tl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 214.042687][ T9882] binder: 9881:9882 unknown command 0 [ 214.073666][ T9882] binder: 9881:9882 ioctl c0306201 20000200 returned -22 [ 214.078961][ T9887] ptrace attach of "/root/syz-executor.4"[9885] was attempted by "/root/syz-executor.4"[9887] [ 214.083340][ T9886] binder: 9883:9886 unknown command 0 05:26:09 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/68, 0x44}], 0x1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 05:26:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40046305, {0x0, 0x40046306, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 214.116853][ T9886] binder: 9883:9886 ioctl c0306201 20000200 returned -22 [ 214.175997][ T9896] overlayfs: option "workdir=./" is useless in a non-upper mount, ignore [ 214.199242][ T9901] new mount options do not match the existing superblock, will be ignored [ 214.215687][ T9902] binder: 9899:9902 unknown command 0 05:26:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 214.215883][ T9896] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 214.272590][ T9902] binder: 9899:9902 ioctl c0306201 20000200 returned -22 [ 214.273648][ T9908] binder: 9906:9908 unknown command 0 [ 214.290237][ T9901] new mount options do not match the existing superblock, will be ignored 05:26:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) 05:26:09 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x2}) [ 214.332958][ T9908] binder: 9906:9908 ioctl c0306201 20000200 returned -22 05:26:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40046305, {0x0, 0x40046306, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 214.443930][ T9917] binder: 9916:9917 unknown command 0 [ 214.459941][ T9919] binder: 9914:9919 ioctl c018620c 20000080 returned -22 [ 214.467079][ T9917] binder: 9916:9917 ioctl c0306201 20000200 returned -22 [ 214.481202][ T9920] overlayfs: option "workdir=./" is useless in a non-upper mount, ignore 05:26:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0x4018620d, &(0x7f0000000080)) 05:26:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40046305, {0x0, 0x40046306, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 214.518478][ T9926] binder: 9924:9926 unknown command 0 [ 214.521597][ T9920] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 214.552742][ T9926] binder: 9924:9926 ioctl c0306201 20000200 returned -22 05:26:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) 05:26:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}], 0x1}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, 0x0, 0x41) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0xd000000, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 05:26:10 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) [ 214.682362][ T9933] binder: 9931:9933 unknown command 0 [ 214.699611][ T9933] binder: 9931:9933 ioctl c0306201 20000200 returned -22 [ 214.737373][ T9938] binder: 9932:9938 unknown command 0 [ 214.757541][ T9938] binder: 9932:9938 ioctl c0306201 20000200 returned -22 05:26:10 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40046305, {0x0, 0x40046306, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 214.787992][ T9942] overlayfs: workdir and upperdir must reside under the same mount [ 214.791781][ T9943] overlayfs: unrecognized mount option "upper" or missing value 05:26:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:10 executing program 4: creat(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x1) dup3(r0, r2, 0x0) 05:26:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:10 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40046305, {0x0, 0x40046306, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 214.880463][ T9956] binder: 9954:9956 unknown command 0 [ 214.885967][ T9956] binder: 9954:9956 ioctl c0306201 20000200 returned -22 05:26:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x0) 05:26:10 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) [ 214.960239][ T28] audit: type=1804 audit(1595913970.365:16): pid=9959 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir158647785/syzkaller.KkYKnZ/88/bus" dev="sda1" ino=16191 res=1 [ 215.017280][ T9961] overlayfs: workdir and upperdir must reside under the same mount [ 215.025538][ T9962] binder: 9958:9962 unknown command 0 05:26:10 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x30, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0xc, &(0x7f00000000c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x3a}]}, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4}}, {0x72, &(0x7f0000000180)=@string={0x72, 0x3, "3eabb964ecb319e1658eed6cec3bc9f8641ff59188373c62ea5e44040c206bf0aa95fcd4daa0075d7bf513c20c7d6ff1611c1c2decc6e5174e6ee868965550771b80570e896fbbe1158887b90e31985107b1218a67e1f339c26383f597c18d01220263c5b0c0875ce51ee6174adb0868"}}]}) 05:26:10 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40046305, {0x0, 0x40046306, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 215.063747][ T9962] binder: 9958:9962 ioctl c0306201 20000200 returned -22 [ 215.083592][ T28] audit: type=1804 audit(1595913970.395:17): pid=9959 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir158647785/syzkaller.KkYKnZ/88/bus" dev="sda1" ino=16191 res=1 05:26:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 215.126453][ T9971] overlayfs: unrecognized mount option "upper" or missing value [ 215.144648][ T28] audit: type=1804 audit(1595913970.395:18): pid=9959 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir158647785/syzkaller.KkYKnZ/88/bus" dev="sda1" ino=16191 res=1 05:26:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 215.223542][ T28] audit: type=1804 audit(1595913970.415:19): pid=9959 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir158647785/syzkaller.KkYKnZ/88/bus" dev="sda1" ino=16191 res=1 05:26:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup3(r0, r1, 0x0) 05:26:10 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upper']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) [ 215.272119][ T9981] overlayfs: workdir and upperdir must reside under the same mount [ 215.284844][ T9983] binder: 9980:9983 unknown command 0 [ 215.295372][ T9984] binder: 9982:9984 ioctl c0306201 0 returned -14 [ 215.307198][ T9983] binder: 9980:9983 ioctl c0306201 20000200 returned -22 05:26:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 215.359348][ T28] audit: type=1804 audit(1595913970.425:20): pid=9964 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir158647785/syzkaller.KkYKnZ/88/bus" dev="sda1" ino=16191 res=1 [ 215.413420][ T9989] overlayfs: unrecognized mount option "upper" or missing value [ 215.430346][ T2601] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 215.458293][ T9996] binder: 9993:9996 unknown command 0 [ 215.459444][ T9995] overlayfs: failed to resolve './file1': -2 [ 215.476406][ T28] audit: type=1804 audit(1595913970.425:21): pid=9959 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir158647785/syzkaller.KkYKnZ/88/bus" dev="sda1" ino=16191 res=1 [ 215.478603][ T9997] binder: 9992:9997 ioctl c0306201 0 returned -14 05:26:10 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 215.510415][ T9996] binder: 9993:9996 ioctl c0306201 20000200 returned -22 [ 215.626915][T10002] overlayfs: workdir and upperdir must be separate subtrees [ 215.630380][T10001] overlayfs: failed to resolve './file1': -2 [ 215.700360][ T2601] usb 5-1: Using ep0 maxpacket: 16 [ 215.900312][ T2601] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 216.070232][ T2601] usb 5-1: New USB device found, idVendor=056a, idProduct=0030, bcdDevice= 0.40 [ 216.079383][ T2601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.088502][ T2601] usb 5-1: Product: syz [ 216.093301][ T2601] usb 5-1: Manufacturer: ꬾ撹돬蹥泭㯬ὤ釵㞈戼廪ф‌閪퓼ꃚ崇숓紌ᱡⴜ웬៥湎棨喖睐耛๗澉蠕릇ㄎ冘넇訡㧳揂솗ƍȢ앣산岇ụ៦栈 [ 216.112474][ T2601] usb 5-1: SerialNumber: syz [ 216.151081][ T2601] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 216.352468][ T2601] usb 5-1: USB disconnect, device number 12 05:26:12 executing program 4: r0 = creat(&(0x7f00000002c0)='./file0/file0\x00', 0x108) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/98, 0x62}}], 0x1, 0x120, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x363) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x9000, 0x0, 0x40, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r5, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x807a}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120203010902243280410ff9ff08040080000301000009210000000122000009058103000000000046b649475ba74b551b06a22218893cde9c3f8f37ab13e77c46f04c34368af233d480cb96be8384335c55b9f51690672cb5b92251b1d53042585427c4d473e7eab636a47c7359bd26cf06aae28e57214e6f332fbff80c1a5e162ae855a9dcbf3bf61e698a165d68df4d3ed438bd3c8db29a5b4a828dd7de583b34f8f8008eec1cc1b53589903926"], &(0x7f0000000500)={0x0, 0x0, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="010f0b000264323684"]}) 05:26:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup3(r0, r1, 0x0) 05:26:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:26:12 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 216.906024][T10027] binder: 10023:10027 ioctl c0306201 0 returned -14 [ 216.918099][T10029] binder: 10022:10029 unknown command 0 [ 216.924673][T10029] binder: 10022:10029 ioctl c0306201 20000200 returned -22 [ 216.935205][T10026] overlayfs: failed to resolve './file1': -2 [ 216.948915][T10028] overlayfs: workdir and upperdir must be separate subtrees 05:26:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:12 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:26:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 217.093592][T10044] binder: 10039:10044 unknown command 0 [ 217.115376][T10044] binder: 10039:10044 ioctl c0306201 20000200 returned -22 [ 217.178795][T10052] overlayfs: workdir and upperdir must be separate subtrees [ 217.389998][ T3849] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.689875][ T3849] usb 5-1: device descriptor read/64, error 18 [ 218.089767][ T3849] usb 5-1: device descriptor read/64, error 18 [ 218.369679][ T3849] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 218.689710][ T3849] usb 5-1: device descriptor read/64, error 18 [ 219.109559][ T3849] usb 5-1: device descriptor read/64, error 18 [ 219.230655][ T3849] usb usb5-port1: attempt power cycle 05:26:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x238, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x1a0, 0x3c8, 0x3c8, 0x1a0, 0x3c8, 0x3, 0x0, {[{{@ip={@empty, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xc8f1, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x60], 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x298) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x402000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="08e300007063000c3b0d8a003f00000000000000ff00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e30000000000800", @ANYRES32=0x0, @ANYBLOB], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) tkill(0x0, 0x3c) wait4(0x0, 0x0, 0x0, 0x0) 05:26:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:26:15 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) [ 219.940992][ T3849] usb 5-1: new high-speed USB device number 15 using dummy_hcd 05:26:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) dup3(r0, r1, 0x0) 05:26:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 220.045924][T10073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.046214][T10072] binder: 10065:10072 unknown command 0 [ 220.057302][T10073] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.075531][T10074] overlayfs: failed to resolve './fil': -2 05:26:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:15 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 05:26:15 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) [ 220.127273][T10072] binder: 10065:10072 ioctl c0306201 20000200 returned -22 05:26:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 05:26:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:15 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x1ff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, "206eb0f7adf9f2bad364b6b8eabe80581aa29e4c5b1322a8bb63441acaf5709eddd9552e7306e578b5d3d06c2d1f553ecaff40e91dc7f4e873b78aabc98345af", "aa3a11c60303fe9b8483676361ecd44b55c0e6e7696095b500a666d7956926d506e403d020ee0f8ce8512732c6508713c1eed2cbf89ea3d413440cd230dfd44a", "70ad56e8f955d5c71953e5e71a148b9b0bb63d6b8b5f690255a83e5e92d49127"}) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) sendto$inet6(r0, &(0x7f0000000100)="05044a00a8fd3e0000000200c52cf7c25975e605b02fe0357f2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f462f4c73", 0xfdf8, 0x0, 0x0, 0x1d3) 05:26:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) dup3(r0, r1, 0x0) 05:26:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 220.286394][T10092] binder: 10091:10092 unknown command 0 [ 220.293441][T10092] binder: 10091:10092 ioctl c0306201 20000200 returned -22 [ 220.315722][T10093] overlayfs: failed to resolve './fil': -2 05:26:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40046305, {0x0, 0x40046306, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:15 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./fil']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) [ 220.424445][T10106] binder: 10104:10106 unknown command 0 [ 220.442269][ T3849] usb 5-1: device not accepting address 15, error -71 [ 220.451997][T10106] binder: 10104:10106 ioctl c0306201 20000200 returned -22 05:26:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:15 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 220.483727][T10113] binder: 10109:10113 unknown command 0 [ 220.504144][T10113] binder: 10109:10113 ioctl c0306201 20000200 returned -22 [ 220.526303][T10115] overlayfs: failed to resolve './fil': -2 05:26:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0xa, 0x6, 0x5f8, 0x2e8, 0x408, 0xf8, 0x408, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'syzkaller1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@dev, @local, [], [], 'veth1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x6000, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@ipv6header={{0x28, 'ipv6header\x00'}}]}, @inet=@TOS={0x28, 'TOS\x00'}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'gretap0\x00', 'veth0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip6_vti0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) 05:26:15 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) dup3(r0, r1, 0x0) 05:26:16 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:16 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:26:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 220.643615][T10124] x_tables: duplicate underflow at hook 3 05:26:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x1, 0x0) 05:26:16 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x630b, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 220.746423][T10132] overlayfs: failed to resolve './file': -2 05:26:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:16 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:16 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1) 05:26:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:26:16 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(0xffffffffffffffff, r1, 0x0) [ 220.942435][T10150] binder: 10148:10150 ioctl c0306201 0 returned -14 [ 220.949296][ T3850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 220.951262][T10149] new mount options do not match the existing superblock, will be ignored [ 220.964262][T10151] overlayfs: failed to resolve './file': -2 [ 221.010684][T10149] new mount options do not match the existing superblock, will be ignored [ 221.220260][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 221.370269][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 221.381288][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 221.393785][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 221.404093][ T3850] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.489204][ T3850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 221.498300][ T3850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 221.507280][ T3850] usb 2-1: SerialNumber: syz [ 221.529562][T10127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 221.536473][T10127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 221.549753][ T3850] hub 2-1:1.0: bad descriptor, ignoring hub [ 221.555702][ T3850] hub: probe of 2-1:1.0 failed with error -5 [ 221.752206][T10127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 221.759512][T10127] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 221.991015][ T3850] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 222.638893][T10127] usb 2-1: reset high-speed USB device number 3 using dummy_hcd [ 222.888869][T10127] usb 2-1: Using ep0 maxpacket: 8 [ 223.039659][T10170] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 223.046501][T10170] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 223.108759][ C0] usblp0: nonzero read bulk status received: -71 [ 223.288957][ T3850] usb 2-1: USB disconnect, device number 3 [ 223.296217][ T3850] usblp0: removed [ 224.028632][ T3850] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 224.268574][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 224.389743][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 224.401349][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 224.412935][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 224.423023][ T3850] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 224.509784][ T3850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 224.518908][ T3850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 224.526855][ T3850] usb 2-1: SerialNumber: syz [ 224.549219][T10186] raw-gadget gadget: fail, usb_ep_enable returned -22 05:26:20 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:20 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:26:20 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 05:26:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(0xffffffffffffffff, r1, 0x0) [ 224.556062][T10186] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 224.597271][ T3850] usb 2-1: can't set config #1, error -71 [ 224.606723][ T3850] usb 2-1: USB disconnect, device number 4 [ 224.626684][T10198] overlayfs: failed to resolve './file': -2 05:26:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:20 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) [ 224.678304][T10209] binder: 10199:10209 ioctl c0306201 0 returned -14 05:26:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:26:20 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 05:26:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 224.764281][T10212] overlayfs: filesystem on './file0' not supported as upperdir [ 224.791985][T10219] binder: 10216:10219 ioctl c0306201 0 returned -14 05:26:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 225.008610][ T3850] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 225.258401][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 225.378607][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 225.389640][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 225.401984][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 225.412749][ T3850] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 225.498493][ T3850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 225.507492][ T3850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.518865][ T3850] usb 2-1: SerialNumber: syz [ 225.538753][T10202] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 225.545660][T10202] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 225.558920][ T3850] hub 2-1:1.0: bad descriptor, ignoring hub [ 225.564927][ T3850] hub: probe of 2-1:1.0 failed with error -5 [ 225.766336][T10202] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 225.773820][T10202] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 226.012322][ T3850] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 226.628166][T10202] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 226.868103][T10202] usb 2-1: Using ep0 maxpacket: 8 [ 227.008696][T10251] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 227.015668][T10251] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 227.078246][ C0] usblp0: nonzero read bulk status received: -71 [ 227.239278][ T17] usb 2-1: USB disconnect, device number 5 [ 227.246952][ T17] usblp0: removed 05:26:23 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(0xffffffffffffffff, r1, 0x0) 05:26:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:26:23 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:23 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)="89", 0x1}], 0x2}}, {{&(0x7f0000000640)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}}], 0x2, 0x0) 05:26:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:23 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(0x0) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:26:23 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_matches\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 05:26:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:23 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, 0xffffffffffffffff, 0x0) [ 228.078738][ T17] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 228.337853][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 228.457938][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 228.468900][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 228.478817][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 228.488738][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.577879][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 228.587014][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.596223][ T17] usb 2-1: SerialNumber: syz [ 228.618353][T10274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 228.625231][T10274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 228.638230][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 228.644370][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 228.843972][T10274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 228.851372][T10274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 229.079471][ T17] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 229.687649][T10274] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 229.937572][T10274] usb 2-1: Using ep0 maxpacket: 8 [ 230.088145][T10315] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 230.095010][T10315] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 230.147511][ C0] usblp0: nonzero read bulk status received: -71 [ 230.319565][ T3850] usb 2-1: USB disconnect, device number 6 [ 230.330699][ T3850] usblp0: removed 05:26:26 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 05:26:26 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:26 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000900)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x150, 0x150, 0x250, 0x0, 0x388, 0x238, 0x238, 0x388, 0x238, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158, 'policy\x00'}, {[{@ipv6=@private1, [], @ipv4=@loopback}, {@ipv4=@empty, [], @ipv4=@remote}, {@ipv6=@loopback, [], @ipv4=@loopback}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv6=@dev}], 0x6}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 05:26:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, 0xffffffffffffffff, 0x0) 05:26:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) [ 230.890614][T10336] overlayfs: failed to resolve './file0': -2 [ 230.914034][T10338] xt_policy: output policy not valid in PREROUTING and INPUT [ 230.929512][T10344] xt_policy: output policy not valid in PREROUTING and INPUT 05:26:26 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000100)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200407fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001080)=""/4112, 0x1010}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="0b72664009e0f05263be633bcc8b804457657ef1d969a8d2b4d12023efccd1f80dd91e6eb17169d2a30ca8869a842f9674e72063ab7dbb73a52c4ad3a84d76bb560b19cc3fbfa20164c6a0fcbc429331bcff4ce2be3cab1c8efdae09a173a13529b6da0f35670b5b23452fd73a1150c4f49896c190683b7e2976a1eea5fdddb3496ecd4c55", 0x85}, {&(0x7f0000000280)="97c8ed7cde62ae41666efa859a922c9e8b096cecba0acd6e3b01682252ac09f404fcd4d2eab60889fa092061faa1a04908d2667bbc166358a86fc87ed0042fe2a173820f3e2ff1a0843dd944e8d847d018d93a6e6b14021aa288e7f54f2f", 0x5e}, {&(0x7f00000020c0)="0cef779eb4a20108b5ba8e64de04dac71689559da0b3306b7fb982e943bc3a1c25c68104a9069bff9c3a2014cae3f19de3cb9d64aab8a8bb27db9322309d890920b73b9c33f1", 0x46}], 0x3}}], 0x1, 0x0) shutdown(r0, 0x1) 05:26:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 230.946389][T10335] overlayfs: failed to resolve 'bus': -2 05:26:26 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), 0x0, 0x0, 0x0}) 05:26:26 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac', 0x3) write$binfmt_misc(r1, &(0x7f0000000c40)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xffff) fcntl$addseals(r1, 0x409, 0x8) fsetxattr$system_posix_acl(r1, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000000c0), 0x24, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, 0xffffffffffffffff, 0x0) [ 231.105427][T10356] overlayfs: failed to resolve './file0': -2 [ 231.162776][ T17] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 231.417358][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 231.537377][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 231.551631][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 231.562484][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 231.575487][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 231.667500][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 231.676557][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 231.685204][ T17] usb 2-1: SerialNumber: syz [ 231.707802][T10341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 231.714708][T10341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 231.727852][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 231.733795][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 231.933505][T10341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 231.941144][T10341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 232.178508][ T17] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 232.797133][T10341] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 233.037066][T10341] usb 2-1: Using ep0 maxpacket: 8 [ 233.177351][T10386] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 233.184231][T10386] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 233.247000][ C1] usblp0: nonzero read bulk status received: -71 [ 233.404975][ T3850] usb 2-1: USB disconnect, device number 7 [ 233.413379][ T3850] usblp0: removed 05:26:29 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_disconnect(r0) 05:26:29 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(0x0, 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:29 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001080)=ANY=[], 0x588) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[], 0x58) 05:26:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2d, 0x0, 0xffffffffffffff9c}) 05:26:29 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x1f0, 0x1f0, 0x130, 0xffffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "88ce88c978b989210b58f75100f6c4653667615eb8d69ab9e07db965c6167d30ce6641b9936d0a4fe34405269687a8d82cd84996dbdefac258da4672b53d6f0d"}}}, {{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88], 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 05:26:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, 0x0) 05:26:29 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) [ 233.993881][T10409] overlayfs: failed to resolve './file0': -2 05:26:29 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 05:26:29 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000000)) [ 234.041302][T10418] binder: 10413:10418 ioctl 10 0 returned -22 05:26:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, 0x0, &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 234.092308][T10419] binder: 10413:10419 ioctl 10 0 returned -22 05:26:29 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f0000000180)=""/4082, 0xff2}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x141, 0x0, 0x0) [ 234.156156][T10426] IPVS: ftp: loaded support on port[0] = 21 [ 234.183169][ T28] audit: type=1804 audit(1595913989.589:22): pid=10422 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir563293435/syzkaller.VI7u1t/113/bus/bus" dev="overlay" ino=16336 res=1 [ 234.216729][T10422] overlayfs: filesystem on './file0' not supported as upperdir [ 234.278703][ T3850] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.331499][ T28] audit: type=1804 audit(1595913989.649:23): pid=10433 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir563293435/syzkaller.VI7u1t/113/bus/bus" dev="overlay" ino=16336 res=1 [ 234.495147][T10426] IPVS: ftp: loaded support on port[0] = 21 [ 234.537673][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 234.677728][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 234.689658][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 234.701621][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 234.712535][ T3850] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 234.746984][ T423] tipc: TX() has been purged, node left! [ 234.806922][ T3850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 234.816017][ T3850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.827005][ T3850] usb 2-1: SerialNumber: syz [ 234.857235][T10412] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 234.864540][T10412] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 234.877403][ T3850] hub 2-1:1.0: bad descriptor, ignoring hub [ 234.883819][ T3850] hub: probe of 2-1:1.0 failed with error -5 [ 235.081738][T10412] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 235.089605][T10412] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 235.322488][ T3850] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 236.356533][ T423] tipc: TX() has been purged, node left! 05:26:35 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_disconnect(r0) 05:26:35 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, 0x0, &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:35 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:35 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:35 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/1864], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x10) [ 239.705184][ T3850] usb 2-1: USB disconnect, device number 8 [ 239.733648][ T3850] usblp0: removed [ 239.767140][T10513] [U] CҮ\Z; 81=!9`FsJsöJ [ 239.804625][T10513] [U]  ;~DJ!hTɄu!bFq7Kрi@fh,o^ 05:26:35 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, 0x0, &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 239.838584][T10502] [U] 9 05:26:35 executing program 4: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 05:26:35 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:35 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000, 0x5}) 05:26:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 240.089980][T10539] [U] CҮ\Z; 81=!9`FsJsöJ [ 240.098783][T10534] [U]  [ 240.111047][T10539] [U] ;~DJ!hTɄu!bFq7Kрi@fh,o^ [ 240.145964][T10536] [U] 9 [ 240.156594][ T3850] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 240.415910][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 240.546102][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 240.559643][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 240.570627][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 240.581232][ T3850] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.681276][ T3850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 240.690396][ T3850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.699396][ T3850] usb 2-1: SerialNumber: syz [ 240.726348][T10520] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 240.733254][T10520] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 240.749650][ T3850] hub 2-1:1.0: bad descriptor, ignoring hub [ 240.755600][ T3850] hub: probe of 2-1:1.0 failed with error -5 [ 240.948027][T10520] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 240.955091][T10520] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 241.191565][ T3850] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 244.359147][ T0] NOHZ: local_softirq_pending 08 [ 244.986485][ T0] NOHZ: local_softirq_pending 08 [ 244.991470][ T0] NOHZ: local_softirq_pending 08 05:26:41 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_disconnect(r0) 05:26:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/1864], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x10) 05:26:41 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:41 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:41 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 05:26:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 245.597267][ T3856] usb 2-1: USB disconnect, device number 9 [ 245.612542][ T3856] usblp0: removed 05:26:41 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) [ 245.690457][T10580] [U] CҮ\Z; 81=!9`FsJsöJ [ 245.727544][T10580] [U]  ;~DJ!hTɄu!bFq7Kрi@fh,o^ 05:26:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:41 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) [ 245.779262][T10568] [U] 9 05:26:41 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edffffbfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000007f000000000000006504000001ed0a0016000000170000000c44000000000000630a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d99edc3a6138d5f728d236619074d6ebdf098bc908f50ad228a40f9411fe7226a4040b96e37c4f46010400000000000029faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7bb2b1ed81d2cf370ee4a2a00ebeb476ea3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb4f8f67b8bb84b0e733a63784ccc214d930cbb7e090d63fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6335eb811a085ca14a7989f9777f600000000000000000000000000000000000000000000000000000000000386000000b854adb4f8080064e8407c6bdb37f4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953b78a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9ef547fd6ee9760d784cb1138e8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857f78b2414aa962a055034cb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6eedc73a2655ba3a3463a0fb9ed379af0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572c921ac1476027772c87d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986a51f9c47f5d7a45906d1dc26c0091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe1a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c6d1b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bde466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb16490cfdc73d02719fa0aa7fadecb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a7900"/1864], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x10) 05:26:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, 0x0) [ 245.879635][T10596] [U] CҮ\Z; 81=!9`FsJsöJ [ 245.910851][T10596] [U]  ;~DJ!hTɄu!bFq7Kрi@fh,o^ [ 245.954280][T10602] overlayfs: missing 'lowerdir' [ 245.963778][T10594] [U] 9 [ 246.085126][ T3856] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 246.325134][ T3856] usb 2-1: Using ep0 maxpacket: 8 [ 246.455178][ T3856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 246.469051][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 246.479993][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 246.490663][ T3856] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 246.575133][ T3856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 246.584160][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 246.593491][ T3856] usb 2-1: SerialNumber: syz [ 246.615595][T10582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 246.622931][T10582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 246.635541][ T3856] hub 2-1:1.0: bad descriptor, ignoring hub [ 246.641606][ T3856] hub: probe of 2-1:1.0 failed with error -5 [ 246.838335][T10582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 246.845999][T10582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 247.086387][ T3856] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 05:26:46 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:46 executing program 0: writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:46 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) 05:26:46 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/1864], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x10) 05:26:46 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, 0x0) [ 251.506512][ T2487] usb 2-1: USB disconnect, device number 10 [ 251.521504][ T2487] usblp0: removed 05:26:47 executing program 0: writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:47 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) [ 251.600479][T10641] overlayfs: missing 'lowerdir' 05:26:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, 0x0) 05:26:47 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 05:26:47 executing program 0: writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x15) ioctl$TCSETSF(r1, 0x540b, 0x0) [ 251.766264][T10652] overlayfs: missing 'lowerdir' [ 252.044404][ T2487] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 252.317281][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 252.448646][ T2487] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 252.481069][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 252.526738][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 252.561110][ T2487] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 252.674639][ T2487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 252.683772][ T2487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 252.694991][ T2487] usb 2-1: SerialNumber: syz [ 252.714624][T10645] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 252.721537][T10645] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 252.753755][ T2487] hub 2-1:1.0: bad descriptor, ignoring hub [ 252.759957][ T2487] hub: probe of 2-1:1.0 failed with error -5 [ 252.958368][T10645] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 252.965476][T10645] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 253.205925][ T2487] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 253.452237][T10937] udc-core: couldn't find an available UDC or it's busy [ 253.459201][T10937] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 253.516292][ T2509] usb 2-1: USB disconnect, device number 11 [ 253.535757][ T2509] usblp0: removed 05:26:49 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:49 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:49 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 05:26:49 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 05:26:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x6) ioctl$TCSETSF(r1, 0x8924, 0x0) [ 254.087664][T10953] overlayfs: missing 'workdir' 05:26:49 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 05:26:49 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:49 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5}) 05:26:49 executing program 4: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x4000, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:26:49 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) [ 254.268061][T10969] overlayfs: missing 'workdir' [ 254.394049][ T17] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 254.653957][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 254.774253][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 254.785337][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 254.795563][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 254.805466][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 254.893977][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 254.903017][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 254.911250][ T17] usb 2-1: SerialNumber: syz [ 254.934393][T10963] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 254.941295][T10963] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 254.954663][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 254.960615][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 255.160876][T10963] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 255.168437][T10963] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 255.405129][ T17] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 12 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 255.654026][T11002] udc-core: couldn't find an available UDC or it's busy [ 255.661044][T11002] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 255.725995][ T3856] usb 2-1: USB disconnect, device number 12 [ 255.751351][ T3856] usblp0: removed 05:26:51 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:51 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:51 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}]}) 05:26:51 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/1864], &(0x7f00000001c0)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x10) 05:26:51 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000}) 05:26:51 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:51 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:51 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) unshare(0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = dup2(r2, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000080)=""/253) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000000)) 05:26:51 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x0, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) [ 256.373194][T11025] overlayfs: missing 'workdir' 05:26:51 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000}) 05:26:51 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 256.468353][T11039] IPVS: ftp: loaded support on port[0] = 21 [ 256.508455][T11045] overlayfs: missing 'lowerdir' [ 256.584479][ T2487] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 256.798424][T11039] IPVS: ftp: loaded support on port[0] = 21 [ 256.840082][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 256.964351][ T2487] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 256.975575][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 256.988108][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 256.998841][ T2487] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 257.043940][ T21] tipc: TX() has been purged, node left! [ 257.083790][ T2487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 257.092808][ T2487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 257.101619][ T2487] usb 2-1: SerialNumber: syz [ 257.124062][T11026] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 257.130981][T11026] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 257.144336][ T2487] hub 2-1:1.0: bad descriptor, ignoring hub [ 257.150297][ T2487] hub: probe of 2-1:1.0 failed with error -5 [ 257.345972][T11026] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 257.352808][T11026] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 257.597191][ T2487] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 257.843404][T11114] udc-core: couldn't find an available UDC or it's busy [ 257.850459][T11114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 257.915560][ T3856] usb 2-1: USB disconnect, device number 13 [ 257.936337][ T3856] usblp0: removed 05:26:53 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket(0x10, 0x803, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:53 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:53 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x0, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:53 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f0000000140)='./bus\x00') r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x10000000000000}) 05:26:53 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) socket$inet6_tcp(0xa, 0x1, 0x0) 05:26:53 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:53 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x0, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) [ 258.522174][T11135] overlayfs: missing 'lowerdir' 05:26:53 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) socket$inet6_tcp(0xa, 0x1, 0x0) 05:26:54 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:26:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) [ 258.623900][ T21] tipc: TX() has been purged, node left! [ 258.708133][T11152] overlayfs: missing 'lowerdir' [ 258.823759][ T3856] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 259.083416][ T3856] usb 2-1: Using ep0 maxpacket: 8 [ 259.213700][ T3856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 259.230341][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 259.241979][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 259.256839][ T3856] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 259.343601][ T3856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 259.357147][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 259.366388][ T3856] usb 2-1: SerialNumber: syz [ 259.393818][T11137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 259.406310][T11137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 259.438783][ T3856] hub 2-1:1.0: bad descriptor, ignoring hub [ 259.447854][ T3856] hub: probe of 2-1:1.0 failed with error -5 [ 259.649511][T11137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 259.658763][T11137] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 259.897516][ T3856] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 260.523280][T11137] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 260.783209][T11137] usb 2-1: Using ep0 maxpacket: 8 [ 260.943833][T11169] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 260.950739][T11169] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 261.003196][ C1] usblp0: nonzero read bulk status received: -71 [ 261.166142][ T2487] usb 2-1: USB disconnect, device number 14 [ 261.173993][ T2487] usblp0: removed 05:26:57 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:26:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) socket$inet6_tcp(0xa, 0x1, 0x0) 05:26:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:57 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:57 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:26:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10001}, 0x1c) 05:26:57 executing program 2: openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0f009f488d63bf5c87eb84494ed4a2168f054c9848075210662f3c2467137844bd1809e69c940b866a2dedff5e8c1a4688da22ce6116f5ef9011d0d39", 0x79}], 0x1) 05:26:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="06", 0x1}], 0x1) 05:26:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) socket$inet6_tcp(0xa, 0x1, 0x0) [ 261.732022][T11190] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 261.770752][T11190] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 05:26:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:26:57 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, 0x0, 0x0) [ 261.922156][T11210] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 261.956774][T11210] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 262.026390][ T2509] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 262.293040][ T2509] usb 2-1: Using ep0 maxpacket: 8 [ 262.413378][ T2509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 262.424537][ T2509] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 262.435690][ T2509] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 262.446009][ T2509] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 262.533224][ T2509] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 262.542280][ T2509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 262.551064][ T2509] usb 2-1: SerialNumber: syz [ 262.583622][T11195] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 262.590640][T11195] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 262.603676][ T2509] hub 2-1:1.0: bad descriptor, ignoring hub [ 262.609607][ T2509] hub: probe of 2-1:1.0 failed with error -5 [ 262.806942][T11195] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 262.814298][T11195] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 263.048059][ T2509] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 263.544230][ T0] NOHZ: local_softirq_pending 08 [ 263.652858][T11195] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 263.892838][T11195] usb 2-1: Using ep0 maxpacket: 8 [ 264.064199][T11227] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 264.071182][T11227] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 264.122839][ C0] usblp0: nonzero read bulk status received: -71 [ 264.313197][ T17] usb 2-1: USB disconnect, device number 15 [ 264.320806][ T17] usblp0: removed 05:27:00 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 05:27:00 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, 0x0, 0x0) 05:27:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:00 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, 0x0, 0x0) 05:27:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:27:00 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, 0x0, 0x0) 05:27:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) [ 264.834174][T11247] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 264.860965][T11247] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 05:27:00 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000000000), 0x10) 05:27:00 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, 0x0, 0x0) 05:27:00 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:00 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, 0x0, 0x0) [ 265.002123][T11266] sock: sock_set_timeout: `syz-executor.5' (pid 11266) tries to set negative timeout [ 265.032133][T11270] sock: sock_set_timeout: `syz-executor.5' (pid 11270) tries to set negative timeout [ 265.162779][ T17] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 265.402675][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 265.465518][ T0] NOHZ: local_softirq_pending 08 [ 265.522796][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 265.533965][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 265.544890][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 265.555543][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 265.642723][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 265.651936][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 265.661093][ T17] usb 2-1: SerialNumber: syz [ 265.682991][T11253] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 265.689978][T11253] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 265.703127][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 265.709162][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 265.905016][T11253] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 265.912026][T11253] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 266.143969][ T17] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 266.183155][ T17] usb 2-1: USB disconnect, device number 16 [ 266.190460][ T17] usblp0: removed [ 266.692585][ T17] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 266.932486][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 267.052567][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 267.068646][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 267.080067][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 267.090758][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 267.182713][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 267.191961][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.200725][ T17] usb 2-1: SerialNumber: syz [ 267.223201][T11253] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 267.230095][T11253] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 267.243020][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 267.248966][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 267.472501][ T17] usblp: can't set desired altsetting 0 on interface 0 [ 267.502990][ T17] usb 2-1: USB disconnect, device number 17 05:27:03 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:03 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600), 0x0) 05:27:03 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0), 0x0) 05:27:03 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket(0x400000000000010, 0x802, 0x0) write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x10) 05:27:03 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 05:27:03 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600), 0x0) 05:27:03 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0), 0x0) 05:27:03 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540a, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) 05:27:03 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600), 0x0) 05:27:03 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0), 0x0) [ 268.302874][ T17] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 268.542364][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 268.662564][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 268.673571][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 268.684666][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 268.695311][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 268.782612][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 268.791776][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.799991][ T17] usb 2-1: SerialNumber: syz [ 268.822962][T11329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 268.829879][T11329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 268.842823][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 268.848868][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 269.058631][T11329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 269.066080][T11329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 269.314212][ T17] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 269.353178][ T17] usb 2-1: USB disconnect, device number 18 [ 269.366026][ T17] usblp0: removed [ 269.872184][ T17] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 270.112169][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 270.232458][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 270.243439][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 270.254929][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 270.265816][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.352513][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 270.361671][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 270.369850][ T17] usb 2-1: SerialNumber: syz [ 270.392613][T11329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 270.399527][T11329] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 270.412774][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 270.418728][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 270.642219][ T17] usblp: can't set desired altsetting 0 on interface 0 [ 270.672780][ T17] usb 2-1: USB disconnect, device number 19 05:27:06 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:06 executing program 5: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="08000100c21b7970cd75792f23"], 0x64}}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r0) 05:27:06 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}], 0x1) 05:27:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 05:27:06 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 05:27:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 05:27:06 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}], 0x1) 05:27:06 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) [ 271.265639][T11403] Invalid option length (1047665) for dns_resolver key 05:27:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 05:27:06 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 05:27:06 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}], 0x1) [ 271.492871][ T17] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 271.735274][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 271.852861][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 271.869719][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 271.890791][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 271.911647][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 272.012094][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 272.021172][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 272.029506][ T17] usb 2-1: SerialNumber: syz [ 272.052269][T11400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 272.060426][T11400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 272.072448][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 272.078871][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 272.275369][T11400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 272.282992][T11400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 272.515721][ T17] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 272.552707][ T17] usb 2-1: USB disconnect, device number 20 [ 272.559944][ T17] usblp0: removed [ 273.071845][ T17] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 273.311809][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 273.431978][ T17] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 273.445550][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 273.456758][ T17] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 273.467474][ T17] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.551946][ T17] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 273.561008][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.569677][ T17] usb 2-1: SerialNumber: syz [ 273.592544][T11400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 273.599385][T11400] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 273.612172][ T17] hub 2-1:1.0: bad descriptor, ignoring hub [ 273.618173][ T17] hub: probe of 2-1:1.0 failed with error -5 [ 273.822065][ T17] usblp: can't set desired altsetting 0 on interface 0 [ 273.852599][ T17] usb 2-1: USB disconnect, device number 21 05:27:09 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:09 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:09 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1) 05:27:09 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) 05:27:09 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 05:27:09 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x12, &(0x7f0000001180)={0x0, 0x0, 0xffffbfffffffc58e}) 05:27:09 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) 05:27:09 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:09 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1) 05:27:09 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:09 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) 05:27:09 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)}], 0x1) [ 274.651870][ T3856] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 274.921663][ T3856] usb 2-1: Using ep0 maxpacket: 8 [ 275.052067][ T3856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 275.063273][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 275.075792][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 275.085887][ T3856] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 275.171925][ T3856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 275.181036][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 275.189201][ T3856] usb 2-1: SerialNumber: syz [ 275.212117][T11473] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 275.219051][T11473] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 275.233190][ T3856] hub 2-1:1.0: bad descriptor, ignoring hub [ 275.239155][ T3856] hub: probe of 2-1:1.0 failed with error -5 [ 275.438629][T11473] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 275.446408][T11473] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 275.682919][ T3856] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 275.732310][ T3856] usb 2-1: USB disconnect, device number 22 [ 275.739429][ T3856] usblp0: removed [ 276.241544][ T3856] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 276.491500][ T3856] usb 2-1: Using ep0 maxpacket: 8 [ 276.611681][ T3856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 276.622665][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 276.632657][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 276.642563][ T3856] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 276.741965][ T3856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 276.751110][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 276.759829][ T3856] usb 2-1: SerialNumber: syz [ 276.792106][T11473] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 276.798997][T11473] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 276.814229][ T3856] hub 2-1:1.0: bad descriptor, ignoring hub [ 276.820182][ T3856] hub: probe of 2-1:1.0 failed with error -5 [ 277.031576][ T3856] usblp: can't set desired altsetting 0 on interface 0 [ 277.065800][ T3856] usb 2-1: USB disconnect, device number 23 05:27:12 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:12 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40980}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@empty, @in6=@mcast2, 0x4e22, 0xffff, 0x0, 0x3f68, 0x0, 0x0, 0x0, 0x73}, {0x3, 0x4000005, 0x9, 0x0, 0x3, 0x0, 0x0, 0xffffffff00000001}, {0x3, 0x0, 0x0, 0x7628}, 0x4, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev, 0x0, 0xff}, 0x0, @in=@multicast2, 0x3506, 0x1, 0x1, 0x80, 0x63}}, 0xe8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 05:27:12 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:12 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="08cb1fb443d2ae808dee5cf7e25a3bdd0c38dff5313d21c23960a04673844a73acd8c3b64a17ee15000000000000000000000000000000e7fc0a1eafb0", 0x3d}], 0x1) 05:27:12 executing program 0: sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="08000100c21b7970cd75792f23"], 0x64}}, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000280)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000200)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307df03000", 0xfffff, r0) 05:27:12 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 277.557974][T11543] [U] CҮ\Z; 81=!9`FsJsöJ [ 277.582533][T11537] [U]  05:27:13 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:13 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)='\b', 0x1}], 0x1) [ 277.605476][T11548] Invalid option length (1047661) for dns_resolver key 05:27:13 executing program 0: 05:27:13 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) 05:27:13 executing program 0: [ 277.659164][T11553] [U]  05:27:13 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) [ 277.853488][ T2601] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 278.101324][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 278.221394][ T2601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 278.234872][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 278.245741][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 278.256331][ T2601] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 278.341423][ T2601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 278.350442][ T2601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.358597][ T2601] usb 2-1: SerialNumber: syz [ 278.383303][T11545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 278.390207][T11545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 278.401979][ T2601] hub 2-1:1.0: bad descriptor, ignoring hub [ 278.407921][ T2601] hub: probe of 2-1:1.0 failed with error -5 [ 278.610128][T11545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 278.617884][T11545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 278.852952][ T2601] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 278.891799][ T2601] usb 2-1: USB disconnect, device number 24 [ 278.898771][ T2601] usblp0: removed [ 279.421199][ T2601] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 279.671189][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 279.791262][ T2601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 279.802320][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 279.812509][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 279.822615][ T2601] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.921582][ T2601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 279.930591][ T2601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 279.939544][ T2601] usb 2-1: SerialNumber: syz [ 279.971856][T11545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 279.978729][T11545] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 279.991779][ T2601] hub 2-1:1.0: bad descriptor, ignoring hub [ 279.997729][ T2601] hub: probe of 2-1:1.0 failed with error -5 [ 280.221174][ T2601] usblp: can't set desired altsetting 0 on interface 0 [ 280.251955][ T2601] usb 2-1: USB disconnect, device number 25 05:27:16 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:16 executing program 4: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:16 executing program 0: 05:27:16 executing program 5: 05:27:16 executing program 2: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) 05:27:16 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 05:27:16 executing program 0: 05:27:16 executing program 5: 05:27:16 executing program 2: 05:27:16 executing program 0: 05:27:16 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:16 executing program 0: [ 281.072153][ T2509] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 281.331062][ T2509] usb 2-1: Using ep0 maxpacket: 8 [ 281.451293][ T2509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 281.462298][ T2509] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 281.474136][ T2509] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 281.484499][ T2509] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.571251][ T2509] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 281.580387][ T2509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 281.588643][ T2509] usb 2-1: SerialNumber: syz [ 281.611517][T11617] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 281.618413][T11617] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 281.631833][ T2509] hub 2-1:1.0: bad descriptor, ignoring hub [ 281.637773][ T2509] hub: probe of 2-1:1.0 failed with error -5 [ 281.832288][T11617] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 281.839174][T11617] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 282.072262][ T2509] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 282.112426][ T2509] usb 2-1: USB disconnect, device number 26 [ 282.119548][ T2509] usblp0: removed [ 282.620929][ T2509] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 282.860948][ T2509] usb 2-1: Using ep0 maxpacket: 8 [ 282.984139][ T2509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 282.995231][ T2509] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 283.006135][ T2509] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 283.016548][ T2509] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 283.100975][ T2509] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 283.110017][ T2509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.118172][ T2509] usb 2-1: SerialNumber: syz [ 283.141292][T11617] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 283.148124][T11617] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 283.161540][ T2509] hub 2-1:1.0: bad descriptor, ignoring hub [ 283.167493][ T2509] hub: probe of 2-1:1.0 failed with error -5 [ 283.375869][ T2509] usblp: can't set desired altsetting 0 on interface 0 [ 283.411540][ T2509] usb 2-1: USB disconnect, device number 27 05:27:19 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:19 executing program 5: 05:27:19 executing program 2: 05:27:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:19 executing program 0: 05:27:19 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 05:27:19 executing program 0: 05:27:19 executing program 2: 05:27:19 executing program 5: 05:27:19 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:19 executing program 5: 05:27:19 executing program 0: [ 284.440792][ T3848] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 284.720722][ T3848] usb 2-1: device descriptor read/64, error 18 [ 285.140699][ T3848] usb 2-1: device descriptor read/64, error 18 [ 285.410652][ T3848] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 285.680647][ T3848] usb 2-1: device descriptor read/64, error 18 [ 286.080603][ T3848] usb 2-1: device descriptor read/64, error 18 [ 286.201756][ T3848] usb usb2-port1: attempt power cycle 05:27:22 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:22 executing program 2: 05:27:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:27:22 executing program 5: dup2(0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e", 0x43) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 05:27:22 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:27:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) [ 286.924701][ T3848] usb 2-1: new high-speed USB device number 30 using dummy_hcd 05:27:22 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f00000006c0), 0x0, &(0x7f0000000bc0)=""/106, 0x6a}}, {{&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, 0x0}, 0x20000}, {{&(0x7f0000000ec0)=@tipc=@id, 0x80, &(0x7f00000023c0)=[{&(0x7f0000000340)=""/155, 0x92}, {0x0}], 0x2, &(0x7f00000002c0)=""/79, 0x4f}}, {{&(0x7f0000004800)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000000180)=""/75, 0x4b}}], 0x1a, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0xfffffffc, 0x6, 0x0, 0x4}, 0x0) mkdir(&(0x7f0000000740)='./file0\x00', 0x0) dup(0xffffffffffffffff) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x771bf) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) socket$inet(0x2, 0x0, 0x0) 05:27:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:22 executing program 0: r0 = getpgid(0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x7, 0x101082) r2 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r1, 0x4c01) 05:27:22 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:27:22 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) [ 287.440674][ T3848] usb 2-1: device not accepting address 30, error -71 [ 287.820487][ T3848] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 288.020740][ T3848] usb 2-1: device descriptor read/8, error -61 [ 288.300491][ T3848] usb 2-1: device descriptor read/8, error -61 [ 288.421161][ T3848] usb usb2-port1: unable to enumerate USB device 05:27:25 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x0, 0xe, 0x201}, 0x14}}, 0x0) 05:27:25 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrusage(0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x0, 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x3, 0x0) sync() 05:27:25 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:27:25 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x6, 0x3, 0x400000000000000, 0x0, 0x0, 0x0, 0x8]}) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)=@phonet={0x23, 0x1, 0x0, 0x1a}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000640)="e6", 0x1}, {0x0}, {0x0}], 0x3, &(0x7f0000001840)=ANY=[], 0x228}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x2, 0x0, @local}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4004240b, &(0x7f0000000480)={0x0, 0x77, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext, 0x0, 0xb9b0, 0x6, 0x0, 0x6, 0x6, 0x9}) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:27:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x29, 0x17, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x100000001, 0x0, 0x28120001) mmap(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x1000000, 0x40010, r1, 0xdfd71000) r2 = socket$inet6(0xa, 0x3, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x20, 0x3f, 0x5, 0x8}}, 0x118) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="38007d5b62807e147ce7ef1fb38205857da51b9c00000000935c7ce547322c284c3dc300000000000a3a43f265d8eb124ff7d7d04131aa081c48a1490ef0551492fcacb904ef781b3d905bc6de0eca4ce78a2f77fe35f98f1ce5e7a20ae6fec43a2d347fc15105d22a3778144b43022d25fbf5e450e85476181bd47d70d059b5323376931ed39b1b41f07fc948683eae3cbd500f9039f9404564dfa9d93d40f4797cb15a8fd6a6ffb9ea7469d0adee5a97b1972d4bc143745b7dcdedffd1ceec2ee01b2b1d643c9cf33652ec7f87c49e431139f7b485139606f307c7c4c3a90274caf76a84d802ddc14e0b9b5aa7e3e1b97d23470df631bdd2165d3abeebdd1f8f8175984fca5b463cf3bfa34625a1ba5cac0466162158f0574de1698843eb3da19835f11beeb70000c6459c89b5f9d7d4d05e41a49961be3bcd8abaacf4b7bc72b62b323478a1057385c0ec494d87ab501e4219b4ce62bd4073f32e3340db0feae32f10515f498ad82206bc974f65fb55b6b5cf08b793a5fe60c0eede54645beb4f295b"], 0x38}, 0x8}, 0x0) poll(&(0x7f0000000080)=[{r4}], 0x1, 0x3) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f000000ac80), 0x66, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000003c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_CAP(r6, 0xc010640c, &(0x7f0000000400)={0x13}) 05:27:25 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x2c0000) getrusage(0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sync() 05:27:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:25 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x10, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) [ 290.580305][ T3848] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 290.861395][ T3848] usb 2-1: device descriptor read/64, error 18 [ 291.250111][ T3848] usb 2-1: device descriptor read/64, error 18 [ 291.530168][ T3848] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 291.830094][ T3848] usb 2-1: device descriptor read/64, error 18 [ 292.220046][ T3848] usb 2-1: device descriptor read/64, error 18 [ 292.340934][ T3848] usb usb2-port1: attempt power cycle 05:27:28 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:28 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="80b100080f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f490f013a360f06c4c18d72d683ed", 0x43}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x86, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x1, @perf_bp={0x0}, 0x201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:27:28 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:27:28 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000400)={0x30, 0x3}, 0x30) 05:27:28 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sync() [ 293.060103][ T3848] usb 2-1: new high-speed USB device number 34 using dummy_hcd 05:27:28 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:28 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:27:28 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') sendfile(r0, r1, 0x0, 0x320f) [ 293.183923][ T3848] usb 2-1: device descriptor read/8, error -71 05:27:28 executing program 4: openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:28 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:27:28 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) [ 293.410120][ T3848] usb 2-1: device descriptor read/8, error -71 [ 293.909882][ T3848] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 294.000137][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 294.120067][ T3848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 294.131161][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 294.141362][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 294.151312][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.240016][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 294.249020][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 294.257294][ T3848] usb 2-1: SerialNumber: syz [ 294.280298][T11838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 294.287183][T11838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 294.300452][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 294.306394][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 294.503685][T11838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 294.510903][T11838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 294.753480][ T3848] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 294.790594][ T3848] usb 2-1: USB disconnect, device number 35 [ 294.803740][ T3848] usblp0: removed [ 295.309780][ T3848] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 295.569722][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 295.709806][ T3848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 295.720855][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 295.731700][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 295.741628][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.839863][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 295.848987][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 295.857955][ T3848] usb 2-1: SerialNumber: syz [ 295.881105][T11838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 295.887938][T11838] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 295.900318][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 295.906269][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 296.120008][ T3848] usblp: can't set desired altsetting 0 on interface 0 [ 296.150709][ T3848] usb 2-1: USB disconnect, device number 36 05:27:32 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:32 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000640)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x0, 0x106201}) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f00003fd000/0xc00000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:27:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:32 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:27:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="80b100080f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f490f013a360f06c4c18d72d683ed", 0x43}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x1, @perf_bp={&(0x7f0000000200)}, 0x201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:27:32 executing program 5: modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) 05:27:32 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bind(r3, &(0x7f0000000080)=@generic={0x11, "0017010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b383600543ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e8189d0f8969b72d9c65400"}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) 05:27:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e17f56fcfb708e2a642f0b9162bfb72944ec3f014575564293663ae750294f126b7dda8da3a5eaabf1d9", 0x66) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 05:27:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:27:32 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x0, 0x0}) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="dedd78c9", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 05:27:32 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) [ 296.952162][ T3848] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 297.219748][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 297.339745][ T3848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 297.350916][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 297.361131][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 297.371144][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 297.459799][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 297.468836][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 297.480652][ T3848] usb 2-1: SerialNumber: syz [ 297.500139][T11916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 297.507040][T11916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 297.520167][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 297.526120][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 297.723648][T11916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 297.731178][T11916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 297.970785][ T3848] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 298.010005][ T3848] usb 2-1: USB disconnect, device number 37 [ 298.017327][ T3848] usblp0: removed [ 298.539509][ T3848] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 298.809448][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 298.930557][ T3848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 298.941519][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 298.951704][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 298.961648][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 299.050378][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 299.059557][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 299.067514][ T3848] usb 2-1: SerialNumber: syz [ 299.090868][T11916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 299.097726][T11916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 299.110020][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 299.115972][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 299.319537][ T3848] usblp: can't set desired altsetting 0 on interface 0 [ 299.350126][ T3848] usb 2-1: USB disconnect, device number 38 05:27:35 executing program 1: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:35 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:27:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 05:27:35 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e24, 0x0, @ipv4={[], [], @empty}, 0x7f}, {0xa, 0x0, 0x7ff, @private2, 0x7ff}, 0x0, [0xbc08, 0x0, 0x21, 0xfff, 0x0, 0xfff, 0x81, 0xffffff80]}, 0x5c) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="dedd78c9", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x6c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) 05:27:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) capget(&(0x7f0000000100), 0x0) 05:27:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 05:27:35 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x15, &(0x7f0000000040)={0x0}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r2, r3) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/92) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') 05:27:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:35 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0) 05:27:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x7, 0x101082) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) [ 300.159388][ T2601] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 300.399334][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 300.519484][ T2601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 300.532981][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 300.543141][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 300.555732][ T2601] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 300.639507][ T2601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 300.648659][ T2601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 300.656703][ T2601] usb 2-1: SerialNumber: syz [ 300.679819][T12016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 300.686717][T12016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 300.700085][ T2601] hub 2-1:1.0: bad descriptor, ignoring hub [ 300.706046][ T2601] hub: probe of 2-1:1.0 failed with error -5 [ 300.901667][T12016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 300.908628][T12016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 301.155102][ T2601] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 301.190037][ T2601] usb 2-1: USB disconnect, device number 39 [ 301.197051][ T2601] usblp0: removed [ 301.701640][ T2601] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 301.949231][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 302.069434][ T2601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 302.080489][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 302.091456][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 302.101967][ T2601] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 302.189232][ T2601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 302.198400][ T2601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 302.206552][ T2601] usb 2-1: SerialNumber: syz [ 302.229858][T12016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 302.236734][T12016] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 302.249768][ T2601] hub 2-1:1.0: bad descriptor, ignoring hub [ 302.255793][ T2601] hub: probe of 2-1:1.0 failed with error -5 [ 302.459196][ T2601] usblp: can't set desired altsetting 0 on interface 0 [ 302.489859][ T2601] usb 2-1: USB disconnect, device number 40 05:27:38 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:38 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000f40)="28fd5a1b6185fd0034a585dee130b29f3667cd59aa848ecc06e11b52c18de56868109875aa3ad886ffa66448ff253e42d5ff11a5ebb0a74b0f305e463a2278a092197a5e383eb1df57f592f9dbce652a0f3e7b9fd51f336a7303c293d39d16e81faaf5e9028d48a4c60cb2610e9adf3dca52c15a895a0f47dae571bd4b1b38", 