Warning: Permanently added '10.128.0.72' (ECDSA) to the list of known hosts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/09/04 18:37:56 fuzzer started 2020/09/04 18:37:57 dialing manager at 10.128.0.26:37991 2020/09/04 18:37:58 syscalls: 3315 2020/09/04 18:37:58 code coverage: enabled 2020/09/04 18:37:58 comparison tracing: enabled 2020/09/04 18:37:58 extra coverage: enabled 2020/09/04 18:37:58 setuid sandbox: enabled 2020/09/04 18:37:58 namespace sandbox: enabled 2020/09/04 18:37:58 Android sandbox: enabled 2020/09/04 18:37:58 fault injection: enabled 2020/09/04 18:37:58 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/04 18:37:58 net packet injection: enabled 2020/09/04 18:37:58 net device setup: enabled 2020/09/04 18:37:58 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/04 18:37:58 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/04 18:37:58 USB emulation: enabled 2020/09/04 18:37:58 hci packet injection: enabled 18:42:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x75, &(0x7f0000000000)={r2}, &(0x7f0000000100)=0x8) syzkaller login: [ 433.930519][ T28] audit: type=1400 audit(1599244939.022:8): avc: denied { execmem } for pid=8480 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 435.478344][ T8481] IPVS: ftp: loaded support on port[0] = 21 [ 436.092462][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 436.308276][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.316014][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.325704][ T8481] device bridge_slave_0 entered promiscuous mode [ 436.341085][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.348471][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.358961][ T8481] device bridge_slave_1 entered promiscuous mode [ 436.417511][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.436202][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.492506][ T8481] team0: Port device team_slave_0 added [ 436.508068][ T8481] team0: Port device team_slave_1 added [ 436.558744][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.566019][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.592164][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.609363][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.616758][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.642899][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.719614][ T8481] device hsr_slave_0 entered promiscuous mode [ 436.732504][ T8481] device hsr_slave_1 entered promiscuous mode [ 437.083274][ T8481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.116907][ T8481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 437.154442][ T8481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 437.205356][ T8481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 437.393951][ T27] Bluetooth: hci0: command 0x0409 tx timeout [ 437.545220][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.585670][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 437.594926][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.626501][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.652375][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 437.663218][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.672815][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.680059][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.702368][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 437.713162][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 437.723697][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.733301][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.740546][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.760735][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 437.800849][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 437.834381][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 437.845285][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 437.886765][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 437.897252][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 437.908361][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 437.919342][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 437.929254][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.961151][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 437.970317][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.990451][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 438.053496][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 438.061236][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 438.101800][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.176209][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 438.187080][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 438.266406][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 438.276240][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 438.302139][ T8481] device veth0_vlan entered promiscuous mode [ 438.319354][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 438.328810][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 438.366125][ T8481] device veth1_vlan entered promiscuous mode [ 438.471127][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 438.480823][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 438.491174][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 438.501340][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 438.527886][ T8481] device veth0_macvtap entered promiscuous mode [ 438.551048][ T8481] device veth1_macvtap entered promiscuous mode [ 438.620238][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.632025][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 438.641754][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 438.651385][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 438.661533][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 438.690672][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.703499][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 438.714900][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 439.085964][ T8707] sctp: [Deprecated]: syz-executor.0 (pid 8707) Use of int in max_burst socket option. [ 439.085964][ T8707] Use struct sctp_assoc_value instead [ 439.115260][ T8708] sctp: [Deprecated]: syz-executor.0 (pid 8708) Use of int in max_burst socket option. [ 439.115260][ T8708] Use struct sctp_assoc_value instead 18:42:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x40049409, 0x0) [ 439.473871][ T27] Bluetooth: hci0: command 0x041b tx timeout 18:42:24 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$sock(r0, &(0x7f000000a200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=[@mark={{0x14}}], 0x18}}], 0x2, 0x0) 18:42:24 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) 18:42:25 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 18:42:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0xc008aec1, &(0x7f0000000040)) [ 440.221529][ T8723] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 18:42:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x4, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r3}, 0x8) 18:42:26 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000064b57f08e60f009836b30000fe010902120001010000000904"], 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040)='NLBL_CIPSOv4\x00') syz_usb_control_io$uac1(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:var_auth_t:s0\x00', 0x20, 0x1) mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x830, 0xffffffffffffffff, 0x6) [ 441.554232][ T27] Bluetooth: hci0: command 0x040f tx timeout [ 441.602958][ T3222] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 441.842846][ T3222] usb 1-1: Using ep0 maxpacket: 8 [ 442.044350][ T3222] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=b3.36 [ 442.053597][ T3222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=254 [ 442.061846][ T3222] usb 1-1: SerialNumber: syz [ 442.553599][ T3222] CoreChips: probe of 1-1:1.0 failed with error -71 [ 442.572740][ T3222] usb 1-1: USB disconnect, device number 2 [ 443.323611][ T3222] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 443.563446][ T3222] usb 1-1: Using ep0 maxpacket: 8 18:42:28 executing program 1: ioctl$CHAR_RAW_ROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000000)=0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x60000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000080)={0xe0d9, 0x9}) bind$l2tp6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x80000001, @rand_addr=' \x01\x00', 0xfffffffd, 0x4}, 0x20) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x97, {{0xa, 0x4e20, 0xff, @dev={0xfe, 0x80, [], 0x11}, 0x2}}}, 0x84) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000240)={0x6000, 0x0, 0x5, 0x800, 0x3}) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x40) r2 = syz_usb_connect(0x0, 0x708, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x9f, 0x30, 0x66, 0x20, 0xb48, 0x1004, 0xc7cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f6, 0x2, 0x3f, 0x83, 0x10, 0x9, [{{0x9, 0x4, 0xab, 0x3f, 0x7, 0x8e, 0x7d, 0x1f, 0x55, [], [{{0x9, 0x5, 0x6, 0x10, 0x400, 0x1, 0x3, 0x20}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x0, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x7}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x7, 0x5f, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x6}, @generic={0xd6, 0x21, "a5e6e6247681dac3a998863fc0a72eb5dd085d50c6bd3a4181d500f42cee6c3973738d63c3062789571a95464c7025479b2b5d6ce15a17ec918546c57b2b66e0ac75ed45a6bd1dce5f70fc3b24eb2ab7667c3dea5535bbc42601260925c2361122018a049edd6b056d8d8757b1f396cf7c26335b5da840b24bff4b13fd5f4fa50b2ab84fa1d09da8727f555c27575edfc7147798aeb9539b81158bd934296b7a09513ccb2cdbcc0b189a9420353d17b59177db2fe35996ad586dbf2d80d8f453b28978ecbaa72571f4c1f5a44136c4ddd8db9e27"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x8, 0x1, 0x2, [@generic={0x4a, 0x2, "3860f6ce199129948695e4e56faa4dcc211918a3b52db18d1cd4b89acfde84b1df936eaf1d06d175c008618c5af498912b53cb5ba6d9e614047171972d4c62e75ead10a4b96a8d5d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x20, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x2, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x100}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xfd, 0x81, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x81, 0x5, 0x0, [@generic={0xde, 0x10, "c5fa9c0dd70753837e651ac7158ee09201e3c76639340817c2f1b0409d99bef4abc8f02f35bdabdeb1b9b4c33c61317876f510c44d5295e9aa5e4c9e7b6a00500593df353ed87a3f954dd48af0d8d72d3f063ab12db36a886009518449223f97ce69b0f69d3e9fe158ecb88b771ec535528f12d388f8e2d487374291ef2dc774b894dd7e89855b0492c527d27c410f13591fdf8d4f8eaf9ac143e6a826beeebb62974963a0ef757dd25376dc6922591cdb85a82cd786f85534f35948ad2193cd783d83a7def892fb4edd327be4faa027e0d55b4e0c6686b61cb32fff"}]}}]}}, {{0x9, 0x4, 0xee, 0x98, 0xf, 0xa1, 0x7f, 0xcb, 0x1, [@hid_hid={0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0xc93}}, @hid_hid={0x9, 0x21, 0x6902, 0x1, 0x1, {0x22, 0xebb}}], [{{0x9, 0x5, 0x0, 0x4, 0x0, 0xe9, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x20}, @generic={0xdb, 0xc, "f05224f31de3ffed56698ccd7770bdb2da7d809adc634a6f018bf215c1b4b5b008dd2d09c2d3029edf924f334bea635007e2b28b6e584600cd56d120a81e4542b1c6b49e0ce8efb0ee1960d6178411ace462e2a99fa29effb9c077b4ef51faa9e238a3916de2fc5eb8c8155c692e1f7a155730db8ff3bbd124ac398ae1db94f04a27e7908a84969d0e9f81b6f8655d9c0e178044e25efbb9ba6a4efea3526dd9e2f6a30f3bfd8f445d0533bf3817ccd1fc124f4da12c76b0e519be26c7d72f0a7262a9f426b0b6bdeab05da896abbc1a62d873518db4508967"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0x3, 0x1, [@generic={0x11, 0xd, "b85ce5740162585ebcc57675286219"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x200, 0x1f, 0x6, 0xa}}, {{0x9, 0x5, 0xf, 0x4, 0x40, 0x1, 0x7f}}, {{0x9, 0x5, 0x6b83e6487f178ca8, 0x0, 0x200, 0x0, 0xff, 0xe0}}, {{0x9, 0x5, 0x8, 0xc, 0x0, 0x3, 0x9, 0x4}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x3, 0x7f}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xe1, 0x81, 0x0, [@generic={0x20, 0xa, "ae597d26d22e694676ef3d16a948035cf6274821f30a8f1a8e817a1f06eb"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x69, 0xb4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x10, 0x3, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x7ff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xbdfb}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x7, 0x5, 0xf7, [@generic={0xe9, 0x22, "11deaf3f926c1b62979c870d5cb4a8e5ef9028039b082e4dffc9af95c05e7384cd8ae3bf3fa40b1c42778717dd26aca446764aefb83d9849e3f8ced09751bb25602ea36a8ffde0cfeee9c2ad35fa0858771e4737352847f5f56bbd78149636ac673d1d4df6962b1b3a5c48009d53f2d59a4950199da117889da1e885992105e3f8e7cef43de7d703dd113e3277aa190511bc158b32faf16f27c6884cd82a62af44d96909b59832b0abb8499669d364d788c148434ca815724a8dbbf3583acfd0291ea876ed861dbd5201135ee5e13c201993378ce06df0f3e0aa7f2a359af0f344b0311eae7b91"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x400, 0xfb, 0x1, 0x3, [@generic={0x5f, 0x9, "432b84b4728a911373f7bf0c45c1eca169750102c8e776dc6419fed12d38ebc6837626201800a46b965eff124749ad62f90b585c4564778e0b06d9c1a50aa329f311c6e17f99d55c59e725849d7eb966aa21833837eaaa2a112d81ef12"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x7, 0xde, 0x1}}, {{0x9, 0x5, 0x6, 0x10, 0x3ff, 0x80, 0x3f, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xfff}, @generic={0xd3, 0xe, "714f6fd9498cf1a6263c4578f701694777e67a7122046c15cf3eb15c912eed665c5b2605447b85ea361a6c150165aa86e40fa2e417cbad0db96f3945ef38b1aa8327862cd09aa31a213dedcab98adb49fdc385472aa619b1d95151f37e179a23d560deeff6bc1a54695108f32bbe6341bc0d3fe7985152651472f873856ddb88e5519a5533f65d85c35cf6502a1c9ec03a72cca51e604efc9ceb764eeabddbfd6aabb30b987a91a0ff1556edb77e37e11cda3a5214c98a1e5f69287ba26ce084bae5da715bca50a4796669228be98c9612"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x7, 0x8, 0x5, [@generic={0x9f, 0x4, "a4a668c78f0399d31c06b70c0a188f5cde30204de2719c13425e734e5f0d320c99bff3e62d092fc3dd2dfe90236f2a6fce48665feb4419ac4fef8e08d9066c6d173c90777577595ee1f461da900d3629e90cedcc63e0bd642783dc590c16810be9ce6f1d43b88d6bcba9be11c4ab1a26e22dbd172c366e2b53655264f8d743eef3167cd6290b4749fb871e6159533401bd700547cde337ba9b6dfb55f7"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x81, 0x6, 0x7f}}]}}]}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x300, 0x65, 0x7f, 0xff, 0x20, 0x1}, 0x19, &(0x7f0000000b00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1f, "6ef7c9e43c9c9964e9f54a81fad126c6"}]}, 0x6, [{0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x3c01}}, {0xe9, &(0x7f0000000b80)=@string={0xe9, 0x3, "57d9fa6264e0c887c74123691ef869dcb9ab066436864ec45dbcf6d872044c1959e24ec97e4f63dcd0f85ea3e37b73f3934d7cc32d70e18abdf00c8ccb9ea9a34c1b5328a29dd96943bc85ae49fc4158334d3cc6d3d7d98ff7b57d66f0e5325b61c36af4d3e4c2ab28583b92949804322a2dfb742088e4933fca54326af4379201c06026b45efdedc9e73d63d6e5d53cb354865271008ba6adff7aaeac00d9e6bf0eba1da277c51ed91964b8086a97b7839cf0f9fd88adb96ec205c66d6c1567e5f929a49494ab8952fb032c97e1d7a5a34b0b35029a720d7d4b6b32c37ab030cef3d5f5472c8b"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x416}}, {0x16, &(0x7f0000000cc0)=@string={0x16, 0x3, "ac8d17bde187c039074518f48dc5139ad13c1d11"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x80a}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000e80)={0xc, &(0x7f0000000e00)={0x0, 0x2, 0x18, {0x18, 0x3, "cd58113850f3cfd41afdebb7b1572852819caa80db5f"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f00000010c0)={0x1c, &(0x7f0000000ec0)={0x40, 0x14, 0x40, "710670334fb42744a854e6735c4ce18d7a1c8f3ba5e94f08324a27ee04e78a00b0d819896bf22dd101e253ce9783ab60ddff641e6f46a8c40f17ed6d4536c24a"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x3e}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000fc0)={0x20, 0x0, 0x5d, {0x5b, "a2a09411ea7af4dce4b2c48186977b70f629779c26e94b36d6e384338b9b3628afe4ba0b1c4c63da11b24606f4b984e9ec90f041739f1cb30ce2a62f04ea08e61e728682c5d17096c80503703f3b0e96a3c9aea88201dc2a5bf70d"}}, &(0x7f0000001040)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000001080)={0x20, 0x0, 0x1, 0xff}}) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000001100)={0x2, 0x0, [0x3, 0x3, 0x3, 0x8db, 0xc8, 0x10000, 0x8, 0xa46]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000001140)={r0, 0xffffffffffffffc1, 0x4, 0x100000001}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x12c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x48, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x18d8, 0x10000, 0x80000000, 0x1c96]}, @CTA_ZONE={0x6}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3000}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8000}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_NAT_SRC={0x78, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, [], 0x1a}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={[], [], @multicast1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x12c}}, 0x10000040) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001540)={&(0x7f0000001380)="2840a6197c6d33bc956078fb4fbac80d31027467637d207f82e564b0c88560e0e413e27f1c76add82c63180c7b71d882ba2b2345e2603dacc13d71ecffc5f6b3cb77a6230486c22388f33abc1f645f13cac3166da11d63c7b01e9e92748754128756e9bd61e42e84e353e8a241c9084a074998b00c1ecc4da9b595309dde88a8e7616a1e1787ed9bcca0b3a47b244649b2a6b9da66bb966e21aad8ba7455f9c557c682dc8f873684627cf2908c3d020166b64632d8777e5e9cbed358b5ccf9cc5d75c766bbc96e8bb49ec8e6ac8b68e9a8", &(0x7f0000001480)=""/36, &(0x7f00000014c0)="afbdbb6c409e0f9efcd7955f63fc2fc253e3e3687bcffee0dc452487faf06f49e2617d1a4be1f6879d247859ba0dcbd081bc7402900dd22ed54018", &(0x7f0000001500)="f62f9aebb817", 0x5, r0, 0x4}, 0x38) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x20, 0x140b, 0x424, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040880}, 0x4000010) connect$l2tp(0xffffffffffffffff, &(0x7f0000001680)={0x2, 0x0, @loopback, 0x2}, 0x10) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f00000016c0)=""/74, &(0x7f0000001740)=0x4a) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x342ee598}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 443.636176][ T27] Bluetooth: hci0: command 0x0419 tx timeout [ 443.784305][ T3222] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=b3.36 [ 443.794700][ T3222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=254 [ 443.803099][ T3222] usb 1-1: SerialNumber: syz 18:42:29 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x101842, 0x0) r0 = openat$null(0xffffff9c, &(0x7f0000001080)='/dev/null\x00', 0x101601, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000080)=""/4096) [ 444.254239][ T3222] CoreChips: probe of 1-1:1.0 failed with error -71 [ 444.286486][ T3222] usb 1-1: USB disconnect, device number 3 18:42:29 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e1f, 0x67f7, @private0}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0x10) accept4$netrom(r1, &(0x7f00000001c0)={{0x3, @default}, [@null, @bcast, @bcast, @default, @null, @bcast, @default]}, &(0x7f0000000140)=0x48, 0x80800) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000040)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x7, 0x9, 0x1, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1}, {0x6, 0x0, 0x0, 0x7fff7ff7}]}) openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:42:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x2, 0x4e23, @private=0xa010100}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)="77d2bfa5a74888da4083fd8a1c86738f0026860c94027e6925cd28577badcee46d7213c4c01684a1959fb82c6296886b5c96f61f1fa34a6228ea959a73e794992f6f8bc475835c754fb67c18e8f002f7e563f55f03ab1cdf4d44836317b9e94b4f024edb62eae085360d9ff9eaf4e344576306af57a9a4874eb924a019df085fa0", 0x81}], 0x1, &(0x7f00000007c0)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x47c}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x40008}}], 0x20}, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r1, 0x0, r2, 0x0, 0xb8b, 0x0) write$ppp(r1, &(0x7f0000000880)="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", 0x1000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x2a0, r3, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa6, 0x5, "2c0894df9bc0101606a03d09473c157c327080b5d7d8a379385256eb962c8d050af2467a0df32bfe1b1b756bfff59b2621e484aaeaf302f8180c485c41d03e22ec9345c62e9ff1bff710947a1c54dad5d55c242ad3567f28c1fae2eab00bc1dc890567046fe207bd1758d67ca7bae895135b9a20640aaee3f257d0a7ec7dfe3f6d2c99a6ad827236e1034f4e3c1342b962ed60140bbb80cf9fdf20c9a78439e90cb4"}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-/]{\\*],\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-**\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&-#'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "dc44dfd23758d3a965c858fe82fb0e7de9f06b8b060c52417ef738957601573ca0333f7e15394f83e1f459afe43a883a1cf265808582e832746b973580b44173a6221925e02839342c3c22ccf9284f499021bfd630cc255113dff6cabbbda75d0799bf47db4b85998b82a28e2fb71e6ff2a7b04204203c26311b73d27eaf3229c7b4632b59d18fa1e82c7e5eecb9462e529da26b85fd1ea5431e0f1faa5351611e3c878ce6a64ba20fbe54193770794dce6689dc9ac9958784d31ae5b3ff42ce137786c03d61c79d8f438d2eeeba89cd376430278180"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8800}, 0x11) syz_usb_connect(0x0, 0x58, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000036ee3808d30b55056a690000000109024580010000000009040000000e0100000924047960"], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r5, 0x0, r6, 0x0, 0xb8b, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000840)) syz_usb_connect$cdc_ncm(0x6, 0x70, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x4, 0x80, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "9bec"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x100, 0xbe7, 0x3f, 0x1f}, {0x6, 0x24, 0x1a, 0x2, 0x13}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x0, 0x91}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x20, 0x6, 0x4c}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x20, 0x7, 0xfd}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x81, 0x3a, 0x96, 0x14, 0x46}, 0x6f, &(0x7f0000000540)={0x5, 0xf, 0x6f, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x0, 0x4, 0x0, 0xf, 0xfff, [0x30, 0x0, 0xc000, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0xa2, "465ad916478bc97c1f7b78a73427e625"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x2, 0x100}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x0, 0x51, 0x1, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "041b2045c6151b0e5c91ff7f55981001"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x8, 0x0, 0x6, [0xcf, 0xe272bb1276bba62e]}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2809}}]}) [ 445.233392][ T3744] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 445.340573][ T8764] IPVS: ftp: loaded support on port[0] = 21 [ 445.546988][ T3744] usb 1-1: Using ep0 maxpacket: 8 [ 445.666361][ T3744] usb 1-1: config index 0 descriptor too short (expected 32837, got 70) [ 445.675021][ T3744] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.685424][ T3744] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice=69.6a [ 445.694678][ T3744] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.835972][ T3744] usb 1-1: config 0 descriptor?? [ 446.069496][ T8764] chnl_net:caif_netlink_parms(): no params data found [ 446.285730][ T8764] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.293097][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.301712][ T8764] device bridge_slave_0 entered promiscuous mode [ 446.345340][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.352930][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.362272][ T8764] device bridge_slave_1 entered promiscuous mode [ 446.442199][ T8764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.467050][ T8764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.526026][ T8764] team0: Port device team_slave_0 added [ 446.547094][ T8764] team0: Port device team_slave_1 added [ 446.598829][ T8764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.606101][ T8764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.632366][ T8764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.661093][ T8764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.669458][ T8764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.695556][ T8764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.782022][ T8764] device hsr_slave_0 entered promiscuous mode [ 446.792100][ T8764] device hsr_slave_1 entered promiscuous mode [ 446.807971][ T8764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.815850][ T8764] Cannot create hsr debugfs directory [ 447.147841][ T8764] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 447.186417][ T8764] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 447.227078][ T8764] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 447.235164][ T3744] Bluetooth: hci1: command 0x0409 tx timeout [ 447.256268][ T8764] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 447.627577][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.673316][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.682917][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.709715][ T8764] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.740168][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.750330][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.760456][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.767778][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.792368][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.802215][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.812419][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.822014][ T3222] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.829382][ T3222] bridge0: port 2(bridge_slave_1) entered forwarding state 18:42:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x210b405, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x208c064, &(0x7f0000000080)=ANY=[@ANYBLOB="51e6eea05c8201319fd82d297d028f6461782c00"]) [ 447.902739][ T3222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.935775][ T3222] usb 1-1: USB disconnect, device number 4 [ 447.936330][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 448.026117][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 448.037283][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 448.137293][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 448.147709][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 448.158367][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 448.168744][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 448.178633][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 448.188317][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.198016][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.234239][ T8764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.368518][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.376709][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.431913][ T8764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.542860][ T9013] EXT4-fs (sda1): Unrecognized mount option "Q\1-)}dax" or missing value [ 448.590168][ T9015] EXT4-fs (sda1): Unrecognized mount option "Q\1-)}dax" or missing value [ 448.625891][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 448.635949][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 18:42:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x210b405, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x208c064, &(0x7f0000000080)=ANY=[@ANYBLOB="51e6eea05c8201319fd82d297d028f6461782c00"]) [ 448.759031][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 448.768738][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 448.794278][ T8764] device veth0_vlan entered promiscuous mode [ 448.806023][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 448.816479][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 448.853734][ T8764] device veth1_vlan entered promiscuous mode [ 448.907107][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 448.916620][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 449.043043][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.053350][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.081762][ T8764] device veth0_macvtap entered promiscuous mode [ 449.130293][ T8764] device veth1_macvtap entered promiscuous mode [ 449.167977][ T9017] EXT4-fs (sda1): Unrecognized mount option "Q\1-)}dax" or missing value [ 449.199456][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 449.210746][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.225063][ T8764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.236851][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 449.246587][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.256142][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.266177][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 