Starting Network Time Synchronization... [ OK ] Started Network Time Synchronization. [ OK ] Started Raise network interfaces. [ OK ] Reached target Network. Starting Permit User Sessions... Starting OpenBSD Secure Shell server... [ OK ] Started Permit User Sessions. [ OK ] Started OpenBSD Secure Shell server. [ 11.834054][ C1] random: crng init done [ 11.835942][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.25' (ECDSA) to the list of known hosts. 2020/06/27 23:55:52 fuzzer started 2020/06/27 23:55:52 dialing manager at 10.128.0.105:43911 2020/06/27 23:55:52 syscalls: 1825 2020/06/27 23:55:52 code coverage: enabled 2020/06/27 23:55:52 comparison tracing: enabled 2020/06/27 23:55:52 extra coverage: enabled 2020/06/27 23:55:52 setuid sandbox: enabled 2020/06/27 23:55:52 namespace sandbox: enabled 2020/06/27 23:55:52 Android sandbox: enabled 2020/06/27 23:55:52 fault injection: enabled 2020/06/27 23:55:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/06/27 23:55:52 net packet injection: enabled 2020/06/27 23:55:52 net device setup: enabled 2020/06/27 23:55:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/06/27 23:55:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/06/27 23:55:52 USB emulation: enabled 23:56:26 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x80000000, &(0x7f00000000c0)) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000180)='maps\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x290100, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000240)={0x0, @multicast2, 0x4e24, 0x3, 'sed\x00', 0x12, 0x17, 0x3}, 0x2c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x178, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffd}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x108ef20f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3beaa0da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35ec2a1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b420516}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x708e8ec3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749342e3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x313d6713}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7682af2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f5cb2fb}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f09c3b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64aaccbc}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f25fc32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66806ed0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6259981a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6749f7fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xffffffff}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x10902, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f0000000600)={@empty, @broadcast}, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000640)={0x0, @adiantum}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f00000006c0)) r7 = socket$inet(0x2, 0x5, 0x8) readv(r7, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/135, 0x87}, {&(0x7f0000000800)=""/179, 0xb3}, {&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x5) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000c80)={0x3, 0x1f, 0x4, 0x2b294cfd}, 0x10) 23:56:26 executing program 5: r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/126, 0xfffffffffffffffe}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x715adc5b34e56452) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000140)={0x34, 0x0, &(0x7f0000000100)}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000040}, 0x20040000) r3 = syz_open_pts(r2, 0x0) lseek(r3, 0x1, 0x4) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={0x0, @vsock={0x28, 0x0, 0x2710, @hyper}, @generic={0xb, "6003fb45c5c1e3a0a94a105e69d8"}, @phonet={0x23, 0x3f, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)='veth0_to_bridge\x00', 0x22, 0x2, 0xb3}) r4 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x3, 0x599902) write$FUSE_INTERRUPT(r4, &(0x7f00000003c0)={0x10, 0xffffffffffffffda, 0x7}, 0x10) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x1, 0x0, {0x5}}, 0x18) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x1, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000480)={0xd4f, 0x3e9f}) ioctl$TCSETA(r1, 0x5406, &(0x7f00000004c0)={0x7, 0x200, 0x9, 0x9, 0x3, "cc9c51398fbf3291"}) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='net/sctp\x00') getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000000540)={'filter\x00'}, &(0x7f00000005c0)=0x78) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600)='/dev/hwrng\x00', 0x100, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}}, 0x24040800) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000740)={{0x108, 