0x7f}], 0x1) 05:27:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:38 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RWALK(r1, &(0x7f0000000000)={0x30, 0x6f, 0x2, {0x3, [{0x0, 0x0, 0x8}, {0x0, 0x2, 0x5}, {}]}}, 0x30) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014d1c48f00000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000001"], 0x119) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) writev(r2, &(0x7f0000000780)=[{&(0x7f00000003c0)='\b\x00\x00\x00', 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 05:27:38 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:27:38 executing program 2: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000200)=[{0x0, 0x0, 0x1, 0x0, @time={0x0, 0xfffffffa}, {}, {}, @connect={{0x3f}, {0x0, 0xfc}}}], 0x1c) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000001c0)={0x0, 0xe1a, 0x1d, [], &(0x7f0000000100)=0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x8000, @loopback}, @in6={0xa, 0x4e21, 0x0, @remote, 0x3ff}, @in6={0xa, 0x4e20, 0xba, @local, 0x8000}], 0x54) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) dup3(r0, r2, 0x80000) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001600)=""/4096, 0x1c80}], 0x1}, 0x40012100) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000015c0)=ANY=[], 0xfffffd6d) 05:27:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:27:38 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 303.036548][ T2601] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 303.093477][ T2601] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 05:27:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}]}, &(0x7f0000000180)=0x10) 05:27:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 303.146083][ T2601] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 05:27:38 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:27:38 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 303.199387][ T2601] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 303.279258][ T3848] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 303.539141][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 303.669318][ T3848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 303.680354][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 303.691301][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 303.701917][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 303.789452][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 303.798653][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 303.807651][ T3848] usb 2-1: SerialNumber: syz [ 303.839429][T12096] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 303.846302][T12096] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 303.859667][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 303.865670][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 304.060872][T12096] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 304.067768][T12096] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 304.310670][ T3848] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 304.349679][ T3848] usb 2-1: USB disconnect, device number 41 [ 304.357142][ T3848] usblp0: removed [ 304.858978][ T3848] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 305.098943][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 305.219178][ T3848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 305.230171][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 305.241462][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 305.252180][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 305.338988][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 305.348097][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 305.356198][ T3848] usb 2-1: SerialNumber: syz [ 305.380172][T12096] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 305.387056][T12096] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 305.399381][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 305.405332][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 305.608966][ T3848] usblp: can't set desired altsetting 0 on interface 0 [ 305.640077][ T3848] usb 2-1: USB disconnect, device number 42 [ 305.780158][ T0] NOHZ: local_softirq_pending 08 05:27:41 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RWALK(r1, &(0x7f0000000000)={0x30, 0x6f, 0x2, {0x3, [{0x0, 0x0, 0x8}, {0x0, 0x2, 0x5}, {}]}}, 0x30) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="0b00000073797a3000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014d1c48f00000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000001"], 0x119) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100)) writev(r2, &(0x7f0000000780)=[{&(0x7f00000003c0)='\b\x00\x00\x00', 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) 05:27:41 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0xcc, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}, {0x8}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6}, {0x8}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6}, {0x8}, {0x5}}]}, 0xcc}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000ec0)=ANY=[], 0xa) close(r4) socket(0x10, 0x3, 0x6) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c010000100013070000000000000000e0000001000000000000000000000000ff01000000000000000000000000000100000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffff7f0000010000000032000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000d20000000000000048000200656362286369706865725f6e756c6c29000000fffffff7000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240017"], 0x4}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0) 05:27:41 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:27:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:41 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:27:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 306.159028][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.173282][ T3848] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 306.185925][ T3848] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 05:27:41 executing program 0: 05:27:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:41 executing program 2: 05:27:41 executing program 0: 05:27:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 306.420676][ T2601] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 306.668812][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 306.788919][ T2601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 306.799945][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 306.810793][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 306.821248][ T2601] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 306.909672][ T2601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 306.918946][ T2601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.926906][ T2601] usb 2-1: SerialNumber: syz [ 306.950960][T12190] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 306.957892][T12190] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 306.992116][ T2601] hub 2-1:1.0: bad descriptor, ignoring hub [ 306.998053][ T2601] hub: probe of 2-1:1.0 failed with error -5 [ 307.193311][T12190] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 307.200535][T12190] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 307.430415][ T2601] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 307.469358][ T2601] usb 2-1: USB disconnect, device number 43 [ 307.476222][ T2601] usblp0: removed [ 307.978743][ T2601] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 308.218795][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 308.348917][ T2601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 308.360005][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 308.370940][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 308.381502][ T2601] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.468823][ T2601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 308.477855][ T2601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 308.485990][ T2601] usb 2-1: SerialNumber: syz [ 308.509579][T12190] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 308.516419][T12190] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 308.529309][ T2601] hub 2-1:1.0: bad descriptor, ignoring hub [ 308.535261][ T2601] hub: probe of 2-1:1.0 failed with error -5 [ 308.739210][ T2601] usblp: can't set desired altsetting 0 on interface 0 [ 308.770454][ T2601] usb 2-1: USB disconnect, device number 44 05:27:44 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:44 executing program 0: 05:27:44 executing program 2: 05:27:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:44 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:27:44 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:27:44 executing program 0: getpgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x7, 0x101082) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x0) pwritev(r1, 0x0, 0x0, 0x81805, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) 05:27:44 executing program 2: 05:27:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:44 executing program 2: 05:27:44 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) dup2(0xffffffffffffffff, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:27:44 executing program 2: [ 309.588670][ T3848] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 309.828561][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 309.948879][ T3848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 309.960001][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 309.971115][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 309.981891][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 310.068613][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 310.068637][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 310.068646][ T3848] usb 2-1: SerialNumber: syz [ 310.088977][T12273] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 310.097987][T12273] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 310.129306][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 310.135253][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 310.330115][T12273] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 310.337070][T12273] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 310.569885][ T3848] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 45 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 310.609303][ T3848] usb 2-1: USB disconnect, device number 45 [ 310.616153][ T3848] usblp0: removed [ 311.118488][ T3848] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 311.378565][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 311.498732][ T3848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 311.509990][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 311.521082][ T3848] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 311.531830][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.618713][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 311.627860][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 311.636031][ T3848] usb 2-1: SerialNumber: syz [ 311.659161][T12273] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 311.666085][T12273] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 311.679156][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 311.685133][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 311.888542][ T3848] usblp: can't set desired altsetting 0 on interface 0 [ 311.919674][ T3848] usb 2-1: USB disconnect, device number 46 05:27:47 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) dup2(0xffffffffffffffff, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:27:47 executing program 0: 05:27:47 executing program 2: 05:27:47 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:27:47 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:27:47 executing program 2: 05:27:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) dup2(0xffffffffffffffff, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:27:47 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000580)=ANY=[@ANYBLOB="dd0400130000000000010005000000000000000200002000000401"], 0x28) sendmmsg(r0, &(0x7f00000092c0), 0x400000000000064, 0x0) 05:27:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0x108, 0x108, 0x108, 0x108, 0x0, 0x318, 0x318, 0x318, 0x318, 0x318, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast1, [], 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x7}}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], '\x00', 'netdevsim0\x00'}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bridge0\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7eedfcb331f3ae839a733f3041901a8d235bd39675399e5719d27a532748"}}, {{@ipv6={@remote, @remote, [], [], 'wg2\x00', 'veth0_to_team\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 05:27:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 312.698516][ T2601] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 312.938352][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 313.058556][ T2601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 313.072408][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 313.083440][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 313.096455][ T2601] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 313.188453][ T2601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 313.197471][ T2601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 313.206215][ T2601] usb 2-1: SerialNumber: syz [ 313.228782][T12342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.236934][T12342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.259023][ T2601] hub 2-1:1.0: bad descriptor, ignoring hub [ 313.267759][ T2601] hub: probe of 2-1:1.0 failed with error -5 [ 313.469631][T12342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.476734][T12342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 313.717229][ T2601] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 313.771449][ T2601] usb 2-1: USB disconnect, device number 47 [ 313.781997][ T2601] usblp0: removed [ 314.288280][ T2601] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 314.548240][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 314.689152][ T2601] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 314.700130][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 314.711612][ T2601] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 314.721561][ T2601] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 314.808326][ T2601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 314.817432][ T2601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 314.825647][ T2601] usb 2-1: SerialNumber: syz [ 314.858675][T12342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 314.865610][T12342] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 314.878866][ T2601] hub 2-1:1.0: bad descriptor, ignoring hub [ 314.884819][ T2601] hub: probe of 2-1:1.0 failed with error -5 [ 315.100877][ T2601] usblp: can't set desired altsetting 0 on interface 0 [ 315.139615][ T2601] usb 2-1: USB disconnect, device number 48 05:27:51 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:51 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d000000003957818efdb43e757ce17be01d69317bf3479e311ba3e5683aca8daa73eaf973e1", 0x3d) 05:27:51 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:27:51 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000040c0), 0x29b) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, 0x1}, 0x50) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) 05:27:51 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:27:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:27:51 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:51 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:27:51 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) [ 315.938328][ T2487] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 316.218145][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 316.348246][ T2487] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 316.359639][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 316.369932][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 316.380068][ T2487] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 316.478357][ T2487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 316.487520][ T2487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 316.507034][ T2487] usb 2-1: SerialNumber: syz [ 316.538726][T12420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 316.545572][T12420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 316.558796][ T2487] hub 2-1:1.0: bad descriptor, ignoring hub [ 316.564732][ T2487] hub: probe of 2-1:1.0 failed with error -5 [ 316.777574][T12420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 316.785011][T12420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 317.020535][ T2487] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 317.059233][ T2487] usb 2-1: USB disconnect, device number 49 [ 317.066113][ T2487] usblp0: removed [ 317.568035][ T2487] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 317.818014][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 317.948665][ T2487] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 317.959756][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 317.971528][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 317.983028][ T2487] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 318.068168][ T2487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 318.077990][ T2487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.085981][ T2487] usb 2-1: SerialNumber: syz [ 318.119382][T12420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 318.126216][T12420] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 318.138656][ T2487] hub 2-1:1.0: bad descriptor, ignoring hub [ 318.144605][ T2487] hub: probe of 2-1:1.0 failed with error -5 [ 318.358008][ T2487] usblp: can't set desired altsetting 0 on interface 0 [ 318.398870][ T2487] usb 2-1: USB disconnect, device number 50 05:27:54 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:27:54 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 05:27:54 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:27:54 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:27:54 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)) 05:27:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:27:54 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 05:27:54 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:54 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:27:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r0 = gettid() tkill(r0, 0x33) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={0x0}}, 0x4000000) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x20028801) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0x1c030011, 0x0, 0x1c030011, 0x64, 0x64000000, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@multicast1=0xe000e400, @remote}, 0xa000000, 0x70, 0xb8, 0x258, {0x900000000000000}}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0xec00000000000000}}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94, 0x0, {0xa}}, {0x24}}}}, 0x278) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000002c0)=""/200) getsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, &(0x7f0000000140)) 05:27:54 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 319.167941][ T2487] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 319.417939][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 319.538021][ T2487] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 319.549013][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 319.559233][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 319.569186][ T2487] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 319.657992][ T2487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 319.667093][ T2487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.675210][ T2487] usb 2-1: SerialNumber: syz [ 319.708295][T12505] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 319.716369][T12505] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 319.758609][ T2487] hub 2-1:1.0: bad descriptor, ignoring hub [ 319.764564][ T2487] hub: probe of 2-1:1.0 failed with error -5 [ 319.973166][T12505] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 319.981106][T12505] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 320.209369][ T2487] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 51 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 320.248523][ T2487] usb 2-1: USB disconnect, device number 51 [ 320.255770][ T2487] usblp0: removed [ 320.787788][ T2487] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 321.037800][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 321.157903][ T2487] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 321.168993][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 321.180309][ T2487] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 321.190724][ T2487] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 321.277866][ T2487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 321.286884][ T2487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 321.295535][ T2487] usb 2-1: SerialNumber: syz [ 321.321074][T12505] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 321.328630][T12505] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 321.338803][ T2487] hub 2-1:1.0: bad descriptor, ignoring hub [ 321.344749][ T2487] hub: probe of 2-1:1.0 failed with error -5 [ 321.558723][ T2487] usblp: can't set desired altsetting 0 on interface 0 [ 321.588300][ T2487] usb 2-1: USB disconnect, device number 52 05:27:57 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:27:57 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:27:57 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:27:57 executing program 0: clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000280)={'security\x00'}, &(0x7f0000000180)=0x54) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1e) wait4(0x0, 0x0, 0x0, 0x0) lstat(0x0, 0x0) 05:27:57 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:27:57 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:27:57 executing program 0: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xa4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000001200)={0x0, 0x1, 0x60, 0x0}) 05:27:57 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:27:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 05:27:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) 05:27:57 executing program 2: poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) [ 322.186701][T12591] md: invalid raid superblock magic on ram96 [ 322.202996][T12591] md: ram96 does not have a valid v0.0 superblock, not importing! [ 322.219629][T12591] md: md_import_device returned -22 05:27:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) [ 322.282465][T12605] md: invalid raid superblock magic on ram96 [ 322.293718][T12605] md: ram96 does not have a valid v0.0 superblock, not importing! [ 322.302957][T12605] md: md_import_device returned -22 [ 322.617691][ T2487] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 322.888703][ T2487] usb 2-1: device descriptor read/64, error 18 [ 323.297752][ T2487] usb 2-1: device descriptor read/64, error 18 [ 323.577630][ T2487] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 323.847568][ T2487] usb 2-1: device descriptor read/64, error 18 [ 324.237550][ T2487] usb 2-1: device descriptor read/64, error 18 [ 324.357673][ T2487] usb usb2-port1: attempt power cycle 05:28:00 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:00 executing program 2: poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:00 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 05:28:00 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 325.067554][ T2487] usb 2-1: new high-speed USB device number 55 using dummy_hcd 05:28:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:00 executing program 2: poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 05:28:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = gettid() tkill(r0, 0x33) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, 0x0}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x21c, 0x1c030011, 0x0, 0x1c030011, 0x64, 0x64000000, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@ip={@multicast1=0xe000e400, @remote}, 0xa000000, 0x70, 0xb8, 0x258, {0x900000000000000}}, @unspec=@CT0={0x48, 'CT\x00'}}, {{@ip={@remote, @empty, 0x0, 0x0, '\x00', 'bridge_slave_0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0xec00000000000000}}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x94, 0x0, {0xa}}, {0x24}}}}, 0x278) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000280)) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/200) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@private, @private}, &(0x7f0000000140)=0xc) [ 325.187689][ T2487] usb 2-1: device descriptor read/8, error -71 05:28:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:00 executing program 2: r0 = syz_open_dev$video(0x0, 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 325.411129][ T2487] usb 2-1: device descriptor read/8, error -71 [ 325.907443][ T2487] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 326.077467][ T2487] usb 2-1: device descriptor read/8, error -61 [ 326.347634][ T2487] usb 2-1: device descriptor read/8, error -61 [ 326.467588][ T2487] usb usb2-port1: unable to enumerate USB device [ 326.902761][ T0] NOHZ: local_softirq_pending 08 05:28:03 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:03 executing program 2: r0 = syz_open_dev$video(0x0, 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:03 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20040001, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0) 05:28:03 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:03 executing program 2: r0 = syz_open_dev$video(0x0, 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 328.192323][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 328.217497][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 05:28:03 executing program 0: 05:28:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 328.657294][ T17] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 328.927261][ T17] usb 2-1: device descriptor read/64, error 18 [ 329.317245][ T17] usb 2-1: device descriptor read/64, error 18 [ 329.587201][ T17] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 329.857253][ T17] usb 2-1: device descriptor read/64, error 18 [ 330.247252][ T17] usb 2-1: device descriptor read/64, error 18 [ 330.367743][ T17] usb usb2-port1: attempt power cycle [ 331.077185][ T17] usb 2-1: new high-speed USB device number 59 using dummy_hcd 05:28:06 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:06 executing program 0: 05:28:06 executing program 3: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:06 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:06 executing program 0: [ 331.207121][ T17] usb 2-1: device descriptor read/8, error -71 05:28:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:06 executing program 0: 05:28:06 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:06 executing program 0: 05:28:06 executing program 3: getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 331.417119][ T17] usb 2-1: device descriptor read/8, error -71 [ 331.907086][ T17] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 332.077173][ T17] usb 2-1: device descriptor read/8, error -61 [ 332.347210][ T17] usb 2-1: device descriptor read/8, error -61 [ 332.470422][ T17] usb usb2-port1: unable to enumerate USB device 05:28:09 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:09 executing program 0: 05:28:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:09 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:09 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:09 executing program 0: 05:28:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:09 executing program 0: 05:28:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}], 0x10}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 334.656916][ T17] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 334.936876][ T17] usb 2-1: device descriptor read/64, error 18 [ 335.336833][ T17] usb 2-1: device descriptor read/64, error 18 [ 335.606837][ T17] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 335.896817][ T17] usb 2-1: device descriptor read/64, error 18 [ 336.286749][ T17] usb 2-1: device descriptor read/64, error 18 [ 336.407385][ T17] usb usb2-port1: attempt power cycle [ 337.126739][ T17] usb 2-1: new high-speed USB device number 63 using dummy_hcd 05:28:12 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:12 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') sendfile(r0, r1, &(0x7f00000001c0)=0x400001, 0x9) 05:28:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}], 0x10}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:12 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 337.316768][ T17] usb 2-1: device descriptor read/8, error -71 05:28:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}], 0x10}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:12 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write(r1, &(0x7f0000000000)="120000001a002517fc85bc04fef6000d0a0d", 0x12) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 05:28:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:12 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 337.527084][ T17] usb 2-1: device descriptor read/8, error -71 [ 338.016656][ T17] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 338.196740][ T17] usb 2-1: device descriptor read/8, error -61 [ 338.476676][ T17] usb 2-1: device descriptor read/8, error -61 [ 338.596729][ T17] usb usb2-port1: unable to enumerate USB device 05:28:15 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:28:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:15 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000200)) r3 = syz_open_pts(r2, 0x0) ioctl$FITHAW(r3, 0xc0045878) 05:28:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:15 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}], 0x10}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:15 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:16 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 340.796518][ T3856] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 341.096466][ T3856] usb 2-1: device descriptor read/64, error 18 [ 341.496445][ T3856] usb 2-1: device descriptor read/64, error 18 [ 341.776505][ T3856] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 342.056452][ T3856] usb 2-1: device descriptor read/64, error 18 [ 342.456382][ T3856] usb 2-1: device descriptor read/64, error 18 [ 342.576974][ T3856] usb usb2-port1: attempt power cycle [ 343.286334][ T3856] usb 2-1: new high-speed USB device number 67 using dummy_hcd 05:28:18 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:28:18 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:18 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:18 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:18 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 343.421031][ T3856] usb 2-1: device descriptor read/8, error -71 05:28:18 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:18 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:19 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 343.636336][ T3856] usb 2-1: device descriptor read/8, error -71 [ 344.136287][ T3856] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 344.327885][ T3856] usb 2-1: device descriptor read/8, error -61 [ 344.596332][ T3856] usb 2-1: device descriptor read/8, error -61 [ 344.716339][ T3856] usb usb2-port1: unable to enumerate USB device 05:28:21 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:28:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:21 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:21 executing program 0: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:21 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:21 executing program 0: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:22 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:22 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:22 executing program 0: ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) [ 346.956123][ T3848] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 347.246109][ T3848] usb 2-1: device descriptor read/64, error 18 [ 347.656092][ T3848] usb 2-1: device descriptor read/64, error 18 [ 347.936061][ T3848] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 348.236030][ T3848] usb 2-1: device descriptor read/64, error 18 [ 348.626018][ T3848] usb 2-1: device descriptor read/64, error 18 [ 348.746174][ T3848] usb usb2-port1: attempt power cycle 05:28:24 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:28:24 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:24 executing program 0: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:24 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 349.456010][ T3848] usb 2-1: new high-speed USB device number 71 using dummy_hcd 05:28:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:25 executing program 0: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 349.566124][ T3848] usb 2-1: device descriptor read/8, error -71 05:28:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:25 executing program 0: r0 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:25 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 349.800853][ T3848] usb 2-1: device descriptor read/8, error -71 [ 350.305922][ T3848] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 350.416064][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 350.536176][ T3848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 350.546302][ T3848] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 350.636478][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 350.645602][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 350.654886][ T3848] usb 2-1: SerialNumber: syz [ 351.796924][T12993] udc-core: couldn't find an available UDC or it's busy [ 351.803993][T12993] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:28 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 05:28:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:28:28 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 352.832179][ T3848] usb 2-1: USB disconnect, device number 72 05:28:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 05:28:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:28 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 05:28:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 353.285805][ T3848] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 353.535773][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 353.655806][ T3848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.666107][ T3848] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 353.755799][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 353.764817][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.773206][ T3848] usb 2-1: SerialNumber: syz [ 354.917335][T13046] udc-core: couldn't find an available UDC or it's busy [ 354.924298][T13046] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:31 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a407000000010109022400010100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)) 05:28:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:31 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 355.936527][ T2487] usb 2-1: USB disconnect, device number 73 05:28:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)) 05:28:31 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:31 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)) 05:28:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 356.405594][ T2487] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 356.645587][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 356.765682][ T2487] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.775984][ T2487] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 356.855693][ T2487] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 356.864700][ T2487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 356.873742][ T2487] usb 2-1: SerialNumber: syz [ 358.014106][T13100] udc-core: couldn't find an available UDC or it's busy [ 358.021228][T13100] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:34 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:34 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:34 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)) 05:28:34 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:28:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:34 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 359.032390][ T3848] usb 2-1: USB disconnect, device number 74 05:28:34 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:28:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:34 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:28:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:34 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 05:28:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}], 0x10}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 359.495438][ T3848] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 359.735406][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 359.856223][ T3848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.866496][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 359.878070][ T3848] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 359.985451][ T3848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 359.994623][ T3848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 360.002760][ T3848] usb 2-1: SerialNumber: syz [ 360.046793][ T3848] hub 2-1:1.0: bad descriptor, ignoring hub [ 360.052737][ T3848] hub: probe of 2-1:1.0 failed with error -5 [ 361.142765][T13148] udc-core: couldn't find an available UDC or it's busy [ 361.150507][T13148] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:37 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:37 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 05:28:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:37 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 05:28:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, 0x0) 05:28:37 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:37 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)) 05:28:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 362.445252][ T3856] usb 2-1: reset high-speed USB device number 75 using dummy_hcd [ 362.695231][ T3856] usb 2-1: Using ep0 maxpacket: 8 [ 363.952598][T13201] udc-core: couldn't find an available UDC or it's busy [ 363.959669][T13201] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:40 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)) 05:28:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:40 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:40 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:40 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)) 05:28:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:40 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) [ 365.495866][ T3850] usb 2-1: reset high-speed USB device number 75 using dummy_hcd [ 365.735100][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 367.017843][T13250] udc-core: couldn't find an available UDC or it's busy [ 367.024779][T13250] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:43 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:43 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177) 05:28:43 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:43 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f00000003c0)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 05:28:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:28:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) 05:28:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40046305, {0x0, 0x40046306, 0x0, 0x0, 0x400c630f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:28:43 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) [ 368.534943][ T3856] usb 2-1: reset high-speed USB device number 75 using dummy_hcd [ 368.561404][T13292] binder: 13287:13292 unknown command 0 [ 368.567177][T13292] binder: 13287:13292 ioctl c0306201 20000200 returned -22 [ 368.784884][ T3856] usb 2-1: Using ep0 maxpacket: 8 [ 368.865762][ T3856] usb 2-1: device firmware changed [ 368.871681][ T3856] usb 2-1: USB disconnect, device number 75 [ 369.234880][ T3856] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 369.474854][ T3856] usb 2-1: Using ep0 maxpacket: 8 [ 369.595040][ T3856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.605193][ T3856] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 369.617057][ T3856] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 369.627802][ T3856] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 369.714896][ T3856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 369.724055][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 369.732965][ T3856] usb 2-1: SerialNumber: syz [ 369.755235][T13266] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 369.775622][ T3856] hub 2-1:1.0: bad descriptor, ignoring hub [ 369.781769][ T3856] hub: probe of 2-1:1.0 failed with error -5 [ 370.875554][T13311] udc-core: couldn't find an available UDC or it's busy [ 370.882586][T13311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:47 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:47 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:47 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:47 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 371.954533][T13323] FAULT_INJECTION: forcing a failure. [ 371.954533][T13323] name failslab, interval 1, probability 0, space 0, times 1 [ 371.972688][T13323] CPU: 0 PID: 13323 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 371.981415][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.991459][T13323] Call Trace: [ 371.994746][T13323] dump_stack+0x1f0/0x31e [ 371.999066][T13323] should_fail+0x38a/0x4e0 [ 372.003464][T13323] ? tomoyo_realpath_from_path+0xd8/0x630 [ 372.009160][T13323] should_failslab+0x5/0x20 [ 372.013638][T13323] __kmalloc+0x74/0x330 [ 372.017774][T13323] ? tomoyo_realpath_from_path+0xcb/0x630 [ 372.023470][T13323] tomoyo_realpath_from_path+0xd8/0x630 [ 372.028996][T13323] tomoyo_path_number_perm+0x18f/0x690 [ 372.034448][T13323] security_file_ioctl+0x55/0xb0 [ 372.039362][T13323] __se_sys_ioctl+0x48/0x160 [ 372.043986][T13323] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 372.050050][T13323] do_syscall_64+0x73/0xe0 [ 372.054448][T13323] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 372.060314][T13323] RIP: 0033:0x45c369 [ 372.064184][T13323] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.083769][T13323] RSP: 002b:00007f6770cc0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.092150][T13323] RAX: ffffffffffffffda RBX: 000000000001b680 RCX: 000000000045c369 [ 372.100094][T13323] RDX: 0000000020000140 RSI: 0000000040085618 RDI: 0000000000000003 [ 372.108036][T13323] RBP: 00007f6770cc0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 372.115978][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.123936][T13323] R13: 00007ffd070c87ef R14: 00007f6770cc19c0 R15: 000000000078bf0c 05:28:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 372.171927][T13323] ERROR: Out of memory at tomoyo_realpath_from_path. 05:28:47 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 372.286322][T13344] FAULT_INJECTION: forcing a failure. [ 372.286322][T13344] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 372.298841][ T3848] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 372.299537][T13344] CPU: 1 PID: 13344 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 372.315874][T13344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.325915][T13344] Call Trace: [ 372.329200][T13344] dump_stack+0x1f0/0x31e [ 372.333525][T13344] should_fail+0x38a/0x4e0 [ 372.337952][T13344] prepare_alloc_pages+0x28c/0x4a0 [ 372.343057][T13344] __alloc_pages_nodemask+0xbc/0x5e0 [ 372.348336][T13344] ? __lock_acquire+0x116c/0x2c30 [ 372.353360][T13344] kmem_getpages+0x49/0x900 [ 372.357870][T13344] cache_grow_begin+0x7b/0x2e0 [ 372.362642][T13344] cache_alloc_refill+0x359/0x3f0 [ 372.367748][T13344] ? check_preemption_disabled+0x51/0x140 [ 372.373458][T13344] __kmalloc+0x30c/0x330 [ 372.377691][T13344] ? tomoyo_realpath_from_path+0xd8/0x630 [ 372.383400][T13344] tomoyo_realpath_from_path+0xd8/0x630 [ 372.388939][T13344] tomoyo_path_number_perm+0x18f/0x690 [ 372.394409][T13344] security_file_ioctl+0x55/0xb0 [ 372.399319][T13344] __se_sys_ioctl+0x48/0x160 [ 372.403884][T13344] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 372.409923][T13344] do_syscall_64+0x73/0xe0 [ 372.414324][T13344] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 372.420209][T13344] RIP: 0033:0x45c369 [ 372.424074][T13344] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.443733][T13344] RSP: 002b:00007f6770cc0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.452109][T13344] RAX: ffffffffffffffda RBX: 000000000001b680 RCX: 000000000045c369 [ 372.460048][T13344] RDX: 0000000020000140 RSI: 0000000040085618 RDI: 0000000000000003 [ 372.467988][T13344] RBP: 00007f6770cc0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 372.475926][T13344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:28:47 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 372.483990][T13344] R13: 00007ffd070c87ef R14: 00007f6770cc19c0 R15: 000000000078bf0c [ 372.614693][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 372.755077][T13325] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 373.877787][T13365] udc-core: couldn't find an available UDC or it's busy [ 373.884776][T13365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:50 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, 0xffffffffffffffff) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:50 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:50 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:50 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:50 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 374.985854][T13376] FAULT_INJECTION: forcing a failure. [ 374.985854][T13376] name failslab, interval 1, probability 0, space 0, times 0 [ 375.029103][T13376] CPU: 0 PID: 13376 Comm: syz-executor.0 Not tainted 5.8.0-rc7-syzkaller #0 [ 375.037781][T13376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.048071][T13376] Call Trace: [ 375.051332][T13376] dump_stack+0x1f0/0x31e [ 375.055632][T13376] should_fail+0x38a/0x4e0 [ 375.060018][T13376] ? tomoyo_encode2+0x25a/0x560 [ 375.064837][T13376] should_failslab+0x5/0x20 [ 375.069307][T13376] __kmalloc+0x74/0x330 [ 375.073446][T13376] tomoyo_encode2+0x25a/0x560 [ 375.078095][T13376] tomoyo_realpath_from_path+0x5d6/0x630 [ 375.083700][T13376] tomoyo_path_number_perm+0x18f/0x690 [ 375.089144][T13376] security_file_ioctl+0x55/0xb0 [ 375.094047][T13376] __se_sys_ioctl+0x48/0x160 [ 375.098603][T13376] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 375.104635][T13376] do_syscall_64+0x73/0xe0 [ 375.109022][T13376] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 375.114881][T13376] RIP: 0033:0x45c369 [ 375.118744][T13376] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.138315][T13376] RSP: 002b:00007f6770cc0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.146690][T13376] RAX: ffffffffffffffda RBX: 000000000001b680 RCX: 000000000045c369 [ 375.154630][T13376] RDX: 0000000020000140 RSI: 0000000040085618 RDI: 0000000000000003 [ 375.162571][T13376] RBP: 00007f6770cc0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 375.170512][T13376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 05:28:50 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:50 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:50 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 375.178454][T13376] R13: 00007ffd070c87ef R14: 00007f6770cc19c0 R15: 000000000078bf0c [ 375.213941][T13376] ERROR: Out of memory at tomoyo_realpath_from_path. 05:28:50 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 375.353300][ T3848] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 375.604558][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 375.744831][T13380] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 376.862269][T13418] udc-core: couldn't find an available UDC or it's busy [ 376.869243][T13418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:53 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:28:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:53 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:53 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x2, &(0x7f0000000140)=0x1) 05:28:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:53 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:53 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x10, &(0x7f0000000140)=0x1) 05:28:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 378.229888][ T17] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 378.504458][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 378.664815][T13433] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 379.783584][T13471] udc-core: couldn't find an available UDC or it's busy [ 379.790649][T13471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:56 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x4b31, &(0x7f0000000140)=0x1) 05:28:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:28:56 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:56 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x4c01, &(0x7f0000000140)=0x1) 05:28:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x541b, &(0x7f0000000140)=0x1) 05:28:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:28:56 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:56 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x5421, &(0x7f0000000140)=0x1) [ 381.254277][ T3848] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 381.524355][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 381.674572][T13482] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 382.801639][T13521] udc-core: couldn't find an available UDC or it's busy [ 382.808872][T13521] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:28:59 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:28:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:28:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x5450, &(0x7f0000000140)=0x1) 05:28:59 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:59 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:28:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x5451, &(0x7f0000000140)=0x1) 05:28:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 05:28:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:28:59 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x5452, &(0x7f0000000140)=0x1) 05:28:59 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:28:59 executing program 3 (fault-call:7 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 384.304158][ T2601] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 384.365183][T13562] FAULT_INJECTION: forcing a failure. [ 384.365183][T13562] name failslab, interval 1, probability 0, space 0, times 0 [ 384.378046][T13562] CPU: 1 PID: 13562 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 384.386700][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 384.396729][T13562] Call Trace: [ 384.399987][T13562] dump_stack+0x1f0/0x31e [ 384.404286][T13562] should_fail+0x38a/0x4e0 [ 384.408673][T13562] ? tomoyo_realpath_from_path+0xd8/0x630 [ 384.414358][T13562] should_failslab+0x5/0x20 [ 384.418827][T13562] __kmalloc+0x74/0x330 [ 384.422948][T13562] ? tomoyo_realpath_from_path+0xcb/0x630 [ 384.428642][T13562] tomoyo_realpath_from_path+0xd8/0x630 [ 384.434178][T13562] tomoyo_path_number_perm+0x18f/0x690 [ 384.439622][T13562] ? __fget_files+0x388/0x3c0 [ 384.444284][T13562] security_file_ioctl+0x55/0xb0 [ 384.449203][T13562] __se_sys_ioctl+0x48/0x160 [ 384.453761][T13562] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 384.459798][T13562] do_syscall_64+0x73/0xe0 [ 384.464204][T13562] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 384.470061][T13562] RIP: 0033:0x45c369 [ 384.473922][T13562] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 384.493491][T13562] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.501873][T13562] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 384.509818][T13562] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 384.517764][T13562] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 [ 384.525711][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.533648][T13562] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c [ 384.544482][T13562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.664111][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 384.804313][T13539] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 385.920510][T13576] udc-core: couldn't find an available UDC or it's busy [ 385.927562][T13576] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:02 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:02 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x5460, &(0x7f0000000140)=0x1) 05:29:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:29:02 executing program 3 (fault-call:7 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:02 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:02 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:02 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x6364, &(0x7f0000000140)=0x1) 05:29:02 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x8912, &(0x7f0000000140)=0x1) 05:29:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 387.181931][T13592] FAULT_INJECTION: forcing a failure. [ 387.181931][T13592] name failslab, interval 1, probability 0, space 0, times 0 [ 387.207067][T13592] CPU: 1 PID: 13592 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 387.215738][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 387.225865][T13592] Call Trace: [ 387.229141][T13592] dump_stack+0x1f0/0x31e [ 387.233466][T13592] should_fail+0x38a/0x4e0 [ 387.237905][T13592] ? tomoyo_encode2+0x25a/0x560 [ 387.242741][T13592] should_failslab+0x5/0x20 [ 387.247227][T13592] __kmalloc+0x74/0x330 [ 387.251373][T13592] tomoyo_encode2+0x25a/0x560 [ 387.256045][T13592] ? anon_inodefs_init_fs_context+0x60/0x60 [ 387.261930][T13592] tomoyo_realpath_from_path+0x5d6/0x630 [ 387.267564][T13592] tomoyo_path_number_perm+0x18f/0x690 [ 387.273035][T13592] ? __fget_files+0x388/0x3c0 [ 387.277710][T13592] security_file_ioctl+0x55/0xb0 05:29:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r3) 05:29:02 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r3) 05:29:02 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x8933, &(0x7f0000000140)=0x1) [ 387.282657][T13592] __se_sys_ioctl+0x48/0x160 [ 387.287242][T13592] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 387.293300][T13592] do_syscall_64+0x73/0xe0 [ 387.297712][T13592] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 387.303588][T13592] RIP: 0033:0x45c369 [ 387.307469][T13592] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 387.327152][T13592] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.333987][ T3849] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 387.335531][T13592] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 387.335537][T13592] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 387.335544][T13592] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 [ 387.335549][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.335555][T13592] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c [ 387.351394][T13592] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.603926][ T3849] usb 2-1: Using ep0 maxpacket: 8 [ 387.744255][T13583] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 388.861653][T13621] udc-core: couldn't find an available UDC or it's busy [ 388.869397][T13621] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:05 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x8946, &(0x7f0000000140)=0x1) 05:29:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(0xffffffffffffffff, r3) 05:29:05 executing program 3 (fault-call:7 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:05 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:05 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, 0xffffffffffffffff) 05:29:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x3fffffff, &(0x7f0000000140)=0x1) [ 390.221198][T13632] FAULT_INJECTION: forcing a failure. [ 390.221198][T13632] name failslab, interval 1, probability 0, space 0, times 0 [ 390.246071][T13632] CPU: 1 PID: 13632 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 390.255531][T13632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 390.266538][T13632] Call Trace: 05:29:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x400454ca, &(0x7f0000000140)=0x1) 05:29:05 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, 0xffffffffffffffff) [ 390.270250][T13632] dump_stack+0x1f0/0x31e [ 390.274737][T13632] should_fail+0x38a/0x4e0 [ 390.279589][T13632] ? tomoyo_encode2+0x25a/0x560 [ 390.284513][T13632] should_failslab+0x5/0x20 [ 390.289007][T13632] __kmalloc+0x74/0x330 [ 390.293946][T13632] tomoyo_encode2+0x25a/0x560 [ 390.298794][T13632] ? anon_inodefs_init_fs_context+0x60/0x60 [ 390.305115][T13632] tomoyo_realpath_from_path+0x5d6/0x630 [ 390.310921][T13632] tomoyo_path_number_perm+0x18f/0x690 [ 390.316625][T13632] ? __fget_files+0x388/0x3c0 05:29:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40045612, &(0x7f0000000140)=0x1) 05:29:05 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40047438, &(0x7f0000000140)=0x1) [ 390.321647][T13632] security_file_ioctl+0x55/0xb0 [ 390.327018][T13632] __se_sys_ioctl+0x48/0x160 [ 390.332119][T13632] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 390.338967][T13632] do_syscall_64+0x73/0xe0 [ 390.343805][T13632] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 390.350083][T13632] RIP: 0033:0x45c369 [ 390.354328][T13632] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 390.375568][T13632] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.384311][T13632] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 390.392927][T13632] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 390.401505][T13632] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 [ 390.409458][T13632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.417723][T13632] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c [ 390.437294][T13632] ERROR: Out of memory at tomoyo_realpath_from_path. [ 390.503897][ T17] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 390.743857][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 390.884199][T13638] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 392.002020][T13666] udc-core: couldn't find an available UDC or it's busy [ 392.010270][T13666] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:08 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, 0xffffffffffffffff) 05:29:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40049409, &(0x7f0000000140)=0x1) 05:29:08 executing program 3 (fault-call:7 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:08 executing program 4: r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:08 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:08 executing program 5 (fault-call:7 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:29:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085629, &(0x7f0000000140)=0x1) 05:29:08 executing program 4: r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085667, &(0x7f0000000140)=0x1) 05:29:08 executing program 4: r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 393.291291][T13691] FAULT_INJECTION: forcing a failure. [ 393.291291][T13691] name failslab, interval 1, probability 0, space 0, times 0 [ 393.347369][T13691] CPU: 0 PID: 13691 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 393.356042][T13691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.366257][T13691] Call Trace: [ 393.369540][T13691] dump_stack+0x1f0/0x31e [ 393.373919][T13691] should_fail+0x38a/0x4e0 [ 393.378522][T13691] ? mmu_topup_memory_caches+0x7e/0x470 [ 393.384053][T13691] should_failslab+0x5/0x20 [ 393.388920][T13691] kmem_cache_alloc+0x53/0x2d0 [ 393.393782][T13691] mmu_topup_memory_caches+0x7e/0x470 [ 393.399143][T13691] kvm_mmu_load+0x1e/0x1030 [ 393.403632][T13691] ? kvm_apic_accept_events+0x1a3/0x410 [ 393.409437][T13691] vcpu_enter_guest+0x6747/0x89a0 [ 393.414482][T13691] ? __kasan_slab_free+0x144/0x170 [ 393.418062][ T2509] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 393.419806][T13691] ? __kasan_slab_free+0x114/0x170 [ 393.433054][T13691] ? __lock_acquire+0x116c/0x2c30 [ 393.438090][T13691] ? do_raw_spin_unlock+0x134/0x8d0 [ 393.443276][T13691] ? __lock_acquire+0x116c/0x2c30 [ 393.448299][T13691] ? lock_acquire+0x160/0x720 [ 393.452965][T13691] ? rcu_lock_acquire+0x9/0x30 [ 393.458094][T13691] vcpu_run+0x352/0xcd0 [ 393.462254][T13691] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 393.467788][T13691] kvm_vcpu_ioctl+0x64f/0xa50 [ 393.472553][T13691] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 393.478693][T13691] __se_sys_ioctl+0xf9/0x160 [ 393.483442][T13691] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 393.489589][T13691] do_syscall_64+0x73/0xe0 [ 393.494261][T13691] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 393.500576][T13691] RIP: 0033:0x45c369 [ 393.504469][T13691] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.524414][T13691] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.533161][T13691] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 05:29:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 393.541102][T13691] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 393.549225][T13691] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 393.557629][T13691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 393.565750][T13691] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac [ 393.675682][ T2509] usb 2-1: Using ep0 maxpacket: 8 [ 393.814357][T13682] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 394.934352][T13714] udc-core: couldn't find an available UDC or it's busy [ 394.941603][T13714] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:11 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:11 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:11 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40186366, &(0x7f0000000140)=0x1) 05:29:11 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="00000000ae408bae"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x44c, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xffff, @dev={0xfe, 0x80, [], 0x32}, 0xffff}}}}]}, @TIPC_NLA_BEARER={0x18c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3da}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6c0}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x8, @private1, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0xfffffffa}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x10000}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa2b2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "6d11816db7f876d36e510602871af625cae0303c4c6cba8bc94ac675f0738f67f773"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xce}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "4caa21a3374010e389e8955752f4b7aeceb1433a4be4c68400ccdee63a28e8"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "572365f87c96d22745166b74e672239b5380e8669be962bf7b6367aa78bb40e5"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5b}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3b97}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3d56}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7bb}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44c}, 0x1, 0x0, 0x0, 0x4000880}, 0x4000) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r6, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) 05:29:11 executing program 3 (fault-call:7 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:11 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:11 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x4020940d, &(0x7f0000000140)=0x1) 05:29:11 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:11 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x80086301, &(0x7f0000000140)=0x1) [ 396.329502][T13740] FAULT_INJECTION: forcing a failure. [ 396.329502][T13740] name failslab, interval 1, probability 0, space 0, times 0 [ 396.384159][T13740] CPU: 1 PID: 13740 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 396.393346][T13740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 396.403991][T13740] Call Trace: [ 396.407267][T13740] dump_stack+0x1f0/0x31e [ 396.411674][T13740] should_fail+0x38a/0x4e0 [ 396.416086][T13740] ? mmu_topup_memory_caches+0x7e/0x470 [ 396.421619][T13740] should_failslab+0x5/0x20 [ 396.426112][T13740] kmem_cache_alloc+0x53/0x2d0 05:29:11 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x80805659, &(0x7f0000000140)=0x1) 05:29:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x1c, r2, 0x209, 0x0, 0x0, {0x2}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0xc4, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r5}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0xc4}}, 0x24000000) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}}, 0x54) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18}, 0x0) sendmmsg$unix(r6, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r7, @ANYBLOB="e84c0400"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) dup3(r8, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) [ 396.430870][T13740] mmu_topup_memory_caches+0x7e/0x470 [ 396.436247][T13740] kvm_mmu_load+0x1e/0x1030 [ 396.440740][T13740] ? kvm_apic_accept_events+0x1a3/0x410 [ 396.446276][T13740] vcpu_enter_guest+0x6747/0x89a0 [ 396.451297][T13740] ? __kasan_slab_free+0x144/0x170 [ 396.456398][T13740] ? __kasan_slab_free+0x114/0x170 [ 396.461507][T13740] ? __lock_acquire+0x116c/0x2c30 [ 396.466559][T13740] ? smp_call_function_single+0x362/0x450 [ 396.472271][T13740] ? __lock_acquire+0x116c/0x2c30 [ 396.477289][T13740] ? loaded_vmcs_clear+0x80/0x80 [ 396.482234][T13740] ? lock_acquire+0x160/0x720 [ 396.486904][T13740] ? rcu_lock_acquire+0x9/0x30 [ 396.491662][T13740] ? find_first_bit+0xc2/0x100 [ 396.496490][T13740] ? vmx_vcpu_load+0x35b/0x490 [ 396.501255][T13740] vcpu_run+0x352/0xcd0 [ 396.505420][T13740] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 396.510883][T13740] kvm_vcpu_ioctl+0x64f/0xa50 [ 396.515559][T13740] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 396.521439][T13740] __se_sys_ioctl+0xf9/0x160 [ 396.526017][T13740] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 05:29:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xc002}, 0x80) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 396.532073][T13740] do_syscall_64+0x73/0xe0 [ 396.536482][T13740] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 396.542362][T13740] RIP: 0033:0x45c369 [ 396.546245][T13740] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 396.565839][T13740] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.574236][T13740] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 396.582197][T13740] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 396.590161][T13740] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 396.598124][T13740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 396.606079][T13740] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac [ 396.617248][ T2509] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 396.863529][ T2509] usb 2-1: Using ep0 maxpacket: 8 [ 397.003923][T13726] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 397.010890][T13726] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 397.773092][T13763] udc-core: couldn't find an available UDC or it's busy [ 397.781344][T13763] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:14 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:14 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:14 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0045878, &(0x7f0000000140)=0x1) 05:29:14 executing program 3 (fault-call:7 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:14 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) accept$phonet_pipe(r3, &(0x7f0000000040), &(0x7f0000000080)=0x10) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:29:14 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:14 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:14 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:14 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0045878, &(0x7f0000000140)=0x1) [ 399.344094][T13787] FAULT_INJECTION: forcing a failure. [ 399.344094][T13787] name failslab, interval 1, probability 0, space 0, times 0 [ 399.388751][T13787] CPU: 1 PID: 13787 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 399.397411][T13787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.407434][T13787] Call Trace: [ 399.410700][T13787] dump_stack+0x1f0/0x31e [ 399.415002][T13787] should_fail+0x38a/0x4e0 [ 399.419390][T13787] ? mmu_topup_memory_caches+0x7e/0x470 [ 399.424901][T13787] should_failslab+0x5/0x20 [ 399.429370][T13787] kmem_cache_alloc+0x53/0x2d0 [ 399.434112][T13787] mmu_topup_memory_caches+0x7e/0x470 [ 399.439471][T13787] kvm_mmu_load+0x1e/0x1030 [ 399.443955][T13787] ? kvm_apic_accept_events+0x1a3/0x410 [ 399.449489][T13787] vcpu_enter_guest+0x6747/0x89a0 [ 399.454490][T13787] ? __kasan_slab_free+0x144/0x170 [ 399.459564][T13787] ? __kasan_slab_free+0x114/0x170 [ 399.464645][T13787] ? __lock_acquire+0x116c/0x2c30 [ 399.469644][T13787] ? smp_call_function_single+0x362/0x450 [ 399.475330][T13787] ? __lock_acquire+0x116c/0x2c30 [ 399.480324][T13787] ? loaded_vmcs_clear+0x80/0x80 [ 399.485233][T13787] ? lock_acquire+0x160/0x720 [ 399.489897][T13787] ? rcu_lock_acquire+0x9/0x30 [ 399.494643][T13787] ? find_first_bit+0xc2/0x100 [ 399.499373][T13787] ? vmx_vcpu_load+0x35b/0x490 [ 399.504108][T13787] vcpu_run+0x352/0xcd0 [ 399.508238][T13787] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 399.513667][T13787] kvm_vcpu_ioctl+0x64f/0xa50 [ 399.518317][T13787] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 399.524176][T13787] __se_sys_ioctl+0xf9/0x160 [ 399.528746][T13787] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 399.534782][T13787] do_syscall_64+0x73/0xe0 [ 399.539176][T13787] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 399.545041][T13787] RIP: 0033:0x45c369 [ 399.548915][T13787] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.569014][T13787] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.577392][T13787] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 05:29:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) fdatasync(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000640)=""/4096) 05:29:15 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:15 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 399.585332][T13787] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 399.593272][T13787] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 399.601217][T13787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 399.609160][T13787] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac [ 399.696079][ T3848] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 399.953404][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 400.093702][T13774] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 400.100570][T13774] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 400.862913][T13815] udc-core: couldn't find an available UDC or it's busy [ 400.871901][T13815] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:17 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f0000000080), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)) dup2(r5, r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 05:29:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0189436, &(0x7f0000000140)=0x1) 05:29:17 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:17 executing program 3 (fault-call:7 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:17 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0205647, &(0x7f0000000140)=0x1) 05:29:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) mmap$snddsp_control(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x4, 0x80010, r2, 0x83000000) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:29:17 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0205648, &(0x7f0000000140)=0x1) [ 402.386513][T13844] FAULT_INJECTION: forcing a failure. [ 402.386513][T13844] name failslab, interval 1, probability 0, space 0, times 0 [ 402.410038][T13844] CPU: 1 PID: 13844 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 402.418812][T13844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 402.428848][T13844] Call Trace: [ 402.432129][T13844] dump_stack+0x1f0/0x31e 05:29:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xc1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x23, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0xffffffffffffff54) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x10, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r4}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0031a9b3000000"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00), 0x30, 0x4000854) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) dup2(r5, r1) dup3(r5, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x10, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}}, 0x48) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f00000004c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x39, "08895b", "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"}}, 0x110) [ 402.436444][T13844] should_fail+0x38a/0x4e0 [ 402.440849][T13844] ? mmu_topup_memory_caches+0x7e/0x470 [ 402.446383][T13844] should_failslab+0x5/0x20 [ 402.450879][T13844] kmem_cache_alloc+0x53/0x2d0 [ 402.455640][T13844] mmu_topup_memory_caches+0x7e/0x470 [ 402.461012][T13844] kvm_mmu_load+0x1e/0x1030 [ 402.465499][T13844] ? kvm_apic_accept_events+0x1a3/0x410 [ 402.471034][T13844] vcpu_enter_guest+0x6747/0x89a0 [ 402.476058][T13844] ? __kasan_slab_free+0x144/0x170 [ 402.481168][T13844] ? __kasan_slab_free+0x114/0x170 [ 402.486292][T13844] ? __lock_acquire+0x116c/0x2c30 [ 402.491328][T13844] ? smp_call_function_single+0x362/0x450 [ 402.497046][T13844] ? __lock_acquire+0x116c/0x2c30 [ 402.502067][T13844] ? loaded_vmcs_clear+0x80/0x80 [ 402.507008][T13844] ? lock_acquire+0x160/0x720 [ 402.511673][T13844] ? rcu_lock_acquire+0x9/0x30 [ 402.516441][T13844] ? find_first_bit+0xc2/0x100 [ 402.521183][T13844] ? vmx_vcpu_load+0x35b/0x490 [ 402.525931][T13844] vcpu_run+0x352/0xcd0 [ 402.530081][T13844] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 402.535523][T13844] kvm_vcpu_ioctl+0x64f/0xa50 [ 402.540204][T13844] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 402.546081][T13844] __se_sys_ioctl+0xf9/0x160 [ 402.550662][T13844] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 402.556716][T13844] do_syscall_64+0x73/0xe0 [ 402.561122][T13844] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 402.566989][T13844] RIP: 0033:0x45c369 [ 402.570862][T13844] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 402.590446][T13844] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.598836][T13844] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 402.606797][T13844] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 402.614760][T13844] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 402.622708][T13844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 402.630660][T13844] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac 05:29:18 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0205649, &(0x7f0000000140)=0x1) 05:29:18 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc020660b, &(0x7f0000000140)=0x1) [ 402.713230][ T3849] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 403.013220][ T3849] usb 2-1: Using ep0 maxpacket: 8 [ 403.173670][T13830] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.180546][T13830] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 403.942512][T13872] udc-core: couldn't find an available UDC or it's busy [ 403.949645][T13872] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:20 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="cb6bde40"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) dup2(r4, r3) 05:29:20 executing program 3 (fault-call:7 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0285628, &(0x7f0000000140)=0x1) 05:29:20 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:20 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0285629, &(0x7f0000000140)=0x1) 05:29:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0505609, &(0x7f0000000140)=0x1) 05:29:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x212881, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="13ea000000b37785a14d198fd3a90000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8100, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000100)={0x4, 0xffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) [ 405.408789][T13887] FAULT_INJECTION: forcing a failure. [ 405.408789][T13887] name failslab, interval 1, probability 0, space 0, times 0 [ 405.437753][T13887] CPU: 0 PID: 13887 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 405.446420][T13887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.456474][T13887] Call Trace: [ 405.459753][T13887] dump_stack+0x1f0/0x31e [ 405.464082][T13887] should_fail+0x38a/0x4e0 [ 405.468495][T13887] ? mmu_topup_memory_caches+0x7e/0x470 [ 405.474029][T13887] should_failslab+0x5/0x20 [ 405.478516][T13887] kmem_cache_alloc+0x53/0x2d0 [ 405.483272][T13887] mmu_topup_memory_caches+0x7e/0x470 [ 405.488653][T13887] kvm_mmu_load+0x1e/0x1030 [ 405.493155][T13887] ? kvm_apic_accept_events+0x1a3/0x410 [ 405.498707][T13887] vcpu_enter_guest+0x6747/0x89a0 [ 405.503723][T13887] ? __kasan_slab_free+0x144/0x170 05:29:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc050560f, &(0x7f0000000140)=0x1) 05:29:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x4040) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) [ 405.508824][T13887] ? __kasan_slab_free+0x114/0x170 [ 405.513929][T13887] ? __lock_acquire+0x116c/0x2c30 [ 405.518969][T13887] ? do_raw_spin_unlock+0x134/0x8d0 [ 405.524154][T13887] ? __lock_acquire+0x116c/0x2c30 [ 405.529171][T13887] ? lock_acquire+0x160/0x720 [ 405.533837][T13887] ? rcu_lock_acquire+0x9/0x30 [ 405.538598][T13887] vcpu_run+0x352/0xcd0 [ 405.542768][T13887] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 405.548215][T13887] kvm_vcpu_ioctl+0x64f/0xa50 [ 405.552894][T13887] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 405.558768][T13887] __se_sys_ioctl+0xf9/0x160 [ 405.563345][T13887] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 405.567344][ T2601] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 405.569397][T13887] do_syscall_64+0x73/0xe0 [ 405.581471][T13887] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 405.587346][T13887] RIP: 0033:0x45c369 05:29:21 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r2, &(0x7f0000000040), 0xfd18) r3 = gettid() tkill(r3, 0x2) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r8, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x20, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, r8]}}], 0x20}], 0x4924924924926ff, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r1) dup3(r9, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r11, r10) [ 405.591229][T13887] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.610822][T13887] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.619218][T13887] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 405.627171][T13887] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 405.635127][T13887] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 [ 405.643082][T13887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 405.651052][T13887] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c [ 405.834923][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 405.973303][T13884] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 405.980287][T13884] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 406.743283][T13919] udc-core: couldn't find an available UDC or it's busy [ 406.750230][T13919] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 406.893618][ T0] NOHZ: local_softirq_pending 08 05:29:23 executing program 3 (fault-call:7 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:23 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0505611, &(0x7f0000000140)=0x1) 05:29:23 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:23 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x100, 0x228, 0x228, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@private=0xa010102, @rand_addr=0x64010101, 0x0, 0x0, 'sit0\x00', 'wg1\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x64}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x300, 0x290, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0xd87, 0x6, [0x22, 0x15, 0x22, 0x16, 0xa, 0xe, 0x1, 0x28, 0x39, 0x3b, 0x3e, 0x3d, 0x33, 0x23, 0x9, 0x3a], 0x0, 0x6, 0x4c8f}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xff, 0xff, 'sit0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x8, 0x1}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0xc, 0x3b6}}, @common=@icmp={{0x28, 'icmp\x00'}, {0xc, "eef4"}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0xf, 0x0, 0x7, 0x1, 0x1b41e73b5b85d413], 0x3, 0x3}, {0x0, [0x4, 0x2, 0xe, 0x4, 0x2, 0x1], 0x2, 0x4}}}}, {{@ip={@empty, @rand_addr=0x64010102, 0xffffffff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x5c, 0x7, 0x9}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30, 'ah\x00'}, {[0x8, 0x7], 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa49, 0x9, 0x8, 0xa7, 0x5, 0x8, 0x800, 0x3]}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) sendmmsg$unix(r1, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) dup3(r3, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:29:23 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:23 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) rt_tgsigqueueinfo(0x0, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:23 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc050565d, &(0x7f0000000140)=0x1) [ 408.444058][T13944] FAULT_INJECTION: forcing a failure. [ 408.444058][T13944] name failslab, interval 1, probability 0, space 0, times 0 05:29:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0585609, &(0x7f0000000140)=0x1) [ 408.515417][T13944] CPU: 0 PID: 13944 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 408.524106][T13944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.534145][T13944] Call Trace: [ 408.537426][T13944] dump_stack+0x1f0/0x31e [ 408.541753][T13944] should_fail+0x38a/0x4e0 [ 408.546160][T13944] ? mmu_topup_memory_caches+0x7e/0x470 [ 408.551780][T13944] should_failslab+0x5/0x20 [ 408.556269][T13944] kmem_cache_alloc+0x53/0x2d0 05:29:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc058560f, &(0x7f0000000140)=0x1) [ 408.561020][T13944] mmu_topup_memory_caches+0x7e/0x470 [ 408.566381][T13944] kvm_mmu_load+0x1e/0x1030 [ 408.570887][T13944] ? kvm_apic_accept_events+0x1a3/0x410 [ 408.576426][T13944] vcpu_enter_guest+0x6747/0x89a0 [ 408.581447][T13944] ? __kasan_slab_free+0x144/0x170 [ 408.586215][ T17] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 408.586538][T13944] ? __kasan_slab_free+0x114/0x170 [ 408.599421][T13944] ? __lock_acquire+0x116c/0x2c30 [ 408.604442][T13944] ? do_raw_spin_unlock+0x134/0x8d0 [ 408.609627][T13944] ? __lock_acquire+0x116c/0x2c30 [ 408.614687][T13944] ? lock_acquire+0x160/0x720 [ 408.619346][T13944] ? rcu_lock_acquire+0x9/0x30 [ 408.624105][T13944] vcpu_run+0x352/0xcd0 [ 408.628268][T13944] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 408.633721][T13944] kvm_vcpu_ioctl+0x64f/0xa50 [ 408.638381][T13944] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 408.644254][T13944] __se_sys_ioctl+0xf9/0x160 [ 408.648924][T13944] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 408.654976][T13944] do_syscall_64+0x73/0xe0 [ 408.659382][T13944] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 408.665254][T13944] RIP: 0033:0x45c369 [ 408.669151][T13944] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.688748][T13944] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.697168][T13944] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 