18:42:34 executing program 0: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x20005d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b31, &(0x7f0000000040)) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$binfmt_elf32(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYBLOB="03a1", @ANYBLOB="b8b3b19cffc0cb", @ANYBLOB="adba04c17794d6930106855965e05b1563f8dacbc3f08815f43973a99573afb85d330396997fc985f33832af0a575f28030d05fea6a0f6c43358b989582cdb8d7c4e374c48cee6430ebf51ec868d8291a76093d5232abcc8669f6ebba3c49ac3782a5516fc2939128a6e6e6f51da03e71de2145ea2280d1c2c115189463b8375c12f67c0ef2c09350b7926b0f91977c83ad8f6a65403a36293a072a049b8dfe82896e25ccda13bfd2655c137e0fb863564e21e0eae6c3e0ccf4091ac285cc11c74151326cc49e8eccf72a08ca4f4de40033951c6e4a75cc37e99993dd3df2b77c41f049834443bc92d51d7254783b99f9d10dc141209743e09099bdc412b2cb88438af20ceeb8bcd32b31c56fe59f7f06b95d61b7002e1db253c651136b1386ddb934da721da09bf09eac20a5dc8c05e6e06fae933f35f7575bae7be37ba96abba4a35f85fdc4b0b12b86f51101d000000000051a1b552cfcac781b48769eb217a10a9e8555fca653f4b57ee89303e1a6800b4e0b79a0bcf1835cecdf51abff5e133a5021dee86748e22cccf0e57df5ff5df03128e9a90548a91", @ANYRESDEC=r0, @ANYBLOB="730f6399fcedaae230226d37925ad417bb036bee42c5befab757490e588fba042986dd2107ef84743121648e729ddf2022de6aaefc18a2be66c4ba56e4531a1825e37d63b5649d58419a07043107de90bb3ae1115857096a752bb7998962cbffddb2040209cb1f620478755f06757d67903fc11ce621fe3f7fafb1d65aab353a4e6b507010278b27daac753d72daa41ab3aa2fdd42c5b4", @ANYRESOCT=r2], 0x78) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000000)) close(r0) uselib(&(0x7f00000000c0)='./file0\x00') setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), 0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0xc) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r6) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x83, &(0x7f0000000080)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={r5, 0x9, 0x6d96, 0x2d8, 0xffc, 0x3}, &(0x7f0000000200)=0x14) [ 449.315143][ T3744] Bluetooth: hci1: command 0x041b tx timeout [ 449.413793][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 449.424436][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.438735][ T8764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.456430][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.466875][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 18:42:34 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x726) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x40000006) [ 450.643698][ T9023] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 450.884324][ T9023] usb 2-1: Using ep0 maxpacket: 32 [ 451.105229][ T9023] usb 2-1: config 63 has an invalid interface number: 171 but max is 1 [ 451.105359][ T9023] usb 2-1: config 63 contains an unexpected descriptor of type 0x2, skipping [ 451.105485][ T9023] usb 2-1: config 63 has an invalid interface number: 238 but max is 1 [ 451.105620][ T9023] usb 2-1: config 63 has an invalid interface number: 164 but max is 1 [ 451.105753][ T9023] usb 2-1: config 63 has 3 interfaces, different from the descriptor's value: 2 [ 451.105869][ T9023] usb 2-1: config 63 has no interface number 0 [ 451.105983][ T9023] usb 2-1: config 63 has no interface number 1 [ 451.106097][ T9023] usb 2-1: config 63 has no interface number 2 [ 451.106270][ T9023] usb 2-1: config 63 interface 171 altsetting 63 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 451.106421][ T9023] usb 2-1: config 63 interface 171 altsetting 63 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 451.106566][ T9023] usb 2-1: config 63 interface 171 altsetting 63 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 451.106713][ T9023] usb 2-1: config 63 interface 171 altsetting 63 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 451.106858][ T9023] usb 2-1: config 63 interface 171 altsetting 63 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 451.106994][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has an invalid endpoint with address 0x0, skipping [ 451.107146][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has a duplicate endpoint with address 0xF, skipping [ 451.107274][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has an invalid endpoint with address 0xA8, skipping [ 451.107407][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has a duplicate endpoint with address 0x8, skipping [ 451.107545][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has a duplicate endpoint with address 0xE, skipping [ 451.107681][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has a duplicate endpoint with address 0x6, skipping [ 451.107818][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has a duplicate endpoint with address 0xF, skipping [ 451.107952][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has a duplicate endpoint with address 0x6, skipping [ 451.108086][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has a duplicate endpoint with address 0x5, skipping [ 451.108244][ T9023] usb 2-1: config 63 interface 238 altsetting 152 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 451.108380][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has a duplicate endpoint with address 0x6, skipping [ 451.108535][ T9023] usb 2-1: config 63 interface 238 altsetting 152 has 14 endpoint descriptors, different from the interface descriptor's value: 15 [ 451.108678][ T9023] usb 2-1: too many endpoints for config 63 interface 164 altsetting 166: 104, using maximum allowed: 30 [ 451.108821][ T9023] usb 2-1: config 63 interface 164 altsetting 166 has a duplicate endpoint with address 0xF, skipping [ 451.108967][ T9023] usb 2-1: config 63 interface 164 altsetting 166 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 451.109088][ T9023] usb 2-1: config 63 interface 171 has no altsetting 0 [ 451.109215][ T9023] usb 2-1: config 63 interface 238 has no altsetting 0 [ 451.109336][ T9023] usb 2-1: config 63 interface 164 has no altsetting 0 [ 451.265675][ T9023] usb 2-1: Dual-Role OTG device on HNP port [ 451.283676][ T9023] usb 2-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=c7.cb [ 451.283806][ T9023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.283918][ T9023] usb 2-1: Product: Ж [ 451.284086][ T9023] usb 2-1: Manufacturer: 拺蟈䇇椣ꮹ搆蘶쑎뱝Ѳ᥌쥎佾ꍞ篣䶓썼瀭諡谌黋ꎩᭌ⡓鶢槙뱃꺅ﱉ塁䴳옼ퟓ这뗷晽嬲썡ꯂ堨鈻颔㈄⴪瓻蠠鏤쨿㉔鈷쀁♠庴挽㳕咳劆qꚋﾭ깺¬຿ᶺ瞢ễ᧙롤樈랗鲃藺製릭쉮옅汭朕痢ꐩ钔覫ﭒⰃꗗ䮣㔋騂൲䭽㉫竃グⱇ [ 451.284209][ T9023] usb 2-1: SerialNumber: 趬봗蟡㧀䔇얍験㳑ᄝ [ 451.393784][ T8704] Bluetooth: hci1: command 0x040f tx timeout [ 452.139705][ T9023] usb 2-1: USB disconnect, device number 2 18:42:37 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x726) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x40000006) 18:42:37 executing program 1: socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x9b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x2}, @acm={0x4, 0x24, 0x2, 0x9}, @acm={0x4, 0x24, 0x2, 0xa}, @dmm={0x7, 0x24, 0x14, 0x5, 0x2}, @obex={0x5, 0x24, 0x15, 0x400}, @acm={0x4, 0x24, 0x2, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {0x9, 0xb}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff}}}}}}}]}}, 0x0) [ 453.244692][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 453.493799][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 453.616036][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.616194][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 453.616330][ T27] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 453.616461][ T27] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 453.616579][ T27] usb 2-1: config 1 interface 1 has no altsetting 0 [ 453.794714][ T9023] Bluetooth: hci1: command 0x0419 tx timeout [ 453.794971][ T27] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 453.795108][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.795219][ T27] usb 2-1: Product: syz [ 453.795324][ T27] usb 2-1: Manufacturer: syz [ 453.795417][ T27] usb 2-1: SerialNumber: syz [ 454.065218][ T27] usb 2-1: selecting invalid altsetting 0 [ 454.065418][ T27] usb 2-1: selecting invalid altsetting 0 [ 454.065646][ T27] cdc_ncm 2-1:1.0: bind() failure [ 454.076446][ T27] usb 2-1: selecting invalid altsetting 0 [ 454.076682][ T27] cdc_ncm: probe of 2-1:1.1 failed with error -22 [ 454.077232][ T27] usb 2-1: selecting invalid altsetting 0 [ 454.077471][ T27] cdc_mbim: probe of 2-1:1.1 failed with error -22 [ 454.080242][ T27] usb 2-1: selecting invalid altsetting 0 [ 454.080518][ T27] usbtest: probe of 2-1:1.1 failed with error -22 [ 454.144264][ T27] usb 2-1: USB disconnect, device number 3 18:42:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206010400000000000000000000000005000400000000000900020073797a3000000000050005000a0000000523de4d00010006000000140007800800130000000000080012400000000011000300686173683a69702c706f727400"], 0x60}}, 0x0) 18:42:39 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 454.769677][ T9088] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.364252][ T9023] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 455.724978][ T9023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.725113][ T9023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 455.725285][ T9023] usb 2-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 455.725409][ T9023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.730889][ T9023] usb 2-1: config 0 descriptor?? [ 455.985402][ T9023] rtl8192cu: Chip version 0x10 18:42:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x726) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x40000006) [ 456.627919][ T9023] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 456.628665][ T9023] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 456.718703][ T8702] usb 2-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 456.719561][ T8702] usb 2-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 456.719642][ T8702] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 456.719662][ T8702] rtlwifi: Selected firmware is not available [ 456.831380][ T27] usb 2-1: USB disconnect, device number 4 [ 457.613343][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 458.004440][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.004579][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 458.004765][ T27] usb 2-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 458.004955][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.009051][ T27] usb 2-1: config 0 descriptor?? [ 458.255195][ T27] rtl8192cu: Chip version 0x10 18:42:43 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 458.783879][ T27] rtl_usb: reg 0xfe66, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 459.013632][ T27] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 459.013678][ T27] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 459.014506][ T27] usb 2-1: This Realtek USB WiFi dongle (0x0bda:0x317f) is untested! [ 459.014671][ T27] usb 2-1: Please report results to Jes.Sorensen@gmail.com [ 459.075320][ T27] usb 2-1: Unsupported USB TX end-points [ 459.075482][ T27] usb 2-1: Fatal - failed to identify chip [ 459.076302][ T27] rtl8xxxu: probe of 2-1:0.0 failed with error -524 [ 459.114890][ T27] usb 2-1: USB disconnect, device number 5 [ 459.553818][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 459.913236][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.913376][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 459.913549][ T27] usb 2-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 459.913685][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.917529][ T27] usb 2-1: config 0 descriptor?? 18:42:45 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x726) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x40000006) [ 460.203407][ T27] rtl8192cu: Chip version 0x10 [ 460.855892][ T27] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 460.856454][ T27] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 461.126248][ T3222] usb 2-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 461.127089][ T3222] usb 2-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 461.127176][ T3222] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 461.127195][ T3222] rtlwifi: Selected firmware is not available [ 461.144448][ T27] usb 2-1: USB disconnect, device number 6 18:42:46 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 462.302985][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd 18:42:47 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7) r1 = openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x7fffffff}, @in6={0xa, 0x4e24, 0x72ad, @private1={0xfc, 0x1, [], 0x1}, 0x1000}, @in6={0xa, 0x4e24, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x7fffffff}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x80000001}], 0xa0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@initdev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe4) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000001880)={'syztnl2\x00', &(0x7f0000001800)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x7, 0x2, 0x15, @mcast1, @empty, 0x10, 0x10, 0x800, 0x8}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'vlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000005fc0)={'ip6tnl0\x00', &(0x7f0000005f40)={'syztnl1\x00', 0x0, 0x25121b6de5c9a311, 0x6, 0x20, 0x400, 0x10, @dev={0xfe, 0x80, [], 0x24}, @ipv4={[], [], @rand_addr=0x64010101}, 0x10, 0x700, 0xf924, 0x5}}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000006000)={0x0, @initdev}, &(0x7f0000006040)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000006280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000006240)={&(0x7f0000006080)={0x1bc, r2, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24044004}, 0x20000040) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006300)='ethtool\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000006900)={'vxcan1\x00', r3}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000069c0)={'sit0\x00', &(0x7f0000006940)={'ip6gre0\x00', r5, 0x29, 0xfa, 0x80, 0x80000001, 0x4, @ipv4={[], [], @loopback}, @mcast2, 0x10, 0x8, 0x20, 0x6}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000006a00)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@private2}}, &(0x7f0000006b00)=0xe4) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000006d80)={&(0x7f00000062c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006d40)={&(0x7f0000006b40)={0x1cc, r8, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xbc, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4091) write$fb(r0, &(0x7f0000006dc0)="c94ee876d4d2b3bb98d293ff30bbae2e8c1e1450693f13f651300b3613d789cfff4a7804f06ae3898b7e613fb54c18a946f4a36fa72e027aed07820335f2888209aeab53a5682da6a422ce63608da090195c1c10da50551f3f26546e7ced4b30bf469fbcda27a457929ca365380e41f301f0b054cb28bf03c12a63f4fa177cec56f276d05e82b12cf1a21dad4d467da5d67fead4b799805af0563bcfcd2553f34557191a2f5a6c60a1c13b41760c9eaa7c0946c59069", 0xb6) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, &(0x7f0000006e80)=0x7, 0x4) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) [ 462.694515][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.694654][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 462.694826][ T27] usb 2-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 462.694949][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.698752][ T27] usb 2-1: config 0 descriptor?? [ 462.806417][ T28] audit: type=1400 audit(1599244967.902:9): avc: denied { execmem } for pid=9206 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 462.953021][ T27] rtl8192cu: Chip version 0x10 [ 463.583090][ T27] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 463.583734][ T27] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 463.719376][ T8684] usb 2-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 463.720265][ T8684] usb 2-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 463.720345][ T8684] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 463.720364][ T8684] rtlwifi: Selected firmware is not available [ 463.803286][ T27] usb 2-1: USB disconnect, device number 7 18:42:49 executing program 1: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xa6, 0x6f, 0x1b, 0x40, 0xbda, 0x317f, 0x9dcc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81}}, {{0x9, 0x5, 0xe}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001bc0)={0x84, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000001280)={0x84, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:42:49 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x726) sendfile(r0, 0xffffffffffffffff, 0x0, 0x40000006) [ 464.893830][ T9209] IPVS: ftp: loaded support on port[0] = 21 18:42:50 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x726) sendfile(r0, 0xffffffffffffffff, 0x0, 0x40000006) [ 465.054978][ T8684] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 465.435728][ T8684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.445801][ T8684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 465.455887][ T8684] usb 2-1: New USB device found, idVendor=0bda, idProduct=317f, bcdDevice=9d.cc [ 465.465156][ T8684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.585827][ T8684] usb 2-1: config 0 descriptor?? [ 465.807000][ T9209] chnl_net:caif_netlink_parms(): no params data found [ 465.833465][ T8684] rtl8192cu: Chip version 0x10 18:42:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x726) sendfile(r0, 0xffffffffffffffff, 0x0, 0x40000006) [ 466.248299][ T9209] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.255796][ T9209] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.265638][ T9209] device bridge_slave_0 entered promiscuous mode [ 466.429411][ T9209] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.436758][ T9209] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.446595][ T9209] device bridge_slave_1 entered promiscuous mode [ 466.523297][ T8684] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 466.543081][ T8684] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin 18:42:51 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) [ 466.699157][ T9209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.717618][ T9209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.819958][ T27] usb 2-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 466.830734][ T27] usb 2-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 466.832963][ T9023] Bluetooth: hci2: command 0x0409 tx timeout [ 466.840233][ T27] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 466.853720][ T27] rtlwifi: Selected firmware is not available [ 466.855756][ T9209] team0: Port device team_slave_0 added [ 466.860441][ T8684] usb 2-1: USB disconnect, device number 8 [ 466.943553][ T9209] team0: Port device team_slave_1 added [ 467.078997][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.086168][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.113446][ T9209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.219564][ T9209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.226884][ T9209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.253202][ T9209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 18:42:52 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x1, 0x6080) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800009, 0x40010, r0, 0x8016000) [ 467.433073][ T9209] device hsr_slave_0 entered promiscuous mode [ 467.457023][ T9209] device hsr_slave_1 entered promiscuous mode [ 467.524506][ T9209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.532215][ T9209] Cannot create hsr debugfs directory 18:42:53 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r1, 0x0, r2, 0x0, 0xb8b, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x7f) sendmsg$rds(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @rand_addr=0x70}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000c0000000000000000000000000085bde8336147c2f2aa1eb37bc6db75b32486d6b531ba9beb7785f4e213e56edaf202d7b3b0"], 0x18}, 0x40) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x1, 0x6}) [ 468.697239][ T9209] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 468.747122][ T9209] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 468.761789][ T9209] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.779781][ T9209] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.913197][ T9023] Bluetooth: hci2: command 0x041b tx timeout 18:42:54 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/888], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000000019386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) modify_ldt$read(0x0, &(0x7f0000000040)=""/40, 0x28) [ 469.745017][ T9209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.850844][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.852834][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.914244][ T9209] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.964940][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.979002][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 18:42:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800900010076657468b79492e43c353bc0b978000000001800", @ANYRES16=r1, @ANYBLOB="000001007f953a55938632cd6f00080100"/28], 0x48}}, 0x0) [ 469.980355][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.980532][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.017446][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.053327][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.055109][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.056465][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.056641][ T8684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.099775][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.150182][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 470.193736][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 470.196599][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 470.199364][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 470.252185][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 470.255639][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 470.317388][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.319192][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.378399][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 18:42:56 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000013c0)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) syz_usb_connect$uac1(0x0, 0x8e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @processing_unit={0x9, 0x24, 0x7, 0x0, 0x0, 0xc6, "f8ba"}, @selector_unit={0x8, 0x24, 0x5, 0x0, 0x80, "8cfb8b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setparam(r1, &(0x7f0000000000)=0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x18, &(0x7f0000000200)=ANY=[@ANYBLOB="e9d5220a"], 0x0, 0x0, 0x0, 0x0}, 0x0) [ 470.380262][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.413013][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.542917][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.570117][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.570480][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.638272][ T9536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 470.647751][ T9209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.911746][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 470.916215][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 470.993187][ T9023] Bluetooth: hci2: command 0x040f tx timeout [ 471.076113][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.078159][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.081269][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.084090][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.196992][ T9209] device veth0_vlan entered promiscuous mode [ 471.241217][ T9209] device veth1_vlan entered promiscuous mode [ 471.424561][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.426583][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.428624][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.430631][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.496561][ T9209] device veth0_macvtap entered promiscuous mode [ 471.556193][ T9209] device veth1_macvtap entered promiscuous mode [ 471.633218][ T8684] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 471.746238][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.746267][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.746315][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 471.746340][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.750629][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.751201][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.753958][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.756000][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.758122][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.818445][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.889945][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.890003][ T9209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 471.890028][ T9209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.894432][ T9209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.930336][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.932788][ T9023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.937636][ T8684] usb 2-1: Using ep0 maxpacket: 16 [ 472.064553][ T8684] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 472.064708][ T8684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.064841][ T8684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.064989][ T8684] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 472.065155][ T8684] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 472.065289][ T8684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.069214][ T8684] usb 2-1: config 0 descriptor?? [ 472.353343][ T9540] udc-core: couldn't find an available UDC or it's busy [ 472.353412][ T9540] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 472.589402][ T8684] hid (null): unknown global tag 0xc [ 472.634220][ T8684] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0001/input/input5 18:42:57 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={r0, 0x1d, 0x0, 0x4, 0x0}, 0x20) [ 472.655464][ T8684] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0001/input/input6 [ 472.740652][ T8684] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vc.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 472.796733][ T8684] usb 2-1: USB disconnect, device number 9 [ 473.076905][ T8702] Bluetooth: hci2: command 0x0419 tx timeout 18:42:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r4, r2, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000000)={0x66, 0x7d, 0x1, {{0x0, 0x4b, 0x9, 0x1, {0x4, 0x3, 0x4}, 0x240000, 0x7ff, 0x0, 0x20, 0x3, '{)(', 0x7, 'bridge\x00', 0x7, 'bridge\x00', 0x7, 'bridge\x00'}, 0x6, 'Q#!