0x75, 0x2, 0x3b2, 0x382, 0x8, 0x12c, 0x814}, "7ae72dbf8820b3fb243e8376df866fe5c73f5cc55c5676143e441b211fd9f2778bb0f80220334f9b969962a7989f4502db995f6b6acea8889b0826c4eabe7489cb1734b5cf1feb69fa3c14c54dad4c5b2db71f5ad741f12b6082b62d310304b617f24cdc3f4bf5f5906e0ce3e6a2650f4fbac65d544e0226205ab0947eae08c456b74049bbae23bb76086292bb4d41814ca1df7d4034f838932ad3b4cc29f00cd38b083835ade67c0e5d0620fc6e663220394a75fddb7ea7dd0ef82727adc1caf2d5113fe6a856d06d052ee908e9ce115d9b29fa44d77def", [[], [], [], [], [], [], []]}, 0x7f8) 23:56:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001c00)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x3c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x6600c810}, 0x80) r2 = accept(0xffffffffffffffff, &(0x7f0000001d00)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000001d80)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x5c, r3, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x3c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x401}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6a017f3}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x1b, 0x1, "396f368d586bb0805a097e45e6db317bf29952644a2d5e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x18) pipe2(&(0x7f0000001f40)={0xffffffffffffffff}, 0x80800) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000001fc0)={&(0x7f0000001f80)=[0x0, 0x0], 0x2, 0x81}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002040)={&(0x7f0000002000)='wireguard\x00'}, 0x10) gettid() r5 = clone3(&(0x7f0000002340)={0x88281300, &(0x7f0000002080), &(0x7f00000020c0), &(0x7f0000002100), {0x14}, &(0x7f0000002140)=""/151, 0x97, &(0x7f0000002200)=""/241, &(0x7f0000002300)=[0xffffffffffffffff], 0x1}, 0x58) sched_getscheduler(r5) r6 = socket(0x18, 0xa, 0x6) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400)='nl80211\x00') sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x14, r7, 0x100, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r8 = gettid() sched_setaffinity(r8, 0x8, &(0x7f0000002500)=0xafe) r9 = accept(0xffffffffffffffff, &(0x7f0000002540)=@nfc_llcp, &(0x7f00000025c0)=0x80) ioctl$SIOCGSTAMP(r9, 0x8906, &(0x7f0000002600)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000026c0)={@local, 0x9, 0x2, 0x3, 0x3, 0x3ff, 0x5}, 0x20) 23:56:26 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)=0x3) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000080)=0x80) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r2, r1, 0x4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000140)={0x9, 0xff, 0x75, 0x7}, 0x10) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f00000001c0)="43313dfcb7d4671638b9635f1d74f745fad0091df96b1e86e3defd988aa1b5a0645b569b5bb397da3a786f80ec26e2b16bcfe7f3296fe0181d1bd6ee1b4fc66f37920c6939c2788ac6d2e03fb2d180cab2efa9fde68c56f49e5eebf9874f128051444f85bc0470b20a28ed8a92453d9683d8ce05f545df85c07b51b3712a2d7b2f3a3faf740b71447e08b1d998673b5b2e9866da89db475a91290a0b3e7effb3c77b2bf8bde1ea94a524097e59ecb1b584230977f711bccc5abd22795a072a48e041f8b5a14c839aa5043f25", &(0x7f00000002c0)=""/219, 0x4}, 0x20) r4 = timerfd_create(0x3, 0x80800) fcntl$notify(r4, 0x402, 0x1e) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x80106, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r5, &(0x7f0000000440)="c8242f18efc0ac2fc99fb719c22e2649c9555500a08f24483158b42d80f3ecfed034ae6539ca514627ffe7e9dcb3bd75176db86b8bb47cfa45c6f292b11f4236bc6f473997681af8749d7a49d09420e35cb0b1554db1229b735922ede1badcfb412d70f954034ad75392f1fe605de575e63aeed206e3737abdee1365aafe041f5ca516511ac199572824d96f0f82b063fc2a2b69193aa9f24f1e63197a85ecf7542c5c49321dedb8216502477127e9841ec039af771de22d572cdfd1b92c08cb195616ddbb929af1a586e436a9", &(0x7f0000000540)=""/191, 0x4}, 0x20) r6 = syz_open_procfs(0x0, &(0x7f0000000640)='syscall\x00') bind$netlink(r6, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfe, 0x100}, 0xc) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uinput\x00', 0x802, 0x0) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000700)='/dev/full\x00', 0x80001, 0x0) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0xc) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='cpuacct.usage_all\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000800)={0xffffff31, &(0x7f00000007c0)=[r7, r8, r9, r10, 0xffffffffffffffff]}, 0x5) 23:56:26 executing program 3: epoll_create(0x7b61) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4200, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000080)={0x1, 0x6, 0xfffc}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0x8, 0x9, 0x9, 0x4}) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x80000) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000200)={0x3, 0x6, 0x5c, 0x8000, 