408.705126][T13944] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 408.713082][T13944] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 408.721040][T13944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 408.729002][T13944] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac [ 408.819404][ T0] NOHZ: local_softirq_pending 08 [ 408.833035][ T17] usb 2-1: Using ep0 maxpacket: 8 05:29:24 executing program 3 (fault-call:7 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 408.977232][T13938] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 408.987149][T13938] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 409.018254][T13967] FAULT_INJECTION: forcing a failure. [ 409.018254][T13967] name failslab, interval 1, probability 0, space 0, times 0 [ 409.036692][T13967] CPU: 0 PID: 13967 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 409.045352][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.055392][T13967] Call Trace: [ 409.058664][T13967] dump_stack+0x1f0/0x31e [ 409.062978][T13967] should_fail+0x38a/0x4e0 [ 409.067395][T13967] ? mmu_topup_memory_caches+0x7e/0x470 [ 409.072916][T13967] should_failslab+0x5/0x20 [ 409.077396][T13967] kmem_cache_alloc+0x53/0x2d0 [ 409.082133][T13967] mmu_topup_memory_caches+0x7e/0x470 [ 409.087484][T13967] kvm_mmu_load+0x1e/0x1030 [ 409.091978][T13967] ? kvm_apic_accept_events+0x1a3/0x410 [ 409.097514][T13967] vcpu_enter_guest+0x6747/0x89a0 [ 409.102534][T13967] ? __kasan_slab_free+0x144/0x170 [ 409.107621][T13967] ? __kasan_slab_free+0x114/0x170 [ 409.112706][T13967] ? __lock_acquire+0x116c/0x2c30 [ 409.117702][T13967] ? do_raw_spin_unlock+0x134/0x8d0 [ 409.122874][T13967] ? __lock_acquire+0x116c/0x2c30 [ 409.127877][T13967] ? lock_acquire+0x160/0x720 [ 409.132528][T13967] ? rcu_lock_acquire+0x9/0x30 [ 409.137284][T13967] vcpu_run+0x352/0xcd0 [ 409.141439][T13967] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 409.146887][T13967] kvm_vcpu_ioctl+0x64f/0xa50 [ 409.151550][T13967] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 409.157417][T13967] __se_sys_ioctl+0xf9/0x160 [ 409.161977][T13967] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 409.168011][T13967] do_syscall_64+0x73/0xe0 [ 409.172397][T13967] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 409.178257][T13967] RIP: 0033:0x45c369 [ 409.182141][T13967] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.201722][T13967] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.210234][T13967] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 409.218358][T13967] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 409.226441][T13967] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 [ 409.234389][T13967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 409.242336][T13967] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c [ 409.454430][ T0] NOHZ: local_softirq_pending 08 [ 409.765477][T13980] udc-core: couldn't find an available UDC or it's busy [ 409.772421][T13980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:26 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc0585611, &(0x7f0000000140)=0x1) 05:29:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) dup3(r2, r0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond0\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0xffffffffffffffff}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x44894) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r8) 05:29:26 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:26 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:26 executing program 3 (fault-call:7 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0xc058565d, &(0x7f0000000140)=0x1) [ 411.479451][T14005] FAULT_INJECTION: forcing a failure. [ 411.479451][T14005] name failslab, interval 1, probability 0, space 0, times 0 [ 411.501911][T14005] CPU: 1 PID: 14005 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 411.510584][T14005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.520627][T14005] Call Trace: [ 411.523914][T14005] dump_stack+0x1f0/0x31e 05:29:26 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x3) 05:29:26 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) socket$inet6(0xa, 0xa, 0x7f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) accept(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, &(0x7f0000000100)=0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) openat$cgroup_ro(r2, &(0x7f0000000180)='memory.stat\x00', 0x7a05, 0x1700) sendmmsg$unix(r0, &(0x7f0000006f00), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(0xffffffffffffffff, r5) dup3(r6, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) [ 411.528240][T14005] should_fail+0x38a/0x4e0 [ 411.532661][T14005] ? mmu_topup_memory_caches+0x7e/0x470 [ 411.538201][T14005] should_failslab+0x5/0x20 [ 411.542687][T14005] kmem_cache_alloc+0x53/0x2d0 [ 411.547438][T14005] mmu_topup_memory_caches+0x7e/0x470 [ 411.552800][T14005] kvm_mmu_load+0x1e/0x1030 [ 411.557293][T14005] ? kvm_apic_accept_events+0x1a3/0x410 [ 411.562833][T14005] vcpu_enter_guest+0x6747/0x89a0 [ 411.567859][T14005] ? __kasan_slab_free+0x144/0x170 [ 411.572959][T14005] ? __kasan_slab_free+0x114/0x170 05:29:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x5) 05:29:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x300) [ 411.578068][T14005] ? __lock_acquire+0x116c/0x2c30 [ 411.583085][T14005] ? do_raw_spin_unlock+0x134/0x8d0 [ 411.588274][T14005] ? __lock_acquire+0x116c/0x2c30 [ 411.593296][T14005] ? lock_acquire+0x160/0x720 [ 411.597959][T14005] ? rcu_lock_acquire+0x9/0x30 [ 411.602719][T14005] vcpu_run+0x352/0xcd0 [ 411.606875][T14005] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 411.612332][T14005] kvm_vcpu_ioctl+0x64f/0xa50 [ 411.617008][T14005] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 411.622886][T14005] __se_sys_ioctl+0xf9/0x160 [ 411.627469][T14005] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 411.633524][T14005] do_syscall_64+0x73/0xe0 [ 411.637931][T14005] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 411.643806][T14005] RIP: 0033:0x45c369 [ 411.647688][T14005] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.667272][T14005] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:29:27 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000340)=[{{0x77359400}, 0x5, 0x8000, 0xe7}, {{r2, r3/1000+10000}, 0x12, 0xd4a, 0x3}, {{0x0, 0xea60}, 0x3, 0x401}, {{}, 0x17, 0x0, 0x401}, {{0x77359400}, 0x12, 0xe71, 0x80000001}, {{}, 0x14, 0x1, 0x10001}, {{}, 0x4, 0x8, 0xfffffff7}, {{0x77359400}, 0x5, 0xfff, 0x6}], 0xc0) r4 = gettid() r5 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r5, &(0x7f0000000040), 0xfd18) r6 = gettid() tkill(r6, 0x2) fcntl$setownex(r5, 0xf, &(0x7f0000000000)={0x0, r6}) tkill(r4, 0x19) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r7, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r4}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_ep_write(r8, 0x40, 0xe5, &(0x7f0000000180)="08fbfa7da075103f0265e690d39b223c362d22f1d7fde6cf859fb6c0838050b933d963b0bf462e994b334a2e759b9cf3083680bae4227aec83959bb0ca96261729dceef8f5f230e74455c2734298b1f9f5431ac500ad51215a80781bc3ac405e400ebfd0dc4fa47216deaec9b2b65032b69f952879603c7ab8436de0bc7a3685e5a2adda3e4a267aa53ac913427ef017136513771fcd3028b4c03dc3cf4c609733d5d83388c00c3d0420a07c2fe1d8b9695303a5b69ed25d36d89d38dd755242b70a0130fd6243946f5ce7dd076c946f009a64a166db1dad186eff4d5e094eec0f48b090f4") move_pages(r4, 0x4, &(0x7f0000000040)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000080)=[0x9, 0x1f, 0x7fffffff, 0x1000, 0x9, 0x7f], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x4) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 411.675664][T14005] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 411.683618][T14005] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 411.691595][T14005] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 411.699565][T14005] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 411.707529][T14005] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac [ 411.793008][ T3849] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 412.042790][ T3849] usb 2-1: Using ep0 maxpacket: 8 [ 412.213143][T14000] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 412.231668][T14000] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 413.006614][T14033] udc-core: couldn't find an available UDC or it's busy [ 413.013692][T14033] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:29 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:29 executing program 3 (fault-call:7 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) write$tun(r1, &(0x7f0000000040)={@void, @val={0x2, 0x1, 0x3, 0x7f, 0xbf76, 0x4c}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @local, @private2, @multicast, @private0={0xfc, 0x0, [], 0x1}}}, 0x3e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x210200, 0x40) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x1, 0x4) 05:29:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000bdb200000100001301000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r2, &(0x7f0000000040), 0xfd18) r3 = gettid() tkill(r3, 0x2) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x202002) sendmmsg$unix(r0, &(0x7f0000004640)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000001c0)="1e4230a2e0f4622daab564c6b20e7b7ac932be8cc25af3aa8298f690c229048169d65778cfd8fd689b8faf973066ad38053a421a4be4b5a8652396792318249fb7d481c2ab73859ad07a562a418da8db1981b6c562aad405ea9a29e9cf82c2939d0fc3330d92baf592fa86e70177ef5982d68be6b2551f7bfa680556dfc0e7861d498ec933a225a0b689358d0fa14fda317026e4a276d6c0dd74f4321ec4892d86049722e683dadf7e", 0xa9}, {&(0x7f0000000040)="020e962b66966bb2da131a5be686d5ec8a691b5a8a137ea2bcf53f24c533a8ef1355df4b956dda48eb1d4ff7ffbdab46a971c191300a7eb2f1eae486081a0139", 0x40}, {&(0x7f0000000280)="c4c10f2377a534fc5aa479b016f4137a9d3eaf27f2a392b834269868e742d0327779575e1c528a8a8e9318ba3511441be822b0875c975e442efe0eea035b05dffaa60108c16a19f7c83c0c56a0510654f98d688445ff2a0a7eae0adf8fa47111b720fa439a86846d9ab50465b2610279d81cdf3e937da93391af41eee7e656fcba980f928efa81facf5753e72659b322cbe7dea9a3382076133a6b6b791e1d4596abc6809c07bc0fd71a78eb52093f122503803636cababf48ebc28124f411216eaa81d3f58781145b7f89634a57bdbe0bb2441da04e4c189f20b88a3102e24fab0db8b678796b14", 0xe8}, {&(0x7f0000000380)="f4de5e5f9b9731b89a25540ca85ea6f82c45f42bee8a9d2c280159bcf6e8a39dcdc3d3b8ff0042454fcb364dbc9493ec9776747ecdccd6e5a19e48423affe2448adc86f5f314d21cbea625f1cfce49d127010d6f07b779f9b1840bd7648ef5387836fd3fedc10b5f54ee0d9f577add05dbe05e05812432782540a0d200d294d9c7cf52511a30fa509c248ee8b1174f19cb17c0dc7d420bda6c00ed7054b52aa5d1b011ead86591ef876266f8e9955f07eb178d07ec270629f8f587edc8dc36d0e48e9142bdfd6b", 0xc7}, {&(0x7f0000000480)="0f8d57e05270a22cdfb21a2ba6ba4598e09ec0aae214ab50a7b6a4be7d6db4e1874177a656057065c24717", 0x2b}, {&(0x7f0000000500)="2acff66dc81208260f6af2e9696df59c82ea1a9e0bcb640f54047fad3acd07579d3d9c2acc85d29a2a4b0a7e58758f344f0e85349b74402fddd0d26ae4", 0x3d}, {&(0x7f0000000540)="f72ade51a8a21b68d822e090d857e055885d948766ff338b349d3166408882ad65aac474e8cf8bf518d072cf0038c2f8aba36ff05e6ca8f6714a4ee503afd12ed7fa220af9fcf48e1cd0f3d8a2c0d3596ac9d35807266afcc10aa084c99388586deeae1877452f0a4edc5bdbc59ff39236045f329f52c414a92cb6f1e47e6799b1f17b5ec026a2b5a73c1ee100798f8a6ff820916c77e6156089ffa3faddf7afc60faf7d270ce5b723042f598a36", 0xae}, {&(0x7f0000000640)="c242133070ebd0fc91a6a3713ccd10fbaf628111cefa3d2cca19e412fe1e8be162f06c80027e739f2d8838801434753989a72a76254350615e4391d23e4e3d8d67f75c72b84853be1e5c2bec03f7", 0x4e}], 0x8, 0x0, 0x0, 0x4010}, {&(0x7f0000000740)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f00000007c0)="05303ce60f97cd02c8a96340c6286993fdcdfd72411dd2b9b76cd38ec7b83a0dfb61599e64eaf9055f65d8010a75ba44024de646f421f90e47df9e8ce88b05914ec0a579a675f8b30b0d58e96bf4d848ff93999bb047ff92df7ee7c017560b5c4b62933f98a51741dbc3c0948a3c4ba66ca3b3efdebc88bf90d2d89e2c7e9605419f0533f2b5cb0fcb20640050aee5b2da1ad3f42d94d355f861947626b0cee3e1ac9c951178e63c3396c95a15bd810e7b7f09022c547262a74b1770d5e555b9d2050c192717816950b949b7d3630130704535ec41bda04916fe0a", 0xdb}, {&(0x7f00000008c0)="7c41105ebd79f993d66e06b80654cdf3a465d501ea6a71ac43b1170740e6216f093c7ba5d158d5d48445b34009f9f06b108dc56e9d31839281e8a0d474c74f1b2ce940389a04cade5a6fe384f2a528f104458b54d7e8d2b3f87e3afbda1830e8458daee6b37df5ec4bd85ff082b9f5c1ade521271885ce2ed38c3b720c8b75a0920aae401c1b4915f1c307c84d72b52f277e2b4c9b5537444886313930698bfb86998c7052841eb5b6aac989cecd2c484e89dee45fd98c5c7f9e67d247cefd12b88536a3ad5c4d9b82826e6fa6c480758c2abfa64c8f27477c456ed2e88d6fbfea38ff60fd70", 0xe6}, {&(0x7f00000009c0)="edc16871ba267d22739bd37f9ca3970fa1fabd3030cd33ec01d46b232d9b08cc50c63e0bf080b9ebac9a9a95c95e475618813728f125ca854a09463eb87a6d5ba53329d63a24", 0x46}, {&(0x7f0000000a40)="208ea3f0e3b63774b23442886c8f9998c54683d2a7bc1b291217fab817b17a6f7a13", 0x22}, {&(0x7f0000000a80)="574652cb553d3af9e71060707858ce4bfc8a8818ca16d9bcaa1cd31d247e5d314532c3ce50bade5f8f9db3155d0d281c9c309c359eb3d3b3de3390d7acb25d391ccf", 0x42}, {&(0x7f0000000b00)="57142bf03c23e084ea003f3049a8ec0a3b3adf464089e773b647a518c4fe8a6716b75931da9c4a835e054e85108aacbfbcb3c3d65ab719d03f5ea34d2d62005530bd1b8cd1d88d52e5e5353f8957082f6773caba6656dcb250dc2d249dd6c09a069d38bc836412a00671526fa6dac25fbd81deb2e5c61ba85f51c16f5ec4b25bb531a04f9dcc583630a641448389af4b923eafa6d801ca12496b0decd003f14b99ac2079060c282da7cb08651f872dfceb16eb6ec009ddfa32c48f480532271de0909f94f28ace388c6f7c19c64c0bd2aa0a2e9d4de5625be2c9", 0xda}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="363310210cf7fda49e9de264728072913c8648e517535b2df2705cc679", 0x1d}, {&(0x7f0000001c40)="58b009bcbab34a72fa53ee3376f3a2fcfdd35971ff837f04ff752ad46fb20fa601da530f17c8cb7999beef60ce268482afb14d6877ff886accfcfcc2493e6f2839fbb8952b43d585cbf5782e8aaeb0d95ac0f2b7c69d471e6ac2294ba5ebb6ce17", 0x61}], 0x9, &(0x7f0000001e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r8, r6}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x80, 0x8880}, {&(0x7f0000001ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003600)=[{&(0x7f0000001f40)="ef9f68b0bf4aea75993f6203d61372de3a6baa5901e002f4e9183251c24e3af68c4a9241f8d8b05bd20e8ed0b3f5787f64caf3f7a5a7ea1fc646fdbe0d63e628d7cb3c635797450044b490afa17cb4722b371b8c27af2d150d41f1cd8d81d4ca94325af8cc1698a81dd24f68c486242748955260339019cf580667ed5b0cdc29bdbeab77261692dab7efd241cc9211043527696277dedd775499e10defb794747d85c6ced533efdeb7851578dd837b11880741cc976feb42a69b0178908c72350c9abebc2bd245c5b89e8f6a0fc4980a56", 0xd1}, {&(0x7f0000002040)="3f6af986276cbc83044b7b21689767f75d338475d23602485af6b1bfd16bdcb928571f378ffb36b827a950af1b58a9f4792d28ac760e48ebea1defa92b7b8a4c2bb51927391b1d39c2bfab5e79450212736ef8b28ac43e94d757e5f0ff14c5d9771abf2ea2395e71605adc5de7d238ec25791e389f1b8adfb0920bdfc15bc38bbb2a9677678fab2058e3ced8ab6c3602", 0x90}, {&(0x7f0000002100)="31f94309c294fae652a110213dec817815a949cd97ca754a764833b1f168bc5cae1c47e4206b4543436c4d2d24427cfb7099ca022ab493d621856f72f77c70267759adeff20c9b86061e5ba0a3f7ad9f87c71fd7f1af2e6f6309c106eb62ba07899133598dc6ff29731fae4b04e1efdc4464013a5e0613f2bb202ef3ef49048e2c60af6ab3e96225152e7349bc861b085dd262855fc8232854e52523335445bd5de5e87f7f1c28ddbc8ce42365f93ee929e0dd5d403cd7de7fa100d33bf4f35b313310db20ed15b398d6f95c326e60d773", 0xd1}, {&(0x7f0000002200)="524fe994b4debff97b41628894a762d57601ac1bb344e41be3185aeac9cd86cca2f5a864fb7f2a0c83d6a69f2fb6ca928233cac2084455c637e22073ba4a2b94cc11cef1729d345219169cdc4b243719808c42f4ae403c2a569852dc23f41905f183516e1b0ea8b184bb877d40252979a4a768060159a0fc99a6a98534b84b7a7d73e1651b3978536cb98f56bc5a16879c77d456b7f85c22397b7c8a608ff820b499a329e632ca25721a74c99333364307f0", 0xb2}, {&(0x7f00000022c0)="e38a906bce267be3c541bd5a6a7ed7a39af5421ff076f9bfe3e8db62e34435b15c27f1bba23f87", 0x27}, {&(0x7f0000002300)="610f0c8e5de9564aa14f373e04a1c870486c05d4e23532d39112a6ee79839def94e06b68361c303ef0b966f2d5aaa90aae0d4901a8651fbb7822d2609a1790dd1afc1f515c360bedd99510400761d81571b6c0e55290760a773738efcdd84bd4045542df283b4d476739a6dbd3fe7f88bf6c23f6bef087630eca34d5ca7e8482a97ada69a0db81792950d0b68b7b3f7ff9b6848f313076d2336caf52fee4cfd149d1887541b26e8fa31a1977db7f77c20e0e775934072b5bb640ed32a5000627ad5112c24a9eeaaa4d8bf6d82ba6a774188bfadde695345fee68ee16e5625d3661f89bc7399e97", 0xe7}, {&(0x7f0000002400)="dbf59dd590b433caf5f085f5", 0xc}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000003440)="0e10e35d6231452dbe7e9dcb0317ee8a59b03603cdbba68bc6e51d43e7333bd2003f2cee9b15798327ccb8c063ccf580b96e6fdfb579a2347d2a922bc9c99dfc575f08200028e34d0e32481fe4979cc7414508ed3e3fd200e8c46e1e46761d4c67b520f8cf91660db90c64172411e810d43cb27a09ae37c683010a9524f737324ef67fa4649a", 0x86}, {&(0x7f0000003500)="fb4f105b8d1fadf60f16262da3654446a3190e81fdb3703ac04a1375cc6923444b4b971a3b1bd59f60273ff67b0562276c66acb7963d75b5efffba1f562589b14ebd1590497ca843b24f8076d27c531337bb69a4f23af508485a3d93a995b802a2ffcc3c2b91040d5ca620d0dc50765ede1ea1f169d0adc43fad49fbe7dacf0e30c429c18802d4ec7c88f8dd38312d866a2f829d1b8c56649c11399866e8330ec8d8a830056e735e2bce1d3baffc3c6df235a68ad1fd025ab21518b2abe9687046b8a8c3c469a2b2799f3d1fd72ce04ff8d46c9e7b8a68559984e82502856787f4f168e0ab11cc37f29c", 0xea}], 0xa, &(0x7f0000003780)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}], 0x40, 0x400000c}, {&(0x7f00000037c0)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000003840)="784bd409f2c587f7e0fcc5d029077021f9e9df7b908f7c7c5834617797109f206d475406170d2c6c5d6036a569979aaecd8def42bee0f0e7ccca05c30782e4169c499efee62d233eb6ecfec2b96b18b9829aa2de67b0284a910e6ddf3f0130a67590c876d2", 0x65}], 0x1, &(0x7f0000001d80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000003800000000000000010047306dda84938ef0000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x78, 0x800}, {&(0x7f0000003980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003a00)="bd36417d5124dcee366361076b8db77b8779a8a82bdebd5cb22f0b9c23f68cafed6fbe5e5fc5f9a501d6f4d422e1268c7ebb31834cd2d546930a1d64584efd8e8f66a97f754bbed3bfacdaf9924a30940df1cf52e09e547056677ea446cec77ce7d5241cec018dda0b76a261c16a28a7905cced9b325a119ded609ef4cd11a3dbf057ec429a776432fc042d1fdb332bc836b69132ab3a1254a7c6b6e45ad26f205f7c80cce04936a2fe405efd9c65bf7276cda4dc58f918ef88b87a2643701e63abfac15f83afa7951dba39bb309673c2e710e6aafe611ef237b9665b534039b01edd4", 0xe3}, {&(0x7f0000003b00)="87518e55a9f6a9d45da4d701b12e63e9e8b61337972548005ef9b0da12bbaa5d441a4dc627eab58dd738e7f34b0781a4f0ba5f4a7429c2174a3f190b5389107f53ec802077a645eedae4c2df1af40621369de5638b51ab76bcbe4dea045bff64fd0d6d2ba6f6650fc0b3ef60f7aadf159ab16653d2ed495ca17a7a30b2380293835de13e14492688e8745524f8f42b7a6aeb8222337e1a32daa94434e19c264def7687540c5662a0f230c171a4309e17dd0cce5a76767b21d586ea3967bdd3c67494d48136438bf801c196bc4b985fc086", 0xd1}, {&(0x7f0000003c00)="72ba24d0a5247a5e82fe93c9401b3fe369ebbd577ec91d16578823c17979b334660b46f044da93df0eae46aadf6aed7450da7379e793ea1ca4ca80eec2ee52497710cf098edb793ff25b87a3638bab5ebed792683e356e2447c64e597ac15c71494be8a3449ba3f7c853ed212fae1392c4124cd69e5f28422b327886ec1484a785ab4fdbf39d", 0x86}, {&(0x7f0000003cc0)="bbcc8a81421cfa3588f6cacfbcc973425dfe84fc230c69fee62c8cf37eea30de49cfbb04d015c85a3d7a00d729f423d8dd17c0ef368dedda3840b337d6e4148358b9251f6cc176f6566041be586476b82e6efb948280a5b965a55f2f81966bf01a7b5deb9cb8a85408c1abb5e278ba8c485b2737cafb52267d125275e996bad9", 0x80}], 0x4, &(0x7f0000003f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0xd8, 0x8080}, {&(0x7f0000004080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004180)=[{&(0x7f0000004100)="3ef55f288cfe105cd021a558a6e483c78c1fd9c127a2eec0c06929a0d514ff88037004c6a4eb79ca553873c21dc2d73a1d0a4254feb1942d1bb8ace48ad93e69f85807c7ae4501fb473c0c4b74f348ac208c87d254055be600d02da3aaa0cd4726fa0b4babcfc9e60d", 0x69}], 0x1, &(0x7f0000004300)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0xc8, 0x20040880}, {&(0x7f0000004400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004480)}, {&(0x7f00000044c0)="4c7c065ff62668963ddd049eca100e496dca646d63ee1a637ab2771a6835eef1d3f996b0d92f733c8dae104f3ac3b63b1cf3d1ffe040b0b487fa19bf00bb", 0x3e}], 0x2, &(0x7f0000004540)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd0, 0x240108c4}], 0x7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r11, r1) dup3(r11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r13, r12) 05:29:29 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:29 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 414.550408][T14048] FAULT_INJECTION: forcing a failure. [ 414.550408][T14048] name failslab, interval 1, probability 0, space 0, times 0 [ 414.576482][T14048] CPU: 1 PID: 14048 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 414.585229][T14048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 414.595354][T14048] Call Trace: [ 414.598637][T14048] dump_stack+0x1f0/0x31e [ 414.602961][T14048] should_fail+0x38a/0x4e0 [ 414.607370][T14048] ? mmu_topup_memory_caches+0x7e/0x470 [ 414.612901][T14048] should_failslab+0x5/0x20 [ 414.617392][T14048] kmem_cache_alloc+0x53/0x2d0 [ 414.622164][T14048] mmu_topup_memory_caches+0x7e/0x470 [ 414.627525][T14048] kvm_mmu_load+0x1e/0x1030 [ 414.632028][T14048] ? kvm_apic_accept_events+0x1a3/0x410 [ 414.637570][T14048] vcpu_enter_guest+0x6747/0x89a0 [ 414.642596][T14048] ? __kasan_slab_free+0x144/0x170 [ 414.647696][T14048] ? __kasan_slab_free+0x114/0x170 [ 414.652805][T14048] ? __lock_acquire+0x116c/0x2c30 [ 414.657834][T14048] ? do_raw_spin_unlock+0x134/0x8d0 [ 414.663037][T14048] ? __lock_acquire+0x116c/0x2c30 [ 414.668063][T14048] ? lock_acquire+0x160/0x720 [ 414.672731][T14048] ? rcu_lock_acquire+0x9/0x30 [ 414.677493][T14048] vcpu_run+0x352/0xcd0 [ 414.681656][T14048] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 414.687110][T14048] kvm_vcpu_ioctl+0x64f/0xa50 [ 414.691784][T14048] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 414.697664][T14048] __se_sys_ioctl+0xf9/0x160 [ 414.702246][T14048] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 414.708303][T14048] do_syscall_64+0x73/0xe0 [ 414.712710][T14048] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 414.718588][T14048] RIP: 0033:0x45c369 [ 414.722469][T14048] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 414.742056][T14048] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.750460][T14048] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 414.758422][T14048] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 414.766375][T14048] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 [ 414.774327][T14048] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b [ 414.782284][T14048] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c 05:29:30 executing program 3 (fault-call:7 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0040c729477aafce80216ad58f02b5fcf046f3be805065ac984de1ff1af86d954181adba72885bb45e9cdbd9196e551351423328ad58882cad5455746ba3243d0e575d68f1841f3e1b6f5a03f2b42ec6092603fca93658ea318ddff8458ca07e8f3e5406a414912ae5df8f6646cf1fbacc1f570cfca02323c733de874a9147cdcf875568a0b822003ce7343e71905b1d5f78cb026c2dd00acf9b1056302b71bb0400721fc8049df44dca45fc56"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x419cdac, 0x38, 0x0, r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r7, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) dup2(r6, 0xffffffffffffffff) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) [ 414.862689][ T3850] usb 2-1: reset high-speed USB device number 76 using dummy_hcd 05:29:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 414.959793][T14063] FAULT_INJECTION: forcing a failure. [ 414.959793][T14063] name failslab, interval 1, probability 0, space 0, times 0 [ 415.010357][T14063] CPU: 0 PID: 14063 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 415.019053][T14063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 415.029092][T14063] Call Trace: [ 415.032374][T14063] dump_stack+0x1f0/0x31e [ 415.036699][T14063] should_fail+0x38a/0x4e0 [ 415.041109][T14063] ? mmu_topup_memory_caches+0x7e/0x470 [ 415.046647][T14063] should_failslab+0x5/0x20 [ 415.051145][T14063] kmem_cache_alloc+0x53/0x2d0 [ 415.055916][T14063] mmu_topup_memory_caches+0x7e/0x470 [ 415.061298][T14063] kvm_mmu_load+0x1e/0x1030 [ 415.065788][T14063] ? kvm_apic_accept_events+0x1a3/0x410 [ 415.071324][T14063] vcpu_enter_guest+0x6747/0x89a0 [ 415.076344][T14063] ? __kasan_slab_free+0x144/0x170 [ 415.081452][T14063] ? __kasan_slab_free+0x114/0x170 [ 415.086560][T14063] ? __lock_acquire+0x116c/0x2c30 [ 415.091584][T14063] ? do_raw_spin_unlock+0x134/0x8d0 [ 415.096770][T14063] ? __lock_acquire+0x116c/0x2c30 [ 415.101790][T14063] ? lock_acquire+0x160/0x720 [ 415.106457][T14063] ? rcu_lock_acquire+0x9/0x30 [ 415.111222][T14063] vcpu_run+0x352/0xcd0 [ 415.115406][T14063] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 415.120856][T14063] kvm_vcpu_ioctl+0x64f/0xa50 [ 415.125535][T14063] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 415.131524][T14063] __se_sys_ioctl+0xf9/0x160 [ 415.136107][T14063] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 415.142278][T14063] do_syscall_64+0x73/0xe0 [ 415.146686][T14063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 415.152564][T14063] RIP: 0033:0x45c369 [ 415.156448][T14063] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 415.176036][T14063] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.184431][T14063] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 415.192389][T14063] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 415.200348][T14063] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 05:29:30 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 415.208307][T14063] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 415.216280][T14063] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c 05:29:30 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) fsetxattr$security_ima(r5, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x5, 0x3, 0x6, 0x4}, 0x9, 0x3) [ 415.292758][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 415.448022][T14050] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 415.459370][T14050] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 416.601289][T14096] udc-core: couldn't find an available UDC or it's busy [ 416.608360][T14096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:33 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:33 executing program 3 (fault-call:7 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00000000803112fed0e6e4909c72192fdad60fb03a8e286447892892f4eba7704c629818fd8a308a85354f0a90e3c450bb99786cbb46a4e2b26616bd9264169b8832751a897bb7a3194f4011024a8ab39da877cb484bac5d307471d438b176b132f08c1506e2afd8623142a501960632da31460646818153e0128f7fc6589ff604f7abf391d374c87ad96911df1ecb0da9dbcab7afb21c6bf4e3179ccad70384706babc1265bc458795b25764ad17cc2152e82b47287fa0b25"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:29:33 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:33 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:33 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={0x0, 0x4}) 05:29:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000900000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:29:33 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x80) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r4}, 0x14) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r4, 0x7fffffff}, &(0x7f0000000080)=0xc) [ 417.748021][T14113] FAULT_INJECTION: forcing a failure. [ 417.748021][T14113] name failslab, interval 1, probability 0, space 0, times 0 [ 417.770890][T14113] CPU: 0 PID: 14113 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 417.779565][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.789598][T14113] Call Trace: [ 417.792868][T14113] dump_stack+0x1f0/0x31e 05:29:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000040)={{0x3, 0x2, 0x5, 0x0, 0x3}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:29:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000001000000010000005f2e791ffb2da251e563cdd8b71dfc073c4d6b6bb37fec6afb0ec7827f99de61b109ee99953b7913703e81484452c04231ba5be7c8c97f5daf7b441ae0b1e76a0873acfd20f34243", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 417.797271][T14113] should_fail+0x38a/0x4e0 [ 417.801684][T14113] ? mmu_topup_memory_caches+0x7e/0x470 [ 417.807222][T14113] should_failslab+0x5/0x20 [ 417.811733][T14113] kmem_cache_alloc+0x53/0x2d0 [ 417.816494][T14113] mmu_topup_memory_caches+0x7e/0x470 [ 417.821858][T14113] kvm_mmu_load+0x1e/0x1030 [ 417.826349][T14113] ? kvm_apic_accept_events+0x1a3/0x410 [ 417.831885][T14113] vcpu_enter_guest+0x6747/0x89a0 [ 417.836906][T14113] ? __kasan_slab_free+0x144/0x170 [ 417.842109][T14113] ? __kasan_slab_free+0x114/0x170 05:29:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RRENAME(r3, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') preadv(r6, &(0x7f00000017c0), 0x347, 0x0, 0x0) dup2(r5, r4) [ 417.847212][T14113] ? __lock_acquire+0x116c/0x2c30 [ 417.852239][T14113] ? do_raw_spin_unlock+0x134/0x8d0 [ 417.857426][T14113] ? __lock_acquire+0x116c/0x2c30 [ 417.862550][T14113] ? lock_acquire+0x160/0x720 [ 417.867218][T14113] ? rcu_lock_acquire+0x9/0x30 [ 417.871984][T14113] vcpu_run+0x352/0xcd0 [ 417.876161][T14113] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 417.881610][T14113] kvm_vcpu_ioctl+0x64f/0xa50 [ 417.883340][ T2509] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 417.886280][T14113] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 417.899855][T14113] __se_sys_ioctl+0xf9/0x160 [ 417.904449][T14113] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 417.910507][T14113] do_syscall_64+0x73/0xe0 [ 417.914916][T14113] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 417.920799][T14113] RIP: 0033:0x45c369 [ 417.924683][T14113] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:29:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r11, 0x202002) keyctl$chown(0x4, r11, r9, r10) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x5}, [{0x2, 0x3}, {}, {}], {0x4, 0x4}, [{}, {0x8, 0x4, r6}, {0x8, 0x2, r10}], {0x10, 0x1}, {0x20, 0x1}}, 0x54, 0x70a31a6d078788d3) dup2(r4, r3) [ 417.944285][T14113] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 417.952679][T14113] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 417.960640][T14113] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 417.968600][T14113] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 [ 417.976556][T14113] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 417.984513][T14113] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c [ 418.132577][ T2509] usb 2-1: Using ep0 maxpacket: 8 [ 418.272925][T14106] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 418.279922][T14106] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 419.394440][T14150] udc-core: couldn't find an available UDC or it's busy [ 419.401426][T14150] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:36 executing program 3 (fault-call:7 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000140)=0x1) 05:29:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100001001000000", @ANYRES32=r0, @ANYBLOB="00000004"], 0x18}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r2, &(0x7f0000000040), 0xfd18) r3 = gettid() tkill(r3, 0x2) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) r6 = socket(0x1e, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) sendmmsg$unix(r0, &(0x7f0000006f00), 0x54, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r1) dup3(r8, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) 05:29:36 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:36 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:36 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r0) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, 0x0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) fdatasync(r0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000040)) [ 420.813513][T14177] FAULT_INJECTION: forcing a failure. [ 420.813513][T14177] name failslab, interval 1, probability 0, space 0, times 0 [ 420.828316][T14177] CPU: 0 PID: 14177 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 420.836982][T14177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.847035][T14177] Call Trace: [ 420.850337][T14177] dump_stack+0x1f0/0x31e [ 420.854661][T14177] should_fail+0x38a/0x4e0 [ 420.859077][T14177] ? mmu_topup_memory_caches+0x7e/0x470 [ 420.864623][T14177] should_failslab+0x5/0x20 [ 420.869115][T14177] kmem_cache_alloc+0x53/0x2d0 [ 420.873879][T14177] mmu_topup_memory_caches+0x7e/0x470 [ 420.879246][T14177] kvm_mmu_load+0x1e/0x1030 [ 420.883742][T14177] ? kvm_apic_accept_events+0x1a3/0x410 [ 420.889281][T14177] vcpu_enter_guest+0x6747/0x89a0 [ 420.894304][T14177] ? __kasan_slab_free+0x144/0x170 [ 420.899406][T14177] ? __kasan_slab_free+0x114/0x170 [ 420.904516][T14177] ? __lock_acquire+0x116c/0x2c30 [ 420.909547][T14177] ? smp_call_function_single+0x362/0x450 [ 420.912394][ T2509] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 420.915250][T14177] ? __lock_acquire+0x116c/0x2c30 [ 420.915262][T14177] ? loaded_vmcs_clear+0x80/0x80 [ 420.915280][T14177] ? lock_acquire+0x160/0x720 [ 420.915292][T14177] ? rcu_lock_acquire+0x9/0x30 [ 420.915306][T14177] ? find_first_bit+0xc2/0x100 [ 420.915319][T14177] ? vmx_vcpu_load+0x35b/0x490 [ 420.951832][T14177] vcpu_run+0x352/0xcd0 [ 420.955989][T14177] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 420.961435][T14177] kvm_vcpu_ioctl+0x64f/0xa50 [ 420.966131][T14177] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 420.972013][T14177] __se_sys_ioctl+0xf9/0x160 [ 420.976597][T14177] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.982650][T14177] do_syscall_64+0x73/0xe0 [ 420.987081][T14177] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.992957][T14177] RIP: 0033:0x45c369 [ 420.996835][T14177] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.016427][T14177] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.024820][T14177] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 421.032779][T14177] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 421.040741][T14177] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 421.048702][T14177] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000e [ 421.056661][T14177] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac 05:29:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00000000b93f3264"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0100000053d598e187119f53e9620175cc01af488d04af457744988054fd272473afaee502d0b217ba708077b677dfa007ba0a74e674762b4b9cb4d6b7050cc39145c9bfaebede04c78423d89a0e394a8a25f7e7562546e58675c9807e1e1a04540b"], 0x18}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000280)={0x0, 0x2, [{r2, 0x0, 0x4000, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x4000, 0xffffb000}]}) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6}, 0x14) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x7, 0x244bdf3b}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0)={r7}, &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r1) dup3(r8, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) 05:29:36 executing program 3 (fault-call:7 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="140900000000000001000000010000001994572b20ce39f5f5adc00f5c6683c245545f761c9fb6d222588bf435b2affe267e2794b4f29085b4a5fd7c19a380d45c8eeba568e0dacc2d88dfe056f1cb56784d4de9da7b4dc6c1217b761aef3212ced6737d8b4c7d44e38fe7810e0e7e0193fe1ee9f941585c20381eed15be411ae1298a84cd7089afe1890308ca520598ca514c227ad46a861036d04c06b73565d1728ce63da24f9ac933bbebfd70b97adb7e4a607ba45096b04feec81e7c5988eb4ade689f3faa3f9229571890cc78fe7b8a505783a6bfc403b939c961d92923d6f918ce2d49c8599883f7a431cb1ece6eaf62dc40c2fb", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) accept4$inet6(r3, 0x0, &(0x7f0000000180), 0x80000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) dup3(r5, r4, 0x80000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000000080)=""/140) dup2(r7, r6) [ 421.162542][ T2509] usb 2-1: Using ep0 maxpacket: 8 [ 421.271164][T14186] FAULT_INJECTION: forcing a failure. [ 421.271164][T14186] name failslab, interval 1, probability 0, space 0, times 0 [ 421.303533][T14158] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 421.310825][T14158] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 421.335371][T14186] CPU: 0 PID: 14186 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 421.344147][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.354189][T14186] Call Trace: [ 421.357471][T14186] dump_stack+0x1f0/0x31e [ 421.361809][T14186] should_fail+0x38a/0x4e0 [ 421.366215][T14186] ? mmu_topup_memory_caches+0x7e/0x470 [ 421.371744][T14186] should_failslab+0x5/0x20 [ 421.376232][T14186] kmem_cache_alloc+0x53/0x2d0 [ 421.381116][T14186] mmu_topup_memory_caches+0x7e/0x470 [ 421.386480][T14186] kvm_mmu_load+0x1e/0x1030 [ 421.390969][T14186] ? kvm_apic_accept_events+0x1a3/0x410 [ 421.396515][T14186] vcpu_enter_guest+0x6747/0x89a0 [ 421.401532][T14186] ? __kasan_slab_free+0x144/0x170 [ 421.406627][T14186] ? __kasan_slab_free+0x114/0x170 [ 421.411735][T14186] ? __lock_acquire+0x116c/0x2c30 [ 421.416766][T14186] ? do_raw_spin_unlock+0x134/0x8d0 [ 421.421950][T14186] ? __lock_acquire+0x116c/0x2c30 [ 421.426980][T14186] ? lock_acquire+0x160/0x720 [ 421.431644][T14186] ? rcu_lock_acquire+0x9/0x30 [ 421.436400][T14186] vcpu_run+0x352/0xcd0 [ 421.440556][T14186] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 421.446004][T14186] kvm_vcpu_ioctl+0x64f/0xa50 [ 421.450679][T14186] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 421.456559][T14186] __se_sys_ioctl+0xf9/0x160 [ 421.461136][T14186] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 421.467283][T14186] do_syscall_64+0x73/0xe0 [ 421.471689][T14186] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 421.477567][T14186] RIP: 0033:0x45c369 05:29:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) sendmmsg$unix(r1, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) dup3(r3, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) [ 421.481447][T14186] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 421.501044][T14186] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.509443][T14186] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 421.517403][T14186] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 421.525361][T14186] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 05:29:36 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:37 executing program 2: r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 421.533319][T14186] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000f [ 421.541279][T14186] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c 05:29:37 executing program 2: r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:37 executing program 3 (fault-call:7 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 421.846463][T14213] FAULT_INJECTION: forcing a failure. [ 421.846463][T14213] name failslab, interval 1, probability 0, space 0, times 0 [ 421.880467][T14213] CPU: 0 PID: 14213 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 421.889150][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.899192][T14213] Call Trace: [ 421.902472][T14213] dump_stack+0x1f0/0x31e [ 421.906798][T14213] should_fail+0x38a/0x4e0 [ 421.911209][T14213] ? mmu_topup_memory_caches+0x7e/0x470 [ 421.916745][T14213] should_failslab+0x5/0x20 [ 421.921237][T14213] kmem_cache_alloc+0x53/0x2d0 [ 421.925991][T14213] mmu_topup_memory_caches+0x7e/0x470 [ 421.931351][T14213] kvm_mmu_load+0x1e/0x1030 [ 421.935844][T14213] ? kvm_apic_accept_events+0x1a3/0x410 [ 421.941380][T14213] vcpu_enter_guest+0x6747/0x89a0 [ 421.946413][T14213] ? __kasan_slab_free+0x144/0x170 [ 421.951529][T14213] ? __kasan_slab_free+0x114/0x170 [ 421.956638][T14213] ? __lock_acquire+0x116c/0x2c30 [ 421.961664][T14213] ? do_raw_spin_unlock+0x134/0x8d0 [ 421.966853][T14213] ? __lock_acquire+0x116c/0x2c30 [ 421.971872][T14213] ? lock_acquire+0x160/0x720 [ 421.976622][T14213] ? rcu_lock_acquire+0x9/0x30 [ 421.981394][T14213] vcpu_run+0x352/0xcd0 [ 421.985546][T14213] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 421.991008][T14213] kvm_vcpu_ioctl+0x64f/0xa50 [ 421.995679][T14213] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 422.001555][T14213] __se_sys_ioctl+0xf9/0x160 [ 422.006135][T14213] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.012188][T14213] do_syscall_64+0x73/0xe0 [ 422.016593][T14213] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.022482][T14213] RIP: 0033:0x45c369 [ 422.026376][T14213] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 422.045961][T14213] RSP: 002b:00007fc9a0282c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.054353][T14213] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 422.062309][T14213] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 422.070374][T14213] RBP: 00007fc9a0282ca0 R08: 0000000000000000 R09: 0000000000000000 [ 422.078348][T14213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000010 [ 422.086324][T14213] R13: 00007ffd6fdb91ef R14: 00007fc9a02839c0 R15: 000000000078bf0c [ 422.441685][T14218] udc-core: couldn't find an available UDC or it's busy [ 422.450924][T14218] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:39 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:39 executing program 2: r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES16], 0x74}, 0x1, 0x0, 0x0, 0x4008800}, 0x4084849) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r7 = socket(0x6, 0x800, 0x401) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008800) dup2(r4, r3) 05:29:39 executing program 3 (fault-call:7 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:39 executing program 0: r0 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000a4a000/0x2000)=nil, 0x2000, 0x0, r0) pkey_free(r0) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x40a, 0x402880) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x3200e0) 05:29:39 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r7 = fspick(r3, &(0x7f00000001c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r7, 0x3, &(0x7f0000000240)='memory.events\x00', &(0x7f0000000280)='./file0\x00', r3) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000000040)={{0x2, 0x4e24, @local}, {0x1, @multicast}, 0x20, {0x2, 0x4e24, @remote}, 'wg0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r8, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) accept$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) dup2(r5, r4) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f00000000c0)=0xd002) 05:29:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000040)={0x3, 0x300, 0x2, 0xffffffff, 0x7}) [ 