\',.', 0xffffffffffffffff, r2, 0xee01}}, 0x66) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x3c}}, 0x0) 18:42:58 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x61, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000120, 0x458, 0x5011, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "17cd2c6c"}]}}, 0x0}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r2, 0x0, r3, 0x0, 0xb8b, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200000, 0x0) recvfrom$unix(r4, &(0x7f0000000080)=""/162, 0xa2, 0x10102, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) [ 473.575956][ T3222] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 473.832933][ T3222] usb 2-1: Using ep0 maxpacket: 16 [ 473.955375][ T3222] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 473.955527][ T3222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.955655][ T3222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.955805][ T3222] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 473.955972][ T3222] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 473.956093][ T3222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.960359][ T3222] usb 2-1: config 0 descriptor?? [ 474.200201][ T9540] udc-core: couldn't find an available UDC or it's busy [ 474.200278][ T9540] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 474.243972][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd 18:42:59 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000480)={{0x0, 0x800, 0x1000, 0x7f, 0x80, 0x6, 0x4d85d0d6, 0x9, 0x101, 0x5, 0x8, 0x1000, 0xb9, 0x0, 0x59d}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x4005810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000032000903000000000000000000000000100001000c000100080001006e6174000c0002000000000000ee"], 0x30}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0xfffffffffffffe6d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_targets\x00') ioctl$IOCTL_STATUS_ACCEL_DEV(r3, 0x40046103, &(0x7f0000000340)={0x1, 0x10000, 0x8e, 0x0, 0x5, 0x22, 0x2, 0x0, 0x81, 0x5f, 0x80, "40a1c244f428ac50718f21b3bed2dad915e09230415c1c6a9c880ff59b441817"}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000e000000100002800800020000001a8a04000400"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c001300", @ANYRES16=r4, @ANYRESOCT=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x4810) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r5 = epoll_create(0x3) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r6, 0x4b31, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r6) r7 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="55077716", @ANYRES16=0x0, @ANYBLOB="000426bd7000fbdbdf2508000000060028000000000005002e00000000000500300001000000"], 0x2c}, 0x1, 0x0, 0x0, 0xfc260b7aefab33af}, 0x400c881) [ 474.493281][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 474.505008][ T3222] usbhid 2-1:0.0: can't add hid device: -71 [ 474.505486][ T3222] usbhid: probe of 2-1:0.0 failed with error -71 [ 474.509901][ T3222] usb 2-1: USB disconnect, device number 10 [ 474.624359][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.624488][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.624659][ T27] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 474.624886][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.630669][ T27] usb 3-1: config 0 descriptor?? [ 474.985714][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 474.986188][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 474.990308][ T27] usb 3-1: USB disconnect, device number 2 18:43:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f00000000c0)={[{@journal_dev={'journal_dev', 0x3d, 0x8}}, {@block_validity='block_validity'}, {@nombcache='nombcache'}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@noload='noload'}]}) 18:43:00 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000180)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) [ 475.424581][ T9624] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 475.493318][ T27] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 475.584457][ T9624] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 475.793160][ T27] usb 3-1: Using ep0 maxpacket: 32 18:43:00 executing program 1: syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) finit_module(r0, &(0x7f0000000100)='ppp1vmnet0e:(em0\x00', 0x1) bind(0xffffffffffffffff, 0x0, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @dev}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @timestamp, @mss={0x2, 0x73}, @sack_perm], 0x4) syz_open_procfs(0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) [ 475.915620][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.926743][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.936896][ T27] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.40 [ 475.946155][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.007536][ T27] usb 3-1: config 0 descriptor?? 18:43:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r1, 0x15ebe000) r2 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, r2, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000040)=ANY=[], 0xfd30) r3 = openat$sequencer(0xffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x28902, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000280)={{0x0, 0x8000, 0xffffffffffffffff, 0x1, 0x6, 0x100000001, 0x8, 0x76a4, 0x7, 0x5, 0x7fffffff, 0x0, 0x7f, 0xcf}}) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) [ 476.493734][ T27] kye 0003:0458:5011.0002: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 476.493934][ T27] kye 0003:0458:5011.0002: tablet-enabling feature report not found [ 476.494130][ T27] kye 0003:0458:5011.0002: tablet enabling failed 18:43:03 executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) clone(0x100a1000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r1, 0x0, r2, 0x0, 0xb8b, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0x4, 0x7ecf, 0x1a1}) [ 477.900630][ T3222] usb 3-1: USB disconnect, device number 3 [ 478.291452][ T28] audit: type=1400 audit(1599244983.382:10): avc: denied { sys_admin } for pid=9661 comm="syz-executor.2" capability=21 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=cap_userns permissive=1 18:43:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5001010c00000000000000f4065155925419b8386dddb83e3ab5541ca846ae06258d920000000000000000000100000000dd7cb48384717f675de09ce33dd251c71540de4358a52cfbc98024b68c352d438878cff7da39160f23ca8ebbb506cab617138ad128d334dcaa597788", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2b2bde9d40319696b905711068b27da6fff0744d4d2176644649a1f5319f68d2b13651a643ba1d864dc423db53c56eb2b04361972eba624cd488693441e33eb8392d76d9b57a78d0d77e908000000000000e263516012857d445602af835297c84c211911e5fadece87db5a8894f36a19f7ba231dacc61ef4b8524330461a0db46abb795fdcd89a50852f130a289058c679d9b7b4a8d431960180e4b651345f328c02a8ba6c2a11788e0b33b6d67cc414da1b492dbf76cbe557e29116"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = socket(0x1e, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r1, &(0x7f0000000180)="04482ce34fcf37b5fcec8e1429aaf1d804e2d17f62f6911dddbea4e69208224b8d78a29ced412779a7d85f63ace72c97c1752de07b6f12204dd0334272c271e827965804a25b9eca3c83965945a6a965711527b3af025114e8cc4b9d2dcd78a1cf53c20bd96f5050af", 0x69, 0x80000000) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) [ 479.049410][ C0] hrtimer: interrupt took 112341 ns 18:43:04 executing program 2: bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14, 0x0) 18:43:04 executing program 1: ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r1 = syz_usb_connect$hid(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c400000000001090224000100000000090400800103010000092100000001220100090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x1, {[@main]}}, 0x0}, 0x0) 18:43:04 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x5, &(0x7f0000000000)=@framed={{0x2b, 0x8}, [@alu={0x4, 0x1, 0x6, 0x8, 0xa, 0x30, 0xfffffffffffffffc}, @generic={0x1, 0x5, 0x3, 0x9, 0x7fffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb4}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xd4, &(0x7f0000000200)=""/212, 0x41000, 0x1, [], 0x0, 0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xf, 0x6}, 0x10, 0x0, r0}, 0x74) 18:43:05 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) [ 480.063765][ T8702] usb 2-1: new high-speed USB device number 11 using dummy_hcd 18:43:05 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="d40000001000390e0000000000deff00440000003a7a55d4dc92355e508835bfaba84caaed68cc336e0b7360ff73ef7872c5a9fbcd4b552f55ef1a57069eff5ff6bac183e1937cedfa459024f472ec1a2fce2900966fdbee4c0d895b21fef6c590c880adf004cac84c74e28ea1d5d0b24161f73e22c05e85809fd459440f3ec5341ccfdb0c46d684e5378c74827e26ec12b54e0e633fe0fe732990c6c0a45250c8400919e0336133b2085babfcb2b1fa1f8c0876d5293d900b47f95d0d2917125c549ae71ce0824fee9c8894fcbd13564d6d9c5ebb80d9474d8d91bb35cdd8570a0665b01f4542114014e22c3736f0cd3c6a0f7431745dec5121a0d39e64eaac4481d676b12401f175f91b4e12dcc02cd678c15f065bca1628a385141942dbdc72488d3b35bbd6a2e6f719def1ffcedd1056abb1fb86b520a1e5eb9490ec27c4be37afb5c4f41c7ffa3f8c3d0463e2aca71784f2187b3129ed52f2302ad13007a7b77dffa6f1a4c65b85083c58c1e0aa0072fa575fcf1df33fadf059087c0ac83c70080ac9e077e8f5b26d0f7d724b7c011d9143ab3220d4631edd32e5434fc0ce72c002021290c471d1cdc1e5d144c8bae267d6b568bad3c080023817fccb2477668bd0cc5e253389bffbaa34b67064e3d78062243cd7c1d0c962f8504ea4", @ANYRES32=0x0, @ANYBLOB="030000000000000008000a00", @ANYRES32=0x6, @ANYBLOB="ac0012000800010067726500a000020008000700e00000010500170000030000060003003f000000060011004e2c690005001600020000000500170000000000050008000000000008000600ac14141908000700e038"], 0xd4}}, 0x0) r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x12840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1c, 0x6, &(0x7f0000000000)=@raw=[@alu={0x7, 0x0, 0x4, 0x7, 0x8, 0x20, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x0, 0x4, 0x3, 0x30, 0x10}, @call={0x85, 0x0, 0x0, 0x27}, @generic={0x2, 0x3, 0x6, 0x3, 0x1}, @jmp={0x5, 0x1, 0x1, 0xa, 0x1, 0x0, 0x4}, @ldst={0x2, 0x0, 0x3, 0x6, 0x0, 0x18, 0x4}], &(0x7f0000000040)='syzkaller\x00', 0x20, 0xac, &(0x7f00000000c0)=""/172, 0x41000, 0x4, [], 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xc, 0x20002, 0x8}, 0x10, 0xffffffffffffffff, r0}, 0x74) r1 = openat$procfs(0xffffff9c, &(0x7f0000000300)='/proc/bus/input/handlers\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r4, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b0000001400020000000700060000000000000001"], 0x68}}, 0x0) recvfrom$packet(r1, &(0x7f00000005c0)=""/133, 0x85, 0x100, &(0x7f0000000680)={0x11, 0xf8, r4, 0x1, 0xff, 0x6, @multicast}, 0x14) r5 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 480.423806][ T8702] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 18:43:05 executing program 2: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) futex$FUTEX_WAIT_MULTIPLE(&(0x7f00000016c0)=[{&(0x7f0000000040), 0x2}, {&(0x7f00000008c0)=0x1}, {&(0x7f0000000900)=0x1}, {&(0x7f0000000940)=0x2}, {&(0x7f0000000980)=0x1}, {&(0x7f00000009c0)=0x1, 0x1}, {&(0x7f0000000a00)=0x2, 0x1}, {&(0x7f0000000a40)}, {&(0x7f0000000a80), 0x2}, {&(0x7f0000000ac0)=0x2, 0x2}, {&(0x7f0000000b00)=0x1}, {&(0x7f0000000b40)=0x1}, {&(0x7f0000000b80)=0x1, 0x1}, {&(0x7f0000000bc0)}, {&(0x7f0000000c00), 0x2}, {&(0x7f0000000c40), 0x2}, {&(0x7f0000000c80)=0x8001, 0x2}, {&(0x7f0000000cc0)}, {&(0x7f0000000d00)=0x2}, {&(0x7f0000000d40), 0x2}, {&(0x7f0000000d80)=0x1}, {&(0x7f0000000dc0), 0x1}, {&(0x7f0000000e00)=0x2, 0x1}, {&(0x7f0000000e40)=0x2}, {&(0x7f0000000e80)=0x2, 0x1}, {&(0x7f0000000ec0), 0x1}, {&(0x7f0000000f00)=0x2, 0x1}, {&(0x7f0000000f40), 0x2}, {&(0x7f0000000f80)=0x1, 0x1}, {&(0x7f0000000fc0)=0x1}, {&(0x7f0000001000)=0x1, 0x1}, {&(0x7f0000001040)=0x1}, {&(0x7f0000001080)=0x2, 0x1}, {&(0x7f00000010c0), 0x2}, {&(0x7f0000001100)=0x2, 0x2}, {&(0x7f0000001140)=0x2, 0x1}, {&(0x7f0000001180), 0x1}, {&(0x7f00000011c0)=0x2, 0x1}, {&(0x7f0000001200), 0x1}, {&(0x7f0000001240), 0x1}, {&(0x7f0000001280), 0x2}, {&(0x7f00000012c0)}, {&(0x7f0000001300)=0x2, 0x1}, {&(0x7f0000001340)=0x2, 0x1}, {&(0x7f0000001380)=0x2, 0x2}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=0x2, 0x1}, {&(0x7f0000001440)=0x2, 0x2}, {&(0x7f0000001480)=0x2}, {&(0x7f00000014c0), 0x1}, {&(0x7f0000001500), 0x1}, {&(0x7f0000001540)=0x1, 0x1}, {&(0x7f0000001580), 0x2}, {&(0x7f00000015c0), 0x1}, {&(0x7f0000001600)=0x2, 0x2}, {&(0x7f0000001640)=0x1, 0x1}, {&(0x7f0000001680)=0x2, 0x1}], 0xd, 0x39, &(0x7f0000001980)={0x77359400}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$proc_capi20(0xffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x8000, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000080)=0xfffffffffffffed1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000000c0)={0x0, 0x100000000, 0xd25}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000004c0)={r4, 0x7, 0x5}) [ 480.423949][ T8702] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.424143][ T8702] usb 2-1: config 0 interface 0 has no altsetting 0 [ 480.424309][ T8702] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.40 [ 480.424430][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.428697][ T8702] usb 2-1: config 0 descriptor?? [ 480.593254][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 480.618917][ T9692] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 480.898425][ T8702] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 480.908413][ T8702] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 481.098389][ T8702] usb 2-1: USB disconnect, device number 11 18:43:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="47df4c0000000206050000000000000000000000000005000400000000000900020073797a3000000000050005000a000000050001000600000011000300686173683a6e65742c6e6e7400000000944d50a53d1ff631587e826ccc2351dfe875024e2b9aac"], 0x4c}}, 0x0) 18:43:06 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b31, &(0x7f0000000040)) syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[], 0x0) 18:43:06 executing program 1: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x0, 0x51, &(0x7f0000000140)=[{&(0x7f0000000000)="ebb8ce38bd5ab42678baba8f3d04d42ceb3566eb34122065b7a8b2a4bb897331bea8466004f01479f8ee53b822760749db2d2d903e7de1405329a4c4ffe30b4ec9ae656f91dfcbaaf9", 0x0, 0xffff}, {&(0x7f0000000400)="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", 0x0, 0xfff}, {&(0x7f0000000080), 0x0, 0xffffffff}, {&(0x7f0000000100)="d42f49435608ba20ad6b6f5527d34aeca9b0451296df23c8", 0x0, 0x1}, {&(0x7f00000001c0)="ad8a5fee68283198677a7f0d59f376ea0cd2ebc4af804fae94d9f73d4699b2fbc7fb66c5e7a514be5233de3d28d90ba563dfa613c3149c26815905fbe189432d1d2c0ced3b5e2ea8483a915ccf68d706345b0c4eb1e9c291dd70a5efb12eec017865c844ad38c704a0f69579182710bcd92f7b09472bad6cfc116d6cf3b36f36761550232815ac4a844f274474c0aa99fc6caf49487ca428bdf1a90d747cb91b30ff7260cd1f18c99e00b262fce503316f5e8c04e34268a346b197b3c5a3be608e2a1751d7de69aa16e304f1d2f1f0", 0x0, 0x1f}], 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='time_offset=']) [ 482.196037][ T5] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 482.463572][ T5] usb 3-1: device descriptor read/64, error 18 [ 482.854756][ T5] usb 3-1: device descriptor read/64, error 18 [ 483.125667][ T5] usb 3-1: new high-speed USB device number 5 using dummy_hcd 18:43:08 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x16}, &(0x7f0000000100)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8001, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$P9_RLERROR(r3, &(0x7f00000001c0)=ANY=[], 0x9) [ 483.402876][ T5] usb 3-1: device descriptor read/64, error 18 [ 483.793414][ T5] usb 3-1: device descriptor read/64, error 18 [ 483.913583][ T5] usb usb3-port1: attempt power cycle 18:43:09 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086d0417c540000000000109022400010000000009049f00010301000009210000000122010009058103"], 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="739a8946f73d23c18588efe119c7f193485f0b370ce5da44d00b98abfad258b7a524a1b331163fea8ae6880f8d37c4fe7d4a51dee0e46e05ae1c3cf0c3042c92db12a875e92117a4a7eb0334f9fc43be722e495e2547efedcd5ae89c899cfa341f459a7e2ccacba33849e5ba60ad20439cf7758b4ea768e7a8c7838e3ea1e1e8360bcc0000000000000000"], 0x0}, 0x0) [ 484.624786][ T5] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 484.793781][ T5] usb 3-1: device descriptor read/8, error -61 18:43:10 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x9}, {r0, 0x4}, {r1, 0x1402}, {r2, 0x2}, {r0, 0x9000}], 0x5, 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x1a, 0x5, 0x178, &(0x7f00000002c0)="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"}) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000180)={0x8}, 0x4) [ 485.043327][ T5] usb 3-1: device descriptor read/8, error -71 [ 485.245403][ T8702] usb 2-1: new high-speed USB device number 12 using dummy_hcd 18:43:10 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x40000006) [ 485.502865][ T8702] usb 2-1: Using ep0 maxpacket: 8 18:43:10 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) time(&(0x7f0000000080)) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) mknod(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x8000, 0xfffffffe) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) [ 485.625983][ T8702] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 485.634411][ T8702] usb 2-1: config 0 has no interface number 0 [ 485.640676][ T8702] usb 2-1: config 0 interface 159 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.652028][ T8702] usb 2-1: config 0 interface 159 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.662234][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.40 [ 485.671510][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.845637][ T8702] usb 2-1: config 0 descriptor?? [ 485.951023][ T9746] 9pnet: Insufficient options for proto=fd 18:43:11 executing program 2: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) r0 = syz_mount_image$afs(&(0x7f0000000000)='afs\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000140)=[{&(0x7f0000000300)="e752da175d6d924ee380cbc005c39b321d2bf22fc17eea02f8bb1877df48a00d0405968c643570e173558b63e0959c12e7e91ebebc8c716ee2e1c50bbe17f2a00472f909adba247d5fe225828462a33ea4b2f4a9bb9c208cda441cf45b745324e1f2bfbf9ae262592318c9f93bb2178e37d8ecb4be0f1cb09aec682e7918392900240b805a85d437382f6c18f9a392d50159eadcefb679ae96d22433e367254a37c456a70275943241f0a7e560a6e0324511a4dfb1807236b08fa213fadb6f671a649c06c2a9ac79d6cbf22fbdde5fbfd96e502ea38fd615289e1dc882541661699745", 0xe3, 0xffffffe0}, {&(0x7f0000000400)="6531bcb711c8ec623e6242229e200023ee3f3627fd67877c02c968ee47cbb339be7d3eec1e8c551db9b625671a1ac490e00e7c9cbfa699b315074da6b9539330fde322e94fa2f204fe03f3e01493d3b3b43d9022cd3f6d46f95fca30b7d0809d006cfe5e9aa9d4016b0a59edda0a7736495eb04f09ea6bba239d12cff9bedeae1e57e95bba0fa217cd573ca9fb623f60dc259a66cbcafec5d8e36da9fe0c1020d3bbf8dd9c99dfac98f0f1da98cab8c17e88cf2df08b155aac364522f4aadc9b765b88019f6c15950074a096e629661819a1965191ea6000f3a368db5fe9d4f4e984be785c9a6897481dbb3daa72", 0xee, 0x7f}], 0x1000010, &(0x7f00000007c0)={[{@flock_local='flock=local'}, {@flock_strict='flock=strict'}, {@flock_strict='flock=strict'}, {@flock_write='flock=write'}, {@flock_local='flock=local'}, {@flock_openafs='flock=openafs'}, {@flock_write='flock=write'}, {@autocell='autocell'}, {@flock_strict='flock=strict'}], [{@fsname={'fsname', 0x3d, 'ext3\x00'}}, {@permit_directio='permit_directio'}, {@dont_appraise='dont_appraise'}, {@fsname={'fsname', 0x3d, 'ext3\x00'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@smackfstransmute={'smackfstransmute', 0x3d, 't[/*:-:-:'}}, {@dont_measure='dont_measure'}]}) getdents(r0, &(0x7f0000000600)=""/200, 0xc8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe2, 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2e2f666908023000"], &(0x7f0000000780)='./file0\x00', 0x0, 0x9804, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x2834422, &(0x7f0000000200)=ANY=[@ANYBLOB="6d696e5f6261746300003030302e30303030303030303030302c6d626c6b5f696f2bc1d17c293efa14e24f7375626d69742c000000000000000000d64f54b96a91586f55580c1f636b1b4352ad384128ac9d5489e3d0fb69c9699a7bd19282c780c665989a1f85ad54d30276a33b23a6bca54761d9f6ba2ca6b82d12b95c6abb57bf5f6922b4a58c08225b32"]) 18:43:11 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x40000006) [ 486.373241][ T8702] usbhid 2-1:0.159: can't add hid device: -71 [ 486.379848][ T8702] usbhid: probe of 2-1:0.159 failed with error -71 [ 486.429593][ T9754] kAFS: unparsable volume name [ 486.438301][ T8702] usb 2-1: USB disconnect, device number 12 [ 487.084666][ T8702] usb 2-1: new high-speed USB device number 13 using dummy_hcd 18:43:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x40000006) 18:43:12 executing program 2: mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x8000, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000000180)={"469ad11550d4ff1a4e1b64bd2c812299", 0x0, r1, {0x7, 0x80}, {0x4, 0x8}, 0x1, [0x6, 0x3f, 0x0, 0x7ff, 0xc6e, 0x4, 0x9, 0xfffffffffffffff8, 0x0, 0x80000001, 0x0, 0x1000, 0x8000, 0x5, 0x7ff, 0x7]}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0}) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0xa00, 0x0) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x89000) dup3(r2, r3, 0x0) [ 487.323258][ T8702] usb 2-1: Using ep0 maxpacket: 8 [ 487.443787][ T8702] usb 2-1: config 0 has an invalid interface number: 159 but max is 0 [ 487.452133][ T8702] usb 2-1: config 0 has no interface number 0 [ 487.458604][ T8702] usb 2-1: config 0 interface 159 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.469908][ T8702] usb 2-1: config 0 interface 159 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.481139][ T8702] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.40 [ 487.490416][ T8702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.675804][ T8702] usb 2-1: config 0 descriptor?? 18:43:13 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000440)={0x33, @private=0xa010100, 0x4e24, 0x4, 'none\x00', 0x10, 0xec1e, 0x7d}, 0x2c) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000040)={0x0, 0x200, 0x8}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x2}, 0x0, 0x0, &(0x7f0000000240)={0x4, 0x8, 0x3b2c, 0x100}, &(0x7f0000000280)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x2}}, 0x10) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @dev}, &(0x7f00000004c0)=0xc) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@ipv6_delrule={0x64, 0x21, 0x800, 0x70bd27, 0x25dfdbfb, {0xa, 0x14, 0x20, 0x1, 0x80, 0x0, 0x0, 0x7, 0xc}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3c}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x7ff}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'gretap0\x00'}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0xf, 0xe, 0x891bdbe6}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18:43:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:43:13 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) write$P9_RSTATFS(r0, &(0x7f0000000180)={0x43, 0x9, 0x1, {0xc4d1, 0x3, 0xa2, 0x8, 0x1, 0x1, 0x4, 0x7, 0x401}}, 0x43) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x2, 0x7, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40480c4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) [ 488.223133][ T8702] usbhid 2-1:0.159: can't add hid device: -71 [ 488.229758][ T8702] usbhid: probe of 2-1:0.159 failed with error -71 [ 488.287778][ T8702] usb 2-1: USB disconnect, device number 13 18:43:13 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f00000001c0)="120000001a00e7ef077b1a3fbdf58185539c", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000140)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x3cb}, {&(0x7f00000000c0)=""/85, 0x4e4}, {&(0x7f00000024c0)=""/4096, 0x1048}, {&(0x7f0000000400)=""/120, 0x78}, {&(0x7f0000000480)=""/60, 0xc6}, {&(0x7f0000000280)=""/77, 0x7}, {&(0x7f0000000540)=""/154, 0x9a}, {&(0x7f0000000340)=""/22, 0x21}], 0x8, &(0x7f0000002400)=""/191, 0x1f9}}], 0x4000000000001de, 0x6, &(0x7f0000003700)={0x77359400}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x24008085) waitid(0x0, r1, &(0x7f0000000200), 0x8, &(0x7f00000004c0)) 18:43:13 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) inotify_init1(0x0) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 18:43:14 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xba, 0xac, 0x87, 0x40, 0xdb0, 0x543d, 0xcc3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x5, 0x32, 0x11, 0x0, [@uac_control], [{}]}}]}}]}}, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 18:43:14 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x802) connect$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @remote, 0x3}, 0x10) ioctl$IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000000080)={0x6, 0x9, 0x2, 0xde, 0x8, 0x7f, 0x6, 0x9, 0x81, 0x0, 0x5, "c053c7e76662545bc30eeb0b710a62ce95e9e739c95f0e4cfd77a19cf0c1c411"}) ioctl$CHAR_RAW_REPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)={0x5ad8, 0x2, 0x0, [{0xffff, 0x6, 0x9, 0x36, 0x9c, 0x6, 0x3}, {0x80, 0xfffffffffffffff8, 0x68d, 0x9, 0x7, 0x6, 0x8}]}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80800) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)="6edfa09ee4a3b6e18fa6660f11203a69f5c9acc2f92810697cd3698a882b4f590c3c99ebc18bc0f1d81e6927ce0dda1d64230814bd71be4bfd38db1e28606eae98d81fdde391f9a66e0fb9bb761e0a37f624a281eff169c04309003b74a59685c0fa7b4b2200a92abc5c29d51892d88df3e44c2206f21699a0dc449b727b", 0x7e}, {&(0x7f00000002c0)="b8734095c22fd1710de8351688a391c3f1ac5794498154785d9646a4436cfde13b6e0f76a592cd8f564d8d77db52f51752567566709fdee20c44e9976143bcdf7159ee6652850047d1dbd44cb8b28a8865c6b8801575f71a6573fa5d076df28ec4329abcade2cd924b10122e5794346bca95c50de4ea197a8ef4f62a354b62d1bc96157f35e5ee22cadb5bd3e1688ecda6d80cd1da910a071eef97356509269671ba1712f3348f1052ed6a62673fa9a61689667843d69c1b75e4e6df8c06af99c181b74516f2acf0fde971257c429d29b2619bef98cd99c1f96ac6c190", 0xdd}], 0x2, 0x5e05b391ca848e89) r4 = openat$uinput(0xffffff9c, &(0x7f0000000840)='/dev/uinput\x00', 0x802, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f0000000880)) r5 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x0) prctl$PR_GET_SECCOMP(0x15) r6 = fsmount(r2, 0x0, 0x70) ioctl$USBDEVFS_DISCSIGNAL(r6, 0x8008550e, &(0x7f00000009c0)={0xf00, &(0x7f00000008c0)="cb22c65b9bf29f36d32b50f9b59f80ed5d646071b5539530b9149dabc6fe88000763a842d986fb4f75e5b1b6de88f187fa4177c9fffc8423d49fc5984a2bb840097a71e96071daffdaf80ec26a28a517c3d7a23463aa6b32e825d8db8a58777adbafe9933bdf101817c149f9ffbef10fc5ffa0f1303d73f4f6666635d3e237516087de8f1343deca927f006df2cf4f45819249d0537555890fa034a6fbb07dca50453ea6795c3f28087ce6fcf9d25b180da57d331ab0fd68e4f32f900e87c2fad48b64b741"}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}}, 0x14}}, 0x40000) r7 = openat2(r6, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x80, 0x22, 0x1f}, 0x18) ioctl$UI_SET_MSCBIT(r7, 0x40045568, 0x21) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000b80)={@fixed={[], 0x10}, 0x6, 0x1f, 0x400, 0xc151, 0x3, "2a292734aa7c460635de8b6613be3e335bc45e8a5644841275c8b6ec8e8223aa82ac82bfc388840624bdfa693eaccc166d6bc8a88dd1d3c1bdb54ccfc38be55b01c72ebe764030e4e3829d35c85756d62120d0b0817b2fbf3de1f0239043162f1f99b2c32b03ead2465b6e3ab59d4b604ccf3b545c37bdd77bc6c9b9621a1c5c"}) read$hidraw(r1, &(0x7f0000000c40)=""/70, 0x46) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000cc0)=""/121) [ 489.782813][ T8702] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 490.143930][ T8702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.144082][ T8702] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 490.304362][ T8702] usb 3-1: New USB device found, idVendor=0db0, idProduct=543d, bcdDevice=cc.3e [ 490.304567][ T8702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.304787][ T8702] usb 3-1: Product: syz [ 490.304896][ T8702] usb 3-1: Manufacturer: syz [ 490.305002][ T8702] usb 3-1: SerialNumber: syz [ 490.309478][ T8702] usb 3-1: config 0 descriptor?? [ 490.353098][ T8702] usb 3-1: unknown interface protocol 0x11, assuming v1 [ 490.353289][ T8702] usb 3-1: 0:2 : does not exist [ 490.557135][ T8702] usb 3-1: USB disconnect, device number 8 18:43:16 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) exit_group(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r4 = getpid() sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_PROTO_DOWN={0x5}]}, 0x30}}, 0x0) sched_rr_get_interval(r4, &(0x7f0000000000)) 18:43:16 executing program 1: r0 = openat$mice(0xffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x280102) write$P9_RREAD(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="b8000000750100ad000000951eab53698033369b0a418fb12812c5eccde0bc4ae7fe0de9d72dd27647311caf140091f2944c785da4621257969994df158a0c6022d953457a400b09bd4e3f07a102a3051d0d1fb744aa93ef06a9d29af441262c60712bb215921ac30202a681c12e3cf0f8195ffba33f2941e9fce62567b6c4a0521f5f639db5cb8758278ddbaf82d5d1fe0507000000000000f0217053fde6028c0000ea2c028e75bc3249bf1b6e9474e300286390af95e923f8c960966df7f309a2891e28c6060000ca9059d8d066f8e4a2765fc8e6e09100f4"], 0xb8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r1, 0x0, r2, 0x0, 0xb8b, 0x0) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000280)="3a9e85d2bbe33c4393bef369ebf95b7466e9fc22426e3f432bec5343140a26c517561d84416f593281ac84514db845b0829aa06b4945420ee63a553a769e04bc80f543317564550365374005a64fa58c9de1d94d75d6ff7a309f93df1d4dec754107c95261c7efc3b63a06bffff889b561b4850d97d3f6612a36e708885435ed9ea32d825b0d31ec0360f442ff5607154737") io_uring_setup(0x3578, &(0x7f0000000100)={0x0, 0x8f07, 0x2, 0x3, 0x289}) ioctl$USBDEVFS_RESET(r0, 0x5514) syz_read_part_table(0x0, 0x2, &(0x7f0000000180)=[{0x0, 0x0, 0x3}, {&(0x7f0000000000)="b40b558c73b12021c4a20c6ce35e679fe154eba1724a094b482479b0a42fb7d42383492ee9534073c4059fd8f83023e415735d920aa7d55a9309a57f9b58cf8eefbb1a539a3b4058085c670a73d1ec99d9cdf34ad89e94ae852a78632c6275d7f224bffccaa29f986497b9a5f67c12f4da116f2a8b77f5cf4e561c732a8c87159363a49207a5a48aebc8bdc479dbad494d91992a717be6f7fffd113eaea0aff5d988d136e51135a23883d55f97af332880f4e0dc9fa5", 0xb6}]) [ 492.096482][ T9960] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 492.134001][ T9960] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. 