087][ T4593] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:05:52 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 315.815098][ T54] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.854228][ T54] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 315.898200][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.215007][ T54] iowarrior 4-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 19:05:54 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00), 0x0) 19:05:54 executing program 5 (fault-call:6 fault-nth:34): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:54 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='/dev/uinput\x00', 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) read(r1, &(0x7f00000001c0)=""/155, 0x9b) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$uinput_user_dev(r1, &(0x7f0000000680)={'syz1\x00', {0x40, 0x7a, 0x5, 0x48c2}, 0x49, [0x80000001, 0x1, 0x8000, 0x5, 0x1, 0x5, 0xa04, 0xfffffffd, 0x89, 0x80, 0x2, 0x972, 0x3f, 0x20, 0xf8, 0x6, 0x7, 0x5, 0xfffffff7, 0x101, 0xffff, 0x7fffffff, 0x6, 0x1000, 0x6, 0x1000, 0x9, 0xba, 0x39f, 0x28d, 0x6255, 0x20400, 0x4, 0x0, 0x6, 0x5, 0x0, 0x2, 0xffffff01, 0x7, 0x3, 0x7e, 0x0, 0x1ff, 0x80, 0x8, 0x0, 0x80000000, 0xfffffff7, 0x1c, 0x40, 0x80000001, 0x3, 0xfffffff7, 0x3, 0x4, 0x20, 0x7, 0x4, 0x2, 0x2, 0x1, 0x81], [0x2, 0x70, 0x7fff, 0x0, 0x6, 0x3, 0x2, 0x5, 0x8, 0x9, 0x8000, 0x6, 0x4af7, 0x2000, 0x5, 0x80000001, 0x401, 0x6, 0xfffffffd, 0x2, 0x4, 0x7, 0x6, 0xa178, 0x20, 0x4, 0x0, 0x2, 0x3, 0x3, 0x1, 0x0, 0xffffffea, 0x29cd, 0x9, 0x401, 0xa4, 0x9, 0x3, 0x400, 0xe9, 0xaa, 0x8, 0x1, 0x4, 0x1ff, 0x7, 0xb8a, 0xc23, 0x4, 0x100, 0x7, 0x401, 0x0, 0x3ff, 0xffff, 0x2, 0x9, 0x5, 0x2, 0x4, 0x8001, 0x4, 0x800], [0x8, 0x4, 0x800, 0x3, 0x581f, 0xcc, 0x5, 0x6, 0x2, 0x97e8, 0xff, 0x3f, 0x3f, 0x401, 0x7fff, 0x0, 0x2fb, 0x2, 0x86, 0x8693, 0xcae2, 0x101, 0x7fff, 0xffff, 0x80, 0x9, 0x8, 0x3ff, 0xfffffff8, 0x223d, 0x2, 0x5, 0x101, 0xfff, 0x4, 0x0, 0x0, 0x3, 0x1, 0x5, 0x1f, 0x8, 0x3, 0x6, 0x6, 0x9, 0x2, 0x7, 0x1, 0x7, 0x40, 0x5, 0x588, 0x7fff, 0x7, 0x2, 0x5, 0x1f, 0x9641, 0x4, 0x7, 0x0, 0xfffff000, 0x52], [0x6, 0x260b6aed, 0x8, 0x8000, 0x3ff, 0x1, 0x4, 0x1, 0x2, 0x4, 0x5, 0x8, 0x1, 0x0, 0x1, 0x8000, 0x401, 0xfff, 0x6ed9, 0x3, 0x8, 0x7, 0x1f, 0x7ff, 0x48, 0x8, 0x4, 0xfffffc00, 0xd2, 0xfffff43e, 0x4, 0x9, 0x0, 0x80000000, 0x6, 0x7, 0x7ff, 0x8, 0x1000, 0xfffff454, 0x30a9, 0x20, 0x9, 0x80000001, 0x7ff, 0xffffffff, 0x8, 0x5, 0x23c, 0x101, 0x7, 0x0, 0x7, 0x40, 0x5, 0x1, 0x4, 0x1000, 0x80000000, 0xfffffffa, 0x6, 0x7ff, 0x4117, 0x7]}, 0x45c) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000080)) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x1001) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b40)={0xcc, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc000801}, 0x80) [ 317.563058][ T54] usb 3-1: USB disconnect, device number 71 [ 317.571830][ T54] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 317.602435][T15019] FAULT_INJECTION: forcing a failure. [ 317.602435][T15019] name failslab, interval 1, probability 0, space 0, times 0 [ 317.629434][T15019] CPU: 1 PID: 15019 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 317.638060][T15021] input: syz1 as /devices/virtual/input/input243 [ 317.638210][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.654561][T15019] Call Trace: [ 317.657997][T15019] dump_stack+0x116/0x15d [ 317.662333][T15019] should_fail+0x231/0x240 [ 317.666724][T15019] __should_failslab+0x81/0x90 [ 317.671463][T15019] should_failslab+0x5/0x20 [ 317.676024][T15019] slab_pre_alloc_hook+0x20/0xb0 [ 317.680958][T15019] kmem_cache_alloc_node+0x5c/0x260 [ 317.686168][T15019] ? __rcu_read_unlock+0x51/0x220 [ 317.691186][T15019] ? __alloc_skb+0x98/0x2d0 [ 317.695684][T15019] ? packet_direct_xmit+0x140/0x140 [ 317.700926][T15019] __alloc_skb+0x98/0x2d0 [ 317.705258][T15019] alloc_skb_with_frags+0x90/0x370 [ 317.710371][T15019] ? xmit_one+0x173/0x2e0 [ 317.714764][T15019] sock_alloc_send_pskb+0x3c2/0x470 [ 317.719976][T15019] sock_alloc_send_skb+0x2d/0x40 [ 317.724920][T15019] __ip_append_data+0x12fb/0x1ca0 [ 317.729953][T15019] ? __mkroute_output+0x7bd/0xcc0 [ 317.734998][T15019] ? ip_do_fragment+0xfa0/0xfa0 [ 317.739845][T15019] ip_make_skb+0x139/0x2c0 [ 317.744263][T15019] ? ip_do_fragment+0xfa0/0xfa0 [ 317.749104][T15019] udp_sendmsg+0x13ff/0x15e0 [ 317.753687][T15019] ? ip_do_fragment+0xfa0/0xfa0 [ 317.758542][T15019] ? aa_sock_msg_perm+0x87/0x120 [ 317.763553][T15019] inet_sendmsg+0x5f/0x80 [ 317.767938][T15019] ? inet_send_prepare+0x210/0x210 [ 317.773099][T15019] ____sys_sendmsg+0x352/0x4c0 [ 317.777840][T15019] ? import_iovec+0xb8/0xd0 [ 317.782328][T15019] __sys_sendmmsg+0x335/0x4b0 [ 317.786987][T15019] ? kstrtoull+0x30f/0x350 [ 317.791381][T15019] ? kstrtouint_from_user+0x104/0x130 [ 317.796861][T15019] ? __rcu_read_unlock+0x51/0x220 [ 317.802042][T15019] ? fsnotify_perm+0x59/0x2d0 [ 317.806785][T15019] ? __fsnotify_parent+0x21f/0x460 [ 317.811888][T15019] ? get_pid_task+0x90/0xc0 [ 317.816369][T15019] ? __sb_end_write+0x7f/0xc0 [ 317.821020][T15019] ? vfs_write+0x492/0x690 [ 317.825481][T15019] ? __fget_light+0x219/0x260 [ 317.830131][T15019] ? fput+0x2d/0x130 [ 317.834127][T15019] ? ksys_write+0x157/0x180 [ 317.838609][T15019] __x64_sys_sendmmsg+0x53/0x60 [ 317.843473][T15019] do_syscall_64+0x39/0x80 [ 317.847939][T15019] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 317.853880][T15019] RIP: 0033:0x45deb9 [ 317.857751][T15019] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.877347][T15019] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 317.885738][T15019] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 317.893755][T15019] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 317.901708][T15019] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 317.909699][T15019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000022 [ 317.917681][T15019] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:54 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:54 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) read(r9, &(0x7f00000001c0)=""/155, 0x9b) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:54 executing program 5 (fault-call:6 fault-nth:35): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 317.974534][ T3693] usb 4-1: USB disconnect, device number 3 [ 317.981806][ T3693] iowarrior 4-1:1.0: I/O-Warror #1 now disconnected [ 318.026121][T15045] FAULT_INJECTION: forcing a failure. [ 318.026121][T15045] name failslab, interval 1, probability 0, space 0, times 0 [ 318.037324][T15048] input: syz1 as /devices/virtual/input/input245 [ 318.048551][T15044] input: syz1 as /devices/virtual/input/input246 [ 318.068989][T15045] CPU: 1 PID: 15045 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 318.077768][T15045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.087899][T15045] Call Trace: [ 318.091185][T15045] dump_stack+0x116/0x15d [ 318.095556][T15045] should_fail+0x231/0x240 [ 318.100037][T15045] ? alloc_skb_with_frags+0x90/0x370 [ 318.105314][T15045] __should_failslab+0x81/0x90 [ 318.110150][T15045] should_failslab+0x5/0x20 [ 318.114644][T15045] slab_pre_alloc_hook+0x20/0xb0 [ 318.119581][T15045] ? alloc_skb_with_frags+0x90/0x370 19:05:54 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 318.124862][T15045] kmem_cache_alloc_node_trace+0x61/0x240 [ 318.130580][T15045] ? __kmalloc_node_track_caller+0x30/0x40 [ 318.136395][T15045] ? alloc_skb_with_frags+0x90/0x370 [ 