0xfcd7}) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000300)={0x8001, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff]}, 0x4) umount2(&(0x7f0000000340)='./file0\x00', 0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r7 = getegid() write$P9_RGETATTR(r5, &(0x7f0000000480)={0xa0, 0x19, 0x1, {0x200, {0x40, 0x4, 0x3}, 0x1a3, r6, r7, 0x0, 0xffffffff, 0x2, 0x4, 0x9, 0x0, 0x8, 0x8, 0x6, 0x0, 0x2, 0x5, 0x0, 0x7fff, 0x6}}, 0xa0) statfs(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=""/48) pivot_root(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') sendmsg$nl_xfrm(r1, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)=@getsa={0x154, 0x12, 0x2, 0x70bd2c, 0x25dfdbfd, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d3, 0x2, 0x2b}, [@algo_crypt={0x8e, 0x2, {{'ecb-serpent-sse2\x00'}, 0x230, "1819522c0238cb10c1d13d9c3ee29aecaa12ae24b07b121a36b5260eafee99b3933b6a298c556f9d0b3b214cdbf0bf2a159f2959a1ff7590b9b7f9bcc54c6377d7a90bed683c"}}, @algo_comp={0x9b, 0x3, {{'deflate\x00'}, 0x298, "267a32985e5dd9b731f8e91ae313d519fcd3262e0a1531ae875c9c2984e7ae0a340b9c10c10fa612b45adb668e270e7f7fe1c2306280ae0288cea529ffad9b612a9a56a6749eda026d49d1a10979bc5534c046"}}]}, 0x154}, 0x1, 0x0, 0x0, 0x801}, 0x0) 23:56:26 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ip6erspan0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0xe0040, 0x0) socketpair(0x6, 0x3, 0x3, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000180)={'vlan1\x00', {0x2, 0x4e20, @rand_addr=0x64010100}}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000200)) r4 = socket$inet(0x2, 0x3, 0xd1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000240)={0x2, 'bond_slave_0\x00', {0x1ff}, 0xfff}) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000300)={@empty, r5}, 0x14) ioctl$TIOCMIWAIT(r3, 0x545c, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x400, 0x0) ioctl$RTC_UIE_OFF(r6, 0x7004) r7 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg\x00', 0x200000, 0x0) mmap$usbmon(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x10, r7, 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x8100, 0xd0) ioctl$TIOCSCTTY(r8, 0x540e, 0x2) [* ] A start job is running for dev-ttyS0.device (9s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (9s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (10s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (11s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (11s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (12s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (12s / 1min 30s) [ *] A start job is running for dev-ttyS0.device (13s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (14s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (14s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (15s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (15s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (16s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (17s / 1min 30s) [* ] A start job is running for dev-ttyS0.device (17s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (18s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (19s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (19s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (20s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (20s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (21s / 1min 30s) [ *] A start job is running for dev-ttyS0.device (22s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (22s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (23s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (23s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (24s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (25s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (25s / 1min 30s) [* ] A start job is running for dev-ttyS0.device (26s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (27s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (27s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (28s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (28s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (29s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (30s / 1min 30s) [ *] A start job is running for dev-ttyS0.device (30s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (31s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (31s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (32s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (33s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (33s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (34s / 1min 30s) [* ] A start job is running for dev-ttyS0.device (35s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (35s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (36s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (36s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (37s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (38s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (38s / 1min 30s) [ *] A start job is running for dev-ttyS0.device (39s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (40s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (40s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (41s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (41s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (42s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (43s / 1min 30s) [* ] A start job is running for dev-ttyS0.device (43s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (44s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (44s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (45s / 1min 30s)[ 52.326292][ T22] audit: type=1400 audit(1593302186.612:8): avc: denied { execmem } for pid=349 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 52.370729][ T353] cgroup1: Unknown subsys name 'perf_event' [ 52.378109][ T353] cgroup1: Unknown subsys name 'net_cls' [ *** ] A start job is running for dev-ttyS0.device (46s / 1min 30s)[ 52.439231][ T358] cgroup1: Unknown subsys name 'perf_event' [ 52.445433][ T358] cgroup1: Unknown subsys name 'net_cls' [ 52.481585][ T362] cgroup1: Unknown subsys name 'perf_event' [ 52.488897][ T362] cgroup1: Unknown subsys name 'net_cls' [ 52.512354][ T368] cgroup1: Unknown subsys name 'perf_event' [ 52.519102][ T368] cgroup1: Unknown subsys name 'net_cls' [ 52.526737][ T372] cgroup1: Unknown subsys name 'perf_event' [ 52.531620][ T373] cgroup1: Unknown subsys name 'perf_event' [ 52.534607][ T372] cgroup1: Unknown subsys name 'net_cls' [ 52.541988][ T373] cgroup1: Unknown subsys name 'net_cls' 23:56:30 executing program 1: socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x4a, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x14, 0x11, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r2, &(0x7f0000000640)={0x8, {"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", 0x1000}}, 0x1006) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xf7, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x3, 0x0, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x0, 0x1, 0x85}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x3, 0x7, 0xff, 0x10, 0x6}, 0x43, &(0x7f0000000380)={0x5, 0xf, 0x43, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0xa, 0x5}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x1e, 0x3, 0x9, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x80, 0xaf, 0x5}, @generic={0x1c, 0x10, 0xa, "e558e65f46d12bad3f15a67999516cee5b231ba881f0dfa588"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x4, 0x3}]}, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x429}}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x41395527) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r6, 0x0, 0x0, 0x0, r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r3, r5, 0x0, 0x1, &(0x7f0000000080)='\x00', r8}, 0x30) 23:56:30 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0x10) fcntl$setstatus(r1, 0x4, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0x11, r3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r6}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, "9632e3460b72d783615af7"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, "392b87509dac28f13764353451ecb353120b0837110ff1e21eaf3fd54db8"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x101}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xaf}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x48081) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000001280)=""/34, 0x22}], 0x1, 0x0) 23:56:30 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x80000000, &(0x7f00000000c0)) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000180)='maps\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x290100, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000240)={0x0, @multicast2, 0x4e24, 0x3, 'sed\x00', 0x12, 0x17, 0x3}, 