18:43:17 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x2, 0x400, 0xc, 0x82}, 0x40) r1 = gettid() ioprio_get$pid(0x3, r1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)="9e4d658ef567e97ace8c2487a815abca0593abfa2103e1595467f7c6ea84c9520606ebc458c4c40d88c08b", &(0x7f0000000080)="2c4741ad512c223db16a50639f1e53c8a7b93352add23dd00eb802abf8dc4300e872538eaca0adba4a7b0515a1e26a42cb7bf701c7bcc496400d380115d683e46e8f1ac75d1d1dcd446e6a698d2fadcf1a689dccdc675c38e0a802c962c5b596b66645505b36", 0x1081, r0}, 0x38) 18:43:17 executing program 2: write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002e00000035000000080001030000000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x9, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x74) 18:43:18 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) r1 = socket$inet(0xa, 0x1, 0x84) listen(r1, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 18:43:18 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000040)={0xd29bcd7b81440f24, 0x0, 0x101, 0x1, {0x200, 0x7ff, 0xb2, 0x7a0}}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) [ 493.318435][ T9959] IPVS: ftp: loaded support on port[0] = 21 [ 494.572067][ T9959] chnl_net:caif_netlink_parms(): no params data found [ 494.801177][ T9959] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.801371][ T9959] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.805632][ T9959] device bridge_slave_0 entered promiscuous mode [ 494.817320][ T9959] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.817511][ T9959] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.819981][ T9959] device bridge_slave_1 entered promiscuous mode [ 494.914719][ T9959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.924637][ T9959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.970644][ T9959] team0: Port device team_slave_0 added [ 494.986266][ T9959] team0: Port device team_slave_1 added [ 495.046852][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.046929][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.046964][ T9959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.052966][ T9959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.122723][ T9959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.122759][ T9959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.208482][ T9959] device hsr_slave_0 entered promiscuous mode [ 495.217211][ T9959] device hsr_slave_1 entered promiscuous mode [ 495.219649][ T9959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.219674][ T9959] Cannot create hsr debugfs directory [ 495.250544][ T8702] Bluetooth: hci3: command 0x0409 tx timeout 18:43:20 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:43:20 executing program 2: r0 = socket$kcm(0xa, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r1, 0x0, r2, 0x0, 0xb8b, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000000)={0x81, 0x4, [0x3f]}) sendmsg(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="de25257e5353cecd5ab0cd9e"], 0x10}, 0x0) 18:43:20 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{}]}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000004000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000004040)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r1}, 0xc) add_key(&(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) [ 495.864432][ T9959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 495.941020][ T9959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 496.009325][ T9959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 496.079439][ T9959] netdevsim netdevsim3 netdevsim3: renamed from eth3 18:43:22 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x74) 18:43:22 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@getrule={0x14, 0x22, 0x400, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x14}}, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000000)=""/166) [ 497.067787][ T9959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.188821][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 497.190571][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 497.235650][ T9959] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.291309][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 497.293598][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 497.294887][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.295065][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.305302][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.322933][ T8702] Bluetooth: hci3: command 0x041b tx timeout [ 497.365645][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.367527][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.368851][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.369019][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.423379][T10240] IPVS: ftp: loaded support on port[0] = 21 [ 497.430327][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.478226][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.531154][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.534038][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.542258][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.715329][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.717957][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.864336][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.866269][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.897196][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.899114][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.967229][ T9959] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 498.134628][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.135004][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.199013][ T9959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.365382][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 498.367341][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.541415][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 498.544044][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.547153][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 498.549061][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 498.616760][ T9959] device veth0_vlan entered promiscuous mode [ 498.679009][ T9959] device veth1_vlan entered promiscuous mode [ 499.031759][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 499.034915][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 499.036912][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 499.038926][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 499.072290][ T9959] device veth0_macvtap entered promiscuous mode [ 499.145384][ T9959] device veth1_macvtap entered promiscuous mode [ 499.307614][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 499.307644][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.307692][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 499.307717][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.307765][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 499.307791][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.312451][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.315515][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 499.317881][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 499.320025][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 499.322123][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 499.382938][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 499.382968][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.383016][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 499.383042][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.383093][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 499.383119][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.387690][ T9959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.390925][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 499.393789][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 499.397498][ T8702] Bluetooth: hci3: command 0x040f tx timeout [ 500.221766][T10240] IPVS: ftp: loaded support on port[0] = 21 [ 500.731085][ T1276] tipc: TX() has been purged, node left! [ 501.479460][ T5] Bluetooth: hci3: command 0x0419 tx timeout 18:43:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x7, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bond_slave_1\x00', @local}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpgid(0x0) ptrace$getenv(0x4201, r2, 0x58, &(0x7f0000000040)) 18:43:26 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff}) sendmsg$AUDIT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x20, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x4040000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:43:27 executing program 1: socketpair(0x27, 0x2, 0x3ff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x48000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x100}, 0x10}, 0x78) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) [ 502.083588][ T8684] usb 3-1: new high-speed USB device number 9 using dummy_hcd 18:43:27 executing program 3: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="240000005200070400fffd946f6105311c0000040000000077000000421ba3a20400ff", 0x23}], 0x35}, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x1, 0x0, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r1}, &(0x7f0000000300)) r2 = openat$proc_capi20ncci(0xffffff9c, 0x0, 0x480, 0x0) fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x6, 0x1, 0x80, 0x3f, 0x0, 0x8, 0x11017, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x1, 0x3f}, 0x4000, 0x9, 0x1, 0x4, 0x2, 0x6, 0x87}, r1, 0xe, r2, 0x9) r3 = open(&(0x7f0000000080)='./bus\x00', 0x325802, 0x0) fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f00000001c0)='P\xc4\x8fy\xa0\xfeV\x18y\xce\xeeV\xee\xc9]C\xccZ\x13+\x92\x1f\x14\x16Gk\xfc\x0e,!\x10U\x12\x00\xd1H\x03T\xfa\xfcJNH\x0e\xde\x96\xa8\xa1\xe0\xd7\x01\xe6\'\xcd\x05\x00\x00\xf9\x1c9D\xcc\xed__\xe7\xed.<\xd0\x0e\xc1P\xe1\xf9\xf9\x89\xc2\xe0q>\r\xd8\x8d@\x02\xc4\x95\xa3\xa9C\x0fn&q\x16\x94\x01\n\xd6\xdc\x02I\xd4W\x8e\xc0\x9c0\x87\xb4\xe2:\xa1\xc7\xc0\x05I\xab>\x8e\xbc\xe2\xdbH|\xdex\xbd\xb5\xc0M\"\xb7=\x8c\xcdJGs\xd1\t8\x8eQ', 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0xc840) ftruncate(0xffffffffffffffff, 0x7fff) dup2(0xffffffffffffffff, r4) [ 502.333059][ T8684] usb 3-1: Using ep0 maxpacket: 16 [ 502.454028][ T8684] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 18:43:27 executing program 1: r0 = socket(0x2, 0x6, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r5 = getpid() sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_PROTO_DOWN={0x5}]}, 0x30}}, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000100)={0x2, 0x3, 0x9, 0x7f, r5}) connect$caif(r0, &(0x7f0000000000)=@dbg={0x2}, 0x18) r6 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x64, 0x40800) ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f00000000c0)={0x5, 0x5, 0x80000000, 0x4}) ppoll(&(0x7f00000028c0)=[{r1}], 0x1, &(0x7f0000002900), 0x0, 0x0) [ 502.454198][ T8684] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 502.454322][ T8684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.458339][ T8684] usb 3-1: config 0 descriptor?? [ 502.501284][ T8684] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 502.697823][ T8684] usb 3-1: USB disconnect, device number 9 [ 502.944187][T10324] IPVS: ftp: loaded support on port[0] = 21 [ 503.042335][ T28] audit: type=1400 audit(1599245008.132:11): avc: denied { create } for pid=10328 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 503.212214][ T28] audit: type=1400 audit(1599245008.302:12): avc: denied { name_connect } for pid=10328 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 503.257480][T10329] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 503.294690][ T8684] usb 3-1: new high-speed USB device number 10 using dummy_hcd 18:43:28 executing program 3: sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000225c87000fddbdf2505000000080007006401010208000c0003000000e8a329fc6816faad350b389440936478a3e1b6f2ee3b0cd80fd50ac4c0"], 0x24}}, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r1, &(0x7f0000000340)=ANY=[], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) [ 503.382876][T10349] IPVS: ftp: loaded support on port[0] = 21 [ 503.438562][T10342] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 503.532907][ T8684] usb 3-1: Using ep0 maxpacket: 32 18:43:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0xb) write$cgroup_int(r1, &(0x7f0000000280)=0x5, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r5, 0x0, r6, 0x0, 0xb8b, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0xc028660f, &(0x7f00000005c0)=0x7) r7 = accept4$x25(r3, 0x0, &(0x7f0000000000), 0x0) fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) [ 503.674303][ T8684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.674436][ T8684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.674605][ T8684] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04 [ 503.674727][ T8684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.684638][ T8684] usb 3-1: config 0 descriptor?? [ 503.724808][ T8684] hub 3-1:0.0: USB hub found [ 503.915328][ T1276] tipc: TX() has been purged, node left! [ 503.933405][ T8684] hub 3-1:0.0: 1 port detected [ 504.597697][ T8705] hub 3-1:0.0: activate --> -90 [ 504.937801][ T28] audit: type=1800 audit(1599245010.032:13): pid=10381 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=15823 res=0 [ 505.462865][ T8684] usb 3-1: USB disconnect, device number 10 [ 505.473449][ T8705] usb 3-1-port1: cannot reset (err = -71) [ 505.474295][ T8705] usb 3-1-port1: attempt power cycle 18:43:31 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:43:31 executing program 3: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000314af000314000e000000ffffffa50000000000000000000500000000204200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000040)=""/55, &(0x7f0000000140)=0x37) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfff, 0x1]}, 0x8, 0x100000) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f00000000c0)={0x7e, "a1db9e9ee486a5b96ac32ca63fde157c64224bab7f43e65c24ccbc0825227fb6", 0x2, 0x1, 0x5, 0x8, 0x2, 0x2, 0x0, 0x66}) 18:43:31 executing program 1: unshare(0x2000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, [0x2e]}, 0x40) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000200)=';\x98\xce\x95\xc0\xc4]aeiX\xa7\xab\x1a=f|\x02\x00'/29, 0x4) splice(r1, 0x0, r3, 0x0, 0xb8b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', r0}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r4, 0x0, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000140)={0x4, [0x7fff, 0x20, 0x1, 0x3]}, &(0x7f0000000180)=0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) [ 506.372893][ T8684] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 506.505673][T10401] ldm_validate_privheads(): Disk read failed. [ 506.512016][T10401] loop3: p1 < > p2 [ 506.516139][T10401] loop3: partition table partially beyond EOD, truncated [ 506.524002][T10401] loop3: p1 start 335741103 is beyond EOD, truncated [ 506.530749][T10401] loop3: p2 size 327680 extends beyond EOD, truncated [ 506.614144][ T8684] usb 3-1: Using ep0 maxpacket: 16 18:43:32 executing program 2: syz_usb_connect(0x0, 0x661, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000839f7220cd060701c1010000000109024f060100004000090458001081a2a80009050b0040087f0501c4213495ac173dba2f0ab3ab5b6af39ac53fa4370bb35cdc3d1485fda37e5d2488e46504024247659d7e920af620c8fe4e9e0550debbbfba337f87e35b76f0c35701957a6a8ff7c0b235c92b352d2849068fba9acd648affcae32e25f03393976f2669d9f334d01ecf11c139e1ebca1575f3f9802c64ac17af49439ad76ac7f8fc346f897f65c47f64ea60b9ebb43609fc17055ad0f7b308c3ca4ab13b4b7c73777ecc2c0e50697f12fa0cfad44eeaee9da9d71386fc51ae52745d3a7624afdf1099c71d090501"], 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r1, 0x0, r2, 0x0, 0xb8b, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f00000000c0)) 18:43:32 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0x8010500c, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f00000001c0)=0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$vcsu(&(0x7f0000000200)='/dev/vcsu#\x00', 0x9, 0x501000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r4, &(0x7f0000000240)="ac29bd17ebe11dd2778dfc53f7a9e74fd9157dc2afb161f8413497f013a1bed61b8f1fbe96b62fed3fb04e7240d0b7ea4f7076a11cef318fc7426b8d34b952a94342b4f8052242434bc0905f768a8ffee5772956f8fecfe6e79c25a9a36ebdc4c3988f5cc75fef982725e824a5e57c6f0e9dc99fe9a64f0565bfd968ddb71c62fc15dc8f63", &(0x7f0000000300)=""/177, 0x4}, 0x1c) readv(r0, &(0x7f0000001440)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f0000000180)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000000)="d7", 0xfffffffffffffec9, 0x40001, 0x0, 0x0) splice(r3, 0x0, r1, 0x0, 0x11000, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000140)) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000400), &(0x7f0000001480)=0x4) [ 506.953076][ T8684] usb 3-1: unable to read config index 0 descriptor/all [ 506.953230][ T8684] usb 3-1: can't read configurations, error -71 18:43:32 executing program 1: r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000939a12407d04015060b30000871173a120adc83500000009043bb83ff218a149d5e997b2170f7270d714bc74b8f157560791e6917288fcb1b8ea890a3aa00e01f67bd89ca9f23c58c46ca300000000"], 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000000)={0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000140)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000040)) 18:43:33 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r1, 0x0, r2, 0x0, 0xb8b, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000980)=0x1d) pread64(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b31, &(0x7f0000000040)) write$binfmt_aout(r3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x91c) [ 507.845434][ T8684] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 507.902858][ T3744] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 508.102872][ T8684] usb 3-1: Using ep0 maxpacket: 32 [ 508.183793][ T3744] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 508.226141][ T8684] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 508.226267][ T8684] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.226382][ T8684] usb 3-1: config 0 has no interface number 0 [ 508.226528][ T8684] usb 3-1: config 0 interface 88 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 508.226672][ T8684] usb 3-1: config 0 interface 88 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 508.226839][ T8684] usb 3-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.c1 [ 508.226963][ T8684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.234516][ T8684] usb 3-1: config 0 descriptor?? [ 508.292144][ T8684] keyspan 3-1:0.88: Keyspan 1 port adapter converter detected [ 508.292417][ T8684] keyspan 3-1:0.88: found no endpoint descriptor for endpoint 84 [ 508.294710][ T8684] keyspan 3-1:0.88: found no endpoint descriptor for endpoint 81 [ 508.295041][ T8684] keyspan 3-1:0.88: found no endpoint descriptor for endpoint 82 [ 508.295380][ T8684] keyspan 3-1:0.88: unsupported endpoint type 0 [ 508.295714][ T8684] keyspan 3-1:0.88: found no endpoint descriptor for endpoint 2 [ 508.296054][ T8684] keyspan 3-1:0.88: found no endpoint descriptor for endpoint 83 [ 508.296397][ T8684] keyspan 3-1:0.88: found no endpoint descriptor for endpoint 3 [ 508.304379][ T3744] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 508.304510][ T3744] usb 2-1: can't read configurations, error -61 [ 508.306956][ T8684] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 508.452856][ T3744] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 508.491953][T10417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10417 comm=syz-executor.2 [ 508.853836][ T3744] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 508.975143][ T3744] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 508.975278][ T3744] usb 2-1: can't read configurations, error -61 [ 508.975928][ T3744] usb usb2-port1: attempt power cycle 18:43:34 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0xae, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000102505a1a44000fa02030109029c0002010000000904000001020d0000052406000105240000000d240f0100000000000001000006241a00100004240206152412ca06a317a88b045e4f01a607c0ffcb7e392a07180a001f31010c241b00020600050940000408240b080009ffff0c241bff00ff00007f070006090581030800040000090401"], 0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x1f1) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x1d, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e20, 0x4, 'wrr\x00', 0x34, 0xd85e, 0x73}, 0x2c) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0x10) r3 = openat$vimc0(0xffffff9c, &(0x7f00000000c0)='/dev/video0\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) [ 509.683068][ T3744] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 509.814516][ T3744] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 509.934110][ T3744] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 509.934240][ T3744] usb 2-1: can't read configurations, error -61 [ 510.085080][ T3744] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 510.174335][ T8704] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 510.214140][ T3744] usb 2-1: too many configurations: 17, using maximum allowed: 8 18:43:35 executing program 2: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0xbe, 0xfe, 0xcd, 0x40, 0x4348, 0x5523, 0xfcfd, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfb, 0xd, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="008a81"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_getaffinity(0x0, 0x8, &(0x7f00000000c0)) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x1ff) [ 510.343503][ T3744] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 510.343648][ T3744] usb 2-1: can't read configurations, error -61 [ 510.363528][ T3744] usb usb2-port1: unable to enumerate USB device [ 510.415417][ T8704] usb 4-1: Using ep0 maxpacket: 16 [ 510.428477][ T5] usb 3-1: USB disconnect, device number 16 [ 510.490280][ T5] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 510.528401][ T5] keyspan 3-1:0.88: device disconnected [ 510.564141][ T8704] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 18:43:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x317cb3b, 0x0, 0x400}, 0x40) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000013000)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'gre0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$P9_RLERRORu(r1, &(0x7f0000000100)={0xe, 0x7, 0x2, {{0x1, '-'}, 0xfffffffd}}, 0xe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r2, 0x4b31, &(0x7f0000000040)) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000080)) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000000)={0x60c, 0x200, 0x1, 0x80, 0x0, [0x8, 0x100, 0x5, 0xfffffffc]}) [ 510.733835][ T8704] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 510.733965][ T8704] usb 4-1: New USB device strings: Mfr=250, Product=2, SerialNumber=3 [ 510.734144][ T8704] usb 4-1: Product: syz [ 510.734254][ T8704] usb 4-1: Manufacturer: syz [ 510.734363][ T8704] usb 4-1: SerialNumber: syz [ 510.778105][ T8704] cdc_ncm 4-1:1.0: skipping garbage [ 510.778292][ T8704] usb 4-1: selecting invalid altsetting 1 [ 511.183001][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 511.234685][ T8704] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 511.234924][ T8704] cdc_ncm 4-1:1.0: bind() failure [ 511.263596][ T8704] usb 4-1: USB disconnect, device number 2 18:43:36 executing program 1: ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x0, @remote}, {}, {0x2, 0x0, @private}}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000010580413500000000000010902240001000000000904000049030000000921000ca40122dc0109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0010b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@int=0x2482, 0x4) [ 511.573798][ T27] usb 3-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 511.573928][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.579169][ T27] usb 3-1: config 0 descriptor?? [ 511.616820][ T27] ch341 3-1:0.0: ch341-uart converter detected [ 512.003036][ T8702] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 512.033617][ T27] usb 3-1: failed to send control message: -71 [ 512.034048][ T27] ch341-uart: probe of ttyUSB0 failed with error -71 [ 512.041856][ T27] usb 3-1: USB disconnect, device number 17 [ 512.044907][ T27] ch341 3-1:0.0: device disconnected [ 512.063920][ T8684] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 512.243450][ T8702] usb 4-1: Using ep0 maxpacket: 16 [ 512.303246][ T8684] usb 2-1: Using ep0 maxpacket: 16 [ 512.363817][ T8702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.463244][ T8684] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 512.463397][ T8684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.463537][ T8684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.463687][ T8684] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 18:43:38 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000002c40)={{0x12, 0x1, 0x0, 0x37, 0x6f, 0x39, 0x8, 0x50c1, 0x7fe3, 0x8f3d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x3, 0x50}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121a02, 0x1a) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x2, 0x4) [ 512.463862][ T8684] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 512.463986][ T8684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.467939][ T8684] usb 2-1: config 0 descriptor?? [ 512.526227][ T8702] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 512.526357][ T8702] usb 4-1: New USB device strings: Mfr=250, Product=2, SerialNumber=3 [ 512.526462][ T8702] usb 4-1: Product: syz [ 512.526565][ T8702] usb 4-1: Manufacturer: syz [ 512.526670][ T8702] usb 4-1: SerialNumber: syz [ 512.569959][ T8702] cdc_ncm 4-1:1.0: skipping garbage [ 512.570145][ T8702] usb 4-1: selecting invalid altsetting 1 [ 512.825044][ T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 513.025634][ T8702] cdc_ncm 4-1:1.0: bind() failure [ 513.075628][ T8702] usb 4-1: USB disconnect, device number 3 [ 513.091057][ T8684] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0004/input/input8 [ 513.177349][ T8684] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0004/input/input9 [ 513.226758][ T27] usb 3-1: New USB device found, idVendor=4348, idProduct=5523, bcdDevice=fc.fd [ 513.298862][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.337707][ T8684] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID vc.00 Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 513.347717][ T8684] usb 2-1: USB disconnect, device number 18 [ 513.545422][ T27] usb 3-1: config 0 descriptor?? [ 513.586743][ T27] ch341 3-1:0.0: ch341-uart converter detected [ 513.813164][ T8702] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 513.993489][ T8684] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 514.052956][ T8702] usb 4-1: Using ep0 maxpacket: 8 [ 514.133150][ T27] usb 3-1: failed to send control message: -71 [ 514.133562][ T27] ch341-uart: probe of ttyUSB0 failed with error -71 [ 514.142914][ T27] usb 3-1: USB disconnect, device number 18 [ 514.146171][ T27] ch341 3-1:0.0: device disconnected [ 514.175321][ T8702] usb 4-1: New USB device found, idVendor=50c1, idProduct=7fe3, bcdDevice=8f.3d [ 514.175446][ T8702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.179934][ T8702] usb 4-1: config 0 descriptor?? [ 514.217686][ T8702] usb-storage 4-1:0.0: USB Mass Storage device detected [ 514.424549][ T8702] usb 4-1: USB disconnect, device number 4 18:43:40 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:43:40 executing program 2: openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f00000000c0)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000280)={'syz0', "385e013e905efb2541cbea041f1045e8780497091408bb00000000337c77e9f5c5f90e4fcdc34b9cd521630d31812cfcc785ae843510c07767ea65bb281e9f3aef80a2c962d6cb82bb6392a5458f3592614f554ed89cedacf255691381000000000000001f4efe212851896ef840f9082cf084053b4b858055f0d9dccea87f250f2eef5233a5967bc1350000000000"}, 0x93) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000240)={[], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}, 0x38}]}) 18:43:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b31, &(0x7f0000000040)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') r5 = openat$btrfs_control(0xffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0x88200, 0x0) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x3c, r4, 0x7, 0x0, 0x0, {0x2, 0x3}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r4, 0x800, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$PIO_FONT(r1, 0x4b31, &(0x7f0000000040)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0x1, &(0x7f0000000000), &(0x7f0000000140)=""/234}, 0x1c) r6 = syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16=r0, @ANYBLOB="43f2c6e9496dad0d16c0fc29b17cf6a9fb611491d0e108651ffc2f4593149eadc8df55948535f956f1939f9334ce640bc426ced2fffeb231e0812a0dc74a670f859b2c352c66d76533d12e1af2d0713cc67df1cc7dab471dc89ff2ea0dfb6200699a6789f25641a93c766800756edfdbef5bdaaf473f1e", @ANYBLOB="958fd672a8a5", @ANYRES64=r1, @ANYRESDEC=r1], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) [ 515.213252][ T8704] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 515.455998][ T8704] usb 4-1: Using ep0 maxpacket: 8 [ 515.517563][T10572] ISOFS: Unable to identify CD-ROM format. [ 515.574135][ T8704] usb 4-1: New USB device found, idVendor=50c1, idProduct=7fe3, bcdDevice=8f.3d [ 515.574257][ T8704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.578564][ T8704] usb 4-1: config 0 descriptor?? [ 515.617158][ T8704] usb-storage 4-1:0.0: USB Mass Storage device detected [ 515.847364][ T8704] usb 4-1: USB disconnect, device number 5 18:43:41 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000200000000001000"}) r2 = syz_open_pts(r1, 0x4000000040042) r3 = fcntl$dupfd(r1, 0x0, r2) dup3(r2, r1, 0x0) write(r1, &(0x7f0000000280)="84225af5012e10c806731d620b72cbbc030c5df6a9faf4a399637449e277aee80d8c6b2ec451e77e322fc8b2ab92a0e47c4d00"/64, 0xfffffffffffffe8c) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x5) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x381000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040), 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000001340)={@in6={{0xa, 0x4e23, 0x80000000, @loopback, 0x6}}, 0x0, 0x0, 0x1d, 0x0, "256c6f3de7dcd0e1233d418a30d3e716d024d005663808d76ac0f4d4118d1f36250b2ebf7f9d5c596dd3b48602cc5a1c60c2a7e2fecc35351bc1d25eb4351b214002242d0b8c0d0ef270390be30b5339"}, 0xd8) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000340)={{r1}, r6, 0xc, @inherit={0x60, &(0x7f00000002c0)={0x1, 0x3, 0x5, 0x9, {0x10, 0x8, 0x3, 0x7, 0xff}, [0x5, 0xcf4, 0x7e]}}, @subvolid=0x1f}) tkill(r0, 0x16) 18:43:41 executing program 1: socket$kcm(0x10, 0x2, 0x4) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) ftruncate(r2, 0x200002) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) sendfile(r3, r2, 0x0, 0x1ff) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x800}, 0x8) sendfile(r4, r5, 0x0, 0x80001d00c0d0) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000140)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f00000000c0)=0x4, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x25}, 0x24040892) 18:43:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000000)={0x0, 0x0, 'client0\x00', 0xffffffff80000004, "499a42179430e41c", "698ccd3d7d36b0c39d4961c787dee57ebaec4593dab42614d39a591aac293c98", 0x6, 0xcaa}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010000104000040000000000000000000", @ANYRES32=0x0, @ANYRES32], 0x58}}, 0x0) [ 516.588738][T10598] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 516.616222][T10599] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. 