318.141685][T15045] __kmalloc_node_track_caller+0x30/0x40 [ 318.147377][T15045] __alloc_skb+0xd2/0x2d0 [ 318.151777][T15045] alloc_skb_with_frags+0x90/0x370 [ 318.157401][T15045] sock_alloc_send_pskb+0x3c2/0x470 [ 318.162879][T15045] sock_alloc_send_skb+0x2d/0x40 [ 318.168087][T15045] __ip_append_data+0x12fb/0x1ca0 [ 318.173155][T15045] ? __mkroute_output+0x7bd/0xcc0 [ 318.178215][T15045] ? ip_do_fragment+0xfa0/0xfa0 [ 318.183061][T15045] ip_make_skb+0x139/0x2c0 [ 318.187475][T15045] ? ip_do_fragment+0xfa0/0xfa0 [ 318.192319][T15045] udp_sendmsg+0x13ff/0x15e0 [ 318.197022][T15045] ? ip_do_fragment+0xfa0/0xfa0 [ 318.201874][T15045] ? aa_sock_msg_perm+0x87/0x120 [ 318.206811][T15045] inet_sendmsg+0x5f/0x80 [ 318.211136][T15045] ? inet_send_prepare+0x210/0x210 [ 318.216239][T15045] ____sys_sendmsg+0x352/0x4c0 [ 318.221066][T15045] ? import_iovec+0xb8/0xd0 [ 318.225630][T15045] __sys_sendmmsg+0x335/0x4b0 [ 318.230311][T15045] ? kstrtoull+0x30f/0x350 [ 318.234723][T15045] ? kstrtouint_from_user+0x104/0x130 [ 318.240091][T15045] ? __rcu_read_unlock+0x51/0x220 [ 318.245092][T15045] ? fsnotify_perm+0x59/0x2d0 [ 318.249751][T15045] ? __fsnotify_parent+0x21f/0x460 [ 318.254836][T15045] ? get_pid_task+0x90/0xc0 [ 318.259318][T15045] ? __sb_end_write+0x7f/0xc0 [ 318.264068][T15045] ? vfs_write+0x492/0x690 [ 318.268461][T15045] ? __fget_light+0x219/0x260 [ 318.273126][T15045] ? fput+0x2d/0x130 [ 318.276994][T15045] ? ksys_write+0x157/0x180 [ 318.281475][T15045] __x64_sys_sendmmsg+0x53/0x60 [ 318.286312][T15045] do_syscall_64+0x39/0x80 [ 318.290717][T15045] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 318.296585][T15045] RIP: 0033:0x45deb9 [ 318.300461][T15045] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.320095][T15045] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.328495][T15045] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 318.336474][T15045] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 318.344437][T15045] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 318.352406][T15045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000023 [ 318.360360][T15045] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:55 executing program 5 (fault-call:6 fault-nth:36): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 318.440746][T15071] FAULT_INJECTION: forcing a failure. [ 318.440746][T15071] name failslab, interval 1, probability 0, space 0, times 0 [ 318.453413][T15071] CPU: 0 PID: 15071 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 318.462167][T15071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 318.472230][T15071] Call Trace: [ 318.475519][T15071] dump_stack+0x116/0x15d [ 318.479843][T15071] should_fail+0x231/0x240 [ 318.484263][T15071] __should_failslab+0x81/0x90 19:05:55 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 318.489029][T15071] should_failslab+0x5/0x20 [ 318.493540][T15071] slab_pre_alloc_hook+0x20/0xb0 [ 318.498528][T15071] kmem_cache_alloc+0x4d/0x280 [ 318.503310][T15071] ? skb_clone+0x131/0x1e0 [ 318.507732][T15071] skb_clone+0x131/0x1e0 [ 318.512025][T15071] dev_queue_xmit_nit+0x1ad/0x5d0 [ 318.517057][T15071] xmit_one+0x71/0x2e0 [ 318.521131][T15071] __dev_queue_xmit+0xeef/0x1510 [ 318.526081][T15071] ? __rcu_read_unlock+0x3a/0x220 [ 318.531115][T15071] dev_queue_xmit+0x13/0x20 [ 318.535637][T15071] ip_finish_output2+0xb09/0xba0 19:05:55 executing program 0: r0 = inotify_init() r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00007a8000)) r2 = inotify_add_watch(r0, &(0x7f0000000300)='./control\x00', 0x81000050) inotify_rm_watch(r0, r2) inotify_rm_watch(0xffffffffffffffff, r2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) read(r3, &(0x7f00000001c0)=""/155, 0x9b) readv(r3, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 318.540587][T15071] __ip_finish_output+0x3d8/0x430 [ 318.545627][T15071] ip_finish_output+0x39/0x160 [ 318.550399][T15071] ip_output+0xf6/0x1a0 [ 318.554570][T15071] ? ip_mc_finish_output+0x260/0x260 [ 318.559927][T15071] ip_send_skb+0x6e/0xe0 [ 318.564220][T15071] udp_send_skb+0x619/0x850 [ 318.564367][ T54] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 318.568737][T15071] udp_sendmsg+0x142c/0x15e0 [ 318.568776][T15071] ? ip_do_fragment+0xfa0/0xfa0 [ 318.585764][T15071] ? aa_sock_msg_perm+0x87/0x120 [ 318.590710][T15071] inet_sendmsg+0x5f/0x80 [ 318.595151][T15071] ? inet_send_prepare+0x210/0x210 [ 318.600262][T15071] ____sys_sendmsg+0x352/0x4c0 [ 318.605034][T15071] ? import_iovec+0xb8/0xd0 [ 318.609911][T15071] __sys_sendmmsg+0x335/0x4b0 [ 318.614707][T15071] ? kstrtoull+0x30f/0x350 [ 318.619326][T15071] ? kstrtouint_from_user+0x104/0x130 [ 318.624972][T15071] ? __rcu_read_unlock+0x51/0x220 [ 318.630071][T15071] ? fsnotify_perm+0x59/0x2d0 [ 318.634751][T15071] ? __fsnotify_parent+0x21f/0x460 [ 318.639957][T15071] ? get_pid_task+0x90/0xc0 [ 318.644641][T15071] ? __sb_end_write+0x7f/0xc0 [ 318.649308][T15071] ? vfs_write+0x492/0x690 [ 318.653710][T15071] ? __fget_light+0x219/0x260 [ 318.658387][T15071] ? fput+0x2d/0x130 [ 318.662273][T15071] ? ksys_write+0x157/0x180 [ 318.666774][T15071] __x64_sys_sendmmsg+0x53/0x60 [ 318.671680][T15071] do_syscall_64+0x39/0x80 [ 318.676176][T15071] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 318.681472][T15077] input: syz1 as /devices/virtual/input/input249 [ 318.682097][T15071] RIP: 0033:0x45deb9 [ 318.692279][T15071] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 318.711881][T15071] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.720473][T15071] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 318.728448][T15071] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 19:05:55 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 318.736420][T15071] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 318.744388][T15071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 318.752350][T15071] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 318.808036][T15082] input: syz1 as /devices/virtual/input/input250 [ 318.844223][T15090] input: syz1 as /devices/virtual/input/input251 [ 318.895841][ T54] usb 3-1: Using ep0 maxpacket: 8 [ 319.014374][ T54] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.032660][ T54] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 319.043879][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.314862][ T54] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 319.590240][T15099] input: syz1 as /devices/virtual/input/input252 19:05:57 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00), 0x0) 19:05:57 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:57 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:57 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:57 executing program 0: mlockall(0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x109000, 0x58) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000380)={0x0, &(0x7f0000000180), 0x0, 0xffffffffffffffff, 0x8}) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x461b, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffa], [0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x4b9}, 0x16, 0x5) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x18, 0x3f9, 0x1, 0x70bd2c, 0x25dfdbff, {0x1, 0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x48000) r2 = syz_open_dev$vcsu(&(0x7f00000003c0)='/dev/vcsu#\x00', 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r4}, 0x8) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000400)) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:57 