423.806193][T14248] FAULT_INJECTION: forcing a failure. [ 423.806193][T14248] name failslab, interval 1, probability 0, space 0, times 0 05:29:39 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 423.865414][T14248] CPU: 0 PID: 14248 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 423.874099][T14248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.884140][T14248] Call Trace: [ 423.887422][T14248] dump_stack+0x1f0/0x31e [ 423.891746][T14248] should_fail+0x38a/0x4e0 [ 423.896156][T14248] ? mmu_topup_memory_caches+0x7e/0x470 [ 423.901689][T14248] should_failslab+0x5/0x20 [ 423.906179][T14248] kmem_cache_alloc+0x53/0x2d0 05:29:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000040)) fstat(r0, &(0x7f0000000080)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r4, &(0x7f0000000040), 0xfd18) r5 = gettid() tkill(r5, 0x2) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x0, r5}) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) sendmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x10}}], 0x10, 0x4008000}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES64, @ANYBLOB="02e60f00"], 0x18, 0x45000}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r1) dup3(r6, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) 05:29:39 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000040)={0x6, 0x6, 0x2}) [ 423.910946][T14248] mmu_topup_memory_caches+0x7e/0x470 [ 423.916307][T14248] kvm_mmu_load+0x1e/0x1030 [ 423.920803][T14248] ? kvm_apic_accept_events+0x1a3/0x410 [ 423.926342][T14248] vcpu_enter_guest+0x6747/0x89a0 [ 423.931362][T14248] ? __kasan_slab_free+0x144/0x170 [ 423.936469][T14248] ? __kasan_slab_free+0x114/0x170 [ 423.941579][T14248] ? __lock_acquire+0x116c/0x2c30 [ 423.946609][T14248] ? smp_call_function_single+0x362/0x450 [ 423.952319][T14248] ? __lock_acquire+0x116c/0x2c30 [ 423.957335][T14248] ? loaded_vmcs_clear+0x80/0x80 [ 423.962271][T14248] ? lock_acquire+0x160/0x720 [ 423.966943][T14248] ? rcu_lock_acquire+0x9/0x30 [ 423.971704][T14248] ? find_first_bit+0xc2/0x100 [ 423.976453][T14248] ? vmx_vcpu_load+0x35b/0x490 [ 423.981208][T14248] vcpu_run+0x352/0xcd0 [ 423.985365][T14248] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 423.990814][T14248] kvm_vcpu_ioctl+0x64f/0xa50 [ 423.995486][T14248] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 424.001367][T14248] __se_sys_ioctl+0xf9/0x160 [ 424.005947][T14248] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 424.012002][T14248] do_syscall_64+0x73/0xe0 [ 424.016601][T14248] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 424.022487][T14248] RIP: 0033:0x45c369 [ 424.026363][T14248] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 424.045954][T14248] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.054356][T14248] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 424.062313][T14248] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 424.070396][T14248] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 424.078351][T14248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000011 [ 424.086307][T14248] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac [ 424.174577][ T2601] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 424.432232][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 424.572613][T14236] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 424.579548][T14236] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 425.688759][T14275] udc-core: couldn't find an available UDC or it's busy [ 425.696010][T14275] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:42 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:42 executing program 2: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:42 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000000300)="d190cbfd4c32b6acdc7c1955f2e7d89c514e373cefe56548140b44b2343b786cea9aaea9d56ee7cc8d462e107eeaa477f7967f0771d1cb2792636652c2594ab47b0681e48b425916c278549aecfe68410c57ed02bd0539dbb78d6291eb22f760df79873279bb033d871cdd6b33f13b2d0c9611a55e6be4ae7a9b4a9b4d44db7584862fff19acf7d3bdf33930a3c62058ebeb4bd97d8687222d9f3d2f348c291ee2bef90043c8ff302e3c276d11858d871ffb1c07cb5a7f2f9b074cc013500f2d6d5eea5704b86986ed", 0xc9}, {&(0x7f0000000400)="475d496b5cb04671a605a0c96256a8fcaff1f02ffde3fbe2e07b6747af5e816c541469899cd97e727b65b14cf8e51ace7ded87b7925b447a929405744134ab49a965631e2c2bb4e01d5a8bdd4b1dcf09c682d70d37237f0214245eb31784d2638e5478f561c004490c861805d7f9464b531bf774265d167bcd249c44d5c8e351349c090066d399b78c42a20b490d50f22ed7d8be78b84c03512d851584179599aa88c0ea57fa4232bb390535d17a5faf6d26ba47c44c7a631466", 0xba}, {&(0x7f0000000500)="d70723ca8a27d8dca73606423011bb2385da8081e855d5e97b3a440df093b6bc6f1d80df753dd5a9a4fa7dafe79303cc1f60b0200478a8c395a2858ea0c24fdd82affd077a41563abf8628ea11c4e52edfaa5e851d2d2c340160984083a9591aaff50bc8df9e37f0f52a0a92afb2df4ae1d3606e7cd95c15a61ba56447574c66109c58058b3e7cf123f6b04dc43d6ead357694cfcaaf04da56568189b7fa75c4491220d634a583808802bfb88a97efb83e6e4e5bec5cd0be59b290746206e632ee4b385c797841d5c3967b204c0516", 0xcf}], 0x6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r8, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r3, 0x0, 0x0, 0x2000}, {r5, 0x0, 0x2000}, {r1, 0x0, 0x0, 0xfffffffff0000000}, {r6, 0x0, 0x0, 0x1000000000000}, {r7, 0x0, 0xfffffffff0000000, 0x1000}, {r8, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:29:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000100)={0x0, 0x3ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xffffffffffffff99, &(0x7f0000000080)=[@rights={{0x1c, 0x1, 0x1, [r2, r3, r1]}}], 0x20}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r1) dup3(r4, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) 05:29:42 executing program 3 (fault-call:7 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:42 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000180)={0x0, &(0x7f0000000080)="74754f92cafdd8c4bd0311d91561413071b0771ad0560194e106af0df5bcf1b35721e09e1e09e1a6135c62da89035839834c10b2cec0ee31964ff014fd48d297297a44ac893e3aa87c94d68586174c6249e94f51dfe3481f16994d913eb19d6abb004031842d1eb5d1d64ffbc8fc97c1ee11b8c34ad6e22e2c3d4dcdcbd732c2a94cb2317eb34418c95918d371bd76620587b871d6d7ee7b69844a97a6d60323fe76277fcf", 0xa5}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00S\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$SG_GET_RESERVED_SIZE(r5, 0x2272, &(0x7f00000001c0)) 05:29:42 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 426.843802][T14302] FAULT_INJECTION: forcing a failure. [ 426.843802][T14302] name failslab, interval 1, probability 0, space 0, times 0 05:29:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000014d9be4a29eeebe258d05fc5709c08343b6b31b20300000000000000456913e22bb0b5916d8cb3ade0cdca575f1949860854513fb167f0800ad8b10b97ff32d514aea98dbe4e21c06a9a7c042ebc58cdd94e0364900faf76678a534d6cb2032dd73f4b6e933b0b02988044506e3e7fe3d0216773fa09b8c81a739e576d19f71ca040c9e57f668bc4b1dc818d25e28c4f150448929593b32d6781003ef4f7d04ee9130ae77bbfe341cd57fafb87633863cc0d45c238906424438613"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r5 = accept4(r4, &(0x7f0000000640)=@rc={0x1f, @fixed}, &(0x7f0000000440)=0x80, 0xc00) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000500)="ce7da800c7657cf2530702611940b24e045e3db8e2725a6f584de406892aec6de6dee3a66ff40bc40edea2c825b23beeef2a43ad3e594aa5520692dfd878bd8dc443942b67ef8f4bdd695fffe48539217a8cb4a66278d8bbbc5623f1835f2c68ec07bdd73890cab48261daa98a16a8886b4379e600f44cb8a8364eed719918795ab1833c864e4ddda4d1344530ab1eb849f13fa38d0a61f4bdfe966f99a9535dd70a6e305f940b661e763af75379b697f529ef4f", 0xb4, r6}, 0x68) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f00000006c0)="f667bcbead53b3e0408234e606f66fa6eac92e1205c09aabe2b05f73a40eda04741133c15039c4e65214e5abc41472b70b6c4ac771bf8a6088182c307959a610eb55181986a9845088c98b2483b6fc1ab8cfac36155c46a0985e41ebee36f3e30e83a6a6a133f4feb2d390b04ce3f80c70875c86838cdcc14e52525e6388f87e95ae70f7da5b0bb8c3d3267f00ea66da7eda254d2e5b16d316820e86baa4be3fbc") pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) sendto$l2tp(r3, &(0x7f0000000040)="4012e9b90eb5c67e9a7de0eb0ef13ed21b0f464fee80ec8b7a24e5861f42762a52f41235f609d84c26eaee09bfeb7ae807", 0x31, 0x4080, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r1, &(0x7f0000000100)='(}$-]%{^+$-$\'!\x00', 0x1) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f00000000c0)={0x40, 0x8, 0x1000}) dup2(r8, r7) [ 426.900834][T14302] CPU: 0 PID: 14302 Comm: syz-executor.3 Not tainted 5.8.0-rc7-syzkaller #0 [ 426.909513][T14302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.919557][T14302] Call Trace: [ 426.922846][T14302] dump_stack+0x1f0/0x31e [ 426.927176][T14302] should_fail+0x38a/0x4e0 [ 426.931591][T14302] ? mmu_topup_memory_caches+0x7e/0x470 [ 426.937127][T14302] should_failslab+0x5/0x20 [ 426.941620][T14302] kmem_cache_alloc+0x53/0x2d0 [ 426.946375][T14302] mmu_topup_memory_caches+0x7e/0x470 [ 426.951741][T14302] kvm_mmu_load+0x1e/0x1030 [ 426.956233][T14302] ? kvm_apic_accept_events+0x1a3/0x410 [ 426.961767][T14302] vcpu_enter_guest+0x6747/0x89a0 [ 426.966786][T14302] ? __kasan_slab_free+0x144/0x170 [ 426.971886][T14302] ? __kasan_slab_free+0x114/0x170 [ 426.976992][T14302] ? __lock_acquire+0x116c/0x2c30 [ 426.982009][T14302] ? smp_call_function_single+0x362/0x450 [ 426.982227][ T17] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 426.987706][T14302] ? __lock_acquire+0x116c/0x2c30 [ 426.987717][T14302] ? loaded_vmcs_clear+0x80/0x80 [ 426.987734][T14302] ? lock_acquire+0x160/0x720 [ 426.987745][T14302] ? rcu_lock_acquire+0x9/0x30 [ 426.987759][T14302] ? find_first_bit+0xc2/0x100 [ 426.987771][T14302] ? vmx_vcpu_load+0x35b/0x490 [ 427.024257][T14302] vcpu_run+0x352/0xcd0 [ 427.028420][T14302] kvm_arch_vcpu_ioctl_run+0x451/0x8f0 [ 427.033869][T14302] kvm_vcpu_ioctl+0x64f/0xa50 [ 427.038541][T14302] ? kvm_vm_ioctl_get_dirty_log+0x650/0x650 [ 427.044418][T14302] __se_sys_ioctl+0xf9/0x160 [ 427.048996][T14302] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.055053][T14302] do_syscall_64+0x73/0xe0 [ 427.059465][T14302] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 427.065341][T14302] RIP: 0033:0x45c369 [ 427.069221][T14302] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.088822][T14302] RSP: 002b:00007fc9a0261c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:29:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000022fb"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 427.097223][T14302] RAX: ffffffffffffffda RBX: 0000000000010a80 RCX: 000000000045c369 [ 427.105178][T14302] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 427.113132][T14302] RBP: 00007fc9a0261ca0 R08: 0000000000000000 R09: 0000000000000000 [ 427.121088][T14302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000012 [ 427.129042][T14302] R13: 00007ffd6fdb91ef R14: 00007fc9a02629c0 R15: 000000000078bfac 05:29:42 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) recvfrom$netrom(r0, &(0x7f0000000140)=""/19, 0x13, 0x2101, &(0x7f0000000180)={{0x3, @bcast, 0x6}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @default, @bcast, @null, @default]}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="00000001", @ANYRESHEX=r3, @ANYRESHEX=r3], 0x18}, 0x0) sendmmsg$unix(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}], 0x1, 0x804) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) dup3(r4, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup2(r6, r5) fallocate(r7, 0x1c, 0x80, 0x5) [ 427.352503][ T17] usb 2-1: Using ep0 maxpacket: 8 05:29:42 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1400f2ffff2cbcfe43a8688d80000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) r2 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000000340)=0xe8) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r8, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r9, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) sendmmsg$unix(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRESHEX=r8], 0x18}, {&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000100)=[{&(0x7f0000000180)="6949eef038b235a86f84f8d5ddc6cfd6fbef20f97e0f765ac0e68c67a4d604c10a3a9934c2cb67bf62e565027370feaf1c27ccc677202e14d9c634c9611f735bf30f5dd0db4696571cae5cab7fe28a935aebe9015fa7f05323019b7c183f03a4473630cddebc15fcdb7c310fa61c4626a0c5c5c6bd6ce28f01d5c0eda0bc10fa0c5914cd0a40490c5d97", 0x8a}, {&(0x7f0000000540)="267d93f1ffebd66500f19e080089a18c0420f136b0c714e38c934a4aae504c1652cb3dffda72cf56ef3839ba5b6c0665a2286c09ee579a203ea793b132e5db628148", 0x42}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r6}}}, @rights={{0x24, 0x1, 0x1, [r8, r9, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c}}], 0x68}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r1) dup3(r10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r12, r11) [ 427.497736][T14297] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 427.507214][T14297] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 428.633802][T14335] udc-core: couldn't find an available UDC or it's busy [ 428.640873][T14335] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:45 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:45 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 05:29:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="919cd763b066fb95b7a0214839532b1753b6fd6d0424e22650d373d2490d01c5a8e78f29f2c56eaf968346e8209d0c5aab94850d11ddf6ca923b9130db9f3717b04afcf7eceee646da23a471a87ad40cd4ba335ba0adca79f312db7e6bd488192395f4bb0d333fba9ee60cdcfe349f98c93d", 0x72, 0x44004, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x2, 'macvlan0\x00', {0x7}, 0x8000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D', @ANYRES16=r3, @ANYBLOB="000227bd7000ffdbdf250600000014000600fe80000000000000000000000000001f34beda0000000000000000000100"/62], 0x44}}, 0x24048005) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, r3, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x26}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x8001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) 05:29:45 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0x8, {{0x2, 0x4e22, @private=0xa010102}}, 0x1, 0x7, [{{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e23, @private=0xa010101}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}}, {{0x2, 0x4e22, @rand_addr=0x64010102}}, {{0x2, 0x4e22, @private=0xa010100}}]}, 0x410) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) sendmmsg$unix(r1, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) dup3(r3, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:29:45 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x110082, 0x0) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:29:45 executing program 0: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x40000, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000000c0)={0x38a1, 0xc, [{0x3}, {0xd, 0x1}, {0xc}, {0x4, 0x1}, {0xa}, {0x8, 0x1}, {0xf, 0x1}, {0x7}, {0x2}, {0xe}, {0xc, 0x1}, {0x7}]}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth0_to_batadv\x00', 0x3}, 0x18) 05:29:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x20000000}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:29:45 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r3, 0x806c4120, &(0x7f0000000240)) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getrandom(&(0x7f0000000640)=""/4096, 0x1000, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) getsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000080)=""/171, &(0x7f0000000180)=0xab) dup2(r5, r4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r7, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000040)=0x9) 05:29:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x2, 0x0) 05:29:45 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x50002, 0x0) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x23f6bd3f7810703f}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f6, 0x200, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 430.032226][ T2601] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 430.281990][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 430.432237][T14346] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 430.439217][T14346] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 431.558873][T14399] udc-core: couldn't find an available UDC or it's busy [ 431.565861][T14399] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:48 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000040)={0x5, 0xfffffffffffff040, 0x3, 0xfff}) 05:29:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="74d52386d4a624dd003f000000016aceb6676fdd8de73e4092d40eaeae2906d9f4cf75ce72f324f0a33b37f60b497e0a3bfbc977832fa732d8a99184116bd13a14148a1f57cca811b16b51f90fcae1488e0cb8849e0b3d3978c0c53435b90634160321281cc9bc3775a3b34c14c1d68615811800dc3d535eb7f19b55a6650c3e54283d2b4a4ce12c62893a147565b969bc0ee96f84e664b5b74df56ece463b9169ff574b127ab3458301c2157c952b88001fa4ce6a7eeb552c82bb5ee1554eb4bb295edd355a", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) fcntl$addseals(r2, 0x409, 0x4) dup3(r3, r0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:29:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x10, 0x0) 05:29:48 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:48 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:48 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80a01, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000080)) r1 = userfaultfd(0x0) read(r1, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000140)=0x1) 05:29:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) dup3(r2, r0, 0x0) r4 = dup3(r3, r3, 0x80000) ioctl(r4, 0x9, &(0x7f0000000040)="c6a8725288018ad02e73bba12d") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) 05:29:48 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:29:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000040)=0xfffffffe, 0x4) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:29:48 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000040)={0x3, 0x4, 0x2, 0x4, 0x9, 0x7fffffff, 0x9}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="e165f7edc77e61ee3b2726d73aaf3ff51cfa5c3d28f4ee5ef103d0", 0x1b}, {&(0x7f0000000100)="a3e393bd27c2b4b90e8eb254a7e40a44b94370253f48c3cd36047a94edcd4a5e8d9f674e5b0813c973cac439c76396df783835b250097b63fdde2cb49b1b", 0x3e}], 0x2, 0x7, 0x0) 05:29:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x4b66, 0x0) [ 433.061889][ T17] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 433.311913][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 433.453153][T14413] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 433.460689][T14413] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 434.596084][T14467] udc-core: couldn't find an available UDC or it's busy [ 434.603577][T14467] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:51 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9f68, 0x98340) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x200000) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x80) 05:29:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x4c01, 0x0) 05:29:51 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:51 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:51 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000040)=@netrom) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x101000) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0xfffffffffffffe1d, r3, 0x2, 0x70bd23, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x9f3a10925a19c4ad}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0xc020) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)="1d42400dbe65d56d8d60ec11ab", 0xd, r4}, 0x68) 05:29:51 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x541b, 0x0) 05:29:51 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:51 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x240cc2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000180)={0x40000000, 0x7, "e9cec366363c44e7578fefac77ac19163aa09d8591b6d53fad1e94ec3c8dc8b2", 0x7, 0x2, 0x7, 0x80000001, 0x1, 0xfff, 0x80000000, 0x7, [0x8, 0x8, 0x1000, 0xa665]}) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x80000) 05:29:51 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 436.101692][ T3850] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 436.411876][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 436.557852][T14486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 436.567425][T14486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 437.692856][T14530] udc-core: couldn't find an available UDC or it's busy [ 437.699815][T14530] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:54 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:29:54 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x541c, 0x0) 05:29:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x400}) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:29:54 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x181080, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="dcff97d884b9f1af4dac7c65ae778338bd63a8e877e643bb2a9f969ac2bf1b4137ce1ba7113eafc8565f63abb08232ff14d797c1a8d3bab53bd6edb48a39881d97d244a59846416b7bee46bba30f7ff8d26bd33051843601a0a23087307a082ba6d9749626d7edc7b659e641b1f46fae4cc3600f8b64f3c04c56c2188bbd746ff41c0ff31514027c0df118067d3d8bc3ffe25df155fa627bec95e4bbff39b52f2ced440f5c6c91b54c57f10b7ad0cc93922c0903862f76", 0xb7, 0x2}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f00000002c0)={r4, 0x6a, &(0x7f0000000240)=""/106}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="d9f159fa2ef4f0eb8e21ff00ab96cb8b7ed0176f71c639748bb9b1852072af4848e4137c87ef1ef650206547a027aebea93b04937889ba7a34bfee00c22df4496eacd4e115e25cc6b7ed578f337bc3dca1ff2a0bbceef368de90e678caa4024c170dafa1cfe73bee274318ff2ee5bcf1e4cbefb091fb59d1d35d785f749733d7c6ae8bf7c5491a4f01d9"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r1) dup3(r5, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r6) 05:29:54 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:54 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0xa37c0000000000, 0x2000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:29:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000040)) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:29:54 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:54 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x5421, 0x0) 05:29:54 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 439.141718][ T2601] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 439.391573][ T2601] usb 2-1: Using ep0 maxpacket: 8 [ 439.535155][T14547] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 439.542377][T14547] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 440.652344][T14593] udc-core: couldn't find an available UDC or it's busy [ 440.659385][T14593] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 05:29:57 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 05:29:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', r6, 0x80, 0x80, 0x3, 0x7fff, {{0x2a, 0x4, 0x3, 0x6, 0xa8, 0x64, 0x0, 0x1, 0x4, 0x0, @empty, @loopback, {[@rr={0x7, 0x7, 0x4e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x18, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@private=0xa010102, 0x8cc9}, {@private=0xa010102, 0x6}, {@loopback, 0x3}]}, @timestamp_prespec={0x44, 0x2c, 0x2d, 0x3, 0x3, [{@local, 0x4}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0xff}, {@remote, 0x7fff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}, @cipso={0x86, 0x28, 0x0, [{0x2, 0x9, "afb3d9805d9d74"}, {0x5, 0x4, "0544"}, {0x2, 0x7, "14d78a600e"}, {0x7, 0xa, "576a917d575c0fe5"}, {0x0, 0x4, "75f7"}]}, @ra={0x94, 0x4}, @generic={0x0, 0x4, "5cbe"}]}}}}}) 05:29:57 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000e32788d000001000000010000002df1bbe0764a3c41b3", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x300000c, 0x4008012, r3, 0x82000000) 05:29:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x5450, 0x0) 05:29:57 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:57 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x40) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="00b71104fa5dc499a7cb792b04661635aa090019ea2821295df2195c7b453df54a06188d3aeb373d42bfcb6a76177219793f3d0e47ba81490e"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="9fe6ae56561e6dc914000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) getsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) 05:29:57 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:57 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r3) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in=@private=0xa010101, @in=@loopback, 0x4e21, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x80, 0x2f, 0x0, r3}, {0x4, 0x6, 0xe7db, 0x10000, 0x4, 0x5, 0x7, 0x800}, {0x1, 0x6, 0x5, 0x7}, 0x7, 0x6e6bb8, 0x1, 0x0, 0x1, 0x3}, {{@in=@loopback, 0x4d5, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x2, 0xe5, 0x4, 0x4}}, 0xe8) 05:29:57 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:29:57 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x3, 0xfffffffb}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) [ 442.187288][ T2487] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 442.441433][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 442.581882][T14610] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 442.589014][T14610] raw-gadget gadget: fail, usb_ep_enable returned -22 05:30:00 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 05:30:00 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000000c0)={0x0, 0x8, 0x8001, [], &(0x7f0000000080)=0x3f}) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000180)={0x3f, "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"}) 05:30:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x5451, 0x0) 05:30:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x44e43f1f9a59b8d0, 0x0, 0x0, &(0x7f0000000140), 0x18}, 0x4004) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140018367ca321eff66e4c1254991000b9baea4bc00376fd9f00000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) dup2(r4, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xa000, 0x0) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) 05:30:00 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:00 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:00 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:00 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(0x0, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:00 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:00 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x86, 0x860000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000040)) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x1) 05:30:00 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, 0x0, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 445.233315][ T3848] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 445.491318][ T3848] usb 2-1: Using ep0 maxpacket: 8 [ 445.651742][T14662] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 445.658630][T14662] raw-gadget gadget: fail, usb_ep_enable returned -22 05:30:03 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 05:30:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="40189400"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:30:03 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x5452, 0x0) 05:30:03 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="c3768c8b64f452d07d5c63f1c6516220cab04c551e4286f8ff5ab44d9454705e6baf91375eb13d7d6f7fc7369766439250a3e5a61823712b03097286bbdcaea7be35eac5fc79afb25246f1b4a0d245c2ef8630336380cef9affecf4b519e1d8ec6570a4cff4bdf716cadd92385fc2fef4df0f3dc9fc1e893e74324d4a8ac09891d65986d0740569daa6d578a2cd3effda95892d443fc4308014b4cbfb3ce4df15d88542fd002a68023279f8be5e151351e6fa414f536b561b357eb5a72f971c51b1acfd9cd261c809fd2eb527d5a1f472d70b15c1737dc011dd554cfb242689c96126a360119661524d82dc4aef3c50e") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000340)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={0x1, @null, @rose={'rose', 0x0}, 0xc1e, 'syz0\x00', @default, 0x6, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)={0x100000, 0x3, 0x4, 0x40, 0x8, {0x77359400}, {0x3, 0xc, 0x81, 0x7, 0x3, 0x40, "e0f7935a"}, 0x7f, 0x3, @userptr=0x3ff, 0x1, 0x0, r4}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) faccessat(r1, &(0x7f0000000180)='./file0\x00', 0xc5) ioctl$FITRIM(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000001c0), &(0x7f0000000300)=0x4) 05:30:03 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:03 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:03 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000080)=0x2) 05:30:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x2a03) write$P9_RLOCK(r3, &(0x7f0000000080)={0x8, 0x35, 0x1, 0x1}, 0x8) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:03 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x0, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:03 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x5460, 0x0) [ 448.168175][ T28] audit: type=1326 audit(1595914203.595:24): auid=0 uid=0 gid=0 ses=4 subj=_ pid=14741 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f1aa code=0x0 [ 448.244290][ T2487] usb 2-1: reset high-speed USB device number 76 using dummy_hcd [ 448.491206][ T2487] usb 2-1: Using ep0 maxpacket: 8 [ 448.631403][T14729] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 448.638479][T14729] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 449.023611][ T28] audit: type=1326 audit(1595914204.455:25): auid=0 uid=0 gid=0 ses=4 subj=_ pid=14741 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f1aa code=0x0 05:30:06 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:06 executing program 0: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x0, {0x82, 0x7, 0x6, 0x1}}) 05:30:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x6364, 0x0) 05:30:06 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:06 executing program 5: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="14afcd105bd5000035deaa2403000c00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) tee(r1, r2, 0xd42, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000040)) dup2(r0, 0xffffffffffffffff) dup3(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000000300)="d190cbfd4c32b6acdc7c1955f2e7d89c514e373cefe56548140b44b2343b786cea9aaea9d56ee7cc8d462e107eeaa477f7967f0771d1cb2792636652c2594ab47b0681e48b425916c278549aecfe68410c57ed02bd0539dbb78d6291eb22f760df79873279bb033d871cdd6b33f13b2d0c9611a55e6be4ae7a9b4a9b4d44db7584862fff19acf7d3bdf33930a3c62058ebeb4bd97d8687222d9f3d2f348c291ee2bef90043c8ff302e3c276d11858d871ffb1c07cb5a7f2f9b074cc013500f2d6d5eea5704b86986ed", 0xc9}, {&(0x7f0000000400)="475d496b5cb04671a605a0c96256a8fcaff1f02ffde3fbe2e07b6747af5e816c541469899cd97e727b65b14cf8e51ace7ded87b7925b447a929405744134ab49a965631e2c2bb4e01d5a8bdd4b1dcf09c682d70d37237f0214245eb31784d2638e5478f561c004490c861805d7f9464b531bf774265d167bcd249c44d5c8e351349c090066d399b78c42a20b490d50f22ed7d8be78b84c03512d851584179599aa88c0ea57fa4232bb390535d17a5faf6d26ba47c44c7a631466", 0xba}, {&(0x7f0000000500)="d70723ca8a27d8dca73606423011bb2385da8081e855d5e97b3a440df093b6bc6f1d80df753dd5a9a4fa7dafe79303cc1f60b0200478a8c395a2858ea0c24fdd82affd077a41563abf8628ea11c4e52edfaa5e851d2d2c340160984083a9591aaff50bc8df9e37f0f52a0a92afb2df4ae1d3606e7cd95c15a61ba56447574c66109c58058b3e7cf123f6b04dc43d6ead357694cfcaaf04da56568189b7fa75c4491220d634a583808802bfb88a97efb83e6e4e5bec5cd0be59b290746206e632ee4b385c797841d5c3967b204c0516", 0xcf}], 0x6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r8, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r3, 0x0, 0x0, 0x2000}, {r5, 0x0, 0x2000}, {r1, 0x0, 0x0, 0xfffffffff0000000}, {r6, 0x0, 0x0, 0x1000000000000}, {r7, 0x0, 0xfffffffff0000000, 0x1000}, {r8, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:06 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x4000}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) bind$unix(r2, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000000300)="d190cbfd4c32b6acdc7c1955f2e7d89c514e373cefe56548140b44b2343b786cea9aaea9d56ee7cc8d462e107eeaa477f7967f0771d1cb2792636652c2594ab47b0681e48b425916c278549aecfe68410c57ed02bd0539dbb78d6291eb22f760df79873279bb033d871cdd6b33f13b2d0c9611a55e6be4ae7a9b4a9b4d44db7584862fff19acf7d3bdf33930a3c62058ebeb4bd97d8687222d9f3d2f348c291ee2bef90043c8ff302e3c276d11858d871ffb1c07cb5a7f2f9b074cc013500f2d6d5eea5704b86986ed", 0xc9}, {&(0x7f0000000400)="475d496b5cb04671a605a0c96256a8fcaff1f02ffde3fbe2e07b6747af5e816c541469899cd97e727b65b14cf8e51ace7ded87b7925b447a929405744134ab49a965631e2c2bb4e01d5a8bdd4b1dcf09c682d70d37237f0214245eb31784d2638e5478f561c004490c861805d7f9464b531bf774265d167bcd249c44d5c8e351349c090066d399b78c42a20b490d50f22ed7d8be78b84c03512d851584179599aa88c0ea57fa4232bb390535d17a5faf6d26ba47c44c7a631466", 0xba}, {&(0x7f0000000500)="d70723ca8a27d8dca73606423011bb2385da8081e855d5e97b3a440df093b6bc6f1d80df753dd5a9a4fa7dafe79303cc1f60b0200478a8c395a2858ea0c24fdd82affd077a41563abf8628ea11c4e52edfaa5e851d2d2c340160984083a9591aaff50bc8df9e37f0f52a0a92afb2df4ae1d3606e7cd95c15a61ba56447574c66109c58058b3e7cf123f6b04dc43d6ead357694cfcaaf04da56568189b7fa75c4491220d634a583808802bfb88a97efb83e6e4e5bec5cd0be59b290746206e632ee4b385c797841d5c3967b204c0516", 0xcf}], 0x6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r8, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r3, 0x0, 0x0, 0x2000}, {r5, 0x0, 0x2000}, {r1, 0x0, 0x0, 0xfffffffff0000000}, {r6, 0x0, 0x0, 0x1000000000000}, {r7, 0x0, 0xfffffffff0000000, 0x1000}, {r8, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 451.135459][ T3848] usb 2-1: USB disconnect, device number 76 05:30:06 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000040)) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f00000000c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000000300)="d190cbfd4c32b6acdc7c1955f2e7d89c514e373cefe56548140b44b2343b786cea9aaea9d56ee7cc8d462e107eeaa477f7967f0771d1cb2792636652c2594ab47b0681e48b425916c278549aecfe68410c57ed02bd0539dbb78d6291eb22f760df79873279bb033d871cdd6b33f13b2d0c9611a55e6be4ae7a9b4a9b4d44db7584862fff19acf7d3bdf33930a3c62058ebeb4bd97d8687222d9f3d2f348c291ee2bef90043c8ff302e3c276d11858d871ffb1c07cb5a7f2f9b074cc013500f2d6d5eea5704b86986ed", 0xc9}, {&(0x7f0000000400)="475d496b5cb04671a605a0c96256a8fcaff1f02ffde3fbe2e07b6747af5e816c541469899cd97e727b65b14cf8e51ace7ded87b7925b447a929405744134ab49a965631e2c2bb4e01d5a8bdd4b1dcf09c682d70d37237f0214245eb31784d2638e5478f561c004490c861805d7f9464b531bf774265d167bcd249c44d5c8e351349c090066d399b78c42a20b490d50f22ed7d8be78b84c03512d851584179599aa88c0ea57fa4232bb390535d17a5faf6d26ba47c44c7a631466", 0xba}, {&(0x7f0000000500)="d70723ca8a27d8dca73606423011bb2385da8081e855d5e97b3a440df093b6bc6f1d80df753dd5a9a4fa7dafe79303cc1f60b0200478a8c395a2858ea0c24fdd82affd077a41563abf8628ea11c4e52edfaa5e851d2d2c340160984083a9591aaff50bc8df9e37f0f52a0a92afb2df4ae1d3606e7cd95c15a61ba56447574c66109c58058b3e7cf123f6b04dc43d6ead357694cfcaaf04da56568189b7fa75c4491220d634a583808802bfb88a97efb83e6e4e5bec5cd0be59b290746206e632ee4b385c797841d5c3967b204c0516", 0xcf}], 0x6, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r8, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r3, 0x0, 0x0, 0x2000}, {r5, 0x0, 0x2000}, {r1, 0x0, 0x0, 0xfffffffff0000000}, {r6, 0x0, 0x0, 0x1000000000000}, {r7, 0x0, 0xfffffffff0000000, 0x1000}, {r8, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x8912, 0x0) 05:30:06 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200200, 0x0) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x2, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x13b573f74faeaf65) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) socket$inet_icmp_raw(0x2, 0x3, 0x1) 05:30:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = msgget(0x0, 0x80) msgctl$IPC_RMID(r1, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @sliced={0x0, [0xfff7, 0x6, 0x64c2, 0x3, 0x1, 0x7f, 0x3, 0x100, 0x0, 0x59, 0x4, 0x6f4d, 0x4, 0x4, 0xdfb8, 0x1f, 0xe62d, 0x1, 0x400, 0x3386, 0x62, 0xedf2, 0xfff, 0x5, 0xa58, 0x9, 0x68d7, 0x7fff, 0x1, 0x7fff, 0x0, 0x1f, 0x3, 0x4, 0x7, 0xfff7, 0x40, 0x5, 0x76, 0xc, 0x667, 0x0, 0x5, 0x734, 0xbe3, 0x6, 0x1ff, 0x8], 0x40}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r3, &(0x7f0000000040), 0xfd18) r4 = gettid() tkill(r4, 0x2) fcntl$setownex(r3, 0xf, &(0x7f0000000000)={0x0, r4}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x0, 0x81, {r4}, {0xffffffffffffffff}, 0xfff, 0x5}) r6 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r6, &(0x7f0000000040), 0xfd18) r7 = gettid() tkill(r7, 0x2) fcntl$setownex(r6, 0xf, &(0x7f0000000000)={0x0, r7}) r8 = getpgid(r7) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0xee00, 0x0, 0x0, 0x40, 0x4191}, 0x0, 0x0, 0xffffffffffff8c36, 0xffff, 0x50d, 0x3, 0x7fff, 0x1, 0xffff, 0xfff, r5, r8}) 05:30:06 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000000300)="d190cbfd4c32b6acdc7c1955f2e7d89c514e373cefe56548140b44b2343b786cea9aaea9d56ee7cc8d462e107eeaa477f7967f0771d1cb2792636652c2594ab47b0681e48b425916c278549aecfe68410c57ed02bd0539dbb78d6291eb22f760df79873279bb033d871cdd6b33f13b2d0c9611a55e6be4ae7a9b4a9b4d44db7584862fff19acf7d3bdf33930a3c62058ebeb4bd97d8687222d9f3d2f348c291ee2bef90043c8ff302e3c276d11858d871ffb1c07cb5a7f2f9b074cc013500f2d6d5eea5704b86986ed", 0xc9}, {&(0x7f0000000400)="475d496b5cb04671a605a0c96256a8fcaff1f02ffde3fbe2e07b6747af5e816c541469899cd97e727b65b14cf8e51ace7ded87b7925b447a929405744134ab49a965631e2c2bb4e01d5a8bdd4b1dcf09c682d70d37237f0214245eb31784d2638e5478f561c004490c861805d7f9464b531bf774265d167bcd249c44d5c8e351349c090066d399b78c42a20b490d50f22ed7d8be78b84c03512d851584179599aa88c0ea57fa4232bb390535d17a5faf6d26ba47c44c7a631466", 0xba}, {&(0x7f0000000500)="d70723ca8a27d8dca73606423011bb2385da8081e855d5e97b3a440df093b6bc6f1d80df753dd5a9a4fa7dafe79303cc1f60b0200478a8c395a2858ea0c24fdd82affd077a41563abf8628ea11c4e52edfaa5e851d2d2c340160984083a9591aaff50bc8df9e37f0f52a0a92afb2df4ae1d3606e7cd95c15a61ba56447574c66109c58058b3e7cf123f6b04dc43d6ead357694cfcaaf04da56568189b7fa75c4491220d634a583808802bfb88a97efb83e6e4e5bec5cd0be59b290746206e632ee4b385c797841d5c3967b204c0516", 0xcf}], 0x6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r7, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {r4, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0x1000000000000}, {r6, 0x0, 0xfffffffff0000000, 0x1000}, {r7, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:07 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r4, &(0x7f0000000040), 0xfd18) r5 = gettid() tkill(r5, 0x2) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x0, r5}) getuid() stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000160000000100000001000000", @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r1) dup3(r6, r0, 0x0) setns(0xffffffffffffffff, 0x10000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) 05:30:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x8933, 0x0) 05:30:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080), 0x4) getsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000140)=0x1) 05:30:07 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000000300)="d190cbfd4c32b6acdc7c1955f2e7d89c514e373cefe56548140b44b2343b786cea9aaea9d56ee7cc8d462e107eeaa477f7967f0771d1cb2792636652c2594ab47b0681e48b425916c278549aecfe68410c57ed02bd0539dbb78d6291eb22f760df79873279bb033d871cdd6b33f13b2d0c9611a55e6be4ae7a9b4a9b4d44db7584862fff19acf7d3bdf33930a3c62058ebeb4bd97d8687222d9f3d2f348c291ee2bef90043c8ff302e3c276d11858d871ffb1c07cb5a7f2f9b074cc013500f2d6d5eea5704b86986ed", 0xc9}, {&(0x7f0000000400)="475d496b5cb04671a605a0c96256a8fcaff1f02ffde3fbe2e07b6747af5e816c541469899cd97e727b65b14cf8e51ace7ded87b7925b447a929405744134ab49a965631e2c2bb4e01d5a8bdd4b1dcf09c682d70d37237f0214245eb31784d2638e5478f561c004490c861805d7f9464b531bf774265d167bcd249c44d5c8e351349c090066d399b78c42a20b490d50f22ed7d8be78b84c03512d851584179599aa88c0ea57fa4232bb390535d17a5faf6d26ba47c44c7a631466", 0xba}, {&(0x7f0000000500)="d70723ca8a27d8dca73606423011bb2385da8081e855d5e97b3a440df093b6bc6f1d80df753dd5a9a4fa7dafe79303cc1f60b0200478a8c395a2858ea0c24fdd82affd077a41563abf8628ea11c4e52edfaa5e851d2d2c340160984083a9591aaff50bc8df9e37f0f52a0a92afb2df4ae1d3606e7cd95c15a61ba56447574c66109c58058b3e7cf123f6b04dc43d6ead357694cfcaaf04da56568189b7fa75c4491220d634a583808802bfb88a97efb83e6e4e5bec5cd0be59b290746206e632ee4b385c797841d5c3967b204c0516", 0xcf}], 0x6, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {r4, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0x1000000000000}, {r6, 0x0, 0xfffffffff0000000, 0x1000}, {r7, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:07 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000000300)="d190cbfd4c32b6acdc7c1955f2e7d89c514e373cefe56548140b44b2343b786cea9aaea9d56ee7cc8d462e107eeaa477f7967f0771d1cb2792636652c2594ab47b0681e48b425916c278549aecfe68410c57ed02bd0539dbb78d6291eb22f760df79873279bb033d871cdd6b33f13b2d0c9611a55e6be4ae7a9b4a9b4d44db7584862fff19acf7d3bdf33930a3c62058ebeb4bd97d8687222d9f3d2f348c291ee2bef90043c8ff302e3c276d11858d871ffb1c07cb5a7f2f9b074cc013500f2d6d5eea5704b86986ed", 0xc9}, {&(0x7f0000000400)="475d496b5cb04671a605a0c96256a8fcaff1f02ffde3fbe2e07b6747af5e816c541469899cd97e727b65b14cf8e51ace7ded87b7925b447a929405744134ab49a965631e2c2bb4e01d5a8bdd4b1dcf09c682d70d37237f0214245eb31784d2638e5478f561c004490c861805d7f9464b531bf774265d167bcd249c44d5c8e351349c090066d399b78c42a20b490d50f22ed7d8be78b84c03512d851584179599aa88c0ea57fa4232bb390535d17a5faf6d26ba47c44c7a631466", 0xba}, {&(0x7f0000000500)="d70723ca8a27d8dca73606423011bb2385da8081e855d5e97b3a440df093b6bc6f1d80df753dd5a9a4fa7dafe79303cc1f60b0200478a8c395a2858ea0c24fdd82affd077a41563abf8628ea11c4e52edfaa5e851d2d2c340160984083a9591aaff50bc8df9e37f0f52a0a92afb2df4ae1d3606e7cd95c15a61ba56447574c66109c58058b3e7cf123f6b04dc43d6ead357694cfcaaf04da56568189b7fa75c4491220d634a583808802bfb88a97efb83e6e4e5bec5cd0be59b290746206e632ee4b385c797841d5c3967b204c0516", 0xcf}], 0x6, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {r4, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0x1000000000000}, {r6, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:07 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:07 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {r4, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0x1000000000000}, {r6, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:07 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x400, 0x7fffffff}) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3) 05:30:07 