18:43:42 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') exit_group(0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/109, 0x6d}], 0x1, 0x80000001, 0x0) 18:43:42 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r1 = openat$vcs(0xffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4000, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) 18:43:42 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_linger(r0, 0x1, 0x3e, &(0x7f0000000140), &(0x7f00000001c0)=0x8) r1 = openat$vcsu(0xffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x400, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xe795d) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000040)) [ 517.240651][ T28] audit: type=1800 audit(1599245022.332:14): pid=10593 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15831 res=0 18:43:42 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x113000, 0x0) mount(&(0x7f00000000c0)=ANY=[@ANYBLOB="2e2f66696c6571b0"], &(0x7f0000000080)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x10844ac, &(0x7f0000000200)={[{@nouser_xattr='nouser_xattr'}]}) [ 517.248652][ T28] audit: type=1800 audit(1599245022.332:15): pid=10597 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=15831 res=0 18:43:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000010000507000200000000003e40000000f3b60032aed6f46649ba051a4ab25b56cff76a53cb4d0b7fb9e6e17ab148664c4900b2f9193a903c5a56a3d45897c46d5c6ce8eac4e3", @ANYRES32=r2, @ANYBLOB="0100f0150100c1001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000380)=""/142, 0x8e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003040)=@ipv6_newaddr={0x54, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x9}, @IFA_LOCAL={0x14, 0x2, @private0}, @IFA_CACHEINFO={0x14}]}, 0x54}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f00000004c0)="ed07b766b6f2a7d439c7576cd7a7671520d8d931004f1beabc0354c6660a5459961eaba89584af3ce9390f9def4b9166d0c140c2dfd4adcf6c62c0f43eab4ffa1ac68837bbddd4cfa7b4530a03c09f73ae8e212536e8de35a2b8b23ee2b3223fa918064604eb8a8b8a7824e32c73a20d830805c1989a438a970a9f73c2bea7ee8845488466466944bba1602702561bb8117c08193c96eb29") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc04c565d, &(0x7f0000000440)={0x9c80, 0x2, 0x4, 0x400, 0x6, {}, {0x2, 0x0, 0x40, 0x20, 0x8, 0x22, "029a1490"}, 0x3, 0x0, @userptr=0x100, 0x2, 0x0, r5}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40086439, &(0x7f00000000c0)={0x1ff}) 18:43:43 executing program 3: r0 = socket$inet6(0x10, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000001c0)={0x5, 0x3, 0x1, {0x5, @win={{0x3f, 0x9, 0x5, 0x8}, 0x9, 0xaf0d, &(0x7f0000000340)={{0x40, 0x0, 0x9, 0x401}, &(0x7f0000000300)={{0x100, 0xed2f, 0x5, 0x7ffffffe}, &(0x7f00000002c0)={{0x2, 0x9, 0x3}}}}, 0x4, &(0x7f0000000380)="64387d416e23751ebaf1b98afe177ed68f684a14d562fa219e3547dc556a52b79970ed4cb8c1c102f30ae490772259ed1c2ec6b0de14ca277016e55401458e04c7ac5908aea1caf996b73fbf8a28365ce8e39ad646e7cba8f336ae4506529d92c6164f82d0d4d0e04be009f72d81532cb2c0731128bc2fc93db0e37a92a7f35aac737a782c53e8e3693a734021b3e4b9efb8cdd2cc3af2a676ef83ea82b45aa4a7fb1b78e77086aa440cedff941c55d30fd4d7ec471634fd9f98c954c693af6af2782c940328a13e36b9439e095e269b253a516f79", 0x3f}}, 0x3ff}) r1 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0xab0, 0x58a03) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000540)={0x7b, 0x0, [0x4, 0x4, 0x1, 0x100000000]}) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/166) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000019007faf37c083b2a4a280930a0003100002430900000069390009000800000001000000080005000000000025000000566342b80a009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000005c0)={0x0, 0x0}) getpgrp(r2) [ 518.467547][T10623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.482044][T10623] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 518.482080][T10623] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 518.532254][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 518.536933][T10625] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 518.536969][T10625] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 18:43:44 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:43:44 executing program 1: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0x8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f0000000100)='./bus\x00', &(0x7f0000000200)={{0x0, 0xea60}, {r2, r3/1000+10000}}, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x4010, 0x0, 0x0, 0x8, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x800, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x1a8) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r5, 0xc0305616, &(0x7f00000000c0)={0x0, {0x8, 0x1fe87706}}) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x124, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffcb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff1c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x761}]}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20084080}, 0x4000040) 18:43:44 executing program 3: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc63e}, 0x4a404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x22, 0x0, @thr={&(0x7f0000000380)="fe4764ee4d9df662e763c17af22dc59e51df3b1a84c82f7e7b7fc69363fc834c468c8bb5e5af466525ec5a2455252200ef9b021eda5e97ce72ac2f9399dacc821e38a2dcd2d2e32686039b6fc5ca0dc26bf61e6432a786e24185a2c8cefb63198ff0bcb4a003835047be110ef10c79e978dd8ce584999638ee4f9e2f025b8b06ac11435e4de22ceb6f0d4df1805ff2b467baf9fd90032a24aceedd497e2059bce49bf17be5ecbf4fed0ccb2fd8bb8585a8db9ffd4770d9ace8a3eb4395bb0bcd533a", &(0x7f0000000240)="e2c455924c44d56407db73ef975f7d753a620641743c1bad9be29e711904a45b7a7388cfe7bab4bff3c6c16a193daf7cade44bf52f35a1ce3fa9402951986bbcfe838b156c14ff75e703a29a404e8e415b6b30a42550712d9f78b3223c7f45f1ac7b100be4ec70d997c3fbadea0233d912a14d6ee4e60dd5686c8b828d93b6e591c241aeb11e5c713922df1209"}}, &(0x7f0000000040)) timer_getoverrun(0x0) set_mempolicy(0x4000, &(0x7f0000000200)=0x1, 0x3) keyctl$session_to_parent(0x12) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000540)={0x7, 0x8000, 0x10001, 0x18814d54}) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) r0 = getpid() openat$autofs(0xffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r1, 0x1, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) r2 = openat$vsock(0xffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x2, 0x0) ptrace$cont(0x20, r0, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$proc_mixer(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="53594e544820270300000000000000566f6c756d65272030303030303030303030303030303030303030300a494741494e202743442043617074757265272030303030303030303030303030303030303030300a564944454f0a4449474954414c320a50434d20274d6963204361707475726520537769746368272030303030303030303031303030303030303030300a"], 0x91) r4 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100)='net_prio.ifpriomap\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000140)={0x3, 0x6}) wait4(0x0, &(0x7f00000000c0), 0x40000009, &(0x7f0000000600)) 18:43:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='uid_map\x00') lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000240)={0x7fff, 0x9, 0x0, 'queue0\x00', 0xe2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c001a80080002800400018008001b0000000000ace65712c66b37757a6ed5383a2a9ba6", @ANYBLOB="edf25b257f9567934b654db22509d2ec48c15485b1b169111c1fe4f2dde4d6380cace907cddf49cf650eab2f3f50520a842fb234a9bb400335804fa4807654508cb66b4bbe505fb4c67539e11bbd49865f09dfec396fe66ee53029add92a91661a9a20674e1f56c071c8a9f61247923f2b86ce93ebf438f5c8844b7d6c7002a2ab6797da06f7462b5b51934275a17c1fb39c0345f023e54a208dfc4ac100a0b327cf51d77037253e15adf3673d26c606ecdbc64d5762c1b910e4d4e20e6e09b5e5d05040219542cd6fd0bd85644f7b2313bb351d55eefec73bdfa721f4fe0d1ee2b7771d75a48dc47bd05ba3334204702f5bb1bc4929", @ANYRES64], 0x34}}, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000001c0)=0x3, 0x4) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="c8"], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @local}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="81de27954adf74954a06863e8206298695c2f5c911a130e2a286b8baacd0519a64c5ae2e329bd397b8c44a5ade2f5b5374ce957b0862a53d311ec454661841d13b9d9f4e66cef086f0681d5bdabbb3c994f695f03409d6dc1f1295796295abd1c3c77ccdfc87748b92c578445c50ea30ee47fa0b720c774f1b552231cfd7577415a0b91daec410e758a62868de382aeae9452271e9ac5026a05705f1cef763005df36b13c772b697eb90c27b5ce56cb7830ce66103e91fd3e916bfdb46a2f7022ce14fe5f9e1f07cbedcefa1979a000b87d6c73b9be9041fdb30ddfb84698023d013dffa5ff4f7862d5bcde345d9d3f900"/250, @ANYRES32], 0x48}}, 0x0) r3 = semget(0x0, 0x0, 0x0) semctl$SEM_STAT_ANY(r3, 0x3, 0x14, &(0x7f00000000c0)=""/7) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) [ 519.901093][ T28] audit: type=1804 audit(1599245024.992:16): pid=10636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir736001439/syzkaller.djC12e/37/bus" dev="sda1" ino=15839 res=1 [ 519.958588][T10637] IPVS: ftp: loaded support on port[0] = 21 [ 520.017177][ T28] audit: type=1804 audit(1599245025.102:17): pid=10639 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir736001439/syzkaller.djC12e/37/bus" dev="sda1" ino=15839 res=1 [ 520.434799][ T28] audit: type=1804 audit(1599245025.172:18): pid=10636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir736001439/syzkaller.djC12e/37/bus" dev="sda1" ino=15839 res=1 [ 520.459403][ T28] audit: type=1804 audit(1599245025.192:19): pid=10636 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir736001439/syzkaller.djC12e/37/bus" dev="sda1" ino=15839 res=1 [ 520.483751][ T28] audit: type=1804 audit(1599245025.192:20): pid=10639 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir736001439/syzkaller.djC12e/37/bus" dev="sda1" ino=15839 res=1 [ 520.508557][ T28] audit: type=1804 audit(1599245025.212:21): pid=10639 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir736001439/syzkaller.djC12e/37/bus" dev="sda1" ino=15839 res=1 [ 520.533464][ T28] audit: type=1804 audit(1599245025.232:22): pid=10639 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir736001439/syzkaller.djC12e/37/bus" dev="sda1" ino=15839 res=1 18:43:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0x2}, 0x1c, 0x0}}], 0x2, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) 18:43:45 executing program 1: r0 = openat$null(0xffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x84001, 0x0) ioctl$NBD_DISCONNECT(r0, 0xab08) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x123002, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f00000000c0)) pipe(0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r5, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b0000001400020000000700060000000000000001"], 0x68}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000800) [ 520.763488][T10667] IPVS: ftp: loaded support on port[0] = 21 18:43:46 executing program 3: getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="3f00fd00e0bbb557f3b0b93742c379983fe48e8739ad15be3b6c4a12a38fa49a987fbd3c236bfa1c251b4a45bfe30f444dc5e314658f7c945fa4adbb2c9249dd44be32dc79b39812dda876840f3f971dd75e672624fe1584a53a"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000100), &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) [ 520.984175][T10674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 521.088859][T10674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10674 comm=syz-executor.1 [ 521.279632][T10679] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 521.321428][T10674] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10674 comm=syz-executor.1 18:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@ipv4_newroute={0x84, 0x18, 0x300, 0x70bd2c, 0x25dfdbfb, {0x2, 0x10, 0x10, 0xc6, 0xfe, 0x3, 0x0, 0x3}, [@RTA_FLOW={0x8, 0xb, 0x9}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3b}}, @RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_METRICS={0x3b, 0x8, 0x0, 0x1, "70d93588f1977b64c8e4948317051606a604cf620f30c3182fa977d908b1426a1c2bc913f56149eb9cf487ec934519a74a91540df6e7fd"}, @RTA_MULTIPATH={0xc, 0x9, {0x29, 0x1a, 0x40}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x0) 18:43:46 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_setup(0x76cd, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000), 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0x1}, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r3 = openat$mice(0xffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) io_uring_enter(r4, 0x2ff3, 0x11cb, 0x2, &(0x7f0000000100)={[0x6, 0x2]}, 0x8) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000000c0)={r2, 0x0, 0xfffff000, 0x100000000}) sendfile(r0, r2, &(0x7f0000000040)=0x100060, 0xffffa88f) [ 521.498800][T10706] NFS: mount program didn't pass remote address [ 521.509180][T10706] NFS: mount program didn't pass remote address 18:43:46 executing program 1: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x8001}, 0x4) openat$vcs(0xffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x10001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) openat$rdma_cm(0xffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 18:43:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x6, 0x10000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000001c0)={0x5, 0x83, &(0x7f0000000100)="c22dba0714bb8f1c7234426b7cfd528b9f5c302fd01a09394f2a30e7a62c1f0ca73b283e3873ace7675c2ff56fbef1bf74eab5fd52ea19eea44cfdc951b7d0932a9ada4c83f4a9b2e7a4620be01ff40c4876e796090b6755db4892210be522323a514cad7cb57fe45302fad1811116cf88b5178e626388444408ee3f5cb5137a13d928"}) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000000004000000000000005caab18aae67493158cf180a106ed25c6ab8a76db867e9cbf34035bad8957d0d7516ca9b733c3922cc4c70fdd2a74459cc1cfb4487c74b97f283c432d5751003e54b728727beb8393c59a68d3871360354e122368bed8d0724edb91c3fe02cf8"], 0x14}}, 0x0) 18:43:47 executing program 3: r0 = openat$vcsu(0xffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000340)={0x10201, 0x0, &(0x7f0000ffb000/0x4000)=nil}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9ea, 0x41) r1 = openat$bsg(0xffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x200, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x441142}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@flushpolicy={0x170, 0x1d, 0x102, 0x70bd27, 0x25dfdbfe, "", [@extra_flags={0x8, 0x18, 0x6d}, @migrate={0x134, 0x11, [{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2={0xfc, 0x2, [], 0x1}, @in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff, 0x0, 0x0, 0x3507, 0xa, 0x2}, {@in=@broadcast, @in=@local, @in=@multicast1, @in=@multicast2, 0x6c, 0x0, 0x0, 0x3507, 0xa, 0x2}, {@in6=@private2, @in6=@private1={0xfc, 0x1, [], 0x1}, @in6=@mcast2, @in6=@mcast2, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in=@multicast2, @in=@multicast2, @in=@multicast1, @in=@broadcast, 0x6c, 0x3, 0x0, 0x3503, 0xa, 0x2}]}, @etimer_thresh={0x8, 0xc, 0x8d}, @encap={0x1c, 0x4, {0x1, 0x4e24, 0x4e23, @in6=@private2={0xfc, 0x2, [], 0x1}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x40050}, 0x4008090) [ 523.183224][ T8684] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 523.463206][ T8684] usb 4-1: device descriptor read/64, error 18 [ 523.852768][ T8684] usb 4-1: device descriptor read/64, error 18 [ 524.132900][ T8684] usb 4-1: new high-speed USB device number 7 using dummy_hcd 18:43:49 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:43:49 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0405405, &(0x7f0000000040)={{0x2, 0x3, 0xd6d, 0x2, 0x1}, 0x7, 0x8, 0x7}) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x1}}, 0x40004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000000)=0x100, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff99) splice(r0, 0x0, r2, 0x0, 0x4000000000010003, 0x1) 18:43:49 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b6eee22fd5cd9a4afe52ce6c99eba02885f333b9a4d8065771a9fa3a927754cb699461fdb9bbd957cac3bb1465c683f9e09345a823da9d23907088c3ea8c3f7af8191e2098a37bf9eacefa48e74408ea2438e6fe99546eb058e720e19af443e17d01b03e9d5a8bb795abd520b9e3ef86d6", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getegid() r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000340)={0x0, @sco, @xdp={0x2c, 0x1, r3, 0x35}, @can, 0xa5, 0x0, 0x0, 0x0, 0x20, 0x0, 0x3, 0x0, 0xffff}) getsockopt$inet6_int(r4, 0x29, 0x8, 0x0, &(0x7f0000013000)) getsockopt(r4, 0x5, 0x3, &(0x7f0000000080)=""/109, &(0x7f0000000300)=0x6d) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f0007000500001a16445b", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x894, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x864, 0x2, [@TCA_FLOW_POLICE={0x860, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x748]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x3, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x81, 0x0, 0x0, 0x0, 0x0, 0xff}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f]}, @TCA_POLICE_RATE64={0xc}]}]}}]}, 0x894}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 18:43:49 executing program 4: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x800) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xbd, 0x410242) recvfrom$inet6(r1, &(0x7f0000000100)=""/155, 0x9b, 0x2000, &(0x7f00000001c0)={0xa, 0x4e20, 0x9, @mcast1, 0x4}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x101, 0x8000) recvfrom$rxrpc(r2, &(0x7f0000000240)=""/29, 0x1d, 0x40, &(0x7f0000000280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @loopback, 0x80000000}}, 0x24) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000003c0)={&(0x7f00000002c0)="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", 0xfd}) r3 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x4, 0x90001) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000440)) r4 = dup3(r0, r3, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000480)={0xfffffffb, 0x4af2, 0x4, 0xff, 0x3, 0x3}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f0000000500)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000700)={{0x0, 0x9, 0x80000001, 0x7, 0x7, 0x5, 0x5, 0xffff183e, 0xfffffffe, 0xffffff80, 0x7fffffff, 0x0, 0x2, 0x20, 0x1}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001700)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000002700)={0x0, 0x0, "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", "3c715a4cdfa0a7799b897fd9f20cd1eecff05ecb20794be6854c0acd5702013f7676aea9aea33a3e08de734ff0aa5e752fa0634843aa7149adc36bd759632b70e9b980a9538ac1907411f281d18d6720fce7a926851c84330d5da3cc6bb65955cf173abd9f0198b366d742f9ff9b0ad38771831e66982cc7db6eb35157846e7ebed1300e50bfb9ff96ad2350f22070c9b3747618b8191aaedf6286c9ba98ffec9a3745465eed094b16d5091c57e9f4ada783d9c3afb16abbf5e9a882db6ea487b95458048b3f6674a7b87ba121aded86df42d4cca88876dceb71f3c2c5d837c07606eda8beb14c687b078ff7a3c19237cc1cc553a24e002a805fb21cf396ae8e4916ada0de9c6a64d10afc832d3134cdefba08d62c5b8e8e97ce7a98376c2e275e21577a18c6ee6e3b9a37b16b78eb8c59f29a57a7bf40f5f567c0b2bf913d26046b7266ba79f4e719a1411a0ba0579ae52069a84e86b29fb4b98de092e2cfe693308e9a49f12087454d2004e0f2a6aa2a7afb22d2f9faca0a1031595454ac6ca17e528b38a753fdc6073278bda9cf38538bb74d731df95edc37f7ddf8c5e6fa95ef061004fe6455b89eab6fe40b465f83ed279ccb01d902e7a158c9a4061134b2ba3405c500b3efdf1bb4f9adda018ddf63c7ee9d2a56b817905d2825a0c36840063306e923ef4502a3e0e747223f14ffa5660047d25c99ff16936e7f229dbd15d1b928b75445984b4793de81e4cdf520ba2bb0629ead1a9fc17b05efc9428eabf3c836059ba73d445ee0a7ab104faa2674968dbc72575e8dce31f31e4b1b553270c6c0cd9bcd7a008f5b12c438c7d2591a63404dc834616063fc6550ed82930b406c4948f6ff4d2833937fec64d09ed6f1fbae1495d7a5d4501b7806e2321d20d924a9c60c3802a97e602204b2c9db0d05c69536aaf100c031df8bdce81ab9f2d3350bd835ae6d6fcfb8c96a60e6e3e23f168b2c893172b25b6a17253e601676beabc69e63b440da2a9b5765aeda99a535d99a9df1c88e5e936c0c7d1c59bf5e0f7118ad572aec653be14f49966977ddb61eeb2003d1cea8886d9b80470ed94c44ecc4ee511e736e0933eb5773cf4540ef9568d922103a82f3ca6f4c256c874a78bfb7f0c91254d21b629cb2dd4f21d080bf70bf7c7792af3720a680e3d1c6b0141d553f09dbd3661cc5d4b5b182e872f7c3690ecdc64edab2ac4fa972c711e907bb42ddb82c056b5de72a9784bb724e141699a5d684961ca3cccaec1a8c2fc02e6b14750204123f0c0287f0f26e8b0fba31cb6906022e6a69301fb342d9cd477f6b800f2a910aa1024ceb2c3483ffd95c7c83918bd46327fdaf4bab3a46791370d9607c4c1176bfd35f4b0acce88b9072e17dbf982ebf500c83efab121b7c17f8c11142f0ee8e96900c2ab64d55ad4b155de535a7b506245d18da153091fe66e3c623ea84588a6d54f851a6c7a691c673e1b7c6c8540615c7d3d7f269a881ff75f45a698d12ef5537ed78494db24bea11665de147822ae53044883c764590280487a994aec17a35901f68c8bff7d06c161565289ba2dbeaf98b45f6536e98b92b207bbd536611956e902d337668e7cc14b81ee18ad2ccc7e663d7f4d9136765164b1c354c14c8f5fd4b77db3cc5b3a456bb2887cd6191e0710021d20c47a0fbd67bfe67368002bec57bf5577b1433e8abc0b948448bf26e9e679dd8afc88f3f46a6c47990d9fd96ba7c9bb07bd91c6a0f1fedf554f1e5c7db4b662d3cea0964b51ba789f89bd83db02e88a275ee2882dd8ef7bb33f1afc0751ce913d00648808120361ae41525d5dc26823afb13733d7d6ff2ac1bf60be6d76b1e8f07dd1d4f7139801a7b092e30b01f3886cd024eb7d810924c321c7083c2446b94a30d115b5c2914b40c34e766c77f8d1ea6ed234647f0a7ac667d6902a32b9fafd798431558da04b6460f11e51ee5e3b8c698af884e94f99dcd8ee90560dddc529ffdb35f8bcba8e7f4dfa5e8298315b444fbe3e725870a98addfc4ff15a3cc5bac0375c7c1acfa3163a1c7ada645b5d255f4b998bf3f89cc2d855ab56a1424671f8cfd3aa3ee9d717549f64f55c9fe21932117a355df4b9bfe27f5a1638569b63caa994ad62495eff96731f2c9623c599cc8fac4958084ad8b2705416dd0e2ca7c4335a8ee5d9e214d3d93b10d60491d96cfe0a5fd05b2c1ef473c228428d2bc807527e416ddec3fbe92b6df462376ea78926e8f30eff918493a593ab4a0cb4aa149194678ea53833bc1b2018fecfab9ea505827b8425fbc6a1258457ea194bdafa454060c6ada2c05f0eabdfaf5d26656685fb6f70fa1cc0b4c24d8b8f5d84c614897257ca9fe87b0bde420f3d8272a05ebe8c4c6e8adef691ec4d52cb1c08cfad423e86ece1cb85a2715541e7e6c8b527d6f8cdd26d496d43e8bc138eb3c0841eeade5b93afcdd323f1bc94697489bd0065912f3c1cf28444211ddb32cbdd834fa872dee721498b0c71df3ecdb60a67bef4ff006feab62518a48a2f2eb3548a03cc4d03f94e8bb2e8ee5cbbd62275ddfaf2be169a7a6e2ac3fab3119aa38f8e5250f264bc27f439aecdef79f20d84e969ce0370304d24031a459922aad50b3d482f723abd878f1b321770a693c424038c9cbf6d570a68674ea82281d78ffcac033d0d948ef5d44d18fe7356c01db90d123e2d176ff17f52311d7c2291885d94373b8d1f0772a1cd5397dd4f8f07ba54eaf0070360ff630a32040a6645f6dca37174644eeda9db92351858c55b9d067791d1a6ad9157b8235c429b87fbe2e43249693c867e1dd1ba6e624a9a61ba403a0f076fc7ab3d8c96b1b457ba623eae7988366e4de9ba9c307ea2a3a60c9e101d318e1acb5f90ac17774c63296b8360ca9f1b7109c01300e041838eee8a7bd8a3d5ad5830fc860154189434fdfe2ca47eadceacfd006191b2ca38f01fb18cccc19fcc96406975d7d6b908d417c09d615f82fe7b65c98f4cba7629623f56706ec7bce468ca430850419b963e5da4b06be836e72b9547392f3c4079c8f8867969599a0d8cedffab04c8b0eb26c5d3ebe5c05f907f9ae623ed587d9f01de59f03fd6cb202e9c0e99073562f743174c33b1cef68f6795a899231f25621d0925e18571a903eff874d9607cb7c96032de977800bcd2427d5b3418173208223ad522484ac844d8ad708ade868cabfdc9f7f68064b3816f3a6783a88874f3c3853cd4defd380482ccd8b8b13e2ccbf57ec2155dbd6f701507bd1b265e88cc8e5b10344898a197d94377198044d90d970da24b0fe78eb408ebe0ca692555c5289e6277d9b4d43efdd919f2e5e5e3d80422db8f001c6a12ab8d71a2f0e4488837a1cddaf5204471fedb507fb4556ef05880e2ab0a7293f9f85208cecb392fe84204802a9e56eae4fdb61fa563e327039b53ac15f7bbba8c724905e3d4b396906528c358c54f9e5310afd80a26f7ae16c1aca3552d87f63d5aec138da4494cd3ade6eb70373e6bb5fcbe9010f071c747e3f499128d88beb6a86eee4916896b3b10305097a49a3ee9e9a27eca964924ae2ab3c322b68f764553d0202248322e59fb7cd1b24b6b54ca94c029ca9dea9c7f6a097c098850719c536076a45af6467581511bd88cef9f162da65f754e729124548a4df47681f1de1e575148c3eea713a808c7f2850efeee7ba4197d612ae9ad7f8acd00f161eb328cd793a6336488878e00b0ebac41aa84ee0b1e1dca7820bba1a3353ea5944bc58bceee516005d8edeee30cbb4ed01ffc3ae4e80a22d3cd64d6403124a94c2587e20e27a1682e1c17134ce078d7978840dcdbbeddba8dcc7ab825b634a8584e09c8da3f24c4ad210046182d022cea6c6f07ade463df3fdf7b21529757686e15875b33e7bf4d30eb80406a7df27c27963b949809e311d7649200e41c4667f43aae74dfd66c2313e8267c74b3f30981afa4e152692767bb29617147a0837141eabc504d595ce9c34cb9888ffb018b21545184c849d72112bfb6b86fe883d949c1e18378da678c708ab36f29ac863f3ed6da8b9ed23fdf408a94ed9fff485738905e18d337c205d62ebd22ac6fac0e29766e0f659044d460208df640261ea90bc1bf8c9b26347c5344bf16b1e77dc7472c2508f2d86ea649037ffb913e0c92dd8428e82bbf513f8898e60348c80ad97d7b2360fc010d974c061049eedbf08541aa33de4e8ebfc20305f41c8600bb64fcda4ce51959f37a33ad899128c32784c0e464c1007cafacff28218fa18d35be4353133d6ae95ba2643486e3fc8065be26b408849a7bdea6a877c9bac44cd185f6574b5e5ce9fd53d12aa9d32fd9e17affbf0a80f4e01d60b48ed7485cb7d7b1ecf7e76ae05e49cea10b20be1192889a39e7fcb0631160508c4dcfe709079d2e0823bb83f24370b0a11ea577224c6315a5842aaaabb12a61fdaa7611bf424ab3abf3251e42adc5aca25588b6aeb5e7fc7fc5c9de7619fb4b2ae5a1df1218a2fe3811ef65ec1064b70d77994954b65e0fb9253a7c6a4bac4d5d6cab78b383b31b81cc0fcd01a9107c29261870c059b97cc4b0080af49234721fd38420fada78322fd6983eec6c4937f2ceb7a741b4a64fa0b2560bd37aca0953118c6c9de411f7a4bd1f49b91aaf736a540e61b0d62671d3db4511551c4179ce8b57c3d465680d467780e44378366c63132fff7108f539c40020259d71aeaa84d170c1f031f6cbe76ec6a86568bf5d302fb029efa41045d774431b52af9b8aba315b9b2c141eb020757c94ca562337c52e4eb4034f6f9158b6a88b5a6e768498c79b1a3b2545f4b55a658d13c318d59b6f1bcdb232c38cae685362679f8798e95bde08b1a0311940c14a92185d3b0dfad19e11c795f1fcc029a56840439cd531c0d6b2f5eae58cd683a0d95e9a1afcd7f24a4b780beafbabefd4e2f4c3aee69ad658c4e07c57e2e322bf6d9b4976a4929dd9c457197383f3ef53236520d89c7ca1d5798ecf7bed6bc5cb58e43221030cd30d2d9a9a86ef8bcd954b090a5a281c50575729cbbfa3fd073c311262a39d7feec536afc4eab9b77a45df62f33a4962573fb5f02c6df20400e5397f80fbd2481e62a99517b6b7a04c2fd7151515be7561bf61a7155263a8fab1be04ae420fcf4125481b91d2356438fa1700a8fccbbf8ee912f0d4d555e8a415056557b247af429abae42ca045b3bfdb6a7d2133cd6462a7687599f4b07485c333b0b16e28941a19ffab4a3a7af14d81bda378bdc75bbac8a71954c40a107bada7bbb1043de3e748090f68f09b01013e5c9a78fc08975e04099db2bf96fed0fe2780ca70413c239d077ad868d7b8bcf135878684918a446cebecfa07bba5e3453f43c9e7e61415fb3a2fdccf3502a6422594908f7e7fb84bc0a14da618ab8b8aa"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f0000003700)={0x10000, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xbf, "ea5b4114dbdb79"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000004700)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000004900)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000004b00)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000717c0)={0x1, [{}, {}, {r5}, {r6, r7}, {}, {r8}, {0x0, r9}, {}, {r10}, {r11}, {r12}], 