0x2c) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_LIST(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x178, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xfffffffffffffffd}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x108ef20f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3beaa0da}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35ec2a1a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b420516}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xe4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x708e8ec3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x24}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x749342e3}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x313d6713}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7682af2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f5cb2fb}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f09c3b1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64aaccbc}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f25fc32}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66806ed0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6259981a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6749f7fb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x59}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xffffffff}]}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/self/net/pfkey\x00', 0x10902, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f0000000600)={@empty, @broadcast}, 0x8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000640)={0x0, @adiantum}) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680)='/dev/snd/timer\x00', 0x400) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r6, 0x80605414, &(0x7f00000006c0)) r7 = socket$inet(0x2, 0x5, 0x8) readv(r7, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/135, 0x87}, {&(0x7f0000000800)=""/179, 0xb3}, {&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f0000000940)=""/107, 0x6b}, {&(0x7f00000009c0)=""/77, 0x4d}], 0x5) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b80)='devlink\x00') sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x38, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000c80)={0x3, 0x1f, 0x4, 0x2b294cfd}, 0x10) 23:56:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8040}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0x8a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000000)) fcntl$getown(r1, 0x9) pipe2(&(0x7f0000000000), 0x800) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, 0x1, 0xff, 0x4, 0x1533, 0xa8ab}, &(0x7f00000000c0)=0x20) close(r2) r4 = open(&(0x7f0000002000)='./bus\x00', 0xc4042, 0x0) sendfile(r2, r4, 0x0, 0x200fc0) 23:56:30 executing program 4: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14, 0x69, 0x4, {0x0, 0x800000}}, 0x14) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x141042, 0x0) unshare(0x2040400) ftruncate(r2, 0x2007ffe) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0x0, r1}) 23:56:30 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x23, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a0, 0x0, @perf_bp={0x0}, 0x4, 0x2000, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYBLOB="0a0042990a3cf367ff0be8050118d1f052b22c0000000000001b0000be47cf77ee22d223d36d7493dcdb049b90353905f83f76b9024e5eed0010b590d90e0cdf677074356adc1fe3737fb90000001a000000000000000000", @ANYBLOB="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"]}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x1, 0x0, 0x0, 0x3}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4) writev(r3, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b002d67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 23:56:30 executing program 4: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0xa5bb6732139bef65, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x1000000e8) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x9, 0x5}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f000033a000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xffff8000) [ ***] A start job is running for dev-ttyS0.device (46s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (47s / 1min 30s) [ *] A start job is running for dev-ttyS0.device (47s / 1min 30s) [ **] A start job is running for dev-ttyS0.device (48s / 1min 30s) [ ***] A start job is running for dev-ttyS0.device (49s / 1min 30s) [ *** ] A start job is running for dev-ttyS0.device (49s / 1min 30s)[ 56.206167][ T2878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2878 comm=syz-executor.3 23:56:30 executing program 4: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141046, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0xa5bb6732139bef65, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x1000000e8) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x9, 0x5}) r2 = open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f000033a000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0xffff8000) 23:56:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = gettid() tkill(r3, 0x1000000000016) ptrace(0x10, r2) socketpair(0xb, 0x802, 0x5, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r5, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x404c010}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008084}, 0x4004010) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x20}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tape_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ptrace$getregs(0x4, r3, 