executing program 5 (fault-call:6 fault-nth:37): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 321.074810][ T9763] usb 3-1: USB disconnect, device number 72 [ 321.094683][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 321.142658][T15144] input: syz1 as /devices/virtual/input/input253 [ 321.150438][T15145] FAULT_INJECTION: forcing a failure. [ 321.150438][T15145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.156604][T15148] input: syz1 as /devices/virtual/input/input255 [ 321.166686][T15145] CPU: 1 PID: 15145 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 321.172476][T15149] input: syz1 as /devices/virtual/input/input256 [ 321.178535][T15145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.178539][T15145] Call Trace: [ 321.178560][T15145] dump_stack+0x116/0x15d [ 321.178573][T15145] should_fail+0x231/0x240 [ 321.178585][T15145] should_fail_usercopy+0x16/0x20 [ 321.178599][T15145] _copy_from_user+0x1c/0xd0 [ 321.178622][T15145] __copy_msghdr_from_user+0x42/0x340 [ 321.222132][T15145] ? import_iovec+0xb8/0xd0 [ 321.226672][T15145] __sys_sendmmsg+0x20f/0x4b0 [ 321.231447][T15145] ? kstrtoull+0x30f/0x350 [ 321.235861][T15145] ? kstrtouint_from_user+0x104/0x130 [ 321.241248][T15145] ? __rcu_read_unlock+0x51/0x220 [ 321.246268][T15145] ? fsnotify_perm+0x59/0x2d0 [ 321.250937][T15145] ? __fsnotify_parent+0x21f/0x460 [ 321.256049][T15145] ? get_pid_task+0x90/0xc0 [ 321.260543][T15145] ? __sb_end_write+0x7f/0xc0 [ 321.265239][T15145] ? vfs_write+0x492/0x690 [ 321.265267][T15145] ? __fget_light+0x219/0x260 [ 321.274382][T15145] ? fput+0x2d/0x130 [ 321.278274][T15145] ? ksys_write+0x157/0x180 [ 321.282800][T15145] __x64_sys_sendmmsg+0x53/0x60 [ 321.287647][T15145] do_syscall_64+0x39/0x80 [ 321.292115][T15145] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.298006][T15145] RIP: 0033:0x45deb9 [ 321.301948][T15145] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.321559][T15145] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.329973][T15145] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 19:05:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 321.338043][T15145] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 321.346014][T15145] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 321.354067][T15145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000025 [ 321.362049][T15145] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:58 executing program 5 (fault-call:6 fault-nth:38): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:58 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 321.462213][T15175] input: syz1 as /devices/virtual/input/input258 [ 321.462296][T15176] FAULT_INJECTION: forcing a failure. [ 321.462296][T15176] name failslab, interval 1, probability 0, space 0, times 0 [ 321.483346][T15176] CPU: 1 PID: 15176 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 321.492121][T15176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.502315][T15176] Call Trace: [ 321.505605][T15176] dump_stack+0x116/0x15d [ 321.509934][T15176] should_fail+0x231/0x240 [ 321.514429][T15176] __should_failslab+0x81/0x90 [ 321.519192][T15176] should_failslab+0x5/0x20 [ 321.523690][T15176] slab_pre_alloc_hook+0x20/0xb0 [ 321.528685][T15176] kmem_cache_alloc+0x4d/0x280 [ 321.533562][T15176] ? dst_alloc+0x112/0x2c0 [ 321.537980][T15176] dst_alloc+0x112/0x2c0 [ 321.542216][T15176] __mkroute_output+0x3bf/0xcc0 [ 321.544274][ T9763] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 321.547059][T15176] ? ip_output+0xf6/0x1a0 [ 321.547077][T15176] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 321.565123][T15176] ? udp_send_skb+0x6e4/0x850 [ 321.569796][T15176] ip_route_output_flow+0xaf/0x160 [ 321.574894][T15176] udp_sendmsg+0xfc5/0x15e0 [ 321.579448][T15176] ? ip_do_fragment+0xfa0/0xfa0 [ 321.584296][T15176] ? aa_sock_msg_perm+0x87/0x120 [ 321.589387][T15176] inet_sendmsg+0x5f/0x80 [ 321.594062][T15176] ? inet_send_prepare+0x210/0x210 [ 321.599170][T15176] ____sys_sendmsg+0x352/0x4c0 [ 321.603963][T15176] ? import_iovec+0xb8/0xd0 [ 321.608767][T15176] __sys_sendmmsg+0x335/0x4b0 [ 321.613878][T15176] ? kstrtoull+0x30f/0x350 [ 321.618285][T15176] ? kstrtouint_from_user+0x104/0x130 [ 321.623708][T15176] ? __rcu_read_unlock+0x51/0x220 [ 321.628728][T15176] ? fsnotify_perm+0x59/0x2d0 [ 321.633410][T15176] ? __fsnotify_parent+0x21f/0x460 [ 321.638520][T15176] ? get_pid_task+0x90/0xc0 [ 321.643132][T15176] ? __sb_end_write+0x7f/0xc0 [ 321.647804][T15176] ? vfs_write+0x492/0x690 [ 321.652219][T15176] ? __fget_light+0x219/0x260 [ 321.656928][T15176] ? fput+0x2d/0x130 [ 321.660814][T15176] ? ksys_write+0x157/0x180 [ 321.665314][T15176] __x64_sys_sendmmsg+0x53/0x60 [ 321.670160][T15176] do_syscall_64+0x39/0x80 [ 321.674572][T15176] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 321.680463][T15176] RIP: 0033:0x45deb9 [ 321.684376][T15176] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.703976][T15176] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 321.712380][T15176] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 321.720354][T15176] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 321.728307][T15176] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 321.736253][T15176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000026 [ 321.744211][T15176] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:05:58 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:05:58 executing program 5 (fault-call:6 fault-nth:39): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:58 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 321.794390][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 321.825481][T15192] input: syz1 as /devices/virtual/input/input259 [ 321.848755][T15191] FAULT_INJECTION: forcing a failure. [ 321.848755][T15191] name failslab, interval 1, probability 0, space 0, times 0 [ 321.864186][T15191] CPU: 0 PID: 15191 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 321.872974][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.883017][T15191] Call Trace: [ 321.886299][T15191] dump_stack+0x116/0x15d [ 321.890667][T15191] should_fail+0x231/0x240 [ 321.895079][T15191] __should_failslab+0x81/0x90 [ 321.899833][T15191] should_failslab+0x5/0x20 [ 321.904335][T15191] slab_pre_alloc_hook+0x20/0xb0 [ 321.909255][T15191] kmem_cache_alloc_node+0x5c/0x260 [ 321.914434][T15191] ? __rcu_read_unlock+0x51/0x220 [ 321.919452][T15191] ? __alloc_skb+0x98/0x2d0 [ 321.923996][T15191] ? packet_direct_xmit+0x140/0x140 [ 321.929219][T15191] __alloc_skb+0x98/0x2d0 [ 321.933539][T15191] alloc_skb_with_frags+0x90/0x370 [ 321.938636][T15191] ? xmit_one+0x173/0x2e0 [ 321.943043][T15191] sock_alloc_send_pskb+0x3c2/0x470 [ 321.948233][T15191] sock_alloc_send_skb+0x2d/0x40 [ 321.953165][T15191] __ip_append_data+0x12fb/0x1ca0 [ 321.958183][T15191] ? __mkroute_output+0x7bd/0xcc0 [ 321.963197][T15191] ? ip_do_fragment+0xfa0/0xfa0 [ 321.968110][T15191] ip_make_skb+0x139/0x2c0 [ 321.972523][T15191] ? ip_do_fragment+0xfa0/0xfa0 [ 321.977369][T15191] udp_sendmsg+0x13ff/0x15e0 [ 321.981944][T15191] ? ip_do_fragment+0xfa0/0xfa0 [ 321.986815][T15191] ? aa_sock_msg_perm+0x87/0x120 [ 321.991739][T15191] inet_sendmsg+0x5f/0x80 [ 321.996065][T15191] ? inet_send_prepare+0x210/0x210 [ 322.001200][T15191] ____sys_sendmsg+0x352/0x4c0 [ 322.005961][T15191] ? import_iovec+0xb8/0xd0 [ 322.010458][T15191] __sys_sendmmsg+0x335/0x4b0 [ 