0x40, "2210ad6b300730"}) [ 524.412833][ T8684] usb 4-1: device descriptor read/64, error 18 [ 524.825651][ T8684] usb 4-1: device descriptor read/64, error 18 18:43:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x8, 0x8, 0x1, 0x14, 0x0, "23b9f7729507f8958d15369a31e960e1b3d9b3", 0x9, 0x4}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0xffffffffffffffff, 0x111}}, 0x20) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 18:43:50 executing program 2: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff1000/0x4000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x61040, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000280)=[0x0, 0x4], 0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r2 = openat$cachefiles(0xffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x12640, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000080)) r3 = shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x3000) shmdt(r3) [ 524.943671][ T8684] usb usb4-port1: attempt power cycle 18:43:50 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r1, 0x0, r2, 0x0, 0xb8b, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000040)={0x5, 0x8, 0x10000}) eventfd(0x0) clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = fanotify_init(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000008, 0x80010, r4, 0x641) r5 = openat$dlm_monitor(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x484801, 0x0) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0xf92) mount$9p_fd(0x0, &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) [ 525.653177][ T8684] usb 4-1: new high-speed USB device number 8 using dummy_hcd 18:43:50 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x96}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="5400000010000fff2abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="98000000000000003400128008000100687372002800028008000200", @ANYRES32=r3, @ANYBLOB="0a0004000180c2000002000008000100", @ANYRES32=r8], 0x54}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f00000000c0), 0x492492492492627, 0x0) 18:43:51 executing program 1: r0 = open(&(0x7f0000000180)='./bus\x00', 0x141962, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x45, &(0x7f0000000100)="f576183f93980800a67be3fae7c15108c0d223ce93b640c9f110cf8b02a04dfa2432e207c2a7653bfc0cc3cd32f2565d501a39eeca67a5317bc8260ae919d3d2a361", 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000001380)=ANY=[], 0xfd14) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b31, &(0x7f0000000040)) mmap(&(0x7f00004eb000/0x3000)=nil, 0x3000, 0x8, 0x12, r3, 0x2edbf000) msync(&(0x7f00009ff000/0x1000)=nil, 0x1000, 0x5) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7}, 0xfdef) [ 525.943167][ T8684] usb 4-1: device descriptor read/8, error -71 [ 526.176150][ T8684] usb 4-1: device descriptor read/8, error -71 [ 526.225173][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.265691][T10774] device netdevsim0 entered promiscuous mode [ 526.291779][T10774] device netdevsim0 left promiscuous mode [ 526.443500][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 526.455145][T10783] device netdevsim0 entered promiscuous mode [ 526.499369][T10783] device netdevsim0 left promiscuous mode 18:43:51 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b0000001400020000000700060000000000000001"], 0x68}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="48000000900005070000080000000000000000007c2d03624538683f65effea3536c1e7e2acf31e56eb88c6830b957b27aee59d0110edcb999e5abd9c3", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r2, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b0000001400020000000700060000000000000001"], 0x68}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32=r5, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b0000001400020000000700060000000000000001"], 0x68}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000580)={0x9a8, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xd0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x882, 0x4, 0x0, 0xffffffff}, {0x8, 0x5, 0xfc, 0x6}, {0x1, 0x1, 0x4, 0x7fffffff}, {0x5, 0x7, 0x89, 0x76}, {0x3f, 0x0, 0x5d, 0x6}, {0x0, 0x5e, 0x7, 0x8}, {0x641, 0x3c, 0x2, 0x2}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x400, 0x2, 0x92, 0x3ff}, {0x2, 0x2, 0x5}, {0x4, 0xc3, 0x1, 0xffff35ee}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x210, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffc00}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3937}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xc844}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xb1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x57}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xdc37}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x9a8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4842) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mtu(r6, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet6(r6, &(0x7f00000095c0)=[{{&(0x7f0000000080)={0xa, 0xfff9, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000022c0)=[@dstopts_2292={{0x14}}], 0x14}}], 0x1, 0x0) 18:43:51 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000ad7535399cac8bc208f6ba2843bce582d60f6e6af2ef187ed8030e13d575f4f7509d76aba7e8e42188a84c9264a7af73c3f4cee96e9809c4c6d6f64d9303004b4b244eb0429a7ec0634fac0fdf23cd94f05b0ee92af4885cf252af482ab95178de23e71aec46e3af79284047a7a43f8a2812a08d7aef", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000004090001006866736300000000080002"], 0x38}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r4, 0x4b31, &(0x7f0000000040)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYBLOB="0000000000000000040000000a0001006261736963000000300002002c0002800800010024ae0000200002801c00010000000400000b000004000300040001"], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 526.917351][T10793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=10793 comm=syz-executor.2 [ 526.936754][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 527.028599][T10798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=144 sclass=netlink_route_socket pid=10798 comm=syz-executor.2 18:43:52 executing program 2: mknod(&(0x7f0000000200)='./bus\x00', 0x8808, 0x0) lsetxattr$security_capability(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000180)=@v3, 0x18, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x141042, 0x0) write$P9_ROPEN(r0, &(0x7f0000000040)={0x18}, 0x18) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x80}, {0xa, 0x4e22, 0x0, @empty, 0xff}, 0x1, [0x7, 0x6, 0x81, 0x4325, 0x800, 0x65f50cac, 0x3, 0x80]}, 0x5c) [ 527.031643][T10798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 527.273643][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.306600][T10771] IPVS: ftp: loaded support on port[0] = 21 [ 527.350453][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.380526][T10805] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 527.384629][T10809] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 528.609454][T10771] chnl_net:caif_netlink_parms(): no params data found [ 529.080561][T10771] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.080757][T10771] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.083807][T10771] device bridge_slave_0 entered promiscuous mode [ 529.119235][T10771] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.119432][T10771] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.122732][T10771] device bridge_slave_1 entered promiscuous mode [ 529.233012][ T3744] Bluetooth: hci4: command 0x0409 tx timeout [ 529.278577][T10771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.317814][T10771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.451208][T10771] team0: Port device team_slave_0 added [ 529.471478][T10771] team0: Port device team_slave_1 added [ 529.607853][T10771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.607930][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.607965][T10771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.613957][T10771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.614032][T10771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.614117][T10771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.788286][T10771] device hsr_slave_0 entered promiscuous mode [ 529.817377][T10771] device hsr_slave_1 entered promiscuous mode [ 530.015951][T10771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.015980][T10771] Cannot create hsr debugfs directory [ 530.877255][T10771] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 530.934930][T10771] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 530.975018][T10771] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 531.026023][T10771] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 531.312749][ T3744] Bluetooth: hci4: command 0x041b tx timeout [ 532.090023][T10771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.164703][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.166512][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.215438][T10771] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.247460][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.249274][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.250567][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.250744][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.307132][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.382904][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.393197][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.402712][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.409965][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state 18:43:57 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:43:57 executing program 3: futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) r0 = open(&(0x7f0000000780)='./bus\x00', 0x3c103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) pidfd_getfd(r1, r0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x4, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, r2+10000000}, {0x0, 0x9}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r3 = gettid() tkill(r3, 0x1000000000016) 18:43:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x64}}, 0x8000) [ 532.552079][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 532.564042][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 532.575210][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 532.586029][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 532.736397][T10771] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 532.747304][T10771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.763911][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 532.773949][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 532.784854][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.795753][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.805525][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.816190][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.826112][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.078807][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.080870][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.081264][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.203048][T10771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.394548][ T8702] Bluetooth: hci4: command 0x040f tx timeout [ 533.936939][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 533.938918][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.156375][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 534.158489][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 534.161542][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 534.164446][ T8684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 534.223750][T10771] device veth0_vlan entered promiscuous mode [ 534.310406][T10771] device veth1_vlan entered promiscuous mode [ 534.464333][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 534.466515][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 534.468542][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 534.470622][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 534.518502][T10771] device veth0_macvtap entered promiscuous mode [ 534.559522][T10771] device veth1_macvtap entered promiscuous mode [ 534.708358][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 534.708387][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.708437][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 534.708462][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.708510][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 534.708537][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.708585][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 534.708609][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.713834][T10771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.723710][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 534.725903][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 534.727977][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 534.730070][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 534.762227][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 534.885410][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.885478][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 534.885502][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.885561][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 534.885587][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.885647][T10771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 534.885672][T10771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.890348][T10771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.973092][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 534.975346][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 535.473592][ T8702] Bluetooth: hci4: command 0x0419 tx timeout 18:44:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="03000000000000fc08000a00", @ANYRES64=r0, @ANYBLOB="600012000c000100697036746e6c00005000020014000300ff010000000000000000000000000001080008003900000014000300feff00000000000000000000000000011400020000000000000000001f"], 0x88}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 18:44:00 executing program 2: syz_usb_connect(0x0, 0x7c, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000bccf7540310e187bda260000000109026a0001000000010904340000080662"], 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) 18:44:00 executing program 4: syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x4, 0x2}, @mss={0x2, 0x4}, @fastopen={0x22, 0x8, "2c326560060e"}, @fastopen={0x8, 0x12, "c7b6c56cd747eb6d6f2d3cde74680100"}, @mptcp=@capable={0x5, 0xc}, @fastopen={0x22, 0x5, "985f1d"}, @mptcp=@syn={0x1e, 0xc}]}}}}}}}, 0x0) r0 = openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000100), &(0x7f0000000340)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_DELRULE={0x58, 0x8, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x7c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0xc69d71fe8a09877c, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x17c}, 0x1, 0x0, 0x0, 0x4}, 0x4) 18:44:00 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x24a5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 18:44:01 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r0, 0x0, r1, 0x0, 0xb8b, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000040)={0x3, 0x7f, 0x4, {0x7, @pix_mp={0x4, 0x6, 0x31435641, 0x2, 0x5, [{0x3, 0x9a}, {0x75ec, 0x7}, {0x80, 0x9}, {0x0, 0x1}, {0x9b000000, 0x2}, {0x6, 0x1f}, {0x80000001, 0x80000000}, {0x0, 0xfffffffc}], 0x3, 0xea, 0x4, 0x0, 0x4}}, 0x7}) 18:44:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="24b68dc4f9ceef1b5d5044"], 0x1a) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e60482bb0b4179b3164", 0xff7c}], 0x1) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x40800, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) [ 536.483955][ T3744] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 536.844453][ T3744] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 536.844576][ T3744] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config 18:44:02 executing program 3: close(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fbb930102404009d490be8797d7df5dae54b01000000000904"], 0x0) [ 536.844684][ T3744] usb 3-1: config 0 has no interface number 0 [ 536.844851][ T3744] usb 3-1: New USB device found, idVendor=0e31, idProduct=7b18, bcdDevice=26.da [ 536.844966][ T3744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.850132][ T3744] usb 3-1: config 0 descriptor?? [ 537.090620][ T3744] usb 3-1: USB disconnect, device number 19 18:44:02 executing program 1: r0 = socket(0x1e, 0x1, 0x51) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x88a02, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x400, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080), 0x4) [ 537.832877][ T3744] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 537.863469][ T8704] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 538.082916][ T3744] usb 4-1: Using ep0 maxpacket: 16 [ 538.125503][ T3744] usb 4-1: too many configurations: 125, using maximum allowed: 8 18:44:03 executing program 4: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1800007, 0x11, r1, 0x0) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000240)='7', 0x1}]) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x6e00) [ 538.224411][ T8704] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 538.224533][ T8704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.224646][ T8704] usb 3-1: config 0 has no interface number 0 [ 538.224813][ T8704] usb 3-1: New USB device found, idVendor=0e31, idProduct=7b18, bcdDevice=26.da [ 538.224930][ T8704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.229148][ T8704] usb 3-1: config 0 descriptor?? [ 538.245932][ T3744] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 538.246065][ T3744] usb 4-1: can't read configurations, error -61 [ 538.394106][ T3744] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 538.488788][ T9023] usb 3-1: USB disconnect, device number 20 [ 538.632863][ T3744] usb 4-1: Using ep0 maxpacket: 16 [ 538.675745][ T3744] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 538.793902][ T3744] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 538.794034][ T3744] usb 4-1: can't read configurations, error -61 [ 538.794681][ T3744] usb usb4-port1: attempt power cycle 18:44:04 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:44:04 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x101205) write$binfmt_misc(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1a2) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x70, 0x6, 0x7, 0x7, 0x3f, 0x0, 0x2, 0x44c00, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x800}, 0xc0, 0x7, 0x1, 0x2, 0x3, 0x2, 0x29b}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000080)="240000001a005f0014f9f40700090400020020000000000000000000080002007f000001", 0x24) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x0, 0x8000, 0x2, 0xff3f, 0x1, 0x80, 0x9, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x0, 0x7fffffff, 0x4, 0x3}}, &(0x7f0000000140)=0xb0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000080)="240000001a005f0014f9f40700090400020020000000000000000000080002007f000001", 0x24) socket(0x10, 0x2, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="f8fbffff", @ANYRES16=0x0, @ANYBLOB="001705280c8409a89200000000007695683160c437a195199c76d82c86eb379036045d8606376b8c3325eb07550121727bdc048f165f74da33c3c69340f60acf844e61fbba4378668cbe9de31695efc9bae6a56153e94b2b0b68cd1853ff00000000000000b08e2b074575a4b8b25c6c9b992883b13a34e4956fadeffe769d9bf305000000fd5ca0586df2176a88d33f1c81d952601a7263da3006deffffc0e3c7abeaacc6acca1ad548d990ec2b8801bbba5cfe399df4d20ea62eee54996210385f483341b184"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) add_key(&(0x7f0000000940)='big_key\x00', 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 18:44:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000080001, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x1, 0x56]}, 0x8, 0x80000) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x1}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0a91fa36e69b"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x3a, 0x0, "576533cc427ffa2881196ddd1055a587055d982230567c9c1175147504e9198db7401cc111e19bec13657c507eb202454c0519c048a57356dc208842322890c716e448c19076928ab7feb4196cfa310e"}, 0xd8) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x6}, 0x8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040), 0x10) sendto$inet(r2, 0x0, 0x0, 0x20004779, &(0x7f0000e68000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendto$inet(r0, &(0x7f0000000180)="1b", 0x1, 0x8040, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x100, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xfffffffb, @dev={0xfe, 0x80, [], 0x1e}}, @in6={0xa, 0x4e22, 0x8, @remote}, @in6={0xa, 0x4e20, 0x6, @empty, 0x10001}, @in6={0xa, 0x4e22, 0x0, @remote, 0x9}, @in6={0xa, 0x4e24, 0x2, @mcast2, 0x8}, @in6={0xa, 0x4e24, 0x2000000, @private1, 0x7fff}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e21, 0x8, @private1, 0x1}, @in6={0xa, 0x4e23, 0x1ff, @local, 0x1}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000480)=0xc) close(r0) 18:44:04 executing program 4: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f00000001c0)="b42276deba6146429d1d33ec240e88fd484d6ee6e9944cedb94ee88ad4e9175ae09a7134bae37e4c1f37e4bb07e472c97355d1f146ece1fdd1b0609e592ac35deef1c577132ad66fae50577b0f3d7401e92b85edfce3e89e8d7cd43ff6bb5056401ab7e4384d311529035f3303c6ec7e168eae7fe4c68edc7226f49689dc620d71e936b2d8efae59843884636effbdb53c55c7e062359bc810d9cbd639e89e52c5eb797b5160dfd6ea22f79660f29ac9b5ae99739555ec7eff2acd39c99527ec1cbf0eef5e9cec0a17a35c36120a5cd2b0", 0xd1, 0x0, &(0x7f0000030ff0)={0x2, 0x4, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x44000, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r0, 0x1) r1 = socket(0x10, 0x3, 0x0) getsockname(r1, &(0x7f0000000100)=@rc={0x1f, @none}, &(0x7f0000000180)=0x80) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040), 0x10) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xfffffffd, 0x81000000}, 0x10) [ 539.503505][ T3744] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 539.634003][ T3744] usb 4-1: Using ep0 maxpacket: 16 [ 539.674346][ T3744] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 539.804018][ T3744] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 539.812000][ T3744] usb 4-1: can't read configurations, error -61 [ 539.925155][T11136] IPVS: ftp: loaded support on port[0] = 21 18:44:05 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x0, 0x9, 0x400000, 0x0, 0x0, 0x7}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) [ 540.002867][ T3744] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 540.093852][ T3744] usb 4-1: Using ep0 maxpacket: 16 [ 540.196785][ T3744] usb 4-1: too many configurations: 125, using maximum allowed: 8 [ 540.352298][T11129] IPVS: ftp: loaded support on port[0] = 21 18:44:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$HCIINQUIRY(r0, 0x400448e7, 0x0) 18:44:05 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x8, 0x101, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe3e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0xd8b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x24, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, @qdisc_kind_options=@q_clsact={0xb, 0x1, 'clsact\x00'}]}, 0x60}}, 0x0) [ 540.684105][ T3744] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 540.684237][ T3744] usb 4-1: can't read configurations, error -71 [ 540.684865][ T3744] usb usb4-port1: unable to enumerate USB device 18:44:05 executing program 1: ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0xa3}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) [ 540.912002][ T1058] tipc: TX() has been purged, node left! [ 541.023013][ T8702] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 541.167538][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 541.212659][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 18:44:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='`\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000098ff9759c9b0c2d700b77dbf862b1ec12b000b800800010006000000200002801c6553655f076fccca000000040003000c0001000000000000000000"], 0x60}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 18:44:06 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r3}}}}}}]}, 0x48}}, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) [ 541.265599][ T8702] usb 3-1: Using ep0 maxpacket: 8 [ 541.383986][ T8702] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 18:44:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b31, &(0x7f0000000040)="62b924b9cecdd2412d31f14453c03c6e000000000000e8") r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r1, 0x4b31, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000180)=""/4078, 0x3e, 0xfee, 0x3e}, 0x20) r2 = open(&(0x7f0000001200)='.