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4010, r5, 0x0) dup2(r4, r3) 05:30:07 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {r4, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x400448c8, 0x0) 05:30:08 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) socket$packet(0x11, 0x3, 0x300) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) dup2(r3, r4) 05:30:08 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {r4, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {r5, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000002500)="535920ce2a154e87344443afa1e1d287d001d0916750c25fa15f8441a042e1dc081bf2c2cc49e6c841a7030910ca431dc963386d230cfdd5844535aebc3b02c29c4f0408e4f1bcb87b12161ccefd58b23a3d1540f411e2e5d7c64296410bdefce8782b9751507bc1e2cce27c71fb1e0551a0825c9cc449538267d2d32587db5a4bfc47934662904dcb4caa1273240987afb3c1449466d53c2859533050cf9066685ccb7264c0f47aa04bf28ddd5d4feb1e48042fd8f2547b647d29a7c476226be942a69d5bd2f6cb6755b89f7f5348cbb390ac2bf6c82b177b0d7c7c439965a9be482b4b0000", 0xe6}], 0x4, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f00000000c0)={0x3, 0x5}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000180)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000300)="6d0c623c05da9b37450a1b71fc46f1403f53355022b65c0cfd2025defa95b602369ead92db4b6eb389091b772a6ad26bc7faba3b1171f28530e3399ac5af3e892a4f9c497e7d2c3d317257e79df065dbfa5eb25b9620e6ff70699325fbdb85d260a3d363e80cd72e28fac5b1f409bc786931d9e47dcef9906e87324e1c86a49240e1f3f4693110129ab7fa21356f7152773782fadac7c73197624423812bf935f25b368377b802a9a86769efacb50f8550be32cfe1a9fd4fbb902791860de428d44730a3c3ded39e4d942dcf81f774dbfad5046925bd22fb43f18480d55c438d94121dea48ebbd", 0xe7}, {&(0x7f0000001500)="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", 0x1000}], 0x6, 0x27, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(0xffffffffffffffff, 0xc020662a, &(0x7f0000000040)={0x786a, 0x3ff}) bind$packet(0xffffffffffffffff, &(0x7f0000000240), 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014e515800fffde800c0007000000000000fa000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', r4}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x6, 0xff, 0x8e, 0x0, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, [], 0x1}, 0x7800, 0x7800, 0xff, 0xf3a1}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r7 = openat(r6, &(0x7f0000000080)='./file0\x00', 0x600, 0x8) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000000040)) 05:30:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x400454ca, 0x0) 05:30:08 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {r4, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:08 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0xffffffffffffffff, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:08 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xc, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSIG(r3, 0x40045436, 0x36) dup2(r5, r4) 05:30:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x40049409, 0x0) 05:30:08 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {r4, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:08 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000000c0)) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:09 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:09 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000040)={0x44d, 0x6, 0xfffa}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:09 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x4004ae8b, 0x0) 05:30:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000ee000000f20100000097a23eb8efc45e2f2f2f2a30f2b9ad574ba2e5e1dff264af5c23ea686435f2587c340f349bc698bd718d278bbbfb5bfe4674eccdce76a3d554109b91f8a2c1230061edbc47cbdd1fab24437d4f6eb92574f7f33c171475015079c928c6f7d2be6898c080c996f53623593ee9df01f1bf767d791642732e9497e73f5bb5d966c3af30eb716c2488fbf8dd83a1ac4e65a59f5af969459808527417532ff69b835577f54c84915291eee24af3", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x38}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r5 = socket(0x8, 0x5, 0xa5) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000080)=0x8, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x110400, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0xb74, 0x8003ff, 0x2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x8000000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000040)={0xc7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, 0x81, 0x7f, 0x3, 0x1, 0x0, 0x6, 0x1, 0x5, 0x7, 0xc0, 0x3f, [], 0x7f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r8) 05:30:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000e9ffffff1fb10100000001000000216f32ef5ce14b8e2a", @ANYRES32=r1, @ANYBLOB="85fee8f6da5b1571697e83579d860000a99c"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = dup3(r2, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) epoll_create(0x80000001) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000100)={0x0, 0x3ff, 0x4}) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000080)=0xff25) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={r9}, 0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000180)={r9, 0x5, 0x2, [0xff, 0x400]}, 0xc) dup2(r6, r5) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) 05:30:09 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:09 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r1, &(0x7f0000000040), 0xfd18) r2 = gettid() tkill(r2, 0x2) r3 = openat$cgroup_ro(r0, &(0x7f0000000100)='devices.list\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r3, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f406cf74391432267a1b06037b"}, @NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, '\\'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0xc080) fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x0, r2}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r7) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x5, 0x7f, {r2}, {r7}, 0x2}) r8 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000140)=0x1) 05:30:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0xe, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x4000001) dup2(r5, r4) write$smackfs_change_rule(r3, &(0x7f0000000180)={'@}', 0x20, ',+-:\\', 0x20, 'wxt', 0x20, 'ratb'}, 0x12) 05:30:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x4004ae99, 0x0) 05:30:09 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{r2, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:09 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:09 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x40186366, 0x0) 05:30:10 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:10 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x4020940d, 0x0) 05:30:10 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:10 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000040)) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x40305828, 0x0) 05:30:10 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:10 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='pids.current\x00', 0x7a05, 0x1700) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {r0, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x4048ae9b, 0x0) 05:30:10 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:10 executing program 1: syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x4090ae82, 0x0) 05:30:10 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:11 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:11 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:11 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x4138ae84, 0x0) 05:30:11 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:11 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x41a0ae8d, 0x0) 05:30:11 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:11 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:11 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x1, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x8004ae98, 0x0) 05:30:11 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:11 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:11 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x80086301, 0x0) 05:30:11 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000000000000}]}) 05:30:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x5, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x1000}]}) 05:30:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x8090ae81, 0x0) 05:30:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}, {0xffffffffffffffff, 0x0, 0x0, 0x1000000000000}]}) 05:30:12 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x8138ae83, 0x0) 05:30:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:12 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0x81a0ae8c, 0x0) 05:30:12 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {}]}) 05:30:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xc0045878, 0x0) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {}]}) 05:30:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xc0045878, 0x0) 05:30:13 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}, {}]}) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:13 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xc0189436, 0x0) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xc018ae85, 0x0) 05:30:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:14 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xc020660b, 0x0) 05:30:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x3, [{}, {}, {0xffffffffffffffff, 0x0, 0x0, 0xfffffffff0000000}]}) 05:30:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:14 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x2) 05:30:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x3) 05:30:14 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:14 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x4) 05:30:15 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:15 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x5) 05:30:15 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x6) 05:30:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:15 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:15 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x7) 05:30:15 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {0xffffffffffffffff, 0x0, 0x2000}]}) 05:30:15 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x8) 05:30:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:16 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369cddc4eb3f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x9) 05:30:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xa) 05:30:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}, {}]}) 05:30:16 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xb) 05:30:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{}]}) 05:30:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{}]}) 05:30:17 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{}]}) 05:30:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xc) 05:30:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x2, [{}, {}]}) 05:30:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xd) 05:30:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xe) 05:30:17 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:17 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xf) 05:30:17 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:17 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:18 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x10) 05:30:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x11) 05:30:18 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:18 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x12) 05:30:18 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:18 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, 0x0) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:18 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 05:30:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x13) 05:30:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x14) 05:30:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:19 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e23254") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x15) 05:30:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:19 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x16) 05:30:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)={0x0, 0x1, [{}]}) 05:30:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:19 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x100c0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x88000, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/14) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x6, 0x3, 0x8], 0x3, 0x80400, 0x0, r2}) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000180)=""/86, 0x56}, {&(0x7f0000000240)=""/45, 0x2d}], 0x3, 0x3, 0x8) ioctl$TIOCCONS(r0, 0x541d) 05:30:19 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x17) 05:30:19 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:20 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e23254") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:20 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:20 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) write$evdev(r1, &(0x7f0000000180), 0xfffffffffffffe77) r2 = gettid() tkill(r2, 0x2) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r2}) ptrace$cont(0x18, r2, 0x2, 0xfffffffffffffff9) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3f, 0x46a40) r3 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r3, 0x40085618, &(0x7f0000000140)=0x1) 05:30:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x18) 05:30:20 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x202002) keyctl$chown(0x4, r9, r7, r8) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@cred={{0x1c, 0x1, 0x2, {r2, r4, r8}}}], 0x20}], 0x1, 0x40000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r1) dup3(r10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r12, r11) 05:30:20 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)) 05:30:20 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) getsockopt(r1, 0x100, 0x101, &(0x7f0000000080)=""/39, &(0x7f00000000c0)=0x27) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000040)={@bcast, @bcast}) 05:30:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x19) 05:30:20 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000f1fffcff0100000001000000", @ANYRES32=r0, @ANYBLOB="c39b0000"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000002c0)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r3, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x100, &(0x7f00000004c0)="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"}}], 0x1c) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) dup2(r2, r1) dup3(r2, r0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f00000001c0), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:20 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)) 05:30:20 executing program 0: syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8, 0x0) 05:30:21 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e23254") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:21 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)) 05:30:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1a) 05:30:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0x1, 0x610803) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) syslog(0x9, &(0x7f0000000240)=""/57, 0x39) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000080)={0x3, "0a4f26c531eaf8d6e01359129eca855f9cd193995d3240cd174c49cdf2158929", 0x3, 0x4, 0x4, 0x320000, 0x2000000, 0x6}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f00000001c0)=r3, 0x1) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x3, r4, 0x1}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:21 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)) ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:21 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x1f, 0x6, 0x6}, 0xc) 05:30:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1b) 05:30:21 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000010000000100000093811477c8b8e15f72", @ANYRES32=r0, @ANYRES32=r0], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:30:23 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x1490}], 0x1, 0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) sysfs$3(0x3) 05:30:23 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1c) 05:30:23 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:23 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e23254") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="8c000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x4010) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x602140, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r7, 0x800448d3, &(0x7f0000000300)={@any, 0xffffffff, 0xf001, 0xb3b, 0x0, 0xf07, "0de82678caab46b06a747b01a392565c599d19a4e0cc7174cba577dff869954e0d3af50e80d8da9fdec851b3918ad7995feba3233ea570dfcfc5450a5d03fa48d39370d9277c161e74255344e07c30c5d16c2a5fb82fc065f87033b27ad7fdd6db5a5d980d297ca6b287667e024daad7c69c513be3942ac3867e653b51c3b9e3"}) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0, 0xe}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) connect$nfc_raw(r6, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x3}, 0x10) dup2(r5, r4) 05:30:23 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)) 05:30:23 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r3}, 0x14) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r3, 0x2f40, 0x0, 0x3, 0x7, 0x4}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0) sendmmsg$unix(r4, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) dup3(r6, r4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) 05:30:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x30002, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000000080)=0x2) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) modify_ldt$read(0x0, &(0x7f00000000c0)=""/109, 0x6d) 05:30:23 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)) 05:30:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1d) 05:30:23 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) sendmsg$AUDIT_USER_TTY(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x464, 0x10, 0x70bd26, 0x25dfdbfe, "35be4e02e127252725d6d917035b", ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x8001) 05:30:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(r1, &(0x7f0000000040)=""/2, 0x2, 0x1f, &(0x7f00000000c0)={r2, r3+60000000}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) dup2(r3, r4) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r6, r5) 05:30:24 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000180)) 05:30:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x1e) 05:30:24 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:24 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e23254") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:24 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x489593776acaaeb8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xaa001, 0x0) openat2(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x301c02, 0x11, 0x2}, 0x18) 05:30:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$sock_int(r3, 0x1, 0x32, &(0x7f0000000040)=0x100, 0x4) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:24 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x25) 05:30:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000feed4cd200"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:30:24 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x2, 0x2) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f0000000180)={{0x1, 0x200, 0x6, 0x9, 0xffffffff}, 0x226, [0x3, 0x81, 0xfffffffd, 0x1, 0x20, 0x7, 0x2, 0xffff78d7, 0x0, 0xfffffc01, 0x1ff, 0x1, 0x778, 0x1000, 0xb6f, 0x4, 0x1, 0x673, 0x4, 0xdc, 0x401, 0xd, 0x4, 0x401, 0xfd, 0x1, 0x8001, 0x9, 0x9a, 0x800, 0x8, 0x7f, 0x9, 0x8, 0x80, 0x7, 0x8, 0xffffffc0, 0x10001, 0xe13, 0xfffff02e, 0x0, 0x3ff, 0x9, 0x5, 0x7, 0x1f, 0x400, 0x4, 0xc60, 0x6, 0x5, 0x1, 0x6, 0x32, 0x847, 0x4, 0x1000, 0x1ff, 0x2, 0x7f, 0x7, 0x1, 0x60b, 0x2, 0xd8f8, 0x7, 0x6, 0xa2, 0xfa98, 0x7fffffff, 0x96a9, 0x4, 0x6, 0x8, 0x8001, 0x200, 0x8, 0x0, 0x6, 0x6, 0x0, 0x8, 0x3fa, 0x7fff, 0x1f, 0xffffffff, 0xffff, 0x4, 0xffffffe1, 0x40, 0x6, 0x20, 0x7f, 0x7fffffff, 0x2, 0x6, 0x39, 0x0, 0x7c628f7f, 0x7, 0x1000, 0x801, 0x3, 0x7, 0x7, 0x7, 0x9, 0xffffffff, 0x3, 0x1, 0x400, 0x3, 0x7, 0x9, 0x8, 0x9, 0x1000, 0x6, 0x5, 0x85, 0x3, 0x200, 0x80000000, 0x7, 0xfffffffc, 0x8000, 0x200, 0x3, 0x8, 0x9, 0x20, 0xffffffff, 0x6a, 0x85, 0xff, 0x101, 0x5, 0x0, 0xfffffffd, 0x1, 0xb3, 0x3, 0x0, 0x1, 0x7, 0xfffff000, 0x4, 0x167c, 0x0, 0x3, 0x6, 0x2, 0xea, 0x7, 0xffffffff, 0x5, 0x80000000, 0x0, 0x1f, 0xc06, 0x101, 0x6, 0x8000, 0x9, 0x4, 0x7, 0x6, 0x2, 0x76, 0x0, 0x200, 0x1000, 0x33e, 0x5, 0x1, 0x8001, 0x30c2, 0x24000000, 0x4, 0x7fffffff, 0x7, 0x10001, 0x6, 0xfff, 0x7fffffff, 0x81, 0xdc, 0x200, 0x7, 0x0, 0xfffffff9, 0x7fffffff, 0x8000, 0x8, 0x58f, 0x0, 0x5, 0x34b, 0x8, 0xa03, 0x1, 0x388, 0x1, 0xfffffff7, 0x4, 0x109b, 0x6, 0x6, 0x10000000, 0x8, 0x8, 0x80000000, 0x9, 0x1, 0x7fffffff, 0xffffff01, 0x1, 0xffffffff, 0x0, 0x4, 0x401, 0x8, 0x9, 0x6, 0x5, 0x3f, 0x9, 0xb2, 0x1, 0x80, 0x56, 0x40, 0x0, 0x1, 0xf, 0x401, 0x7, 0x3bcb, 0x0, 0x401, 0x80, 0x2, 0x81, 0x2, 0x4, 0x1, 0x2, 0x1f, 0xab, 0x3, 0x1, 0x5c11, 0x1000, 0x101, 0xfffffffc, 0x7, 0x0, 0x101, 0x3346, 0x8, 0x80000000, 0xf44b, 0xffff, 0x8, 0x5, 0x0, 0x6, 0x6, 0xffffffff, 0x10000, 0x2e9, 0x3, 0x1000, 0x0, 0x2, 0x15f1, 0x435e, 0x5, 0x3, 0x7ff, 0x7, 0x4bf6, 0x4, 0x5, 0x6, 0x5, 0x20, 0x48, 0x0, 0x1f, 0x7fff, 0x1, 0xffffffff, 0x0, 0x1, 0x18000, 0x80000001, 0x0, 0x8, 0x2, 0xff, 0xffffff11, 0x6, 0x800, 0x7, 0x9, 0xfffffffd, 0xb1c, 0x7f, 0xffffffff, 0x1, 0x4, 0xe662, 0x1cf, 0x401, 0x5, 0x8, 0x5, 0x8001, 0x2, 0x5, 0x80, 0x3, 0x0, 0x7, 0x6, 0xfffffffa, 0x960, 0x1, 0xac, 0x200, 0x39e7, 0x6, 0x1f, 0xfc000000, 0xfffffffb, 0x8, 0x200, 0x0, 0xff, 0x8001, 0x2, 0x8, 0xfff, 0x1f, 0x2, 0x0, 0x9, 0x470, 0x6b, 0x55, 0xff, 0x4, 0x80000001, 0xa7, 0x8, 0x9, 0x80000000, 0xfff, 0x9, 0x0, 0x400, 0x7, 0xaea, 0x0, 0x100, 0x8001, 0x0, 0x81, 0x0, 0x4, 0x3, 0x20, 0x96, 0xfffffff7, 0xfff, 0x9, 0xffffffff, 0x9, 0x3, 0x3, 0x8, 0x3ee9ad1c, 0xffffffff, 0xa1, 0x10001, 0x3, 0x5de8, 0x0, 0x0, 0x200, 0x4, 0xb2e, 0x40, 0x0, 0x437fb469, 0x4, 0x5, 0xfffffffa, 0x5, 0x1, 0xfffffffe, 0x1, 0xce, 0xffff, 0x200, 0x6, 0x9, 0x1, 0x8, 0xffffffff, 0x2e7, 0x4, 0x3, 0x2, 0x86b, 0x401, 0x1c0, 0x9, 0x3, 0x740, 0x1, 0x4, 0x5, 0x6ad, 0x5, 0x1, 0xe7c, 0x5, 0xd54, 0xad, 0x40, 0x5, 0x20, 0x5, 0x0, 0x1ff, 0x7, 0xff, 0xa3, 0x37a5, 0x8, 0x1, 0x2c0, 0x6, 0x4, 0x5, 0x2, 0x1ff, 0x40000000, 0x5, 0x1ff, 0x0, 0x1, 0xb57, 0x8, 0x0, 0x9, 0x3c5, 0x7f, 0x1, 0x1, 0x100, 0x63f, 0x7, 0x9, 0x7, 0x2, 0x28a4, 0x3f, 0x0, 0x3, 0x2, 0xff, 0xd0d, 0xffff9189, 0x9, 0x4, 0x0, 0x401, 0x40, 0xfff, 0xdac3, 0x81, 0x0, 0x5876, 0x3, 0x3, 0x59, 0x6, 0x1, 0x1, 0x7, 0x4, 0x0, 0x800, 0x5, 0xffffffff, 0x101, 0x4, 0x1000, 0xffff, 0x40, 0x4, 0x10001, 0x7f, 0x7, 0x8, 0x40, 0x200, 0x7, 0x9, 0x7, 0x4, 0x2, 0x80, 0x9, 0x5, 0xd3, 0x101, 0x7, 0x1000, 0xfd, 0x78e, 0x9, 0x8001, 0x2, 0x401, 0x0, 0xffff8001, 0x3, 0x10001, 0x0, 0x50, 0x9, 0x1ff, 0x8001, 0xf5, 0x9, 0x8001, 0x1, 0xff, 0x0, 0x5, 0x339b, 0x81c, 0x80000000, 0xffffffff, 0x6b, 0x5, 0x1, 0x0, 0x0, 0xfffff001, 0x5, 0x9, 0x8e6, 0x1, 0x6, 0x2, 0x4, 0xfff, 0x5, 0x0, 0x1, 0x5, 0x1ff, 0x2, 0x6, 0x20, 0x4, 0x3b7, 0x8, 0x3, 0xfff, 0xffffffee, 0x0, 0x8, 0x556f4ed9, 0x7, 0x9ae, 0x6a, 0x1, 0x8, 0x80000000, 0xfffffff9, 0x2, 0x713, 0x5, 0xfff, 0x5d8c9b44, 0xc00, 0x4, 0x8, 0x5, 0xb3, 0x1749f036, 0x4, 0x5, 0x2, 0x3f, 0x0, 0x5, 0x2, 0xe0, 0x2, 0x0, 0x1, 0x9, 0x7f, 0x0, 0xf2f, 0x4, 0x1, 0x38, 0xe7b, 0x81, 0x200, 0x1, 0x80000001, 0x9, 0x8, 0x10000, 0xd6f, 0x8, 0x4, 0xfffffffb, 0x1, 0x0, 0x7a1, 0x4, 0x2, 0x7, 0x595f3611, 0x80000001, 0x81, 0x3, 0x5, 0x6, 0x6436, 0x6, 0x44, 0x3, 0x13d4, 0x6, 0x1f, 0x0, 0xffff, 0x7, 0x2, 0x2, 0x7, 0x40, 0x4, 0x0, 0x3, 0x0, 0xffffffff, 0x40, 0x7ff, 0x9, 0x0, 0x80000000, 0x920, 0x1, 0x800, 0x0, 0x7, 0x100, 0x2, 0x4, 0xffffffff, 0x1, 0x2, 0x7, 0x8, 0x6, 0x6, 0x7, 0x5, 0x5, 0x7fffffff, 0x8001, 0x8, 0x20, 0x1, 0xfffffffa, 0x72eee80b, 0x700000, 0xb0, 0x5, 0xfff, 0xb5b7, 0x5, 0x9, 0x8, 0x6f53, 0xcfd, 0x1000, 0x8d7, 0x8, 0x9, 0x7fffffff, 0x2, 0x70c, 0xb1, 0x917, 0xfffffff7, 0x8, 0x400, 0x8, 0x2659, 0x81, 0x7, 0x7, 0x6, 0x0, 0xfff, 0x7, 0x5, 0x6, 0x800, 0x7ff, 0x0, 0xfffffff9, 0x3f, 0x2, 0x10000, 0x7, 0x2, 0x5, 0x101, 0x9, 0xa5b8, 0xcd5, 0x8, 0x6, 0x8, 0x5, 0xfffffff8, 0x6, 0x200, 0x3, 0x9, 0x5, 0x10001, 0x4, 0xfffffff7, 0x6, 0x45eb, 0x6b8b9f28, 0x7, 0x4, 0x800, 0x2, 0x7, 0x1ff, 0x7ff, 0x200, 0x1, 0x5, 0x10000, 0x1f, 0x7f, 0x9, 0xffff8001, 0x6, 0x3, 0xb6d, 0x9a, 0x2, 0x1, 0xb3, 0x81, 0x1ff, 0xfffff001, 0x401, 0x8, 0x3, 0x10001, 0x2, 0x9, 0x3f, 0x10000, 0x2c1, 0x9, 0x3, 0x7ff, 0x1ff, 0x400, 0x4, 0x7ff, 0x4ee1, 0x1, 0x1, 0xffff, 0xfc, 0x3e5f, 0xfffffffc, 0x5, 0x7fffffff, 0x6, 0x800, 0x5, 0x2, 0x401, 0x7ff, 0x2af67eb3, 0x80, 0x77d33e2f, 0x401, 0xffffffff, 0xfffffeff, 0xa560, 0x9, 0x3, 0x1ff, 0x80, 0x8, 0x1, 0x9, 0x8, 0x0, 0x3ff, 0x0, 0x5, 0x6, 0x4, 0x2, 0x7fff, 0x6, 0x8, 0x100, 0x1, 0x8, 0xc7, 0x7, 0x5, 0x8fa, 0x6, 0xb, 0x3, 0x5, 0x101, 0x5, 0x0, 0x8001, 0x7, 0xfffff89f, 0x31, 0x7, 0x3, 0x403, 0x1, 0x8e, 0x7, 0xffff, 0x8, 0x6, 0x200, 0xfffffffd, 0x1f, 0x100, 0x0, 0xfff, 0x0, 0x9, 0x7, 0xc870, 0x2, 0x2, 0x0, 0xab31, 0x5, 0xc55, 0x5e, 0x0, 0x1f, 0x3ff, 0x3, 0x0, 0x5, 0xb2, 0x2, 0x9, 0x8001, 0x1ff, 0x3, 0x2, 0x0, 0x2, 0x7f, 0x1, 0x9a7f, 0x101, 0x8, 0x55, 0x7, 0x1218, 0x9, 0xffffffff, 0x4ad4, 0x7f, 0x200, 0x5, 0x69cc, 0x5d420, 0x0, 0x7f, 0x1, 0xfffffff9, 0x8000, 0x7f, 0x2, 0x8000, 0x4, 0x75, 0x9, 0x3, 0x6, 0x2, 0x2, 0x7f, 0x0, 0x6, 0x4, 0xffffffff, 0x4, 0xfff, 0x6, 0x4, 0x7, 0xa74b, 0x9, 0x3, 0x68c, 0x5, 0x1, 0x24d, 0x7, 0xffffffff, 0x4, 0xffff, 0x6, 0x8, 0xffffffff, 0x65c, 0xffffffff, 0x6, 0x3, 0x400, 0x6, 0x7000, 0x1, 0x5, 0xb4c4, 0x2, 0xae, 0x4, 0x5, 0x6859, 0x3, 0x4, 0x6, 0xb8af, 0x9, 0x1, 0x0, 0x2, 0xffff, 0x1, 0x2, 0x3, 0x100, 0x0, 0x2, 0x7, 0x7398, 0x2, 0x6, 0x9, 0x1, 0x40, 0x40, 0x3ff, 0x6, 0xdf48, 0x26, 0x8000, 0x7fffffff, 0x3, 0xaa, 0x6, 0x80000001, 0x9c27, 0x8000, 0x6, 0x5, 0x0, 0x7f, 0x8080, 0x8, 0x0, 0x3, 0x4, 0xe91b, 0x9, 0x2, 0x3f, 0x2, 0x401, 0x7fff, 0x1, 0x7, 0x1, 0x4, 0x1, 0xb2, 0x2, 0x1f, 0xb8e, 0x3158, 0x2]}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x4, 0x1) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x1) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0xfd18) r3 = gettid() tkill(r3, 0x2) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r4, &(0x7f0000000040), 0xfd18) r5 = gettid() tkill(r5, 0x2) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x0, r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) clone3(&(0x7f00000013c0)={0x4c400, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000011c0)=0x0, {0xd}, &(0x7f0000001200)=""/224, 0xe0, &(0x7f0000001300)=""/113, &(0x7f0000001380)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, r3, r5], 0x7, {r6}}, 0x58) write$cgroup_pid(r0, &(0x7f0000001440)=r7, 0x12) 05:30:24 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x18, 0x1, 0x1, [r2, r1]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000b34affb5000100000001000000eb6cb07232764e38ac0e21adda18c332e427f048b9c96e31cd87c6930cbd686bcdfcd17d9da95ae9fe373f3709139c29ff044db233d1ef241b8f2822f8f330d13d9922a6bb5f7d789d26af480696156030760bb233e7aaed729d750f7ffed3b514476463a8ae4fea25a71b65788c754b9eb40ee6a3d5d5cf6cfa2a1456e5a1431e199815a30e4cb659c727d69052e5cf6e473a5d63a6b711e96ae85157871fccd772c4d58e7bb3147b9592e94e548e593d9718aa9b970610dacd5f7c7914b752a2bbed4b102a67006d62def485a20b25152d4acfcd37d325278178edb0e09ab58b0a38c477329d623c1260b32de1f54985bb2c2d7e974a437bac4f50d81656c9c44a48bad135f1011744ecf6ec4ae2d219e6678f81e62388bf700614e2c05089e0407a508406458e34c48cbd03d21dabd01dc3ec0e744ad18425a25512d02ddcb4e0f32b8995b313f49a4a1f10cdeefb861aebc5e752300cb2eb6dbdfcc639559bcb748c2f72820b6b89b968f2adec2a5f601a6172810223d92efb68ccd7ee790bf54bba27dea1799d928934", @ANYRES32=r1, @ANYBLOB="8a000000"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:24 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 05:30:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5, 0x0, 0x2, r5}) dup3(r4, r2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000100)={[], 0x0, 0x36ec7}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x0, 0x0, @pic={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 469.660203][T16007] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 05:30:25 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x28) 05:30:25 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000001010902240001010000000904000012070103000905010200ffe000000905820233"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 05:30:25 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1400000000000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f00000001c0)={{0x5, 0x5}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r7, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x10001, 0x7, 0x3, 0x9, 0x5, 0xf09, 0x4, {0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x100, 0x7, 0xff8f, 0x2, 0x8000}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000180)={r8, 0x8, 0x1f, "9cccbdde08d0d148c7cdfcd501bcd4b74fd7bbaee6abc7578b5606656428b2"}, 0x27) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r10, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000240)={r7, 0x2, 0x3, r10}) 05:30:25 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000080)) 05:30:25 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e23254") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:25 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0xa6ba7b35a836d344, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) sendmmsg$unix(r1, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) dup3(r3, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x29) 05:30:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) sendmmsg$unix(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20}], 0x1, 0x40808) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r8) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f0000000100)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r8}) dup2(r6, r5) [ 470.260062][ T3850] usb 2-1: new high-speed USB device number 77 using dummy_hcd 05:30:25 executing program 5: pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@multicast1, @remote}, &(0x7f0000000180)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = dup3(r2, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r9, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000080)={0x1, r9, 0x1}) r10 = epoll_create1(0x80000) dup2(r4, r10) ioctl$FITRIM(r7, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000040)={0x1}) dup2(r6, r5) 05:30:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x34) [ 470.519986][ T3850] usb 2-1: Using ep0 maxpacket: 8 05:30:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x3e) [ 470.650286][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 470.673635][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 470.716829][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 470.732978][ T3850] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 05:30:26 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:26 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 470.830246][ T3850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 470.849377][ T3850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 470.874878][ T3850] usb 2-1: SerialNumber: syz [ 470.910529][T16032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 470.917463][T16032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 470.955358][ T3850] hub 2-1:1.0: bad descriptor, ignoring hub [ 470.961843][ T3850] hub: probe of 2-1:1.0 failed with error -5 [ 471.162439][T16032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 471.170379][T16032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 471.428761][ T3850] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 77 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 471.495174][ T3850] usb 2-1: USB disconnect, device number 77 [ 471.505602][ T3850] usblp0: removed [ 472.049727][ T3850] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 472.309625][ T3850] usb 2-1: Using ep0 maxpacket: 8 [ 472.459871][ T3850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 472.470973][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 472.482480][ T3850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 51 [ 472.493080][ T3850] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 472.579767][ T3850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 472.588799][ T3850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 472.597709][ T3850] usb 2-1: SerialNumber: syz [ 472.620350][T16032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 472.627207][T16032] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 472.641029][ T3850] hub 2-1:1.0: bad descriptor, ignoring hub [ 472.646990][ T3850] hub: probe of 2-1:1.0 failed with error -5 [ 472.874632][ T3850] usblp: can't set desired altsetting 0 on interface 0 [ 472.910228][ T3850] usb 2-1: USB disconnect, device number 78 05:30:28 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c}}], 0x50}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}], 0x3, 0x0, 0x324b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r4, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r5 = fsopen(&(0x7f0000000640)='sysfs\x00', 0x1) pwritev(r1, &(0x7f0000002400)=[{0x0}, {0x0}, {&(0x7f0000002b40)="78600300000000000000e5ab9235cdef0391e075a94d78438553416a6dd60a649ff97a9f6100bfacce00c4766f5cd61fb5191b64b032a566ba920a6489c60d90f0397075c96079d113a665174dd0ac9f8c211203812aafa939dbb6ec81f9de4a01f95e57c7ef3402d3fa6e3659aed2300d133eebae4cecdb3c3de4b317e19ba57e6ad5e54dc4556df0060fcd6b56d2398a2699879be8462e6e45776487db782ef13f37df42a346183fe122ba5fb7ffca", 0xb0}, {&(0x7f0000003640)="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", 0x149}, {&(0x7f0000003000)="de0ab1cdcdeb4ab981d9899300032d5557a41ca19687d7acc10708be676375d3b581f0a1910a7e1dc4f19c085cba106eee4eba38cedeaa817c7bea30e5e8e9279fdb70247d49fbdb582fff11741a334ef71f4066b3f3342b57dc3da1c7f4e08c9584c9a233ceb4ed63a58438e3f51fced284bf85680cafcd1c32bc03b1c002c56909147b932688681a491590fba4d364de8938c684078edfb063255f61e1122295b27d3fc6b8f44097e297217f9d9d039037ade41344a2f618cceb2cfc67e0d9cebf541d177509280f", 0xc9}, {&(0x7f0000000140)="2d1b7b8ad001163f1347e751", 0xc}], 0x6, 0x3ff, 0x2003) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) sendmmsg$unix(r0, &(0x7f0000003300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x18}, {&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000180)="aa90fb8cbf38487e168599909c218e72d360b76b198f552f103b062299c8386415ce3b28eb2c368e9a95d2a3436cfdeb924db57a2e2c6913415996b1d7aad506a33b3dae299b969971b3a989a3afc7381779401b19abea697c63f78e3975a75ce4986e8687eaea93f15c7b1aa5ddca89f97996c26f2a7448ddebd5d849eb706a7d1261894c", 0x85}, {&(0x7f0000000240)="8ad611d3856c6c195663ab6d67682da01e9a0a886df6d9699d7c1fbb68012e6473080aba92844ec5f3af9998227d038177a8304d4cf7fc8229d9255e72dd506c74f3b8cf49c99767988047605918cc07f6288f2f0371e79956e44e3049e68b7518fd71528adbff6d241802015267718915e9dc8510227cf8395c05fda581261292e13fe3d046e5c3fa6a64cc1b11ffd021bb7b1c65a4fa285ec13891317b2b25e888345ea6d5", 0xa6}, {&(0x7f0000002180)="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", 0xff}, {&(0x7f00000000c0)="b5c6d06dc72416bf4fdca4a8089063e54130e4323d54f3c0be134f8241b4e497bf38e37663856b6749d267394ae85559a83d2ca06fdeae13df1c4e01148eac3a573216a2c347c6ef5a3535a3ec8e4654ed78f93620773002d7c7fe5af81ef7d1c232239d9bf8f2001f94bde363", 0x6d}, {&(0x7f00000003c0)="2bf4f69aa3d08608fd9f7fe4ee055fd38953ff6a87de97bce9d0ad5f3660e8494f4b6afef072c463ed403196d23c542f04ae65f62c20f511b2d58e355f36228dfa7a37f8766eda90c6cf78b789418f1bbb11ae54398c1afbf0ae9757dc9ac20d9eeeb8a852074f79098793aae9dce550f50fdd9d7b8e5028c69d4b9bf0152a9562a261e25f71da153e16bb5d20ae5feca9f3c277a7d6b560ea35064447f6c70ee8d06cae37501d9056114ccf1c506e4fbb1a7acfa3a7d1062148605a8ce83ebaa992be50e37ddbcf13b739cf67ea06f06430ab2279d87c2b339b854f2f", 0xdd}, {&(0x7f00000004c0)="4512c59bf1893a7589f358b2a66d05ee853bc5f132a3a10a27363adbaa6592ea8a927bed34029173477fedd6b06b50966d5bf868813d276b562de8656f641e5c45dcdeda69f403afbeea2315d0bf75d225d55b8d7be8ab2068eae6b3bde4cf366fe77fabdbef1b5f757ff09f343057dd0916e0dcf29fcc9bc85701f3e2ae2a184f1ab884f12611dda55e7aebec872fcfa342109298bbc4ca63f0be1a2bdc786886e03578e7fc469af6c3b403a7f976153039895d", 0xb4}], 0x6, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [r0, r2, r3, r4]}}, @rights={{0x20, 0x1, 0x1, [r5, 0xffffffffffffffff, r1, r6]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}], 0xd8, 0x20000000}, {&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000840)="d4882363ce0e766a9dc877d150f520b2ce70e8e2612ef637546246bacc7e088d2dbd56eb2e0164a44082e64e495e23961738ae49208bcce603ec9295f9e838b4907ca0677e4c094d8c3f13080b0a90722996c639f83d90d5ce24f3bd5ebb7d3f3083d6ffe287d9e1b5ed1994a25b5650ae1fa9903ae026e4a08839f6f99ff1f0790c87f2f53d6eec204b6fe9eebf4ecc3e6daf3efbbad636480fd86c3fc2c3ef90", 0xa1}, {&(0x7f0000000900)="8c4ed6aab641410db3d6575ac3b28d5858961c1baba086a8c103d9a3ca9c66e375397dd4ca4b5c23b7a45715ea828abf", 0x30}, {&(0x7f0000000940)="d23cb27e0f33688d33e480ef773473dfbfff95e71d200878d7729ec7", 0x1c}, {&(0x7f0000000980)="29471c81375cf04cb0459cdae335db2b4e2065bcfe959c66ba3cdf5b12d515405e77464b50c80f57", 0x28}, {&(0x7f00000009c0)="e16054bec4745bff52ec938ad1a5f1f76382ab4b3551b81d598d6825057f57be4dff3854482ba7ea3192f82d7e17d282c693ca8178e2354de052e8cee249c48970d3e49ee9f124a8108b67d35e0656fbe06f38a94b734b26cdce86ef3a290dee9f6b07ce99ce16222811daff4a9c8d2586fb92b12f71a20aa609249119f9467cd7109601816087769b1f6290241de28d01930c0d016b7ec869090a898bd617d57f6d59a52f8a8e8027c8ad8a34f754f63fcba860a57745fc8997fc306abef72826a4e1b9c4e7a9d5edd40c82487462b493325b751edcf76e60029efa9a55fd534e7d70402bd35271c89d391c", 0xec}, {&(0x7f0000000ac0)="7eda29ea44521a755eca1e88f7abd78f133b5e62808356c2ff76ec5d9799f9d04663aa2e04d440f0eec088013988fbe419982c9c584ff5b40ed86aca0b47530570d66c0cd51895fdb65f489b817320ec5ba62a62d8f7e27ffec5b1a2ddee9517347152341294204587efca58e6dceb341352cb9d3a0eefb3cd0c1b17e513d040459ce98c939b80d202b5bd0ac338fe2c09c6ed7adebb7cfde11daf152f228b22dc421009d391562f", 0xa8}, {&(0x7f0000000b80)="7e1e0d644e6664017693e7e3216be1fdac65e0db85367e10a83acc142a16ba1dc24d7b2471607d32c1e6cf9198906c7286bc7f37fc65d765a09c90fb30b9ad5a13cf463804113fc3bfaa4bc89239af6db57451f419afe1a7", 0x58}, {&(0x7f0000000c00)="477ff3f8705e3cf6683645e4be9e23c227e4c1baedd62d4ec1c1119dfa67119c5692757e861fc525ccde5135dbdfa2e4944085d6dea90ab1606d82e03c67c48297123546355b17bc8cf0df530b47382439fbb9b4f4e5013cafff476d", 0x5c}, {&(0x7f0000000c80)="366f29ca4e8ec1fa7c2e81f994c611f987ef20977383552a8bcde39796fd16d38cc70c0c5b75411d646a8e8e44d43dd5be426a0494adeb88da0b81f39d906ef2c0f0cadd33057df779e61592af27aef2c5b6ff4037d22cdc2563602ed59cabc1063209ee3a68ede68eedc924a286df4208e2375328941c0cea0949f75c10e4f057729c3e9991049fb5c5b4d3756e6621fd1772cbd810ea38ed28c506a44bd1c015ca", 0xa2}], 0x9}, {&(0x7f0000000e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="46bd9a73d48e786ab6b680246152d079e558e5b19568178f0875e22afba67aecfb0a9a9c3c15f5b0c716113d742736c03f32ce95a88e3a3e4f44a69d749db64ba723cd803e14a55221082050b361cf2c18aa6fb56f48131ec8dff591fb2087c4f7d49ce194805f704222251af7c3157636fd", 0x72}, {&(0x7f0000001f00)="0b0a07df809c869bcc6746e35d5266f844f77c40384c35339207a94df4", 0x1d}, {&(0x7f00000024c0)="212d69095cfa248f670c34d785278ec456520fbec10abc4122c5a27454d044040f494f24041a64b0fe454180000000000000000c57bd227631f61065336c28d062e3ea67ec0008215a68e4575de67652e7eadb2bc6521d81b8d6300c9fcc2762113b8958c38fc35eeff16cbffb46a98d0696cf9b95367006a6fbaa2e78b8e12c7868eeeb9df296f6150e31fed9f864296b3892d0e74886902904beca170a2911b57e7012567ce731e6097f03d11d413e9c7b189275ed00c4e8fe06c635a1448344c68e5ca8dd981ba8d92a01545daab505f5c633fad70104022b120c915acbdbc81582a225649a77a522f3cfc601965deb819453ebed8cc773a0f212638249cbba4f3d48ce07a99020a524cf180bd9f2b1cfabdb876b110df10af76169d0061fb2e3e440bdf4122634b762af1812e051541a", 0x132}, {&(0x7f0000002040)="6beb8d3e8d1fb9f4581d970eac0896ce2c3a3e7677bb1506a27d53b286805fabc1ef90a558e9172603fa432304a205f9d3f68b5daf77", 0x36}], 0x5, &(0x7f0000003480)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32, @ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000002100000002000000cb876918b90084dcbef385b6e239d317d90aca164b8c230c2632e51cef1f9910b59d5899615308e7317fb1f7f5d4a792f3a3525f4e65833937990da48a545128ebe6b765100cae3d2adfd9a51d0e2bbea3353ba8982a77e6ece7fe98ba2e2c2d35e10722a161b788a751b5089afb44eb0157706d0e6efcdab33dce513d8c9b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x110, 0x40090}, {&(0x7f0000002640)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f0000002080)="cd76091f8058a13ba153defe4b0bb4345ba5a4c0fe7cb3c463124b3833ee302c7173c43f80f9b658fb213c83c796eee13a085558669e48ac19916613c50f127c23b2400a6700"/83, 0x53}, {&(0x7f0000002740)="6941fabcfc5c77e4c0923cfbcc0401ac28dac298bacc665a398f46b8b3dd318e3537933507768a6150c21f713771a396468ba7ce0a874433f57465fa13016e4538f6e1de78", 0x45}, {&(0x7f00000027c0)="36da291287736443073a06e608bfb7b26e86b1c7fb02abdfd94a8dd9046e885a03cf89bb03d8b2e0c9439be9285a80087da4dace03845d885d64052d3cec7611a02dfbf59b6f80fdde97472dab1fc302a4403bae9a19a288113c300d45e14a0d9204944d54dc8dff244d02957aa1f3fee6f2e4acb3c76f1464e6c3d202231c6d8052f047674b2252de695eea06ed875b5077de7dc91be09d04fdb0360458a956339cbd4a9e6cb6d37e2c7d729b90cbf133255b7809", 0xb5}, {&(0x7f0000002880)="fc9f8bb5bcff27b56e203832bb3769ebc410b15750abb438101dbe1cf26ebdc42b79a0120407e4b1eaeaafbc4e92e627d1903c34f7372c7e4d7f5f83d177e73abc49dfe598ee9fbbe464f1f5845cb2f7569149c45fce96680ddd3b324ba0b6af3bd281e8e61a42a3a32f04a462c5d71a1ecae5fb615169e4abb46691", 0x7c}, {&(0x7f0000002900)='i', 0x1}, {&(0x7f0000002940)="88123bccda6a742c7dd413838d3e767c68daa51453a017a4048d346fc3f7e8fcb24e2ea49fca855a3db079c826745b7f3707737b314fa25e18b5433658182ab4e08ee68a6b2b9b4291e73d119b06fb999acfd42d92cfb15952fa81071ed5d8acc672834f43b181224e9de9cefddcbbb4b82dabb71a411177db3a0313b0a57e01bcbbd9caa044019c64988a6249b89ef26ab3070adce9cac5ddf2bab41cb02822fc908499e5648190835c7267741d279bdd96cb9e529224f20415b5302fd3eb21a348bc5a115ac6962a83b77f97d6d64e68f4ab6ac36e256f5925fea11b38", 