322.015134][T15191] ? kstrtoull+0x30f/0x350 [ 322.019543][T15191] ? kstrtouint_from_user+0x104/0x130 [ 322.024905][T15191] ? __rcu_read_unlock+0x51/0x220 [ 322.029933][T15191] ? fsnotify_perm+0x59/0x2d0 [ 322.034608][T15191] ? __fsnotify_parent+0x21f/0x460 [ 322.039725][T15191] ? get_pid_task+0x90/0xc0 [ 322.044234][T15191] ? __sb_end_write+0x7f/0xc0 [ 322.048900][T15191] ? vfs_write+0x492/0x690 [ 322.053297][T15191] ? __fget_light+0x219/0x260 [ 322.058052][T15191] ? fput+0x2d/0x130 [ 322.062254][T15191] ? ksys_write+0x157/0x180 [ 322.066737][T15191] __x64_sys_sendmmsg+0x53/0x60 [ 322.071570][T15191] do_syscall_64+0x39/0x80 [ 322.075973][T15191] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 322.081864][T15191] RIP: 0033:0x45deb9 [ 322.085741][T15191] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 322.105461][T15191] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 322.113851][T15191] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 19:05:58 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 322.121869][T15191] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 322.129877][T15191] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 322.137885][T15191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000027 [ 322.145836][T15191] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 322.196217][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.225459][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 322.240364][T15215] input: syz1 as /devices/virtual/input/input262 [ 322.246786][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.514880][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:06:00 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e2", 0x25) 19:06:00 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/21, 0x15}, {&(0x7f0000000380)=""/236, 0xec}], 0x2) 19:06:00 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:00 executing program 5 (fault-call:6 fault-nth:40): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:06:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:00 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}}, 0xfe4f) [ 324.262810][ T3693] usb 3-1: USB disconnect, device number 73 [ 324.264047][ C0] iowarrior 3-1:1.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 324.280163][ T3693] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 324.344366][T15261] input: syz1 as /devices/virtual/input/input263 [ 324.359145][T15264] input: syz1 as /devices/virtual/input/input265 [ 324.359886][T15262] input: syz1 as /devices/virtual/input/input266 [ 324.385690][T15265] FAULT_INJECTION: forcing a failure. [ 324.385690][T15265] name failslab, interval 1, probability 0, space 0, times 0 [ 324.398868][T15265] CPU: 0 PID: 15265 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 324.407627][T15265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.417671][T15265] Call Trace: [ 324.421004][T15265] dump_stack+0x116/0x15d [ 324.425372][T15265] should_fail+0x231/0x240 [ 324.429818][T15265] ? alloc_skb_with_frags+0x90/0x370 [ 324.435181][T15265] __should_failslab+0x81/0x90 [ 324.439964][T15265] should_failslab+0x5/0x20 [ 324.444558][T15265] slab_pre_alloc_hook+0x20/0xb0 [ 324.449518][T15265] ? alloc_skb_with_frags+0x90/0x370 [ 324.454797][T15265] kmem_cache_alloc_node_trace+0x61/0x240 [ 324.460509][T15265] ? __kmalloc_node_track_caller+0x30/0x40 [ 324.466317][T15265] ? alloc_skb_with_frags+0x90/0x370 [ 324.471600][T15265] __kmalloc_node_track_caller+0x30/0x40 [ 324.477324][T15265] __alloc_skb+0xd2/0x2d0 [ 324.481659][T15265] alloc_skb_with_frags+0x90/0x370 [ 324.486758][T15265] ? xmit_one+0x173/0x2e0 [ 324.491080][T15265] sock_alloc_send_pskb+0x3c2/0x470 [ 324.496268][T15265] sock_alloc_send_skb+0x2d/0x40 [ 324.501192][T15265] __ip_append_data+0x12fb/0x1ca0 [ 324.506212][T15265] ? __mkroute_output+0x7bd/0xcc0 [ 324.511235][T15265] ? ip_do_fragment+0xfa0/0xfa0 [ 324.516078][T15265] ip_make_skb+0x139/0x2c0 [ 324.520495][T15265] ? ip_do_fragment+0xfa0/0xfa0 [ 324.525343][T15265] udp_sendmsg+0x13ff/0x15e0 [ 324.529942][T15265] ? ip_do_fragment+0xfa0/0xfa0 [ 324.534870][T15265] ? aa_sock_msg_perm+0x87/0x120 [ 324.539804][T15265] inet_sendmsg+0x5f/0x80 [ 324.544134][T15265] ? inet_send_prepare+0x210/0x210 [ 324.549320][T15265] ____sys_sendmsg+0x352/0x4c0 [ 324.554078][T15265] ? import_iovec+0xb8/0xd0 [ 324.558661][T15265] __sys_sendmmsg+0x335/0x4b0 [ 324.563316][T15265] ? kstrtoull+0x30f/0x350 [ 324.567780][T15265] ? kstrtouint_from_user+0x104/0x130 [ 324.573208][T15265] ? __rcu_read_unlock+0x51/0x220 [ 324.578296][T15265] ? fsnotify_perm+0x59/0x2d0 [ 324.582990][T15265] ? __fsnotify_parent+0x21f/0x460 [ 324.588079][T15265] ? get_pid_task+0x90/0xc0 [ 324.592556][T15265] ? __sb_end_write+0x7f/0xc0 [ 324.597217][T15265] ? vfs_write+0x492/0x690 [ 324.601677][T15265] ? __fget_light+0x219/0x260 [ 324.606351][T15265] ? fput+0x2d/0x130 [ 324.610222][T15265] ? ksys_write+0x157/0x180 [ 324.614796][T15265] __x64_sys_sendmmsg+0x53/0x60 [ 324.619673][T15265] do_syscall_64+0x39/0x80 [ 324.624281][T15265] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 324.630210][T15265] RIP: 0033:0x45deb9 [ 324.634173][T15265] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.653785][T15265] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 324.662179][T15265] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 324.670130][T15265] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 324.678076][T15265] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 324.686029][T15265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 19:06:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, 0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:01 executing program 5 (fault-call:6 fault-nth:41): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:06:01 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 324.693990][T15265] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 324.790842][T15290] FAULT_INJECTION: forcing a failure. [ 324.790842][T15290] name failslab, interval 1, probability 0, space 0, times 0 [ 324.803476][T15290] CPU: 1 PID: 15290 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 324.812497][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.823081][T15290] Call Trace: [ 324.826364][T15290] dump_stack+0x116/0x15d [ 324.826376][T15290] should_fail+0x231/0x240 [ 324.826451][T15290] __should_failslab+0x81/0x90 [ 324.826469][T15290] should_failslab+0x5/0x20 [ 324.844477][T15290] slab_pre_alloc_hook+0x20/0xb0 [ 324.849413][T15290] kmem_cache_alloc+0x4d/0x280 [ 324.854177][T15290] ? skb_clone+0x131/0x1e0 [ 324.858587][T15290] skb_clone+0x131/0x1e0 [ 324.862875][T15290] dev_queue_xmit_nit+0x1ad/0x5d0 [ 324.867887][T15290] xmit_one+0x71/0x2e0 [ 324.871987][T15290] __dev_queue_xmit+0xeef/0x1510 [ 324.876911][T15290] ? __rcu_read_unlock+0x3a/0x220 [ 324.881936][T15290] dev_queue_xmit+0x13/0x20 [ 324.886446][T15290] ip_finish_output2+0xb09/0xba0 [ 324.891475][T15290] __ip_finish_output+0x3d8/0x430 [ 324.896487][T15290] ip_finish_output+0x39/0x160 [ 324.901353][T15290] ip_output+0xf6/0x1a0 [ 324.905497][T15290] ? ip_mc_finish_output+0x260/0x260 [ 324.910815][T15290] ip_send_skb+0x6e/0xe0 [ 324.915053][T15290] udp_send_skb+0x619/0x850 [ 324.919554][T15290] udp_sendmsg+0x142c/0x15e0 [ 324.924145][T15290] ? ip_do_fragment+0xfa0/0xfa0 [ 324.929103][T15290] ? aa_sock_msg_perm+0x87/0x120 [ 324.934031][T15290] inet_sendmsg+0x5f/0x80 [ 324.935419][T15289] input: syz1 as /devices/virtual/input/input268 [ 324.938448][T15290] ? inet_send_prepare+0x210/0x210 [ 324.938465][T15290] ____sys_sendmsg+0x352/0x4c0 [ 324.954773][T15290] ? import_iovec+0xb8/0xd0 [ 324.959681][T15290] __sys_sendmmsg+0x335/0x4b0 [ 324.964426][T15290] ? kstrtoull+0x30f/0x350 [ 324.968893][T15290] ? kstrtouint_from_user+0x104/0x130 [ 324.974251][T15290] ? __rcu_read_unlock+0x51/0x220 [ 324.979264][T15290] ? fsnotify_perm+0x59/0x2d0 [ 324.983924][T15290] ? __fsnotify_parent+0x21f/0x460 [ 324.989375][T15290] ? get_pid_task+0x90/0xc0 [ 324.993888][T15290] ? __sb_end_write+0x7f/0xc0 [ 324.998558][T15290] ? vfs_write+0x492/0x690 [ 325.003452][T15290] ? __fget_light+0x219/0x260 [ 325.008405][T15290] ? fput+0x2d/0x130 [ 325.012300][T15290] ? ksys_write+0x157/0x180 [ 325.016802][T15290] __x64_sys_sendmmsg+0x53/0x60 [ 325.021721][T15290] do_syscall_64+0x39/0x80 [ 325.026129][T15290] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 325.032321][T15290] RIP: 0033:0x45deb9 [ 325.036716][T15290] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 325.056324][T15290] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 325.064731][T15290] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 325.072755][T15290] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 325.080727][T15290] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 19:06:01 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 325.088718][T15290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 325.096784][T15290] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:06:01 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) r2 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000040)=[{r2}], 0x1, 0x100) dup2(r1, r2) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) [ 325.142084][T15281] input: syz1 as /devices/virtual/input/input269 19:06:01 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 325.192035][T15311] input: syz1 as /devices/virtual/input/input270 [ 325.314039][ T3693] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 325.583982][ T3693] usb 3-1: Using ep0 maxpacket: 8 [ 325.704034][ T3693] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.714952][ T3693] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 325.726070][ T3693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.984335][ T3693] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:06:04 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e2", 0x25) 19:06:04 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x146, &(0x7f0000000400)="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"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x17) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) r4 = gettid() tkill(r4, 0x40) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:04 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:04 executing program 5 (fault-call:6 fault-nth:42): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:06:04 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 327.733947][ T9763] usb 3-1: USB disconnect, device number 74 [ 327.749581][ T9763] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 327.807686][T15368] input: syz1 as /devices/virtual/input/input272 [ 327.818389][T15373] input: syz1 as /devices/virtual/input/input273 [ 327.829760][T15370] FAULT_INJECTION: forcing a failure. [ 327.829760][T15370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.843072][T15370] CPU: 0 PID: 15370 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 327.852520][T15370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.862685][T15370] Call Trace: [ 327.866048][T15370] dump_stack+0x116/0x15d [ 327.870382][T15370] should_fail+0x231/0x240 [ 327.874799][T15370] should_fail_usercopy+0x16/0x20 [ 327.879860][T15370] _copy_from_user+0x1c/0xd0 [ 327.884443][T15370] __copy_msghdr_from_user+0x42/0x340 [ 327.889887][T15370] ? import_iovec+0xb8/0xd0 [ 327.894393][T15370] __sys_sendmmsg+0x20f/0x4b0 [ 327.899066][T15370] ? kstrtoull+0x30f/0x350 [ 327.903477][T15370] ? kstrtouint_from_user+0x104/0x130 [ 327.908837][T15370] ? __rcu_read_unlock+0x51/0x220 [ 327.913897][T15370] ? fsnotify_perm+0x59/0x2d0 [ 327.918665][T15370] ? __fsnotify_parent+0x21f/0x460 [ 327.923803][T15370] ? get_pid_task+0x90/0xc0 [ 327.928296][T15370] ? __sb_end_write+0x7f/0xc0 [ 327.933144][T15370] ? vfs_write+0x492/0x690 [ 327.937616][T15370] ? __fget_light+0x219/0x260 [ 327.942316][T15370] ? fput+0x2d/0x130 [ 327.946304][T15370] ? ksys_write+0x157/0x180 [ 327.950798][T15370] __x64_sys_sendmmsg+0x53/0x60 [ 327.955641][T15370] do_syscall_64+0x39/0x80 [ 327.960050][T15370] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 327.965933][T15370] RIP: 0033:0x45deb9 [ 327.969822][T15370] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 327.989512][T15370] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 327.997947][T15370] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 19:06:04 executing program 5 (fault-call:6 fault-nth:43): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 328.005908][T15370] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 328.013861][T15370] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 328.021850][T15370] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002a [ 328.029804][T15370] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:06:04 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:04 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:04 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 328.119204][T15395] input: syz1 as /devices/virtual/input/input275 [ 328.147851][T15398] FAULT_INJECTION: forcing a failure. [ 328.147851][T15398] name failslab, interval 1, probability 0, space 0, times 0 [ 328.161378][T15398] CPU: 0 PID: 15398 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 328.170139][T15398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.180182][T15398] Call Trace: [ 328.183468][T15398] dump_stack+0x116/0x15d [ 328.187814][T15398] should_fail+0x231/0x240 [ 328.192224][T15398] __should_failslab+0x81/0x90 [ 328.196986][T15398] should_failslab+0x5/0x20 [ 328.201483][T15398] slab_pre_alloc_hook+0x20/0xb0 [ 328.201526][T15398] kmem_cache_alloc+0x4d/0x280 [ 328.211166][T15398] ? dst_alloc+0x112/0x2c0 [ 328.215574][T15398] dst_alloc+0x112/0x2c0 [ 328.219806][T15398] __mkroute_output+0x3bf/0xcc0 [ 328.225110][T15398] ? ip_output+0xf6/0x1a0 [ 328.229433][T15398] ip_route_output_key_hash_rcu+0x8f4/0x950 [ 328.235344][T15398] ? udp_send_skb+0x6e4/0x850 [ 328.240109][T15398] ip_route_output_flow+0xaf/0x160 [ 328.245224][T15398] udp_sendmsg+0xfc5/0x15e0 [ 328.249726][T15398] ? ip_do_fragment+0xfa0/0xfa0 [ 328.254595][T15398] ? aa_sock_msg_perm+0x87/0x120 [ 328.259561][T15398] inet_sendmsg+0x5f/0x80 [ 328.263899][T15398] ? inet_send_prepare+0x210/0x210 [ 328.269192][T15398] ____sys_sendmsg+0x352/0x4c0 [ 328.273947][T15398] ? import_iovec+0xb8/0xd0 [ 328.278438][T15398] __sys_sendmmsg+0x335/0x4b0 [ 328.283110][T15398] ? kstrtoull+0x30f/0x350 [ 328.287637][T15398] ? kstrtouint_from_user+0x104/0x130 [ 328.293002][T15398] ? __rcu_read_unlock+0x51/0x220 [ 328.298049][T15398] ? fsnotify_perm+0x59/0x2d0 [ 328.302710][T15398] ? __fsnotify_parent+0x21f/0x460 [ 328.307887][T15398] ? get_pid_task+0x90/0xc0 [ 328.312385][T15398] ? __sb_end_write+0x7f/0xc0 [ 328.317053][T15398] ? vfs_write+0x492/0x690 [ 328.321466][T15398] ? __fget_light+0x219/0x260 [ 328.326166][T15398] ? fput+0x2d/0x130 [ 328.330073][T15398] ? ksys_write+0x157/0x180 [ 