\x00', 0x2000, 0x0) write$P9_RREADLINK(r2, &(0x7f0000001240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x200, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000001180)='-&\x00', &(0x7f00000011c0)="73e211bf9876ba9976f9b497bf7583c0fb129a5cc0d71829e13f513fc4d79b9a063e111f7e39637424d0dd1797b81b549ee98e23c39e", 0x36) [ 541.384102][ T8702] usb 3-1: config 0 has no interface number 0 [ 541.384263][ T8702] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 541.384472][ T8702] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 541.384638][ T8702] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 541.384758][ T8702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.389145][ T8702] usb 3-1: config 0 descriptor?? [ 541.435034][ T8702] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input10 [ 541.649300][ T9023] usb 3-1: USB disconnect, device number 21 [ 541.652949][ C0] xpad 3-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 541.661298][ T9023] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 542.060202][T11221] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:44:07 executing program 4: write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000040)={0x7, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) [ 542.116073][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 542.126817][T11228] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.141935][T11228] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.144375][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 542.189492][T11232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.208364][T11232] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.221103][T11232] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.434806][ T3744] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 542.674088][ T3744] usb 3-1: Using ep0 maxpacket: 8 [ 542.803895][ T3744] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 542.804023][ T3744] usb 3-1: config 0 has no interface number 0 [ 542.804249][ T3744] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 542.804403][ T3744] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 542.804575][ T3744] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 542.804698][ T3744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.812330][ T3744] usb 3-1: config 0 descriptor?? [ 542.915088][ T3744] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input11 [ 543.133793][ T8702] usb 3-1: USB disconnect, device number 22 [ 543.145331][ T8702] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 543.422734][T10271] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 543.695192][T10271] usb 5-1: Using ep0 maxpacket: 8 [ 543.834095][T10271] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 543.834231][T10271] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 543.834368][T10271] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 543.834513][T10271] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 543.834682][T10271] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 543.834802][T10271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.009841][T11235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 544.033033][T11235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 544.076433][T10271] hub 5-1:1.0: bad descriptor, ignoring hub [ 544.076689][T10271] hub: probe of 5-1:1.0 failed with error -5 [ 544.354814][T11235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 544.367133][T11235] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 544.643298][T10271] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 544.963362][T10271] usb 5-1: USB disconnect, device number 2 [ 544.972907][T10271] usblp0: removed [ 545.714612][T10271] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 545.952887][T10271] usb 5-1: Using ep0 maxpacket: 8 [ 547.383888][T10271] usb 5-1: unable to read config index 0 descriptor/all [ 547.384042][T10271] usb 5-1: can't read configurations, error -71 18:44:12 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', 0x0, 0xffc00000, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:44:12 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = dup3(r0, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x800c4151, &(0x7f0000000080)={0x0, &(0x7f0000000340)="39cdcd8b14e137e7d3c6dbcdf4569da9d32f73a422cab7141ba5a71526aca0c88dfaf8834921e1d2781136c8224f497e9d1009d31d420d8b9581b665669266257c4f45884de681b26392cb2b89a8c2ba64e3b23a7e93e05702ef26606a6376ad4ebe9e5e46ee5d8047c2efcddb89c92f9d5679c014cb14df526058f9c3d39cf849c3921f632ea017c00b062216e46e5812999fd71b1bcbc20387f46868ae9764fdc5ae22db65154207e35b5b19b9530e7affe16c10025cfb3d380573096c9fec32a9004cb91095b7d0085109c3d15d46f70e8ee38151e930a08743fbc29a7e3714fdda3a5e34eb28dcca4234588cc3bf6df4a34d8383c864ab2fb41e2d5fb4370c837f6be447fb01077b78faadcaaf11c3ad78d7735a1f2d8611b1dfe32f52ae90951540899c568eaaabb2d50578751af17531e64fd5ac80e407e322b767436acf0541c7ca11105d1014be07c4e7934adb62f767b1755a8c2ddac7f74e96334ece8410a9463fb9f0834663a48cb333b7f34d8e4875c3bfbf2a4affc41f7ddbe369c93e4a45883b4af83ca490e8a98d5b282daa3d11f0d8d44522733c38f9c72114c033220e4cd15287833143d98fac0df4b8203f5ae86f04a9a81cbb79212278976c03619981ecbbb4768bd3fdae9f60a0484e13b7fd567bae6d4d7bb6c60930872a5ced1ca07118f87b5560d0c054c21752d79dbf9c2eafe2426cc4e8138b9c18b175efd254859df1afdec92a6883c7c3d137735e6d8a6981ebfdba9f38a88b25a445f502fca80a974f66e0fb1c3776620c777e25fdd58a814b5afb17b7876f9d85cc91f935a08e1136818a971df0853de411449093896602e470a9750ee7cc17a8ee0c49e95d2d5309a8bc4deb3f067e41283374fe53d5952b5c8a502c7bc0b2ebd1d76a569537d16012211369fb79f3729c5c8d5213d1ccafa20b224ecf0aaa6db5f82492a23c66104dfde4fab42b05c6fbb1b5eea3d342aee49ca74f3cfacb9316672db868b6c69875f8444251bfcf112d172cad603f1c0d6f4fa699a7e8243267b14158141687b48f635f241f1cca27027809e863759fede4bd0e67255188c575b303d5df36933d9e867d3c21069bf91d85f12f4fc3d5f623e836c954b570c41ef084f4255b72d2f4c18bfc7e9f9ab387c746ec2d4892db4b297b7a544b743c46d5b31026b154c480b387db77f46341d34f14c1994cbdc655aeea4b54fd08bd4ff68b8c9590e27bdf1e742520aa7a907f61666916e33f04e98beca09acf9c9482b2cfcb8cfe8147016102c6476d36e4d120ac17d77a3fb483c98856d3cb7e3539666d9daf24e58ab666f2b599aa6da2d5676e7e1fd0172e079b93184982af157042f06fde2719a553714fda072f475adb8c2aec779301c55c95752026ba880e5b72a067f7597bc09e58f934f4cf15cf7078a2192c5938faf0c85d274533ddfe4a11c4da3beaf8d131be4cba741a09a904d09c72d988deaff817a89fb5b9739f5bb706ddeb043961ca2096d52af4febfd7d5eeda70d3c8bf4eaa87952d06caf7a1a467b80425c4e73b1beacf3d6b9e4bda0672e1c008f4c18968c6127790a6d930a5a39a5e8bfc9c907f166d1218ce4030ae6416f6167bdf367f571db0454ebf85825d0f73ae33a6e5e4a82316fcdc1313a7afa4550e4adc4218188a36e5f20276ca554da5e9b1c03f1ae679dc11af907acafaf604b20855342c74d982b0535bae1f51cbac72d9bfeb5587d21ec8c4d849e540444574527630a39eca9bb91b183146e2c02448f314e76ffe71991a2d246ae9c5b438c4081ecbc0a6c83e9f3ccbc7940b4456936a86f7d5c312524afad8afff0068ad7d99dd6dd80d89b540ad2010318804299f2054a73d5afa5f85caa0b68764671c0711a9b070b93dbd4e276571182e02f1f7875823adcea6b2f82ecd6faa8ccb2da412a9a44a820f20c53013ffdddc51185345924806a5e8181389c45e22d5f35d34821f84c6486b2382dced30b4a3897169e96fa0c17bd5bd4bf9d686cc6f8b5705897ecf605ffc6f8a3822e9c6b7d656aad2ca8fcaf3907f9a26c5528b8cef9a62af066f29653b76e4cfff8706578f86e62ee874a9519483fc41d3bc148867afec77c24bd7f521a2bb5c468a18b0cc43c6bb53d7336ae537d19eed38de5dba3b63fd76dd70c6d23c184f678bd78675d81d4fbf84be763f73ab41123335132a156dc171218bed0d9402606a1aa06fdf8fc723ec4ebcb315b8fd9b89ac3b1e00982a657dea1d5d80b5e893261257ef5cc198c8b001a9a4ae0cd31d97de13325b5c2af1782180d514da8ff678de3385c7b625754368f105f72a2a6e35e39b4fb6daf7033eaaf1a65aa18cb2e57b6500c0f797954c3f1b9b735f2142b3c31f8f135c3a2837192857a9dc88429a7aee8473b11cecc599b92f9c670dd613295ba877de4a6c5b3256dd6b202573576bf525ea7a96fe3f8686967753452400aeeb1c4ea601c66467cbc602dad2bcc7551a23fc16e3925ca7f4fb0c1d7ece6fed3abd06db8da2fe6cf0bda0cb2ad414b78e2b02a3ec243c91c4e9a2e4eca8ca3285ce8b27e17383ecf898f9f0c707ef318401c09def2cadc7a95d0cd559daa94f5ae4b453e23e5390ec874ecfd315cccf8ffc42488b3e4dece98ef79ae20dfe0fd70b2820cab69470a872e24d499ee52ce95888eec6b0e94de492275fd467a678de9b33454f03e21c757aba38d74a7f676ca07956fb4bab7b05eb06e06c2c696cdfcd1dc8094146bcf95859c18687b3ccf121810ae4924be5e8cf0aa10a55b24407b9b118c4c6910f1cc950629821d6f006adc0cb24dcb562d83ef67eaae9d17a40e9831ffcb58206cef1b9fa303355b551748db78f716726e3a1834ed3a84293c5a67b019f6162bd06f06a9656a1b835a51113b0ae5732c95f803c3af2ef269f447dc56453f39366f6006087b4eb2fd08a15547156c9e82c3e8d1bf5319ac304baecb1ac14b27884bdca00c731a065c20027287a0f351586fad2be206dc14eab2c4938a646021cbdb3bbca0fea4a98d6964ce3456f893a52e7e7e68e8f5cd21b40146df5b038d2743bf12729bf3f8246e7be2bfb683b519fcf8a33b7d361f7bb856c38a3bb7835c8d885a1ee74923ec05b3c8eb591b942f060a8652cdf1e66c6ff4c7eabfc5cb3ccbafca999988334e6cacf6fd78d082e831413f37ad0ce057140bc88b7ce6287a60933e082318f65377a01e01ab448f59da24251db3ce3f6754565d1c8e0c78b8f7e8c7e0b916d233117395798ee65fb1beda358786d6acb13de1df05d1d0a8a89a6cba162ad495b1cc52ef85b6393791afc6e53a6acb49a1becd8bc5637ba31b4f24068eeb2f8f0de28b602943e70596c80c9e87f96a08ea0800603b51d0da205449b9de8f48278ddd62fed24cb8293e1a756a0b6b7b47c1ea42174c4b9f37533ebe0d8ad967e8e561c00b15c225d007bd247c68004698fdc2b9b110d39bbcc3e261d5907cda03086b7c8b5c4e209651f56cf2083fb72a216cc835c586c252aeb6243f6afcbc54a501f873b455be6aa985ee25b7e013efb1381fd14bfda7024a4fecf4bcbc550357112b912830379de8c920f134cae9bfb440597caea5bfb04eef6fb04d762f0b0e797c670b55a2cac735e882e886143b22beac8511b5f807417e53d05f199435ad1c19ee9143ad26c62c79c4a4b4b7fc39c05484df411e699480bb66883d90269ec907a904cc89fe11556768f3b97f58bb584a4b8a2f6a02d605deb603f214ed633b194b7b10c4fd6018681d58fd81a22bd5b9c9440185ee88ae108de54a2e7850633f993cb8ea21fb3c107d6094859834842ceacc60e9ae2bd46d30ff8216a2c9004531620434e42c611e53ec7c81c4b5dd0ef6ffbc6fec619db20df0bce94493962b0c9cce2a77812d249d2850b9de08a648c7deb7e2d5be68a860c1bbe8384e2d1adf87cfa2c0ff32f32861f2cbc0bbbdd4a5dcefc3941b61233fe87dfec5c5781944c5ba39eeb65975c28e3f6c8b7af3415716c120ef867700822c70c95297cfa5a9fde238e04882bd9b8d6bf9eb59b8e4956b777c1797695a81e7bdab0b73e9de563023d06843c8a5d91a567d077ae5161427013532e5fa2d48220a9bb26a2eedb3da707f1bc1b03b564cda9ed62b451a1f2d5bb97d87ccc27e383d93337e7eb53f7f7d49179e5f834af8a093c0271dff050cb86c05612f429f588023838abfe4462eb36680762862e53a699af0aad970708332de5548761afce324941fa218dbd143a7e5adf6d6f7bd697c04bb2ed5ad77483bf58da63f2aaf768049af4fd8b16e99f487ea92e2e510710854e60b07ee2ba3238c66b3611893a54bf5d43c384930e3fd76158988632b7f9f9810328dbddecb980ce894ea98d0cf4a94018d6376f5bcd53bda75749cc86240607a8ab7a0f197a4e4832025776a57d27f510c754a1cd5a31564e0c85a9f4cd17d6f5bcd568cfbffd42f57a378e35f49518b80e75c1179d9cc0c78de8d15de3645be6116b3ff79c277b09a25809a7fd1104bf23533ab62ca728faa01917722f029dd03c30394809dd6eda859b61b8898d732892ec6f3c186a67d5ac8984658c7e8eedbc50b7e7588c64c9644ee76e74f46fe3bc414fb8158304e7da09373fa74d6bfe55be21fe2d9966e5c1764dd0787e4552e6e7eea20325df0b9c6ac9b43fc287e236cb37dcf83a2a3bef013d49287bb2de64039402fe807a8d7c1c505002710abb13b3f48ed53e9e7a33b8653e868d43bb66d8a5a9cf60f9e05c977b12179289cb7d63b45ad9faaea431dd55e745a78bea7959728b14a65e3c6234de95d23a32b0ed11b270c993730c60408430d3ba732e765022c3735ee8a78cd760722bbc4cc7ec24e62e2aab952738950a9869798ed8e16b0a1e1b2a2b04347b11e0669cc69f4d6daaf22eee219e904838924de0b9dc6d22933c850f62aa64e22d07205904227af42ee0506c99c777810ba40e47a430db988d5eee4a487fcd1ab2b418615724345e332474ac5c81b402ecba19db8453eaa9b619d2be124cdef525d8d9b581b731d638b928c37cf100c65f52b777fa33e17b2d231361418dc21e55e4e2d7855f756c0cc830e3d502ef2beb829a446b2c49d1c82e0c301d0ceaaf8ffcffd14030163d4d2869273b5cd2078ee417b1868656934c54a357a3ddd282e5656d93083b695c13a5c3da11954eeb6f3355307df6358120f1482bec0b9393f87d2a55bd9b0a543ddb4441e7375119e3551b6cd523ff5c7fb382e752ec70041c2f9e70213952f084846d635d2e5cab208e075cac8df4ee3a0424843c2d24393d05a924d675b1d5f25339c805dce2f317219d381113973c0bcb7d103426af48deef096a2eb59c1b8f2a856a53ead8d6c1b0c61c207b776f1560cc9ca6fc9acb741cbdb6abc18324f2bff7409998e840aeae664cde14a3a11250249098287b842becd04564b783986286af782aa6dba98cc9d952bb42a0c425214b35caaf0b266a92d00643c0ea6acff5c87315df82387f087b4423261804e0504e4833d7c79bbccea69e94bd518e70458ecd9393de10cc0de01f716d3efd5e11253e688db29e3b71a45feb91a9290ff62fe6a61fc4f9d17e0b6d102374affe0c3b3d2144cecd2cfbe8a5375286b3b758ae318b84cac5ec61d6295b9b92c57b982bcc9fbf633b41f2c93a0d9a9fa65f049797919d6ea86911bf1d524dc5d49965b1226f91b4426642deea00fe377d6a357712376cbbbae1476897420f20a639aa54b16f8866e9b7284c8cbb6ee82261434eed3a3645d35ec2fd77", 0x1000}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x2, 'erspan0\x00', {0x8}, 0xfffc}) 18:44:12 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x0, 0x9, 0x400000, 0x0, 0x0, 0x7}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:12 executing program 3: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000041435320410e5150e8d50000000109021b000100000000090401000186ee0d0009058217"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000000)=[{0x2, 0x0, {0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, 0x1, 0xff}, {0x3, 0x3, {0x1, 0xff, 0x3}, {0x1}, 0xfe, 0x2}, {0x2, 0x1, {0x0, 0xff, 0x2}}, {0x1, 0x2, {0x2, 0x1}, {0x0, 0xff, 0x1}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0xff}, {0x1, 0x110, 0x3}, 0x2, 0xfd}, {0x0, 0x1, {0x0, 0x1, 0x2}, {0x2, 0xf0, 0x2}, 0xfe, 0xfe}, {0x6, 0x3, {0x1, 0x0, 0x2}, {0x2, 0x0, 0x3}, 0x1, 0x1}, {0x3, 0x3, {0x1, 0xff, 0x1}, {0x0, 0x0, 0x1}, 0x0, 0x1}], 0xe0) 18:44:12 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xe) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0186404, &(0x7f00000003c0)={&(0x7f0000ffb000/0x4000)=nil}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00080020a0cfd700007c031c84660e00000012000c002076"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc, 0x1, 'skbprio\x00'}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000002c00270d00000000000000f4ff000000", @ANYRES32, @ANYBLOB="0000000000000000f2ff00000a0001006261736963000000380002003400028008000100f98b0000280002801000010000000000000000008b0000001400020000000700060000000000000001"], 0x68}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xf4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x3a}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x36}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4000080}, 0x880) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="73c7e40e462023793fb119ce48d779ac004d9534e4fd9bad59eb72322178affc2e5338f32dca5186ae71cda521b59a50aa1189a4ffff1fb64a116a9cac6417a54bd7c547e669d14651cd4dae89a20fb59ef3fd", 0x53, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000100)='/dev/video#\x00', 0x5, 0x2) sendmsg$AUDIT_GET(r2, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3e8, 0x4, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}}, 0x4008880) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc0cc5615, &(0x7f0000000080)={0xd, 0x1, 0x4, 0x100000, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0000ff00"}, 0x0, 0x0, @userptr=0x4}) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r7, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x44}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x4000004) [ 548.093997][T11300] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 548.175721][T11292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=11292 comm=syz-executor.4 [ 548.227490][T11300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11300 comm=syz-executor.4 [ 548.294044][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 548.304398][ T3744] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 548.324218][ T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 548.339166][T11301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1000 sclass=netlink_route_socket pid=11301 comm=syz-executor.4 18:44:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x240000) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfec94f44}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x1b}}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r6 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(r6, &(0x7f0000001840)=[{{&(0x7f0000000240)={0x2, 0x4e20, @private=0xa010100}, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)="27ed7345a1d275387fb283a6d05a55b133f4aee5667ee7d94ac58ff5fa4058b99d20d6b60f8b346271571c264df390ce53f6d0504b9e2660c1d86734769af44b5db143ad6e2c8ee6d3085aaf520e5e07b02b59f5df64c4f7a66a3f733c61edaad26e96224730421bbf98a72f83a32530662594677cb95ca103afdda79859c1ab979882aeb40dff5ab631ec1dcaffa871d8e97fb78ad194ffa52ba60db2"}, {&(0x7f0000000280)="8778be85f819b05d232686c88b1b5e7083d808e6d3ed44eed56a9940d436cdf19137e506197e0694149dfe73f2e30758887632"}, {&(0x7f0000000400)="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"}, {&(0x7f0000001400)="a8bc4666b3fe2482763f68e659c462bcd5e6adc556bcb1537dba174ff3d1f623262e47bff2961d597d5730da3f89bfc6c7c3255d9c411554fa4d3ce24716e6e0be4eb095eefa04f1"}, {&(0x7f0000001480)="c515812064b13ae5e4c0a5fc90dbc76f029545f107c8dbb591c694a8cd92f17be113c89b57e81ed9c91d02c7bc55df86b2571491f801347032f02f47391d6c6599e913f5cc5323630f2257126c401939334693c0bd87d4008600f236f4652a450b53b6b50fa83e36a62871f3c5e3d68c5e6e51f862f6b69f04fb2d0db78a042815a5bc28d6c4ccd277a072ddba86acf656c0372eec5495fb731e1d2ba2ddda679e01c6ca1ce2e87cb19fb92ae18b2a7671b983e3e6a9aef173509800f6b771d6769f385464559675c45d270b93303af0b3d497b3c7cca2393a7040e36ba047e6c8"}, {&(0x7f00000002c0)="2f4b46e26db0d16b78fd60c3d925c0c8e0ec0382f7bc77c4a1de5dc0"}], 0x0, &(0x7f00000015c0)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r2, @broadcast, @empty}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@ra={0x94, 0x0, 0x1}, @timestamp_prespec={0x44, 0x0, 0x26, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@local, 0x45}, {@multicast1, 0xfff}, {@local, 0xfffffffc}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @cipso={0x86, 0x0, 0x1, [{0x2, 0x0, "cef0aeae2f1c1d"}]}]}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@cipso={0x86, 0x0, 0x3, [{0x5, 0x0, "b79739d14ae4c8bd638dd69e"}, {0xe, 0x0, "57af97"}, {0x2, 0x0, "495ee6"}, {0x2, 0x0, "f2de71b67b0a"}]}, @lsrr={0x83, 0x0, 0x3d, [@private=0xa010101, @broadcast, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}]}, @timestamp_addr={0x44, 0x0, 0xe3, 0x1, 0x3, [{@private=0xa010100, 0x7}]}, @rr={0x7, 0x0, 0xb9, [@rand_addr=0x64010101, @broadcast]}, @ssrr={0x89, 0x0, 0xbc, [@private=0xa010101]}, @ssrr={0x89, 0x0, 0x74, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, @local, @empty]}, @generic={0x88, 0x0, 'P'}]}}}, @ip_ttl={{0x0, 0x0, 0x2, 0x5}}]}}, {{&(0x7f0000001700)={0x2, 0xfffa, @empty}, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001740)="ff81adf9b8a42d2b0cc7426760fa394c325abebc7460b1993c166a295f20a190f05fda49d2c277ca73054d08424e32f9299fb86c503d3edfc4b9cca9043b140ff780fa3b38fc"}], 0x0, &(0x7f0000001800)}}], 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 18:44:13 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="ed0ca2e2a8f6d4fcfe019edbf6cb"], 0x16) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r2, 0x4b31, &(0x7f0000000040)) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x2}, 0x16, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r3, 0x4b31, &(0x7f0000000040)) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a316ff1063f4a738ab949513fbe0fcf81ea538f7367d7a943efd6ea219aa43c9ed150e9869078df091873fbec9e0418df63e769e432f217e9e108e5ffc89059a4cc07170df03288421140dd1c2c69618644e45faeb95c8d795488518db3409b2a279cdb3ce519a4bf74cd846a50c08caf48c82687e7a709e80c8dfcde5079f36379ebb56f6fcd79d392f2a5e712058c00000000000000c66f53af21030a4cbdfaae"], 0x99) r4 = socket$netlink(0x10, 0x3, 0x4) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000040)) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xfef0) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) [ 548.554980][ T3744] usb 3-1: Using ep0 maxpacket: 8 [ 548.603829][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 548.676281][ T3744] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 548.676396][ T3744] usb 3-1: config 0 has no interface number 0 [ 548.676558][ T3744] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 548.676776][ T3744] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 548.676946][ T3744] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 548.677069][ T3744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.681400][ T3744] usb 3-1: config 0 descriptor?? [ 548.723898][ T27] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 548.724022][ T27] usb 4-1: config 0 has no interface number 0 [ 548.724183][ T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.724316][ T27] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 548.724484][ T27] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 548.724607][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.725332][ T3744] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input12 [ 548.730285][ T27] usb 4-1: config 0 descriptor?? 18:44:14 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x0, 0x9, 0x400000, 0x0, 0x0, 0x7}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) [ 548.773388][ T27] snd_usb_pod 4-1:0.1: Line 6 Pocket POD found [ 548.957033][ T3744] usb 3-1: USB disconnect, device number 23 [ 548.963823][ T3744] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 548.993970][ T27] snd_usb_pod 4-1:0.1: cannot start listening: -90 [ 548.994238][ T27] snd_usb_pod 4-1:0.1: Line 6 Pocket POD now disconnected [ 548.995245][ T27] snd_usb_pod: probe of 4-1:0.1 failed with error -90 [ 549.106315][T11331] device vlan2 entered promiscuous mode [ 549.109912][T11331] device bond0 entered promiscuous mode [ 549.109944][T11331] device bond_slave_0 entered promiscuous mode [ 549.110609][T11331] device bond_slave_1 entered promiscuous mode [ 549.186237][T11331] device bond0 left promiscuous mode [ 549.186272][T11331] device bond_slave_0 left promiscuous mode [ 549.187316][T11331] device bond_slave_1 left promiscuous mode 18:44:15 executing program 4: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="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"/690], 0x0) [ 549.199532][ T8704] usb 4-1: USB disconnect, device number 14 [ 549.841392][T11331] device vlan2 entered promiscuous mode [ 549.845300][T11331] device bond0 entered promiscuous mode [ 549.845332][T11331] device bond_slave_0 entered promiscuous mode [ 549.845984][T11331] device bond_slave_1 entered promiscuous mode [ 549.909292][T11331] device bond0 left promiscuous mode [ 549.909325][T11331] device bond_slave_0 left promiscuous mode [ 549.910022][T11331] device bond_slave_1 left promiscuous mode [ 549.973810][ T8704] usb 4-1: new high-speed USB device number 15 using dummy_hcd 18:44:15 executing program 3: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$uhid(0xffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x6200, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r6}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000240)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x29}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000010400000014000e000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) [ 550.214190][ T8704] usb 4-1: Using ep0 maxpacket: 32 [ 550.333891][ T8704] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 550.334006][ T8704] usb 4-1: config 0 has no interface number 0 [ 550.334155][ T8704] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.334279][ T8704] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 550.334448][ T8704] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 550.334575][ T8704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.338438][ T8704] usb 4-1: config 0 descriptor?? 18:44:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = openat$nvram(0xffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x400, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000000)={0xff, {{0x2, 0x4e22, @private=0xa010102}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}}}, 0x104) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000580)={0x190, 0x1a, 0x1, 0x0, 0x0, "", [@nested={0x180, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @generic="598dee3984cb5a54ce6106348bce0e1813798627656695a5bd72f9d65a9ac804b1dab8895227578c422d332c71827fb0d04927df36dd5ec5923a7f969a7cca9ffb83893901ee17f78e592681122f1201e5f05f8954c5cd0b09b3df0e39b81a415dc69738f953795a12de2187761b678241e379ca6b83f8dc6ec5f2cbd6090b4196098d467b6f08c06a79c3f0c6d7e882c7df757b19d937a996951ad85d546a79df656137ef0e5c38be95e8ba0374c9bed6b5dd0cf75a201297cf1c248a9b5f1b624958db67cb", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="086d261a6d98762c3b5611081622504b592dd03c54f326c8aed9161cc73db17b53a2ea74920874ce245c85e04a8e67570931a0e2ce30f9d909a7cae99682d5b9e19c0556b332d217a973aed45ed47eac2025eb108482052ed8dbea188822fbf3236cec0569555da3dacf41cbd0bf181cf96e9472c6897538e2f15a9c93c606cb1542423fb0c4b21b528c", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x190}], 0x1}, 0x0) [ 550.383146][ T8704] snd_usb_pod 4-1:0.1: Line 6 Pocket POD found [ 550.583110][ T8704] snd_usb_pod 4-1:0.1: set_interface failed [ 550.583378][ T8704] snd_usb_pod 4-1:0.1: Line 6 Pocket POD now disconnected [ 550.584179][ T8704] snd_usb_pod: probe of 4-1:0.1 failed with error -71 [ 550.589827][ T8704] usb 4-1: USB disconnect, device number 15 [ 550.613559][T10271] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 550.873227][T10271] usb 3-1: Using ep0 maxpacket: 8 [ 551.013858][T10271] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 551.013975][T10271] usb 3-1: config 0 has no interface number 0 [ 551.014122][T10271] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 551.014265][T10271] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 551.014431][T10271] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 551.014551][T10271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.021075][T10271] usb 3-1: config 0 descriptor?? 18:44:17 executing program 4: r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x3}, {0x6, 0x0, 0x0, 0x7ffffff7}]}) getuid() r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$dsp(0xffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x20c280, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000001c0)=""/228) setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x84, 0x3, 0xab, "933db932637233d11b51b55ed313b946", "806a10245f53ba60e5254395142552264da1dcfd2259fa0ad650db863f6a3a8640e393e2c8a93d052c1518ecee066aeb15c39eaca6b777b87f57c187f0456257dd05d74d484d7afac81c7fcfffefcb8404fa843c1e95233ea84aa86cd9181d7106f2780a0cedc155ffeb87ea0360da"}, 0x84, 0x2) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0x7) [ 551.065053][T10271] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input13 [ 551.301689][T10271] usb 3-1: USB disconnect, device number 24 [ 551.317837][T10271] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 18:44:21 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:44:21 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x0, 0x9, 0x400000, 0x0, 0x0, 0x7}) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:21 executing program 3: syz_read_part_table(0x0, 0x2, &(0x7f0000000280)=[{0x0, 0x0, 0xd477b14}, {&(0x7f0000000000)="55358d9d983f2fddb2e373beb054b901c36a6aeee411a6b3af8b98957f04468c1504fe957c8446a366489a71293758942af0b598a4281060ff1b89287e3640db6a5fd00c866c69558ef3eb373a48f12a6cc6503d82b5803a7533ee61f7b41a33c9ac8c3dfe8c41e6b9683fbff95b6dd335f610aba6d74b97f2774276773457a237a6ba9b73e6a6cc4d4cd626dbeb73cef74a2b1386b404574034c0ebeeba8b200424ff04769a602a344edd86e15aa713a8cb99efc09cb6b348af4b411a5b9907290298b6f67bcd8cb32a81a942a24725c91b47a2d5e49008e74b0ca60e3c95aa34e164d332b2ab8e17cca4efa773f7cde90cf59e3a2845ed5c3c872dc8718ebe45cfb405cce1cf77ff40c74361d0bbf3b90192d4d3e85e9beeb331aef0f22a237df806f51272cdcbdf1cbc0f28b24e07d7edb02624830a1b3860c19ffb4c1d61a2e2165671ed9568b74e2e57ae43ab0127e733a3015f8d2ede7208a6f3fbe93a105192119d87722dbf3fa8e1d24d4ddccadaf52d54b2e3c56b6e781d353a3e993fe1d42da213ae232acb808d8e8bcf3339093e949b869f81345567662373cc2fb869efe886b790c1c86a6ed56ded54b0230e051c3c208b35c3d0", 0x1ba, 0x10}]) r0 = socket$l2tp(0x2, 0x2, 0x73) bind(r0, &(0x7f00000001c0)=@can, 0x80) 18:44:21 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='#\tP\x81\xcbX\x00'/19, 0x4) splice(r0, 0x0, r1, 0x0, 0xb8b, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x18}, 0x18) 18:44:21 executing program 5: connect$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null, 0x8}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @default, @null]}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x8, 0xfa00, {&(0x7f0000000080)}}, 0x10) r0 = openat$hwrng(0xffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fstat(r0, &(0x7f0000000300)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000380)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000003c0)={r1}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000400)='ip6gre0\x00') ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000440)='/dev/dlm-monitor\x00', 0x2000, 0x0) ppoll(&(0x7f0000000480)=[{r0, 0x140}, {r0}, {r0, 0x80}, {r0, 0x2000}, {r2, 0x40}, {r0, 0x5001}, {0xffffffffffffffff, 0x40}], 0x7, &(0x7f00000004c0), &(0x7f0000000500)={[0xffffffff, 0x8]}, 0x8) fcntl$setflags(r0, 0x2, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000540)=@req3={0x9, 0x101, 0x10001, 0x3, 0x3, 0x9, 0x2}, 0x1c) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='^&-:*\x00', r0}, 0x10) mmap$perf(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000000, 0x80010, r3, 0x8) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000600)=0x4) connect$nfc_raw(r0, &(0x7f0000000640)={0x27, 0x0, 0x0, 0x3}, 0x10) exit(0x6) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000680)=[@acquire_done], 0x56, 0x0, &(0x7f00000006c0)="3e4b80923b006aef8d173427f0f0f5b98afd9259f618252fc725eab45f7815c2cc583c0513201c42eac46785cb293a14c15ba9e43b331fdb4641630adcefbbe3469c6fa8c84f8c1a1e71171d506bb12757246e1dcad3"}) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000780)={0x0, 0x0, [0xe7, 0x8, 0x0, 0x80000000]}) [ 556.396549][T11420] loop3: AHDI p1 [ 556.522631][T11420] loop3: AHDI p1 [ 556.582959][ T3744] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 556.839551][ T3744] usb 3-1: Using ep0 maxpacket: 8 18:44:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x6405, 0x0) [ 556.963859][ T3744] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 556.972108][ T3744] usb 3-1: config 0 has no interface number 0 [ 556.978574][ T3744] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 556.989720][ T3744] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 557.000961][ T3744] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 557.010244][ T3744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.219559][ T3744] usb 3-1: config 0 descriptor?? [ 557.277305][ T3744] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input14 18:44:22 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240348ff050005001200", 0x2e}], 0x1}, 0x0) [ 557.551658][ T3744] usb 3-1: USB disconnect, device number 25 [ 557.558084][ C0] xpad 3-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 557.558322][ C0] xpad 3-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 557.577938][ T3744] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 557.675485][T11428] FAT-fs (loop0): bogus number of reserved sectors [ 557.682196][T11428] FAT-fs (loop0): Can't find a valid FAT filesystem 18:44:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000300)={0x1fb}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) [ 558.009952][T11458] device bond0 entered promiscuous mode [ 558.015974][T11458] device bond_slave_0 entered promiscuous mode [ 558.023154][T11458] device bond_slave_1 entered promiscuous mode 18:44:23 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x800000003, 0x0) socket(0x0, 0x3, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) 18:44:23 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) [ 559.143608][ T3744] usb 3-1: new high-speed USB device number 26 using dummy_hcd 18:44:24 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x249000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) [ 559.233369][ T9023] Bluetooth: hci0: command 0x0406 tx timeout [ 559.397642][ T3744] usb 3-1: Using ep0 maxpacket: 8 [ 559.406876][T11476] FAT-fs (loop0): bogus number of reserved sectors [ 559.413658][T11476] FAT-fs (loop0): Can't find a valid FAT filesystem [ 559.526415][ T3744] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 559.526526][ T3744] usb 3-1: config 0 has no interface number 0 [ 559.526667][ T3744] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 559.526813][ T3744] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 559.526980][ T3744] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 559.527099][ T3744] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.531400][ T3744] usb 3-1: config 0 descriptor?? 