0xde}, {&(0x7f0000000300)="20d6b357fb49d808374d4cdf89fe6b3bb44c757b33eae8b78294530d51b100ec71ebb3baa6ca269e02b10747f429dee8050000004fcf6e407f4359bb84c955f4c2995b4a2dc998e63a61409beb9419bd1e116d1b1cfa8e179c1d264d38fea72fc09b9f93313a36b1848927bb3e5ff99c1b17f1b4de2cb2393e8bc0f2", 0x7c}], 0x7, &(0x7f0000002c80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000e90000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x20008880}, {&(0x7f0000002d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003280)=[{&(0x7f0000002e00)="7831cd0d81426fa97719f7d16dadce8b17d99176ee7012bfbb0bbb67db61250b0da36f5db351a8565e1291a723c387d9a74509d557261aebfdd84c68399ceeb7e0df00ff979cb5308c8c86fcdbe60a8aebe103edeadbe15d8afb169e13487faf03dbfaf0c32c35ada331617737ab0b468d45ffacfef87cacf7d2b4268e636f166365370fb6370bcb6cfc2b72200d1e588dbd6c991966aa412908c92c513eac4a631e49dd3a9cd780f97ad129b547a315b973e7e4e5813e953a23c3a3c6b32f3a4cb39371227b9f795484ae9bd107109a243d78413d7823469505b1bbbdb089980daa691c30", 0xe5}, {&(0x7f0000002f00)="beb0ef6d58a88ca6cad3373dfb53a3c87890a8303e7a5ebce324228e6da914da528bddba35fb84db7e01f023450da2c7b40fb18ac23ea61439f3465fca68a2535b663e84cbe175f87bc7fb318b175db9c50631157ee4db0ddcaea185759c48ba753446f47e90810fc0e6d4c188523de6faa9e436b346a998e7a12e1cd1218959f17ae59d60131815a231cca2b2d0ea81d1c5bd50545b7ebf6e8ee8e1aa7ab83f58a8bde720a8d985f8d9d15efaf8db3db876d87b435dad1a11e3ccd51f2cca9699c700903876e66fbaf20ca19be72303b85253027c73e537b465c6905fe7025119e5586ae7284fb818f9dc", 0xeb}, {&(0x7f0000002280)="9530f2ed252724a73a4d00c7eaab3557e59ed0563ddc3b483bb9d269dcdf1b458d86800801f1792fcc7f526ee85e972bbd800000000098ce69f63ece1a97b3265065c1928a40cb1f24e495a1729177440ba9f75282ff262180d8674613c0afbf56e5b7d5c3e0fe9728aeff85ce3c55b2fc7a69665f13fef87e73e91475f9408df35603f7fbb500f27b51e481d1c17279181c8de4e14564ace1c1fe851e26b9118e7ff35b274993626de013db34250478644008c465b618a51000"/198, 0xc6}, {&(0x7f0000003100)="5fba64f9d868fbaf2967c93f72b3", 0xe}, {&(0x7f0000003140)}, {&(0x7f0000003180)}, {&(0x7f00000031c0)="00895492b06614d8b826e94ab5e3cfcdd094c73419c98bad88ba727db412c489dc93fa23cd0be6ce563eb31d50099289e291012c1e5f463543ffc80b6c61034eb3f9fa18aa7fcbab5880ba04e7ae90d9b4bc41b68afb1f24044069f7ae1474a52d25ff3fc083e1f9bcc1ccbc94629bab6bf9a6f396fa6932ce1b32950f40d5468c3cd3d3cb5271d7dafdce3df35dfb6848d0545261fecfed9750c125ba3c2274238ee0d7bcf1ee39b5a29b6178416a23", 0xb0}], 0x7, 0x0, 0x0, 0x4000011}], 0x6, 0x40000011) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r1) dup3(r7, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r8) 05:30:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x5c) 05:30:28 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:28 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:28 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x8010, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x114, &(0x7f0000000380), 0x0, 0x4) syz_io_uring_complete(r3) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x8, 0x3ff}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x6, 0xeb6, r1, 0x0, &(0x7f0000000080)={0x990a6b, 0x7fff, [], @p_u8=&(0x7f0000000040)=0x1}}) ioctl$VIDIOC_ENUMSTD(r4, 0xc0485619, &(0x7f0000000180)={0x6, 0x2000000, "a862d385dbe7dd6a8adec08357f801e3020f4940a9cb48df", {0x3, 0x5}, 0x6}) 05:30:28 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) [ 473.446570][T16165] FAULT_INJECTION: forcing a failure. [ 473.446570][T16165] name failslab, interval 1, probability 0, space 0, times 0 [ 473.459868][T16165] CPU: 1 PID: 16165 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 473.468535][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.478579][T16165] Call Trace: [ 473.481867][T16165] dump_stack+0x1f0/0x31e [ 473.486199][T16165] should_fail+0x38a/0x4e0 [ 473.490609][T16165] ? tomoyo_realpath_from_path+0xd8/0x630 [ 473.496307][T16165] should_failslab+0x5/0x20 [ 473.500783][T16165] __kmalloc+0x74/0x330 [ 473.504911][T16165] ? tomoyo_realpath_from_path+0xcb/0x630 [ 473.510602][T16165] tomoyo_realpath_from_path+0xd8/0x630 [ 473.516125][T16165] tomoyo_path_number_perm+0x18f/0x690 [ 473.521584][T16165] security_file_ioctl+0x55/0xb0 [ 473.526523][T16165] __se_sys_ioctl+0x48/0x160 [ 473.531097][T16165] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.537134][T16165] do_syscall_64+0x73/0xe0 [ 473.541523][T16165] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.547386][T16165] RIP: 0033:0x45c369 [ 473.551255][T16165] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.570843][T16165] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.579222][T16165] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 473.587166][T16165] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 473.595121][T16165] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 473.603067][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.611009][T16165] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c 05:30:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40100, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f00000000c0)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x20}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000080), 0x4) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) fcntl$setsig(r2, 0xa, 0x26) 05:30:29 executing program 1 (fault-call:1 fault-nth:1): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) [ 473.637859][T16165] ERROR: Out of memory at tomoyo_realpath_from_path. 05:30:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x300) 05:30:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r5, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, @mcast2, 0x0, 0x3ff, 0x5, 0x0, 0x8}) dup2(r4, r3) [ 473.745466][T16179] FAULT_INJECTION: forcing a failure. [ 473.745466][T16179] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 473.758830][T16179] CPU: 0 PID: 16179 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 473.767492][T16179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.777539][T16179] Call Trace: [ 473.780825][T16179] dump_stack+0x1f0/0x31e [ 473.785157][T16179] should_fail+0x38a/0x4e0 [ 473.789577][T16179] prepare_alloc_pages+0x28c/0x4a0 05:30:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="143c705d0305802ac85e07e33b0000000000000001000000f2f38a07b2f95557c96a61bbf52ef03e67ecf657cd1a5d29a3f4ea177991ad8a5dfedf1bc67aad36ad28c5253c3d836ffb754ba0c2301e3c1ee17666bd8239ed7fff9332be092896e8b39604eb4e7c2f9b8365254863191658c61290", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) ioctl$VIDIOC_S_AUDIO(r3, 0x40345622, &(0x7f0000000040)={0x4, "81b6743a41981637b5196eb43e6b1d23c43afc7d8342141cc427c083cc28970f", 0x2, 0x1}) [ 473.794686][T16179] __alloc_pages_nodemask+0xbc/0x5e0 [ 473.799965][T16179] ? __lock_acquire+0x116c/0x2c30 [ 473.804991][T16179] kmem_getpages+0x49/0x900 [ 473.809498][T16179] cache_grow_begin+0x7b/0x2e0 [ 473.814261][T16179] cache_alloc_refill+0x359/0x3f0 [ 473.819283][T16179] ? check_preemption_disabled+0x51/0x140 [ 473.825000][T16179] __kmalloc+0x30c/0x330 [ 473.829237][T16179] ? tomoyo_realpath_from_path+0xd8/0x630 [ 473.834953][T16179] tomoyo_realpath_from_path+0xd8/0x630 [ 473.840503][T16179] tomoyo_path_number_perm+0x18f/0x690 [ 473.846180][T16179] security_file_ioctl+0x55/0xb0 [ 473.851134][T16179] __se_sys_ioctl+0x48/0x160 [ 473.855735][T16179] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.861794][T16179] do_syscall_64+0x73/0xe0 [ 473.866205][T16179] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 473.872095][T16179] RIP: 0033:0x45c369 [ 473.875970][T16179] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.895553][T16179] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.903945][T16179] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 473.911899][T16179] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 473.919871][T16179] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 473.927837][T16179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.935801][T16179] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c 05:30:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000040)={0x6, @capture={0x1000, 0x1, {0x7, 0x2}, 0x8f5, 0x7fffffff}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0x1, 0x6}, {0xb937, 0x1}]}) 05:30:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0xffffffffffffffff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @ib}}, 0x90) statx(r5, &(0x7f0000000040)='./file0\x00', 0x400, 0x20, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r4, r7}}}], 0x38}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r1) dup3(r8, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) 05:30:29 executing program 1 (fault-call:1 fault-nth:2): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) [ 474.116551][T16204] FAULT_INJECTION: forcing a failure. [ 474.116551][T16204] name failslab, interval 1, probability 0, space 0, times 0 [ 474.163985][T16204] CPU: 1 PID: 16204 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 474.172677][T16204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.182726][T16204] Call Trace: [ 474.186013][T16204] dump_stack+0x1f0/0x31e [ 474.190345][T16204] should_fail+0x38a/0x4e0 [ 474.194757][T16204] ? tomoyo_encode2+0x25a/0x560 [ 474.199592][T16204] should_failslab+0x5/0x20 [ 474.204089][T16204] __kmalloc+0x74/0x330 [ 474.208244][T16204] tomoyo_encode2+0x25a/0x560 [ 474.212921][T16204] tomoyo_realpath_from_path+0x5d6/0x630 [ 474.218537][T16204] tomoyo_path_number_perm+0x18f/0x690 [ 474.223990][T16204] security_file_ioctl+0x55/0xb0 [ 474.228901][T16204] __se_sys_ioctl+0x48/0x160 [ 474.233460][T16204] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.239557][T16204] do_syscall_64+0x73/0xe0 [ 474.243944][T16204] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.253795][T16204] RIP: 0033:0x45c369 [ 474.257784][T16204] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.277358][T16204] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.285736][T16204] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 474.293803][T16204] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 474.301746][T16204] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 05:30:29 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:29 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x3e8) 05:30:29 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f00000000c0)={0x7ff, 0x2, 0x80}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) socket$bt_rfcomm(0x1f, 0x1, 0x3) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x141000) 05:30:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14703be5c4c8fcc49900008001040000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 474.309685][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.317623][T16204] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c [ 474.339616][T16204] ERROR: Out of memory at tomoyo_realpath_from_path. 05:30:29 executing program 1 (fault-call:1 fault-nth:3): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:29 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000040)={0x2, [0x0, 0x0]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r5 = accept$nfc_llcp(r4, &(0x7f0000000080), &(0x7f0000000100)=0x60) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r6, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) dup2(r6, r5) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) 05:30:29 executing program 0: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x111800, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x1) [ 474.482240][T16238] FAULT_INJECTION: forcing a failure. [ 474.482240][T16238] name failslab, interval 1, probability 0, space 0, times 0 [ 474.561181][T16238] CPU: 1 PID: 16238 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 474.569966][T16238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.580012][T16238] Call Trace: [ 474.583300][T16238] dump_stack+0x1f0/0x31e [ 474.587634][T16238] should_fail+0x38a/0x4e0 [ 474.592050][T16238] ? udmabuf_create+0xb0/0xb40 [ 474.596811][T16238] should_failslab+0x5/0x20 [ 474.601311][T16238] kmem_cache_alloc_trace+0x57/0x300 [ 474.606594][T16238] udmabuf_create+0xb0/0xb40 05:30:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f00000001c0)="7f150dddf6", 0x5}], 0x3, 0x0, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000180)="db", 0x1}], 0x3, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000140)=0x1) [ 474.611269][T16238] ? __might_fault+0xf5/0x150 [ 474.615948][T16238] udmabuf_ioctl+0x295/0x360 [ 474.620544][T16238] ? sync_print_fence+0x440/0x440 [ 474.625561][T16238] __se_sys_ioctl+0xf9/0x160 [ 474.630149][T16238] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.636206][T16238] do_syscall_64+0x73/0xe0 [ 474.640620][T16238] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 474.646501][T16238] RIP: 0033:0x45c369 05:30:30 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1a, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r2, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r5, 0x4, 0x0, 0x7e, 0x0, 0x27, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x7, 0x7, 0x4, 0x80}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14ac465b7f8c28394300000001000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) sendmmsg$unix(r6, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r8, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) [ 474.650387][T16238] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.670092][T16238] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 474.678495][T16238] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 474.686473][T16238] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 474.694440][T16238] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 474.702406][T16238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 05:30:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x480) 05:30:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB], 0x18}, 0x0) r2 = socket(0x10, 0x2, 0x3) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r3, r4) setgroups(0x1, &(0x7f00000001c0)=[r4]) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000000040)='./file0\x00', 0x10040, 0x128) sendmsg$IPSET_CMD_GET_BYNAME(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0xc004) dup2(r6, r1) dup3(r6, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r8) [ 474.710371][T16238] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c 05:30:30 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:30 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0xc, 0x2000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x9b0000, 0x2, 0x100, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9d0904, 0x80000001, [], @value64=0xfffffffffffffffc}}) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000100)) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/225) r2 = socket(0x22, 0x5, 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000040)=0x3ff, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x0, r6}, 0x14) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', r7}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='pids.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000000580)="dbdbc0cc7d045bab473fcecf98c16b7eb1e6412263d72984841598ab27e58163fd96bb3bf09425bff6579d", 0x2b}, {&(0x7f00000005c0)="026a729051c0851c5afad3fd2016641505db2d57aa90f055a5531d86c90ccdd6d43e8bae04ec5c8ec434666cb5619ab8b09c9a0eb59480593e7efac4789f5617c02cfdc4bbc3f93f29e0bb23de6f82beb750a38cf3a4cc545a45ca659d6307e0a224fe4d417c83ab9126a6a7bfee1ee130349eefb51ef2601133ae13380390be28b5a2566e97f9dab4d4c5b39324c4136a017ed71fed38ddf6b339ceced445c45c22b39b3eb0400c96589cdb62916c41fba3ea76", 0xb4}], 0x4, 0x4, 0x0) dup2(r9, r10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="7f824000f0fffffff172d8f21330b38ece602020e8a11d1e95aee7ffb65c0b9718e80e2c1c6d728de8b8a9da29cc61215b9dde0420bac2e772a807e551b9cb61548049513938a8317a"], &(0x7f00000002c0)='GPL\x00', 0x401, 0x0, 0x0, 0x40f00, 0x2, [], r8, 0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0xffffffdc, 0x8}, 0x10, 0x0, r1}, 0x78) 05:30:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000816a"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xfff, 0x1010c0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0x7}) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xffffffffffff0000) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f00000000c0)={0x3, 0x1, 0x100}) dup2(r5, r4) 05:30:30 executing program 1 (fault-call:1 fault-nth:4): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x500) 05:30:30 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 475.285252][T16287] FAULT_INJECTION: forcing a failure. [ 475.285252][T16287] name failslab, interval 1, probability 0, space 0, times 0 [ 475.346960][T16287] CPU: 0 PID: 16287 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 475.355645][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.365704][T16287] Call Trace: [ 475.368997][T16287] dump_stack+0x1f0/0x31e [ 475.373329][T16287] should_fail+0x38a/0x4e0 [ 475.377740][T16287] ? kzalloc+0x16/0x30 [ 475.381804][T16287] should_failslab+0x5/0x20 [ 475.386302][T16287] __kmalloc+0x74/0x330 [ 475.390459][T16287] kzalloc+0x16/0x30 [ 475.394362][T16287] dma_buf_export+0x216/0x970 [ 475.399032][T16287] ? __kmalloc+0x2b/0x330 [ 475.403364][T16287] udmabuf_create+0x6e4/0xb40 [ 475.408038][T16287] ? __might_fault+0xf5/0x150 [ 475.412726][T16287] udmabuf_ioctl+0x295/0x360 [ 475.417316][T16287] ? sync_print_fence+0x440/0x440 [ 475.422337][T16287] __se_sys_ioctl+0xf9/0x160 [ 475.426913][T16287] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.432958][T16287] do_syscall_64+0x73/0xe0 [ 475.437351][T16287] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.443220][T16287] RIP: 0033:0x45c369 [ 475.447090][T16287] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.466667][T16287] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.475077][T16287] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 475.483021][T16287] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 05:30:30 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$CHAR_RAW_FLSBUF(r3, 0x1261, &(0x7f0000000040)=0x8) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) [ 475.490967][T16287] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 475.499005][T16287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 475.506948][T16287] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c 05:30:31 executing program 1 (fault-call:1 fault-nth:5): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x320000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth0_macvtap\x00', 0x1000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x6, 0x1, '>'}, 0x9) 05:30:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x600) 05:30:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r2, &(0x7f0000000040), 0xfd18) r3 = gettid() tkill(r3, 0x2) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) getgid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x24, 0x1, 0x1, [r4, r6, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r1) dup3(r8, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) [ 475.656872][T16319] FAULT_INJECTION: forcing a failure. [ 475.656872][T16319] name failslab, interval 1, probability 0, space 0, times 0 [ 475.706781][T16319] CPU: 1 PID: 16319 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 475.715472][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 475.725516][T16319] Call Trace: [ 475.728808][T16319] dump_stack+0x1f0/0x31e [ 475.733146][T16319] should_fail+0x38a/0x4e0 [ 475.737581][T16319] ? security_inode_alloc+0x32/0x1e0 [ 475.742841][T16319] should_failslab+0x5/0x20 [ 475.747317][T16319] kmem_cache_alloc+0x53/0x2d0 [ 475.752055][T16319] security_inode_alloc+0x32/0x1e0 [ 475.757145][T16319] inode_init_always+0x3f4/0xa50 [ 475.762077][T16319] new_inode_pseudo+0x7b/0x240 [ 475.766815][T16319] alloc_anon_inode+0x1a/0x2f0 [ 475.771571][T16319] dma_buf_export+0x54f/0x970 [ 475.776227][T16319] udmabuf_create+0x6e4/0xb40 [ 475.780879][T16319] ? __might_fault+0xf5/0x150 [ 475.785536][T16319] udmabuf_ioctl+0x295/0x360 [ 475.790106][T16319] ? sync_print_fence+0x440/0x440 [ 475.795106][T16319] __se_sys_ioctl+0xf9/0x160 [ 475.799673][T16319] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.805714][T16319] do_syscall_64+0x73/0xe0 [ 475.810109][T16319] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 475.815974][T16319] RIP: 0033:0x45c369 [ 475.819844][T16319] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 475.839420][T16319] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.847813][T16319] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 475.855753][T16319] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 475.863697][T16319] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 475.871639][T16319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 475.879602][T16319] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c 05:30:31 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x404c0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x1) 05:30:31 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:31 executing program 1 (fault-call:1 fault-nth:6): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x32000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r2, &(0x7f0000000040), 0xfd18) r3 = gettid() tkill(r3, 0x2) fcntl$setownex(r2, 0xf, &(0x7f0000000000)={0x0, r3}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r5) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r5, r7}}}], 0x20, 0x801}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r1) dup3(r8, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r10, r9) 05:30:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x700) 05:30:31 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000002c0)=""/46, &(0x7f0000000300)=0x2e) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000600)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000640)={0x0, 0x5, "587e0958d4da5ab546626bcad9c556c679a8393b387c150face40c0b13ca000d", 0x200, 0x1, 0x7fff, 0xfffffffffffffffa, 0x4, 0x0, 0xb86, 0xdae, [0x2, 0x401, 0x81, 0x5]}) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000580)={0x0, 0x10000000000003ff, 0x8}) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0xd, 0x6, 0x404, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x4000004) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}], 0x3, 0x0, 0x400000) fsetxattr$security_smack_transmute(r3, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x7) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x4, 0x5, 0x6, 0x80800, r4}) pipe(&(0x7f0000000340)={0xffffffffffffffff}) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000380)={@mcast1}, &(0x7f00000003c0)=0x14) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f00000005c0)={0x9f0000, 0xfffffffb, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x9909cc, 0x2, [], @value64=0x9}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r6, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) [ 476.157783][T16349] FAULT_INJECTION: forcing a failure. [ 476.157783][T16349] name failslab, interval 1, probability 0, space 0, times 0 [ 476.204831][T16349] CPU: 1 PID: 16349 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 476.213521][T16349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 476.223571][T16349] Call Trace: [ 476.226957][T16349] dump_stack+0x1f0/0x31e [ 476.231262][T16349] should_fail+0x38a/0x4e0 [ 476.235652][T16349] ? __d_alloc+0x2a/0x6d0 [ 476.239952][T16349] should_failslab+0x5/0x20 [ 476.244427][T16349] kmem_cache_alloc+0x53/0x2d0 [ 476.249259][T16349] ? read_seqcount_begin+0x122/0x1c0 [ 476.254529][T16349] __d_alloc+0x2a/0x6d0 [ 476.258655][T16349] ? ktime_get_coarse_real_ts64+0xa1/0xb0 [ 476.264346][T16349] d_alloc_pseudo+0x19/0x70 [ 476.268821][T16349] alloc_file_pseudo+0xc8/0x240 [ 476.273652][T16349] dma_buf_export+0x5d7/0x970 [ 476.278306][T16349] udmabuf_create+0x6e4/0xb40 [ 476.282961][T16349] ? __might_fault+0xf5/0x150 [ 476.287615][T16349] udmabuf_ioctl+0x295/0x360 [ 476.292180][T16349] ? sync_print_fence+0x440/0x440 [ 476.297173][T16349] __se_sys_ioctl+0xf9/0x160 [ 476.301735][T16349] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.307771][T16349] do_syscall_64+0x73/0xe0 [ 476.312162][T16349] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 476.318026][T16349] RIP: 0033:0x45c369 [ 476.321899][T16349] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 476.341577][T16349] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.349958][T16349] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 476.357899][T16349] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 476.365844][T16349] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 476.373788][T16349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 476.381736][T16349] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c 05:30:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000080)={0xa10000, 0x54, 0x7, r2, 0x0, &(0x7f0000000040)={0x990a70, 0x0, [], @ptr}}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) 05:30:31 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0xa940) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000080)={0xfff, 0xdead, 0x6}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x3200e0) 05:30:31 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) readlinkat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/105, 0x69) r4 = dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x1406, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) dup2(r6, r5) 05:30:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x1) 05:30:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00q\x00'], 0x18}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000000c0)={0x7f, 0xa, 0x4, 0x2, 0x17, {0x0, 0x2710}, {0x2, 0x8, 0x9, 0x0, 0x0, 0xf8, "4733b17a"}, 0x1a, 0x3, @planes=&(0x7f0000000080)={0x3, 0x2, @userptr=0x6}, 0x7}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x900) 05:30:32 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:32 executing program 0: ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}], 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x4e, 0x80000001, "90f20929f8195815c3dedf3c54cf371f20b53f91762b105e19b6e124c3abc302907c229a5d0ddab86c009a9e06c278c00145a8c5aacb3737e0ef4b4456924d7d84469697e9c2"}, &(0x7f0000000100), 0x400) r2 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000140)=0x1) 05:30:32 executing program 1 (fault-call:1 fault-nth:7): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) 05:30:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="ac33dd49123953f72b4f2f8c7e49", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="6c957e57"], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x121041) write$evdev(r3, &(0x7f0000000040), 0xfd18) r4 = gettid() tkill(r4, 0x2) fcntl$setownex(r3, 0xf, &(0x7f0000000000)={0x0, r4}) process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000000040)=""/134, 0x86}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000180)=""/94, 0x5e}], 0x3, &(0x7f0000000240)=[{&(0x7f0000000300)=""/224, 0xe0}, {&(0x7f0000000500)=""/226, 0xe2}, {&(0x7f0000001640)=""/231, 0xe7}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x4, 0x0) dup2(r2, r1) dup3(r2, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r5, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r7, r6) 05:30:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xa00) 05:30:32 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 477.014431][T16404] FAULT_INJECTION: forcing a failure. [ 477.014431][T16404] name failslab, interval 1, probability 0, space 0, times 0 05:30:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x80000, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000080)={0x1, 0xb, 0x35, "21cc9f7c7fd77ac2d0801b770a6abba549c35ac15d3e456be076c40b5adf9094fb1def0c1949f380f03fd9dae3b51741d0efab282ff614ab1c89e660", 0x3a, "49d18e7d53d1e0968220bb3b925fa7707d6e6fc81040f6c65aadf941f4d8fc480e60fcbccc67ae512110a4d8b9226566728515d7c87e8e5f6491c2f0", 0xa0}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) 05:30:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x40000) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 477.056755][T16404] CPU: 1 PID: 16404 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 477.065446][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.075502][T16404] Call Trace: [ 477.078784][T16404] dump_stack+0x1f0/0x31e [ 477.083134][T16404] should_fail+0x38a/0x4e0 [ 477.087545][T16404] ? __d_alloc+0x2a/0x6d0 [ 477.091868][T16404] should_failslab+0x5/0x20 [ 477.096369][T16404] kmem_cache_alloc+0x53/0x2d0 [ 477.101126][T16404] ? read_seqcount_begin+0x122/0x1c0 [ 477.106410][T16404] __d_alloc+0x2a/0x6d0 [ 477.110565][T16404] ? ktime_get_coarse_real_ts64+0xa1/0xb0 [ 477.116284][T16404] d_alloc_pseudo+0x19/0x70 [ 477.120782][T16404] alloc_file_pseudo+0xc8/0x240 [ 477.125635][T16404] dma_buf_export+0x5d7/0x970 [ 477.130311][T16404] udmabuf_create+0x6e4/0xb40 [ 477.134985][T16404] ? __might_fault+0xf5/0x150 [ 477.139658][T16404] udmabuf_ioctl+0x295/0x360 [ 477.144229][T16404] ? sync_print_fence+0x440/0x440 [ 477.149226][T16404] __se_sys_ioctl+0xf9/0x160 [ 477.153794][T16404] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.159856][T16404] do_syscall_64+0x73/0xe0 [ 477.164244][T16404] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.170109][T16404] RIP: 0033:0x45c369 [ 477.173978][T16404] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.193556][T16404] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:30:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x40000, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@subj_role={'subj_role', 0x3d, '/dev/video#\x00'}}, {@audit='audit'}, {@appraise_type='appraise_type=imasig'}, {@obj_type={'obj_type', 0x3d, '/dev/video#\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) [ 477.202037][T16404] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 477.209984][T16404] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 477.217931][T16404] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 477.225875][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 477.233822][T16404] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c 05:30:32 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x1000, "682fe450f17c73b3eaf662354b90f764efd5850ec2f16037e2704ea59315f259", 0x10, 0x4, 0x401, 0x8, 0x2}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r5}, 0x14) getsockname$packet(r3, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x10eef0f1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc}]}]}]}, 0x34}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000300)={'gretap0\x00', r6, 0x10, 0x20, 0x31a, 0x1, {{0x55, 0x4, 0x3, 0x3, 0x154, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast1, @private=0xa010102, {[@cipso={0x86, 0x3f, 0x3, [{0x7, 0xc, "cdbbc41da8df0197dee7"}, {0x7, 0x7, "c2d1b728c3"}, {0x5, 0xf, "16011315017d3f6cd461e0962e"}, {0x1, 0xd, "bb0c5c0ef3f5622aa7fdfa"}, {0x1, 0x4, 'h*'}, {0x1, 0x6, "987696f7"}]}, @timestamp_prespec={0x44, 0xc, 0x1d, 0x3, 0x4, [{@multicast1, 0x2}]}, @ssrr={0x89, 0xb, 0xf1, [@local, @multicast1]}, @generic={0x89, 0xa, "df25e6258dfe15c9"}, @cipso={0x86, 0x49, 0x2, [{0x6, 0x10, "26e99f79c3c9a8884e9a9822f7d7"}, {0x0, 0x6, "097c063e"}, {0x4, 0xf, "d83cd35d2fab7159eb3712f28a"}, {0x5, 0x3, "fa"}, {0x0, 0xe, "745d114f6fb7128473af3332"}, {0x7, 0x9, "8d9ac2d593b7f0"}, {0x6, 0x4, "3b96"}]}, @lsrr={0x83, 0x13, 0x9b, [@multicast2, @rand_addr=0x64010100, @broadcast, @loopback]}, @timestamp_addr={0x44, 0x54, 0xc4, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x200}, {@multicast2, 0x6}, {@private=0xa010101, 0xffffffc1}, {@loopback, 0x4}, {@local, 0x101}, {@multicast2, 0x3ff}, {@private=0xa010101, 0x7bfe}, {@private=0xa010100, 0x3}, {@private=0xa010102, 0x869}, {@private=0xa010102}]}, @timestamp_prespec={0x44, 0x1c, 0x84, 0x3, 0x2, [{@broadcast, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x5}, {@private=0xa010101, 0xac2}]}, @timestamp={0x44, 0x14, 0x64, 0x0, 0xc, [0x0, 0x7fffffff, 0x7fffffff, 0x1]}]}}}}}) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000640)=0x40000000) sendmsg$xdp(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2c, 0xf, r7, 0x2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000500)="387d9dbc94145b9da4963ce3d2d59e015c051e5b18b81bd4ec726aacac54de91b13086ff75724f1d4caa1a3d0cc6881fd435822e3e2c90b87e28cdb52b9ae6c7cd595303f1a6f01ad20541bf42a9b7bd1a1bb5821a288ea9cc73b3ef7afd2b96cd9c3aca7521f7861f8517116f5c0b2638cec88651f9e221cbe43f0acbcba709bf6cff85db39e92ca87bc30237fe1e704bb866f7bd16b04ac2afab8c32fae012225e9c38807259f44017a597b0df0e52ce199b133d05d47a6cb060b6b93eb838b94dc16df5ccb4c179ef6e9c742319f794819d593ccd8a6d6f10e3479a56", 0xde}, {&(0x7f0000000240)="ca4dcbd7a62b31b848c6e1bd263661f24357e925e584b0b5f0624466c567a52c4f0d96f4b2e9ffec6638cb799281a444b2a38d3254cd5c4f6ce0339e0e2f890607dd5b2e76e7c745", 0x48}], 0x2, 0x0, 0x0, 0x20040840}, 0x4800) ioctl$SOUND_OLD_MIXER_INFO(r1, 0x80304d65, &(0x7f0000000100)) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r8, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VT_GETSTATE(r8, 0x5603, &(0x7f00000000c0)={0x3f, 0x7}) 05:30:32 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="ff070000"], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) 05:30:32 executing program 1 (fault-call:1 fault-nth:8): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000180)) [ 477.424474][T16444] FAULT_INJECTION: forcing a failure. [ 477.424474][T16444] name failslab, interval 1, probability 0, space 0, times 0 [ 477.466639][T16444] CPU: 1 PID: 16444 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 477.475328][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.485410][T16444] Call Trace: [ 477.488699][T16444] dump_stack+0x1f0/0x31e [ 477.493114][T16444] should_fail+0x38a/0x4e0 [ 477.497532][T16444] ? security_file_alloc+0x32/0x200 [ 477.502724][T16444] should_failslab+0x5/0x20 [ 477.507221][T16444] kmem_cache_alloc+0x53/0x2d0 [ 477.511983][T16444] security_file_alloc+0x32/0x200 [ 477.517003][T16444] __alloc_file+0xd7/0x390 [ 477.521414][T16444] alloc_empty_file+0xa9/0x1b0 [ 477.526165][T16444] alloc_file+0x5d/0x4f0 [ 477.530386][T16444] alloc_file_pseudo+0x1b0/0x240 [ 477.535317][T16444] dma_buf_export+0x5d7/0x970 [ 477.539967][T16444] udmabuf_create+0x6e4/0xb40 [ 477.544627][T16444] ? __might_fault+0xf5/0x150 [ 477.549278][T16444] udmabuf_ioctl+0x295/0x360 [ 477.553886][T16444] ? sync_print_fence+0x440/0x440 [ 477.558888][T16444] __se_sys_ioctl+0xf9/0x160 [ 477.563462][T16444] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.569499][T16444] do_syscall_64+0x73/0xe0 [ 477.573886][T16444] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.579835][T16444] RIP: 0033:0x45c369 [ 477.583704][T16444] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.603276][T16444] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.611742][T16444] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 [ 477.619682][T16444] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 477.627624][T16444] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 477.635562][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 477.643503][T16444] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c [ 477.655268][T16444] general protection fault, probably for non-canonical address 0xdffffc0000000017: 0000 [#1] PREEMPT SMP KASAN [ 477.667405][T16444] KASAN: null-ptr-deref in range [0x00000000000000b8-0x00000000000000bf] [ 477.675906][T16444] CPU: 1 PID: 16444 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 477.684628][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 477.694655][T16444] RIP: 0010:dma_buf_release+0x4b/0x310 [ 477.700080][T16444] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f7 53 1a fd 4c 8b 23 49 8d 9c 24 b8 00 00 00 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 4b 02 00 00 8b 1b 31 ff 89 de e8 ee 48 db [ 477.719680][T16444] RSP: 0018:ffffc90016247be0 EFLAGS: 00010206 [ 477.725712][T16444] RAX: 0000000000000017 RBX: 00000000000000b8 RCX: 0000000000040000 [ 477.733677][T16444] RDX: ffffc9000a6ba000 RSI: 000000000003c510 RDI: 000000000003c511 [ 477.741643][T16444] RBP: 1ffff11010cb5742 R08: ffffffff81c40c10 R09: ffffed1009bf9cf2 [ 477.749698][T16444] R10: ffffed1009bf9cf2 R11: 0000000000000000 R12: 0000000000000000 [ 477.757634][T16444] R13: dffffc0000000000 R14: 1ffff11010cb5762 R15: ffff8880865aba98 [ 477.765573][T16444] FS: 00007f6886e6e700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 477.774464][T16444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.781015][T16444] CR2: 0000000000741138 CR3: 0000000096776000 CR4: 00000000001406e0 [ 477.788961][T16444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.796905][T16444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 477.804841][T16444] Call Trace: [ 477.808105][T16444] ? dma_buf_fs_init_context+0x60/0x60 [ 477.813541][T16444] __dentry_kill+0x43f/0x5d0 [ 477.818217][T16444] dput+0x45e/0x710 [ 477.822023][T16444] path_put+0x35/0x60 [ 477.826062][T16444] alloc_file_pseudo+0x1d2/0x240 [ 477.830969][T16444] dma_buf_export+0x5d7/0x970 [ 477.835617][T16444] udmabuf_create+0x6e4/0xb40 [ 477.840270][T16444] ? __might_fault+0xf5/0x150 [ 477.844924][T16444] udmabuf_ioctl+0x295/0x360 [ 477.849483][T16444] ? sync_print_fence+0x440/0x440 [ 477.854477][T16444] __se_sys_ioctl+0xf9/0x160 [ 477.859037][T16444] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.865070][T16444] do_syscall_64+0x73/0xe0 [ 477.869452][T16444] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 477.875314][T16444] RIP: 0033:0x45c369 [ 477.879178][T16444] Code: 8d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 477.898751][T16444] RSP: 002b:00007f6886e6dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.907125][T16444] RAX: ffffffffffffffda RBX: 0000000000018bc0 RCX: 000000000045c369 05:30:33 executing program 2: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1df2a369c") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) 05:30:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xb00) 05:30:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r3, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000040)={0x0, 0x4, 0x9e, "2fe45fac9f0ffc5518ef04437330bd7dd22662da2a6420440f405c2e264d45906fbf8ea9ddc6ecaaa7ac9cf1fb9c8d394d9b3549be91da7395dfadce4405abb4cc081b513de6c71164b03e9779cf0f91f185bbe0332d46d5538910834d90b38a73ef9332ac0cfe49875ce9de3190c7c6af945633c74bd0184fd9a24f351dc84351e9b7168a04f389d4a13c9ef281f4fe8de7c88e58d0f74aa02596be6f53"}, 0xa6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:33 executing program 0: prctl$PR_GET_THP_DISABLE(0x2a) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x8, 0x169e00) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000140)=0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r2, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000000c0)) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0xffffffff, 0x8) prctl$PR_GET_TIMERSLACK(0x1e) 05:30:33 executing program 4: clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000080)={'ip_vti0\x00'}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) rt_tgsigqueueinfo(r1, r1, 0x15, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000001c0)="55f77db57e8174316b582b24ab79bae9b8d9d46bb9b7091b9b22c2b391fe7d5f546a044b4b9828458339d1a79b357be05ef7fb0668dccdad2ab8b4a680e98f18a740e232544b1d97db655cc7ff83f066c099b52641be475d4089280afd725e6a3beec116d93ed6858fb46905e386ce87fc82257bc544bb8f4b860b0ef9b3267ff1") ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000000)="4f65a429b9") ptrace$getregset(0x4204, r1, 0x2, &(0x7f0000000280)={0x0, 0x10}) [ 477.915063][T16444] RDX: 0000000020000180 RSI: 0000000040087543 RDI: 0000000000000003 [ 477.923003][T16444] RBP: 00007f6886e6dca0 R08: 0000000000000000 R09: 0000000000000000 [ 477.930944][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 477.938894][T16444] R13: 00007ffdab23ac3f R14: 00007f6886e6e9c0 R15: 000000000078bf0c [ 477.946838][T16444] Modules linked in: [ 477.958461][T16444] ---[ end trace 5ef980f8e5bcc8c2 ]--- 05:30:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="14000800000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 477.970452][T16444] RIP: 0010:dma_buf_release+0x4b/0x310 [ 477.978983][T16444] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f7 53 1a fd 4c 8b 23 49 8d 9c 24 b8 00 00 00 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 4b 02 00 00 8b 1b 31 ff 89 de e8 ee 48 db [ 478.014635][T16444] RSP: 0018:ffffc90016247be0 EFLAGS: 00010206 05:30:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x10}}], 0x10}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r1) dup3(r2, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r3) [ 478.032785][T16444] RAX: 0000000000000017 RBX: 00000000000000b8 RCX: 0000000000040000 [ 478.046313][T16444] RDX: ffffc9000a6ba000 RSI: 000000000003c510 RDI: 000000000003c511 [ 478.065596][T16444] RBP: 1ffff11010cb5742 R08: ffffffff81c40c10 R09: ffffed1009bf9cf2 05:30:33 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000080)) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r1, 0xc020662a, &(0x7f0000000040)={0x0, 0x3ff}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x400000) [ 478.081728][T16444] R10: ffffed1009bf9cf2 R11: 0000000000000000 R12: 0000000000000000 [ 478.101297][T16444] R13: dffffc0000000000 R14: 1ffff11010cb5762 R15: ffff8880865aba98 05:30:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r0, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x200400, 0x4) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x8, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000140)=0x1) [ 478.125574][T16444] FS: 00007f6886e6e700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 478.142587][T16444] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 05:30:33 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) sendmmsg$unix(r0, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x3c, [], 0x0, &(0x7f0000000040), &(0x7f0000000080)=""/60}, &(0x7f0000000180)=0x78) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r1) dup3(r3, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) 05:30:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="451d0000000066b847000f00d03ef30fc736c4e2218e55a566baa0003153ee660f08c4226d9e1e470f01c866baf80cb8c4f44a8cef66bafc0c66ed", 0x3b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0xc00) [ 478.179419][T16444] CR2: 0000000000b90004 CR3: 0000000096776000 CR4: 00000000001426e0 [ 478.219250][T16444] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 478.235397][T16444] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 478.255396][T16444] Kernel panic - not syncing: Fatal exception [ 478.262587][T16444] Kernel Offset: disabled [ 478.266894][T16444] Rebooting in 86400 seconds..