328.334656][T15398] __x64_sys_sendmmsg+0x53/0x60 [ 328.339503][T15398] do_syscall_64+0x39/0x80 [ 328.343957][T15398] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 328.349834][T15398] RIP: 0033:0x45deb9 [ 328.353726][T15398] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.373555][T15398] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 328.381965][T15398] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 328.389930][T15398] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 328.397893][T15398] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 328.405867][T15398] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002b [ 328.413827][T15398] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:06:05 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:05 executing program 5 (fault-call:6 fault-nth:44): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 328.522231][T15417] input: syz1 as /devices/virtual/input/input277 [ 328.541210][T15418] FAULT_INJECTION: forcing a failure. [ 328.541210][T15418] name failslab, interval 1, probability 0, space 0, times 0 [ 328.555804][T15418] CPU: 1 PID: 15418 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 328.564580][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 328.573902][ T9763] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 328.574625][T15418] Call Trace: [ 328.574647][T15418] dump_stack+0x116/0x15d [ 328.574665][T15418] should_fail+0x231/0x240 [ 328.594267][T15418] __should_failslab+0x81/0x90 [ 328.599016][T15418] should_failslab+0x5/0x20 [ 328.603683][T15418] slab_pre_alloc_hook+0x20/0xb0 [ 328.608696][T15418] kmem_cache_alloc_node+0x5c/0x260 [ 328.613976][T15418] ? __rcu_read_unlock+0x51/0x220 [ 328.618997][T15418] ? __alloc_skb+0x98/0x2d0 [ 328.623492][T15418] ? packet_direct_xmit+0x140/0x140 [ 328.628722][T15418] __alloc_skb+0x98/0x2d0 [ 328.633044][T15418] alloc_skb_with_frags+0x90/0x370 [ 328.638169][T15418] ? xmit_one+0x173/0x2e0 [ 328.642495][T15418] sock_alloc_send_pskb+0x3c2/0x470 [ 328.647707][T15418] sock_alloc_send_skb+0x2d/0x40 [ 328.652652][T15418] __ip_append_data+0x12fb/0x1ca0 [ 328.657764][T15418] ? __mkroute_output+0x7bd/0xcc0 [ 328.662918][T15418] ? ip_do_fragment+0xfa0/0xfa0 [ 328.667792][T15418] ip_make_skb+0x139/0x2c0 [ 328.672216][T15418] ? ip_do_fragment+0xfa0/0xfa0 [ 328.677057][T15418] udp_sendmsg+0x13ff/0x15e0 [ 328.681664][T15418] ? ip_do_fragment+0xfa0/0xfa0 [ 328.686549][T15418] ? aa_sock_msg_perm+0x87/0x120 [ 328.691477][T15418] inet_sendmsg+0x5f/0x80 [ 328.695827][T15418] ? inet_send_prepare+0x210/0x210 [ 328.700931][T15418] ____sys_sendmsg+0x352/0x4c0 [ 328.705717][T15418] ? import_iovec+0xb8/0xd0 [ 328.710211][T15418] __sys_sendmmsg+0x335/0x4b0 [ 328.714933][T15418] ? kstrtoull+0x30f/0x350 [ 328.719343][T15418] ? kstrtouint_from_user+0x104/0x130 [ 328.725229][T15418] ? __rcu_read_unlock+0x51/0x220 [ 328.730363][T15418] ? fsnotify_perm+0x59/0x2d0 [ 328.735537][T15418] ? __fsnotify_parent+0x21f/0x460 [ 328.740639][T15418] ? get_pid_task+0x90/0xc0 [ 328.745132][T15418] ? __sb_end_write+0x7f/0xc0 [ 328.749888][T15418] ? vfs_write+0x492/0x690 [ 328.754599][T15418] ? __fget_light+0x219/0x260 [ 328.759331][T15418] ? fput+0x2d/0x130 [ 328.763230][T15418] ? ksys_write+0x157/0x180 [ 328.767732][T15418] __x64_sys_sendmmsg+0x53/0x60 [ 328.772580][T15418] do_syscall_64+0x39/0x80 [ 328.776992][T15418] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 328.782899][T15418] RIP: 0033:0x45deb9 [ 328.787215][T15418] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 328.807142][T15418] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 328.813775][ T9763] usb 3-1: Using ep0 maxpacket: 8 [ 328.815563][T15418] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 328.815571][T15418] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 328.815584][T15418] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 328.844482][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002c [ 328.852450][T15418] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c [ 328.936519][ T9763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.963775][ T9763] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 328.972843][ T9763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.254183][ T9763] iowarrior 3-1:1.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 19:06:07 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001ddf8308c007121522300000000109021b0001010000010904000001faf40d000905820349"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000b00)="f93608cbdec7e748ca230e24253ed4a36d47ae9cc3b826c5b8229314b3f1fb9cf8b10638e2", 0x25) 19:06:07 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) write$input_event(r9, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:07 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:07 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:07 executing program 5 (fault-call:6 fault-nth:45): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:06:07 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@l2tp={0x2, 0x0, @loopback, 0x2}, {&(0x7f0000001180)=""/4096, 0x1000}, &(0x7f0000000040), 0x8}, 0xa0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000380)=0x1ff) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, &(0x7f00000003c0)=""/140, &(0x7f0000000480)=0x8c) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 331.005017][ T3693] usb 3-1: USB disconnect, device number 75 [ 331.029473][ T3693] iowarrior 3-1:1.0: I/O-Warror #0 now disconnected [ 331.090160][T15462] input: syz1 as /devices/virtual/input/input279 [ 331.090884][T15467] FAULT_INJECTION: forcing a failure. [ 331.090884][T15467] name failslab, interval 1, probability 0, space 0, times 0 [ 331.096541][T15469] input: syz1 as /devices/virtual/input/input280 [ 331.116240][T15467] CPU: 0 PID: 15467 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 331.124995][T15467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.135140][T15467] Call Trace: [ 331.138426][T15467] dump_stack+0x116/0x15d [ 331.142890][T15467] should_fail+0x231/0x240 [ 331.147433][T15467] ? alloc_skb_with_frags+0x90/0x370 [ 331.152716][T15467] __should_failslab+0x81/0x90 [ 331.157479][T15467] should_failslab+0x5/0x20 [ 331.161976][T15467] slab_pre_alloc_hook+0x20/0xb0 [ 331.166997][T15467] ? alloc_skb_with_frags+0x90/0x370 [ 331.172278][T15467] kmem_cache_alloc_node_trace+0x61/0x240 [ 331.178076][T15467] ? __kmalloc_node_track_caller+0x30/0x40 [ 331.183910][T15467] ? alloc_skb_with_frags+0x90/0x370 [ 331.189190][T15467] __kmalloc_node_track_caller+0x30/0x40 [ 331.194815][T15467] __alloc_skb+0xd2/0x2d0 [ 331.199132][T15467] alloc_skb_with_frags+0x90/0x370 [ 331.204238][T15467] ? xmit_one+0x173/0x2e0 [ 331.208568][T15467] sock_alloc_send_pskb+0x3c2/0x470 [ 331.213757][T15467] sock_alloc_send_skb+0x2d/0x40 [ 331.218680][T15467] __ip_append_data+0x12fb/0x1ca0 [ 331.223695][T15467] ? __mkroute_output+0x7bd/0xcc0 [ 331.228712][T15467] ? ip_do_fragment+0xfa0/0xfa0 [ 331.233555][T15467] ip_make_skb+0x139/0x2c0 [ 331.238027][T15467] ? ip_do_fragment+0xfa0/0xfa0 [ 331.242872][T15467] udp_sendmsg+0x13ff/0x15e0 [ 331.247460][T15467] ? ip_do_fragment+0xfa0/0xfa0 [ 331.252314][T15467] ? aa_sock_msg_perm+0x87/0x120 [ 331.257257][T15467] inet_sendmsg+0x5f/0x80 [ 331.261742][T15467] ? inet_send_prepare+0x210/0x210 [ 331.266873][T15467] ____sys_sendmsg+0x352/0x4c0 [ 331.271610][T15467] ? import_iovec+0xb8/0xd0 [ 331.276182][T15467] __sys_sendmmsg+0x335/0x4b0 [ 