0x20fffffd, 0x0) [ 56.398382][ T2835] syz-executor.5 (2835) used greatest stack depth: 21232 bytes left 23:56:30 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0, 0x0, 0x18}, 0x10) fcntl$setstatus(r1, 0x4, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) io_setup(0x100000000000c333, &(0x7f0000000200)=0x0) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x5, 0x11, r3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890c, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r6}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x70, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, "9632e3460b72d783615af7"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x22, 0x13, "392b87509dac28f13764353451ecb353120b0837110ff1e21eaf3fd54db8"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x101}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xaf}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x48081) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0xffffff7f, 0xff0f, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) preadv(r3, &(0x7f0000001740)=[{&(0x7f0000001280)=""/34, 0x22}], 0x1, 0x0) 23:56:30 executing program 4: socket$inet(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6909}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x3, 'ip6tnl0\x00', {0x7}, 0x1000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffffffff00000000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/1670, 0x686) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r0, 0x0, 0x7ffff000) r4 = socket(0x10, 0x80000, 0x0) ioctl$sock_ifreq(r4, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) dup(0xffffffffffffffff) [ *** ] A start job is running for dev-ttyS0.device (50s / 1min 30s)[ 56.540429][ C1] hrtimer: interrupt took 28440 ns 23:56:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0x4, &(0x7f0000000140)={0x8, 0xfff}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xa4, 0x17, 0x101, 0x70bd2a, 0x0, {0x3}, [@typed={0x4, 0xe}, @nested={0x8a, 0x26, 0x0, 0x1, [@generic="4cd6851de2b5565eb8db12c6a943f10192ff52d9aa2da0d15aed0efb12f10494924007279c82cfd091032ba5611ed37fa829f8745e395c55a627ce2877dbfe58ad7d325d0d4d1075af996ce72a1dfb47ecb246776fc0d93ae0e314afea495da6d031169fed06b74e7e6986fad55d8f1f94fde62ae4c043fed1a34e0d57de06cee5e881917567"]}]}, 0xa4}}, 0x0) [ 56.681149][ T2878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2878 comm=syz-executor.3 23:56:33 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r1, 0x0) r3 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$search(0xa, r2, &(0x7f0000000080)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200), 0xc, &(0x7f0000000440)={&(0x7f0000000280)=@can_newroute={0x44, 0x18, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r7}, @CGW_MOD_SET={0x15, 0x4, {{{0x0, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "3984acbd8628fb19"}, 0x3}}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20044004}, 0x44) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r6, 0x890c, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r10}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000001c0)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="380000000000000029000000390000000004020000000000fe800000000000000000ff020000000000000000000000000001000000000000"], 0x38}}], 0x2, 0x0) 23:56:33 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/72, 0x48}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3}, 0x4}, {{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000000440)=""/43, 0x2b}], 0x2}, 0xff}, {{&(0x7f0000000680)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f0000000700)=""/71, 0x47}, {&(0x7f0000000880)=""/32, 0x20}, {&(0x7f00000008c0)=""/70, 0x46}, {&(0x7f0000000940)=""/204, 0xcc}], 0x5, &(0x7f0000000ac0)=""/217, 0xd9}}, {{&(0x7f0000000bc0)=@hci, 0x80, &(0x7f0000000e80)}, 0x3}], 0x4, 0x10000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0xff) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x6, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80}, 0x0) lseek(r3, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000600)=0xda4, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="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", 0x1b9}], 0x3) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab0700000000000000f90b1a7511bf746bec66ba", 0x4d, 0x11, 0x0, 0x0) 23:56:33 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a60000000a84302910000003900120035000c00060000001900150004000000000000dc1338d54400009b84136ef75afb83de4411000500c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201a960", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf2503000000050005000100000005000300800000002c0001801400020067656e6576653100000000000000000014000200726f736530000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r3 