18:44:25 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000280)="a9", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x9, r0, 0xffffffffffffffff, 0x0, 0x0) [ 559.574067][ T3744] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input15 [ 559.774658][ T3744] usb 3-1: USB disconnect, device number 26 [ 559.785977][ T3744] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 560.062822][T11459] IPVS: ftp: loaded support on port[0] = 21 18:44:25 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:26 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1a5, 0x0, 0x0) 18:44:26 executing program 4: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 561.565157][ T27] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 561.684921][T11459] chnl_net:caif_netlink_parms(): no params data found [ 561.824018][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 561.873662][ T8702] Bluetooth: hci5: command 0x0409 tx timeout [ 561.964710][ T27] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 561.964836][ T27] usb 3-1: config 0 has no interface number 0 [ 561.964994][ T27] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 561.965209][ T27] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 561.965377][ T27] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 561.965499][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.986450][ T27] usb 3-1: config 0 descriptor?? [ 562.033702][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input16 [ 562.192132][T11459] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.192325][T11459] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.196516][T11459] device bridge_slave_0 entered promiscuous mode [ 562.209943][T11459] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.233723][ T27] usb 3-1: USB disconnect, device number 27 [ 562.236086][T11459] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.242852][ C1] xpad 3-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 562.300363][ C1] xpad 3-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 562.309537][T11459] device bridge_slave_1 entered promiscuous mode [ 562.507941][T11459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.539116][T11459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.544747][ T27] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 562.743311][T11459] team0: Port device team_slave_0 added [ 562.765213][T11459] team0: Port device team_slave_1 added [ 562.945609][T11459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.945697][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.945730][T11459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.951694][T11459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.951766][T11459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.951800][T11459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.180285][T11459] device hsr_slave_0 entered promiscuous mode [ 563.221024][T11459] device hsr_slave_1 entered promiscuous mode [ 563.248420][T11459] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.248446][T11459] Cannot create hsr debugfs directory [ 563.761623][T11459] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 563.797541][T11459] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 563.824492][T11459] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 563.854753][T11459] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 563.952959][ T3744] Bluetooth: hci5: command 0x041b tx timeout [ 564.589033][T11459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.723768][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.725791][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.825444][T11459] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.921380][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.923930][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.925526][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.925757][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.971008][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 565.018723][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.020692][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.022210][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.022384][ T8704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.141596][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.201486][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.273752][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.276798][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.279605][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.392201][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.395620][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.456271][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.536452][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.685678][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.687892][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.789210][T11459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.993337][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.993861][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 566.034851][ T8704] Bluetooth: hci5: command 0x040f tx timeout [ 566.052205][T11459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.549615][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 566.560481][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 566.655992][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 566.666475][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 566.697016][T11459] device veth0_vlan entered promiscuous mode [ 566.706619][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 566.716027][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 566.782760][T11459] device veth1_vlan entered promiscuous mode [ 566.902245][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 566.913060][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 566.945056][T11459] device veth0_macvtap entered promiscuous mode [ 566.980044][T11459] device veth1_macvtap entered promiscuous mode [ 567.037511][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.048063][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.058704][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.069386][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.079436][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.090097][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.100142][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.110746][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.121393][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 567.132007][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.146464][T11459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.157489][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 567.167558][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 567.177016][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 567.187434][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 567.216071][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.229577][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.241568][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.252186][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.262259][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.272845][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.282967][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.293587][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.303661][T11459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 567.314299][T11459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.328983][T11459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.337801][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.348272][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 568.115504][ T8702] Bluetooth: hci5: command 0x0419 tx timeout 18:44:33 executing program 5: r0 = memfd_create(&(0x7f000088f000)='b\n\x00', 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x20000005011, r0, 0x0) ftruncate(r0, 0x0) 18:44:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') ioctl$CHAR_RAW_GETSIZE(0xffffffffffffffff, 0x1260, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x1c1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) 18:44:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000003c0)={{r1}, 0x0, 0x8, @unused=[0x4, 0x75, 0x64, 0x6], @devid}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @cfhsi={{0xa, 0x1, 'cfhsi\x00'}, {0x24, 0x2, 0x0, 0x1, [@__IFLA_CAIF_HSI_HEAD_ALIGN={0x8}, @__IFLA_CAIF_HSI_TAIL_ALIGN={0x8}, @__IFLA_CAIF_HSI_QHIGH_WATERMARK={0x8}, @__IFLA_CAIF_HSI_AGGREGATION_TOUT={0x8}]}}}]}, 0x54}}, 0x0) 18:44:33 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000040)={0x0, 0xe, 0x1f}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0), 0xc, 0x0}, 0x8000) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:44:33 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:33 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) [ 568.839304][T11785] caif_hsicaif_hsi_newlink: failed to get the cfhsi_ops [ 568.850648][T11782] FAT-fs (loop0): bogus number of reserved sectors [ 568.858305][T11782] FAT-fs (loop0): Can't find a valid FAT filesystem 18:44:34 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x4e, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x801, 0x0) 18:44:34 executing program 4: setresuid(0x0, 0xee01, 0xee01) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) [ 569.063131][T10271] usb 3-1: new high-speed USB device number 28 using dummy_hcd 18:44:34 executing program 5: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/prev\x00') read(r0, 0x0, 0x0) 18:44:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0xd0000e0}, 0x6e) [ 569.303736][T10271] usb 3-1: Using ep0 maxpacket: 8 [ 569.423782][T10271] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 569.423908][T10271] usb 3-1: config 0 has no interface number 0 [ 569.424056][T10271] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 569.424192][T10271] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 569.424355][T10271] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 569.424479][T10271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.433656][T10271] usb 3-1: config 0 descriptor?? [ 569.475074][ T8702] Bluetooth: hci1: command 0x0406 tx timeout [ 569.484981][T10271] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input17 [ 569.681075][ T8702] usb 3-1: USB disconnect, device number 28 [ 569.692735][ C1] xpad 3-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 569.744428][ T8702] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 569.954524][T11818] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 18:44:35 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff000002940000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 18:44:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 18:44:35 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0xc6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000003040)='ip6tnl0\x00', 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/sequencer2\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18:44:35 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="24000000460001df"], 0x24}], 0x1}, 0x0) 18:44:36 executing program 5: 18:44:36 executing program 4: [ 571.563903][ T27] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 571.657560][T11859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=70 sclass=netlink_route_socket pid=11859 comm=syz-executor.3 [ 571.805811][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 571.925262][ T27] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 571.925391][ T27] usb 3-1: config 0 has no interface number 0 [ 571.925547][ T27] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 571.925701][ T27] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 571.925883][ T27] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 571.926010][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.930220][ T27] usb 3-1: config 0 descriptor?? [ 571.975128][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input18 [ 572.184091][ T27] usb 3-1: USB disconnect, device number 29 [ 572.203914][ T27] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 18:44:38 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:44:38 executing program 3: 18:44:38 executing program 5: 18:44:38 executing program 4: 18:44:38 executing program 1: 18:44:38 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:38 executing program 4: 18:44:38 executing program 1: 18:44:38 executing program 5: 18:44:38 executing program 3: [ 573.902866][ T9023] usb 3-1: new high-speed USB device number 30 using dummy_hcd 18:44:39 executing program 4: [ 574.173422][ T9023] usb 3-1: Using ep0 maxpacket: 8 18:44:39 executing program 5: [ 574.303912][ T9023] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 574.304207][ T9023] usb 3-1: config 0 has no interface number 0 [ 574.304363][ T9023] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 574.304514][ T9023] usb 3-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 574.304691][ T9023] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 574.304817][ T9023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.309185][ T9023] usb 3-1: config 0 descriptor?? [ 574.364358][ T9023] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.65/input/input19 [ 574.564079][ T9023] usb 3-1: USB disconnect, device number 30 [ 574.602829][ T9023] xpad 3-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 18:44:41 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:44:41 executing program 3: 18:44:41 executing program 1: 18:44:41 executing program 4: 18:44:41 executing program 5: 18:44:41 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:42 executing program 4: 18:44:42 executing program 1: 18:44:42 executing program 5: 18:44:42 executing program 3: 18:44:42 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:42 executing program 1: 18:44:44 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:44:44 executing program 4: 18:44:44 executing program 5: 18:44:44 executing program 3: 18:44:44 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:44 executing program 1: 18:44:44 executing program 4: 18:44:44 executing program 1: 18:44:44 executing program 3: 18:44:44 executing program 5: 18:44:44 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) 18:44:45 executing program 1: 18:44:47 executing program 0: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0xffc00000, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='dots,nocase,check=strict,dots,nodots,nodots,time_offset=0']) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x40000006) 18:44:47 executing program 4: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="0000810000008100320b11118dccf54e8e66f08cd9f4cae922575e0f03f1985cbb3fc6feecf449fca5d64fc53c9bde84a4be1c2f6ed0b5f25a0197302656a450b1e1d642086eaf1f27d6498712774f0ad84d0d4c81"], 0x0}, 0x0) 18:44:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000002c0)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xfffeffffffffffff, r3, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x106c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getxattr(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="77a18680cf07aec10100000000000000cafae0e6b27dd9cfb41c7851060054a8aee79c5037174a3270e7ff570e14a53de2e39b8775e8c87ec4dfae39e2f5e710c00e31d70b91eacf180c3e59b80be0691287d544fbdec4b58431ed3f41e964abb7f0de490aff4380571a393a3d17d4309838183ba75527ac550917e4f53f7ba5a98726ce1773583de7e377295bef6cdaa85e24ecb049b0fc7e665340e4b001da174a535cb16f7804309f0000000000000000"], 0x0, 0x0) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x187) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x2000484) close(r4) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 18:44:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0xc, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB='\x00'/16, @ANYRES64], 0x3}, 0x1, 0x0, 0x0, 0x40455}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="50200000914362f6e9a5d0cb6b1427c95fb08a9b5ec12bf5de58aeef", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf2501000000080001000300000008000200010000000cc00b800500030005000000080002000200000008000200f3ffffff07000200"], 0x3}, 0x1, 0x0, 0x0, 0x8c054}, 0x48080) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)={0x140, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0xf0, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x972d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd704}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62394eb5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c59c968}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf9cf}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xfb87cc6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x34679816}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe94}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x78e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2007}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33f6cb5d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20a0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c0541d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4a54}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39075d99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x546dcc37}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70a2ea6c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5782d45f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x354dd7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x261}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x83c0d4c}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf986}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ddffda1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x743d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, r2, 0x300, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x2044011) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xdc, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xd7faabd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x92c4703}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x921b}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa973}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a0f75ad}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1af9dc7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa299}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ad9}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r3 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="ccc9ae258afdf4a8c5b5c745aa315276525549db0f020ab870dd156bb110deb5d90dc7af8f9a54e01fffc1a974d79eaa73359c55da82889c60a5b3ba33", 0x3d, 0x20001732, &(0x7f00000003c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ftruncate(r3, 0x200004) sendfile(r3, r3, 0x0, 0x80001d00c0d3) 18:44:47 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28003801, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x8, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f00000000c0)) io_submit(0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 18:44:47 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) [ 582.365008][T11988] device lo entered promiscuous mode 18:44:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) io_setup(0x8, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001cc0)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x45, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x75, 0x6, @remote}, 0x14) io_submit(0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) [ 582.612795][ T9026] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 582.819166][T11998] FAT-fs (loop0): bogus number of reserved sectors [ 582.826031][T11998] FAT-fs (loop0): Can't find a valid FAT filesystem [ 582.854347][ T9026] usb 5-1: Using ep0 maxpacket: 16 [ 582.974141][ T9026] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 18:44:48 executing program 2: syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/207) [ 582.974257][ T9026] usb 5-1: config 0 has no interface number 0 [ 582.974542][ T9026] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 582.974712][ T9026] usb 5-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 582.974832][ T9026] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.979708][ T9026] usb 5-1: config 0 descriptor?? [ 583.233981][ T9026] ===================================================== [ 583.234136][ T9026] BUG: KMSAN: uninit-value in gtco_probe+0x1c62/0x39b0 [ 583.234164][ T9026] CPU: 1 PID: 9026 Comm: kworker/1:5 Not tainted 5.8.0-rc5-syzkaller #0 [ 583.234176][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.234211][ T9026] Workqueue: usb_hub_wq hub_event [ 583.234257][ T9026] Call Trace: [ 583.234326][ T9026] dump_stack+0x21c/0x280 [ 583.234395][ T9026] kmsan_report+0xf7/0x1e0 [ 583.234432][ T9026] __msan_warning+0x58/0xa0 [ 583.234466][ T9026] gtco_probe+0x1c62/0x39b0 [ 583.234568][ T9026] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.234598][ T9026] ? store_tabletExecute+0x150/0x150 [ 583.234672][ T9026] usb_probe_interface+0xece/0x1550 [ 583.234721][ T9026] ? usb_register_driver+0x900/0x900 [ 583.234806][ T9026] really_probe+0xf20/0x20b0 [ 583.234843][ T9026] ? kmsan_get_metadata+0x116/0x180 [ 583.234881][ T9026] driver_probe_device+0x293/0x390 [ 583.234919][ T9026] __device_attach_driver+0x63f/0x830 [ 583.234963][ T9026] bus_for_each_drv+0x2ca/0x3f0 [ 583.234991][ T9026] ? coredump_store+0xf0/0xf0 [ 583.235031][ T9026] __device_attach+0x4e2/0x7f0 [ 583.235076][ T9026] device_initial_probe+0x4a/0x60 [ 583.235105][ T9026] bus_probe_device+0x177/0x3d0 [ 583.235137][ T9026] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.235166][ T9026] device_add+0x3b0e/0x40d0 [ 583.235229][ T9026] usb_set_configuration+0x380f/0x3f10 [ 583.235268][ T9026] ? usb_set_configuration+0xb41/0x3f10 [ 583.235340][ T9026] usb_generic_driver_probe+0x138/0x300 [ 583.235370][ T9026] ? usb_choose_configuration+0xe70/0xe70 [ 583.235396][ T9026] usb_probe_device+0x311/0x490 [ 583.235433][ T9026] ? usb_register_device_driver+0x540/0x540 [ 583.235458][ T9026] really_probe+0xf20/0x20b0 [ 583.235493][ T9026] ? kmsan_get_metadata+0x116/0x180 [ 583.235529][ T9026] driver_probe_device+0x293/0x390 [ 583.235569][ T9026] __device_attach_driver+0x63f/0x830 [ 583.235624][ T9026] bus_for_each_drv+0x2ca/0x3f0 [ 583.235652][ T9026] ? coredump_store+0xf0/0xf0 [ 583.235695][ T9026] __device_attach+0x4e2/0x7f0 [ 583.235741][ T9026] device_initial_probe+0x4a/0x60 [ 583.235773][ T9026] bus_probe_device+0x177/0x3d0 [ 583.235808][ T9026] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.235839][ T9026] device_add+0x3b0e/0x40d0 [ 583.235903][ T9026] usb_new_device+0x1bd4/0x2a30 [ 583.235959][ T9026] hub_event+0x5e7b/0x8a70 [ 583.236053][ T9026] ? kmsan_get_metadata+0x116/0x180 [ 583.236082][ T9026] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.236105][ T9026] ? led_work+0x7c0/0x7c0 [ 583.236190][ T9026] process_one_work+0x1688/0x2140 [ 583.236251][ T9026] worker_thread+0x10bc/0x2730 [ 583.236281][ T9026] ? kmsan_get_metadata+0x116/0x180 [ 583.236337][ T9026] kthread+0x551/0x590 [ 583.236367][ T9026] ? process_one_work+0x2140/0x2140 [ 583.236399][ T9026] ? kthread_blkcg+0x110/0x110 [ 583.236446][ T9026] ret_from_fork+0x1f/0x30 [ 583.236475][ T9026] [ 583.236483][ T9026] Uninit was stored to memory at: [ 583.236510][ T9026] kmsan_internal_chain_origin+0xad/0x130 [ 583.236531][ T9026] __msan_chain_origin+0x50/0x90 [ 583.236555][ T9026] gtco_probe+0x1e77/0x39b0 [ 583.236578][ T9026] usb_probe_interface+0xece/0x1550 [ 583.236601][ T9026] really_probe+0xf20/0x20b0 [ 583.236632][ T9026] driver_probe_device+0x293/0x390 [ 583.236655][ T9026] __device_attach_driver+0x63f/0x830 [ 583.236677][ T9026] bus_for_each_drv+0x2ca/0x3f0 [ 583.236700][ T9026] __device_attach+0x4e2/0x7f0 [ 583.236723][ T9026] device_initial_probe+0x4a/0x60 [ 583.236744][ T9026] bus_probe_device+0x177/0x3d0 [ 583.236764][ T9026] device_add+0x3b0e/0x40d0 [ 583.236786][ T9026] usb_set_configuration+0x380f/0x3f10 [ 583.236805][ T9026] usb_generic_driver_probe+0x138/0x300 [ 583.236823][ T9026] usb_probe_device+0x311/0x490 [ 583.236842][ T9026] really_probe+0xf20/0x20b0 [ 583.236863][ T9026] driver_probe_device+0x293/0x390 [ 583.236884][ T9026] __device_attach_driver+0x63f/0x830 [ 583.236903][ T9026] bus_for_each_drv+0x2ca/0x3f0 [ 583.236923][ T9026] __device_attach+0x4e2/0x7f0 [ 583.236943][ T9026] device_initial_probe+0x4a/0x60 [ 583.236963][ T9026] bus_probe_device+0x177/0x3d0 [ 583.236980][ T9026] device_add+0x3b0e/0x40d0 [ 583.237001][ T9026] usb_new_device+0x1bd4/0x2a30 [ 583.237018][ T9026] hub_event+0x5e7b/0x8a70 [ 583.237039][ T9026] process_one_work+0x1688/0x2140 [ 583.237060][ T9026] worker_thread+0x10bc/0x2730 [ 583.237078][ T9026] kthread+0x551/0x590 [ 583.237148][ T9026] ret_from_fork+0x1f/0x30 [ 583.237154][ T9026] [ 583.237165][ T9026] Local variable ----globalval.i@gtco_probe created at: [ 583.237185][ T9026] gtco_probe+0xda0/0x39b0 [ 583.237206][ T9026] gtco_probe+0xda0/0x39b0 [ 583.237214][ T9026] ===================================================== [ 583.237222][ T9026] Disabling lock debugging due to kernel taint [ 583.237235][ T9026] Kernel panic - not syncing: panic_on_warn set ... [ 583.237260][ T9026] CPU: 1 PID: 9026 Comm: kworker/1:5 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 583.237273][ T9026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 583.237292][ T9026] Workqueue: usb_hub_wq hub_event [ 583.237305][ T9026] Call Trace: [ 583.237335][ T9026] dump_stack+0x21c/0x280 [ 583.237416][ T9026] panic+0x4d7/0xef7 [ 583.237471][ T9026] ? add_taint+0x17c/0x210 [ 583.237506][ T9026] kmsan_report+0x1df/0x1e0 [ 583.237541][ T9026] __msan_warning+0x58/0xa0 [ 583.237575][ T9026] gtco_probe+0x1c62/0x39b0 [ 583.237685][ T9026] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.237714][ T9026] ? store_tabletExecute+0x150/0x150 [ 583.237742][ T9026] usb_probe_interface+0xece/0x1550 [ 583.237789][ T9026] ? usb_register_driver+0x900/0x900 [ 583.237816][ T9026] really_probe+0xf20/0x20b0 [ 583.237851][ T9026] ? kmsan_get_metadata+0x116/0x180 [ 583.237887][ T9026] driver_probe_device+0x293/0x390 [ 583.237923][ T9026] __device_attach_driver+0x63f/0x830 [ 583.237972][ T9026] bus_for_each_drv+0x2ca/0x3f0 [ 583.237999][ T9026] ? coredump_store+0xf0/0xf0 [ 583.238041][ T9026] __device_attach+0x4e2/0x7f0 [ 583.238088][ T9026] device_initial_probe+0x4a/0x60 [ 583.238119][ T9026] bus_probe_device+0x177/0x3d0 [ 583.238155][ T9026] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.238184][ T9026] device_add+0x3b0e/0x40d0 [ 583.238248][ T9026] usb_set_configuration+0x380f/0x3f10 [ 583.238289][ T9026] ? usb_set_configuration+0xb41/0x3f10 [ 583.238365][ T9026] usb_generic_driver_probe+0x138/0x300 [ 583.238397][ T9026] ? usb_choose_configuration+0xe70/0xe70 [ 583.238426][ T9026] usb_probe_device+0x311/0x490 [ 583.238463][ T9026] ? usb_register_device_driver+0x540/0x540 [ 583.238489][ T9026] really_probe+0xf20/0x20b0 [ 583.238523][ T9026] ? kmsan_get_metadata+0x116/0x180 [ 583.238560][ T9026] driver_probe_device+0x293/0x390 [ 583.238597][ T9026] __device_attach_driver+0x63f/0x830 [ 583.238651][ T9026] bus_for_each_drv+0x2ca/0x3f0 [ 583.238678][ T9026] ? coredump_store+0xf0/0xf0 [ 583.238719][ T9026] __device_attach+0x4e2/0x7f0 [ 583.238765][ T9026] device_initial_probe+0x4a/0x60 [ 583.238795][ T9026] bus_probe_device+0x177/0x3d0 [ 583.238828][ T9026] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.238857][ T9026] device_add+0x3b0e/0x40d0 [ 583.238920][ T9026] usb_new_device+0x1bd4/0x2a30 [ 583.238975][ T9026] hub_event+0x5e7b/0x8a70 [ 583.239066][ T9026] ? kmsan_get_metadata+0x116/0x180 [ 583.239094][ T9026] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 583.239119][ T9026] ? led_work+0x7c0/0x7c0 [ 583.239147][ T9026] process_one_work+0x1688/0x2140 [ 583.239208][ T9026] worker_thread+0x10bc/0x2730 [ 583.239237][ T9026] ? kmsan_get_metadata+0x116/0x180 [ 583.239292][ T9026] kthread+0x551/0x590 [ 583.239321][ T9026] ? process_one_work+0x2140/0x2140 [ 583.239353][ T9026] ? kthread_blkcg+0x110/0x110 [ 583.239383][ T9026] ret_from_fork+0x1f/0x30 [ 583.240959][ T9026] Kernel Offset: disabled [ 584.029367][ T9026] Rebooting in 86400 seconds..