331.280871][T15467] ? kstrtoull+0x30f/0x350 [ 331.285263][T15467] ? kstrtouint_from_user+0x104/0x130 [ 331.290607][T15467] ? __rcu_read_unlock+0x51/0x220 [ 331.295660][T15467] ? fsnotify_perm+0x59/0x2d0 [ 331.300310][T15467] ? __fsnotify_parent+0x21f/0x460 [ 331.305412][T15467] ? get_pid_task+0x90/0xc0 [ 331.309989][T15467] ? __sb_end_write+0x7f/0xc0 [ 331.314645][T15467] ? vfs_write+0x492/0x690 [ 331.319243][T15467] ? __fget_light+0x219/0x260 [ 331.323913][T15467] ? fput+0x2d/0x130 [ 331.327780][T15467] ? ksys_write+0x157/0x180 [ 331.332257][T15467] __x64_sys_sendmmsg+0x53/0x60 [ 331.337109][T15467] do_syscall_64+0x39/0x80 [ 331.341516][T15467] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.347399][T15467] RIP: 0033:0x45deb9 [ 331.351301][T15467] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.370884][T15467] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 331.379338][T15467] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 331.387339][T15467] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 331.395301][T15467] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 331.403269][T15467] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 331.411226][T15467] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:06:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, 0x0, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:08 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) eventfd(0x7f) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:08 executing program 5 (fault-call:6 fault-nth:46): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x67) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x3}, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:06:08 executing program 3: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = eventfd(0x7f) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0xc00, 0x0) io_submit(r0, 0x4, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xf05, 0xffffffffffffffff, &(0x7f0000000380)="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", 0xff, 0x37, 0x0, 0x0, r2}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7, r3, &(0x7f0000000080)="dc16fef4d0012e9fa64cfe58a91b70a2a3980272ae9bbdcfe6839891008f8888db2df5ea683aea230757ca4c6e619ffa4760610d3fa913f84024a1f89830", 0x3e, 0x3f, 0x0, 0x7}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000480)="cc49a7d74e0baa3e65805c913ebc8c98f969b47e5f8a608860a202c2e94b5fa7f0c18ae31a2adbb207d881e9c97b09d09860a2069d928cd45e829b8315f27d8a6693996b790c403d2670d44e33ffd5a42400e9c0325cd8bcfce38f9fd9dc53ee19e89306d746529309714d4ff30ebadec60dbc360c9898d3d4deca6824b8ba363798c0c2202707d9462deb430ef540e5340c65f64b", 0x95, 0x9, 0x0, 0x3, r4}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x3f, r5, &(0x7f0000000540)="b520bb391d2aa839f6237370f1366d3eeba5e045f9f2bb184cec6ffcd3c764440473a7e0c7686cb6fbccefc6ff66b5f923fb37d6c617366386b972d7723e6c49f2b3033e5d714f2947a19e3ec1d6", 0x4e, 0xfff, 0x0, 0x3, r8}]) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_SETUP(r9, 0x5501, 0x0) [ 331.514673][T15492] input: syz1 as /devices/virtual/input/input281 [ 331.550727][T15499] FAULT_INJECTION: forcing a failure. [ 331.550727][T15499] name failslab, interval 1, probability 0, space 0, times 0 [ 331.551420][T15498] input: syz1 as /devices/virtual/input/input282 [ 331.563445][T15499] CPU: 0 PID: 15499 Comm: syz-executor.5 Not tainted 5.10.0-rc2-syzkaller #0 [ 331.563460][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.589231][T15499] Call Trace: [ 331.592593][T15499] dump_stack+0x116/0x15d [ 331.596926][T15499] should_fail+0x231/0x240 [ 331.601348][T15499] __should_failslab+0x81/0x90 [ 331.606107][T15499] should_failslab+0x5/0x20 [ 331.610603][T15499] slab_pre_alloc_hook+0x20/0xb0 [ 331.615569][T15499] kmem_cache_alloc+0x4d/0x280 [ 331.620324][T15499] ? skb_clone+0x131/0x1e0 [ 331.624733][T15499] skb_clone+0x131/0x1e0 [ 331.628988][T15499] dev_queue_xmit_nit+0x1ad/0x5d0 [ 331.634103][T15499] xmit_one+0x71/0x2e0 [ 331.638191][T15499] __dev_queue_xmit+0xeef/0x1510 [ 331.643117][T15499] ? __rcu_read_unlock+0x3a/0x220 [ 331.648130][T15499] dev_queue_xmit+0x13/0x20 [ 331.652655][T15499] ip_finish_output2+0xb09/0xba0 [ 331.657631][T15499] __ip_finish_output+0x3d8/0x430 [ 331.662647][T15499] ip_finish_output+0x39/0x160 [ 331.667411][T15499] ip_output+0xf6/0x1a0 [ 331.671565][T15499] ? ip_mc_finish_output+0x260/0x260 [ 331.676868][T15499] ip_send_skb+0x6e/0xe0 [ 331.681104][T15499] udp_send_skb+0x619/0x850 [ 331.685604][T15499] udp_sendmsg+0x142c/0x15e0 [ 331.690249][T15499] ? ip_do_fragment+0xfa0/0xfa0 [ 331.695203][T15499] ? aa_sock_msg_perm+0x87/0x120 [ 331.700134][T15499] inet_sendmsg+0x5f/0x80 [ 331.704452][T15499] ? inet_send_prepare+0x210/0x210 [ 331.709581][T15499] ____sys_sendmsg+0x352/0x4c0 [ 331.714335][T15499] ? import_iovec+0xb8/0xd0 [ 331.718825][T15499] __sys_sendmmsg+0x335/0x4b0 [ 331.723494][T15499] ? kstrtoull+0x30f/0x350 [ 331.727902][T15499] ? kstrtouint_from_user+0x104/0x130 [ 331.733258][T15499] ? __rcu_read_unlock+0x51/0x220 [ 331.738317][T15499] ? fsnotify_perm+0x59/0x2d0 [ 331.742985][T15499] ? __fsnotify_parent+0x21f/0x460 [ 331.748149][T15499] ? get_pid_task+0x90/0xc0 [ 331.752670][T15499] ? __sb_end_write+0x7f/0xc0 [ 331.757339][T15499] ? vfs_write+0x492/0x690 [ 331.761854][T15499] ? __fget_light+0x219/0x260 [ 331.766523][T15499] ? fput+0x2d/0x130 [ 331.770408][T15499] ? ksys_write+0x157/0x180 [ 331.774906][T15499] __x64_sys_sendmmsg+0x53/0x60 [ 331.779772][T15499] do_syscall_64+0x39/0x80 [ 331.784186][T15499] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 331.790073][T15499] RIP: 0033:0x45deb9 [ 331.793952][T15499] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 331.813692][T15499] RSP: 002b:00007f32f5941c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 331.822106][T15499] RAX: ffffffffffffffda RBX: 0000000000027f80 RCX: 000000000045deb9 [ 331.830097][T15499] RDX: 04000000000001a8 RSI: 0000000020007fc0 RDI: 0000000000000003 [ 331.838068][T15499] RBP: 00007f32f5941ca0 R08: 0000000000000000 R09: 0000000000000000 [ 331.846030][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002e [ 331.846039][T15499] R13: 00007ffd43f598ff R14: 00007f32f59429c0 R15: 000000000118bf2c 19:06:08 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) read(r0, &(0x7f00000001c0)=""/155, 0x9b) readv(r0, &(0x7f0000000640), 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 19:06:08 executing program 4: io_setup(0x1, &(0x7f0000000300)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) eventfd(0x7f) socket$nl_xfrm(0x10, 0x3, 0x6) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x100, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f00000006c0)={{0x2, @addr=0x2}, "40f1ef4131b77be786de3930dfe0aaeeadd1cee62c5b474b47a642792735a32a", 0x2}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000d00)={'syz1\x00', {}, 0x41, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76]}, 0x45c) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 331.927521][T15522] input: syz1 as /devices/virtual/input/input285 [ 331.973634][ C1] ================================================================== [ 331.981759][ C1] BUG: KCSAN: data-race in wg_packet_send_staged_packets / wg_packet_send_staged_packets [ 331.991562][ C1] [ 331.993879][ C1] read to 0xffff888026bcea48 of 4 bytes by interrupt on cpu 0: [ 332.001413][ C1] wg_packet_send_staged_packets+0x592/0x990 [ 332.007376][ C1] wg_packet_send_keepalive+0xea/0x100 [ 332.012815][ C1] wg_expired_send_persistent_keepalive+0x38/0x50 [ 332.019212][ C1] call_timer_fn+0x2e/0x240 [ 332.023701][ C1] expire_timers+0x116/0x260 [ 332.028275][ C1] __run_timers+0x328/0x3c0 [ 332.032769][ C1] run_timer_softirq+0x19/0x30 [ 332.037704][ C1] __do_softirq+0x12c/0x2b1 [ 332.042348][ C1] asm_call_irq_on_stack+0xf/0x20 [ 332.047807][ C1] do_softirq_own_stack+0x32/0x40 [ 332.053114][ C1] __irq_exit_rcu+0xb2/0xc0 [ 332.057741][ C1] sysvec_apic_timer_interrupt+0x74/0x90 [ 332.063365][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 332.069337][ C1] _raw_write_unlock_irq+0x14/0x20 [ 332.074449][ C1] __se_sys_setpgid+0x1fe/0x340 [ 332.079583][ C1] __x64_sys_setpgid+0x2d/0x40 [ 332.084346][ C1] do_syscall_64+0x39/0x80 [ 332.088757][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.094905][ C1] [ 332.097548][ C1] write to 0xffff888026bcea48 of 4 bytes by interrupt on cpu 1: [ 332.105661][ C1] wg_packet_send_staged_packets+0x5d5/0x990 [ 332.111831][ C1] wg_packet_send_keepalive+0xea/0x100 [ 332.117748][ C1] wg_expired_send_persistent_keepalive+0x38/0x50 [ 332.124153][ C1] call_timer_fn+0x2e/0x240 [ 332.128648][ C1] expire_timers+0x116/0x260 [ 332.133235][ C1] __run_timers+0x328/0x3c0 [ 332.137760][ C1] run_timer_softirq+0x19/0x30 [ 332.142706][ C1] __do_softirq+0x12c/0x2b1 [ 332.145113][T15532] input: syz1 as /devices/virtual/input/input286 [ 332.147204][ C1] asm_call_irq_on_stack+0xf/0x20 [ 332.147222][ C1] do_softirq_own_stack+0x32/0x40 [ 332.163711][ C1] __irq_exit_rcu+0xb2/0xc0 [ 332.168499][ C1] sysvec_apic_timer_interrupt+0x74/0x90 [ 332.174335][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 332.180735][ C1] string+0x7c/0x210 [ 332.184713][ C1] vsnprintf+0xa90/0xe80 [ 332.188944][ C1] tomoyo_supervisor+0xa4/0xb20 [ 332.193800][ C1] tomoyo_path_perm+0x261/0x330 [ 332.198647][ C1] tomoyo_inode_getattr+0x18/0x20 [ 332.203884][ C1] security_inode_getattr+0x7f/0xd0 [ 332.209078][ C1] vfs_statx+0xf8/0x270 [ 332.213226][ C1] __se_sys_newlstat+0x46/0x250 [ 332.218073][ C1] __x64_sys_newlstat+0x2d/0x40 [ 332.222944][ C1] do_syscall_64+0x39/0x80 [ 332.227537][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.234168][ C1] [ 332.237010][ C1] Reported by Kernel Concurrency Sanitizer on: [ 332.243723][ C1] CPU: 1 PID: 4892 Comm: systemd-udevd Not tainted 5.10.0-rc2-syzkaller #0 [ 332.252517][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.262561][ C1] ================================================================== [ 332.270596][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 332.277171][ C1] CPU: 1 PID: 4892 Comm: systemd-udevd Not tainted 5.10.0-rc2-syzkaller #0 [ 332.285737][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.295850][ C1] Call Trace: [ 332.299109][ C1] [ 332.301944][ C1] dump_stack+0x116/0x15d [ 332.306248][ C1] panic+0x1e7/0x5fa [ 332.310118][ C1] ? vprintk_emit+0x2f2/0x370 [ 332.314799][ C1] kcsan_report+0x67b/0x680 [ 332.319297][ C1] ? kcsan_setup_watchpoint+0x46a/0x4d0 [ 332.324821][ C1] ? wg_packet_send_staged_packets+0x5d5/0x990 [ 332.330967][ C1] ? wg_packet_send_keepalive+0xea/0x100 [ 332.336583][ C1] ? wg_expired_send_persistent_keepalive+0x38/0x50 [ 332.343144][ C1] ? call_timer_fn+0x2e/0x240 [ 332.347793][ C1] ? expire_timers+0x116/0x260 [ 332.352531][ C1] ? __run_timers+0x328/0x3c0 [ 332.357180][ C1] ? run_timer_softirq+0x19/0x30 [ 332.362093][ C1] ? __do_softirq+0x12c/0x2b1 [ 332.366758][ C1] ? asm_call_irq_on_stack+0xf/0x20 [ 332.371942][ C1] ? do_softirq_own_stack+0x32/0x40 [ 332.377127][ C1] ? __irq_exit_rcu+0xb2/0xc0 [ 332.381791][ C1] ? sysvec_apic_timer_interrupt+0x74/0x90 [ 332.387588][ C1] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 332.393752][ C1] ? string+0x7c/0x210 [ 332.397807][ C1] ? vsnprintf+0xa90/0xe80 [ 332.402207][ C1] ? tomoyo_supervisor+0xa4/0xb20 [ 332.407220][ C1] ? tomoyo_path_perm+0x261/0x330 [ 332.412233][ C1] ? tomoyo_inode_getattr+0x18/0x20 [ 332.417404][ C1] ? security_inode_getattr+0x7f/0xd0 [ 332.422748][ C1] ? vfs_statx+0xf8/0x270 [ 332.427067][ C1] ? __se_sys_newlstat+0x46/0x250 [ 332.432096][ C1] ? __x64_sys_newlstat+0x2d/0x40 [ 332.437121][ C1] ? do_syscall_64+0x39/0x80 [ 332.441682][ C1] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.447743][ C1] ? should_fail+0x2a/0x240 [ 332.452231][ C1] kcsan_setup_watchpoint+0x46a/0x4d0 [ 332.457579][ C1] wg_packet_send_staged_packets+0x5d5/0x990 [ 332.463538][ C1] wg_packet_send_keepalive+0xea/0x100 [ 332.468988][ C1] ? wg_expired_zero_key_material+0x100/0x100 [ 332.475042][ C1] wg_expired_send_persistent_keepalive+0x38/0x50 [ 332.481437][ C1] call_timer_fn+0x2e/0x240 [ 332.485918][ C1] ? wg_expired_zero_key_material+0x100/0x100 [ 332.491956][ C1] expire_timers+0x116/0x260 [ 332.496561][ C1] __run_timers+0x328/0x3c0 [ 332.501186][ C1] ? kvm_sched_clock_read+0x15/0x40 [ 332.506366][ C1] ? sched_clock_cpu+0x11/0x1a0 [ 332.511251][ C1] run_timer_softirq+0x19/0x30 [ 332.516009][ C1] __do_softirq+0x12c/0x2b1 [ 332.520496][ C1] asm_call_irq_on_stack+0xf/0x20 [ 332.525490][ C1] [ 332.528406][ C1] do_softirq_own_stack+0x32/0x40 [ 332.533466][ C1] __irq_exit_rcu+0xb2/0xc0 [ 332.537951][ C1] sysvec_apic_timer_interrupt+0x74/0x90 [ 332.543564][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 332.549554][ C1] RIP: 0010:string+0x7c/0x210 [ 332.554217][ C1] Code: d4 a8 fe 45 85 e4 0f 84 68 01 00 00 4c 89 3c 24 4c 89 64 24 08 45 8d 7c 24 ff 0f 1f 40 00 48 89 df e8 68 f0 b8 fe 44 0f b6 23 <31> ff 44 89 e6 e8 ea d2 a8 fe 45 85 e4 0f 84 40 01 00 00 4d 39 f5 [ 332.573864][ C1] RSP: 0018:ffffc90000e239c0 EFLAGS: 00000246 [ 332.579909][ C1] RAX: ffff888105c54a40 RBX: ffff88810aaafb40 RCX: 00000000000001d8 [ 332.587864][ C1] RDX: 000088810aaafb40 RSI: 00000000ffffffff RDI: ffff88810aaafb40 [ 332.595816][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000c90000e23acf [ 332.603767][ C1] R10: 0000ffffffffffff R11: ffff888105c54000 R12: 000000000000002f [ 332.611737][ C1] R13: ffffc90000e23b49 R14: ffffc90000e23b3d R15: 00000000fffffffe [ 332.619696][ C1] vsnprintf+0xa90/0xe80 [ 332.623921][ C1] tomoyo_supervisor+0xa4/0xb20 [ 332.628756][ C1] tomoyo_path_perm+0x261/0x330 [ 332.633600][ C1] tomoyo_inode_getattr+0x18/0x20 [ 332.638608][ C1] security_inode_getattr+0x7f/0xd0 [ 332.643783][ C1] vfs_statx+0xf8/0x270 [ 332.647930][ C1] __se_sys_newlstat+0x46/0x250 [ 332.652820][ C1] ? __secure_computing+0x12e/0x1c0 [ 332.657994][ C1] ? syscall_trace_enter+0x13c/0x290 [ 332.663280][ C1] __x64_sys_newlstat+0x2d/0x40 [ 332.668107][ C1] do_syscall_64+0x39/0x80 [ 332.672517][ C1] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.678388][ C1] RIP: 0033:0x7f32c2243335 [ 332.682799][ C1] Code: 69 db 2b 00 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 83 ff 01 48 89 f0 77 30 48 89 c7 48 89 d6 b8 06 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 03 f3 c3 90 48 8b 15 31 db 2b 00 f7 d8 64 89 [ 332.702390][ C1] RSP: 002b:00007ffec5f287f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 332.710784][ C1] RAX: ffffffffffffffda RBX: 0000555c75a3f1d0 RCX: 00007f32c2243335 [ 332.718733][ C1] RDX: 00007ffec5f28830 RSI: 00007ffec5f28830 RDI: 0000555c75a3e1d0 [ 332.726692][ C1] RBP: 00007ffec5f288f0 R08: 00007f32c2502258 R09: 0000000000001010 [ 332.734651][ C1] R10: 00007f32c2501b58 R11: 0000000000000246 R12: 0000555c75a3e1d0 [ 332.742617][ C1] R13: 0000555c75a3e1f5 R14: 0000555c75a2fd54 R15: 0000555c75a2fd55 [ 332.751199][ C1] Kernel Offset: disabled [ 332.755531][ C1] Rebooting in 86400 seconds..