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890c, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r6}) r7 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r7, 0x890c, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c301e2, r10}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000a}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2501000000200001801400020076657468315f746f5f6873720000000008000100", @ANYRES32=r6, @ANYBLOB="140001800800030002000000080001005ba4b28e6c9913d6bcbd9fd6dca53d86aeb9e25f04e5f3a3d0b35ddaa0b1e8552ad63a25898877bb380822889ab3ec9680378e6639a9307c65ad", @ANYRES32=r10, @ANYBLOB], 0x48}}, 0x20000080) 23:56:33 executing program 4: socket$inet(0x10, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6909}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000001c0)={0x3, 'ip6tnl0\x00', {0x7}, 0x1000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netstat\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffffffff00000000) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000fc0)=""/1670, 0x686) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)={0x3, 0x0, [0x0, 0x0, 0x0]}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r3, r0, 0x0, 0x7ffff000) r4 = socket(0x10, 0x80000, 0x0) ioctl$sock_ifreq(r4, 0x89f2, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) dup(0xffffffffffffffff) 23:56:33 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f000000b180)=[{{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f00000003c0)=""/155, 0x9b}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000040)=0x7fff) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000180)={{0x1, 0x0, @descriptor="788e4af6c8fd5de5"}, 0x9a, 0x0, [], "fb4ea97970d648de29c15716c45ffb2120779499448657fc4f9ce994b99d20c08f21937405e8b60a318b4cf39581b276c4a42a80d40054a942c506778fbc91defdb555dea8719ac443794acbb3c181ee7abd2129d9f6ecb33340eee94d24bcf5463ac2bc7511ccd3293bf2844f758763fef4515006817ada42c7f74b0f0e54c615d720591218964f413e90a3a455e3d723a66d8811b2ae550cce"}) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r8, 0xffffffffffffffff, r7, 0x0) keyctl$unlink(0x9, r6, r7) 23:56:33 executing program 2: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000000)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) r3 = memfd_create(&(0x7f0000000300)='/dev/a\xdatsF\xdf\x9f\x81*\x8e\x04\x0e\xad0\xf5?\xaca\xdb\x99,a\xa5Lc0B\xfd\t:v?\xb5\x00\x00\a\x00\x00\x00\x92\a\x05\x00\x00\x00P\xb3\v\xc8\xaa\xfb\x11\xf2\\\xbe\xe1\x01\xfc\x93\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd4\x97)\xb6\x86v\xd8\xd5\xb90\xe4\xa9]\xc4\a\xcd\xd9\xde\x99!s\x89[ w\xbbw!O\xc8f\x02\x8c\x1cq\x97\xda\x00\xefl\xd1\'ER\xa33%pn\xcd\xb0\xf3k\xc6\xf3\xe4\xd1\xa7\xa5\xd6qb\xba\xd0\xa64\x91\xf0(\x97[\xa0\x1c(\x8d\xf8\x86\x1d\x8br\x02$\x11\xa6=~#^s\x9a\xcc\x04Hg\xe9\x04\xadz\x1f\xfe\xef\xf1\xc7\xf0\xd7\x80\xef\x17qc\xeeG\xea\x19\xd5\x9bf\f\x13\x94\x19Q\xc0\xe7 \x88\xfc=\xde7\xc2!\xda\x97|\x96\x91H (<\x1f\\v\x89w\x7f\v!\x9aS\x17-\x87#\x8aG@D\x9d\x92<\xa1\x82\xc47\xfb\xbd\x8c\x0fW\b\x000\x12i\x82\xe1\xefj\t\x91\x9e\t\xe2\xff5u\xff\x17\xad\xf2\xd9\xdf\xebG\x94H\xc2\x8c \x10\t\x01\xbb\xd7\a\f\xc9\x03\x96\x1c\xa0\xfc\xf1H\x8d\x95\xb0Z\xd6*\xff\xca\f\xaaW\x8aB\x10\bOz\xb6\xcc\xc9\xb9\xadQo\x92*\xc1\xb0`~;\x99\xa8{ \x97\x01\x17\x85#\x9b9J\xcc\xb4\xad\xd2!\xb2\xe2\x1e\xa9q\x13^a\xb7\x19\xa5(\x81t\xcb\xa7\xce\xd9m\xd9u\xa1xl\xf4\x8f\x98\xc1E\xea1\xc2\x8ar#\xf2\x95\xfc\xac\x84\x8dG\xa8]\xd9\xb4c\x85\xde\x8e\xdf\xc7\x9cw\x1c\x98{\xd63\xda\xd0\x0f\xf9\x1d5\xe2\x8f\x1bY\x89%\xfcC\x1e%T\x8eV\x9f\\\xd8X\x8f\rx\xc7\xc4\x1bpp\x16\x10\xde1\x16\xd1\r\n\xb6\xfd\x1fW\x8a\x93}\xd7)\"O\x83\xdd\xd8&Z\x94\xcd', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') 23:56:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffc01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0x9, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f00000007c0)={0x3, 0x1, 0x1c, 0x16, 0x0, &(0x7f0000000900)}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x6}, 0x100c0, 0x5, 0xa8, 0x6, 0x1, 0x9, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x1) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000240)={0x7, 0x47, 0x1}, 0x7) write$9p(r0, &(0x7f0000001400)="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", 0x600) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000140)=0x10000) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) getpgid(r4) sendfile(r0, r1, 0x0, 0x1c575) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x100) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73d7a4af54856be7018f342cf55e8fe895be12c490298edf7995309b05d62219bd97cc84a50bcf955476bb7c000000"], 0x4) 23:56:33 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141040, 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x90000, 0x0) pipe(&(0x7f00000003c0)) wait4(0x0, 0x0, 0x4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffdfb, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0xffc, 0x200, 0x40000000000, 0x0, 0x300000000000000, 0x0, 0x100000000000, 0x3}, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x0) 23:56:33 executing program 2: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000000)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) r3 = memfd_create(&(0x7f0000000300)='/dev/a\xdatsF\xdf\x9f\x81*\x8e\x04\x0e\xad0\xf5?\xaca\xdb\x99,a\xa5Lc0B\xfd\t:v?\xb5\x00\x00\a\x00\x00\x00\x92\a\x05\x00\x00\x00P\xb3\v\xc8\xaa\xfb\x11\xf2\\\xbe\xe1\x01\xfc\x93\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd4\x97)\xb6\x86v\xd8\xd5\xb90\xe4\xa9]\xc4\a\xcd\xd9\xde\x99!s\x89[ w\xbbw!O\xc8f\x02\x8c\x1cq\x97\xda\x00\xefl\xd1\'ER\xa33%pn\xcd\xb0\xf3k\xc6\xf3\xe4\xd1\xa7\xa5\xd6qb\xba\xd0\xa64\x91\xf0(\x97[\xa0\x1c(\x8d\xf8\x86\x1d\x8br\x02$\x11\xa6=~#^s\x9a\xcc\x04Hg\xe9\x04\xadz\x1f\xfe\xef\xf1\xc7\xf0\xd7\x80\xef\x17qc\xeeG\xea\x19\xd5\x9bf\f\x13\x94\x19Q\xc0\xe7 \x88\xfc=\xde7\xc2!\xda\x97|\x96\x91H (<\x1f\\v\x89w\x7f\v!\x9aS\x17-\x87#\x8aG@D\x9d\x92<\xa1\x82\xc47\xfb\xbd\x8c\x0fW\b\x000\x12i\x82\xe1\xefj\t\x91\x9e\t\xe2\xff5u\xff\x17\xad\xf2\xd9\xdf\xebG\x94H\xc2\x8c \x10\t\x01\xbb\xd7\a\f\xc9\x03\x96\x1c\xa0\xfc\xf1H\x8d\x95\xb0Z\xd6*\xff\xca\f\xaaW\x8aB\x10\bOz\xb6\xcc\xc9\xb9\xadQo\x92*\xc1\xb0`~;\x99\xa8{ \x97\x01\x17\x85#\x9b9J\xcc\xb4\xad\xd2!\xb2\xe2\x1e\xa9q\x13^a\xb7\x19\xa5(\x81t\xcb\xa7\xce\xd9m\xd9u\xa1xl\xf4\x8f\x98\xc1E\xea1\xc2\x8ar#\xf2\x95\xfc\xac\x84\x8dG\xa8]\xd9\xb4c\x85\xde\x8e\xdf\xc7\x9cw\x1c\x98{\xd63\xda\xd0\x0f\xf9\x1d5\xe2\x8f\x1bY\x89%\xfcC\x1e%T\x8eV\x9f\\\xd8X\x8f\rx\xc7\xc4\x1bpp\x16\x10\xde1\x16\xd1\r\n\xb6\xfd\x1fW\x8a\x93}\xd7)\"O\x83\xdd\xd8&Z\x94\xcd', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') 23:56:33 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000f00)=[{{&(0x7f0000000300)=@nl=@proc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)=""/72, 0x48}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x3}, 0x4}, {{&(0x7f0000000580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000000440)=""/43, 0x2b}], 0x2}, 0xff}, {{&(0x7f0000000680)=@nfc, 0x80, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/182, 0xb6}, {&(0x7f0000000700)=""/71, 0x47}, {&(0x7f0000000880)=""/32, 0x20}, {&(0x7f00000008c0)=""/70, 0x46}, {&(0x7f0000000940)=""/204, 0xcc}], 0x5, &(0x7f0000000ac0)=""/217, 0xd9}}, {{&(0x7f0000000bc0)=@hci, 0x80, &(0x7f0000000e80)}, 0x3}], 0x4, 0x10000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0xff) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003240)='nl80211\x00') sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x6, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x80}, 0x0) lseek(r3, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000400)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, &(0x7f0000000600)=0xda4, 0x4) writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f0000001340)="f15c93cb35c215fe339d1e9060c5b23e77cb58a87329a00288504db389cc6e395885fa906ac30eeae99fa388c31b5717e641e1586a90961b5f99b26c939d944f6cb1cf6817b7e51402a8459f9db642e97d3c05db56250a665d3ff188eb47e5b036d508aa5a5796fb8806b6a41487e0bfc3df087c18269bd7d2f477104c5d5db497ceaf3e1b11a5d63a2b7035dc69fa701f3b46fe701880800a7d38dccd4b3e8014aa15c96968359533ce2c5ffdd5f0d3297018bd7c025150940cdead92eb1e6bc6ba45eecf067b32425b6000b2f376ef9172426ae7fa97e5a84ef4dc540bbf5dd458ffcb75724135bd32fa04db6d6a75aedda7ab6e8501fc94e209dc3b2525ae24c954255d3247ca9c1b9525ce68179a52a87333aa2b0a8c1baa6ba6160c6d2018e67bac5402d0d89c5f798b8d1a87b0dc3306f546c61724530d9f4b6f0ee68677c7b261de5afa02d708a8ec979791de8f4831cc354ba453bc253e2435207f25494a594d4e5be39902358d362cb318ad965b7e7480a5ca5b6fe74e101c400c77392ee4419ad788f494230487811046f21f0f9665dfbaa9e94ed305a02e3fa47039e67dde19f89c8f1741aad752cdfe458ddf54e8fc10ff79b5", 0x1b9}], 0x3) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600453f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab0700000000000000f90b1a7511bf746bec66ba", 0x4d, 0x11, 0x0, 0x0) 23:56:33 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c8010000100013070000000000000000fe880007000008000000000004000001ac1e00010033b20ab401d7782000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_CT_GET_STATS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r4 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r4, 0x5416, 0x0) ioctl$TCSETXW(r4, 0x5435, &(0x7f0000000140)={0x0, 0x9, [0x5, 0x0, 0x1f, 0x2, 0x8], 0xcfdb}) 23:56:33 executing program 0: r0 = memfd_create(&(0x7f0000000080)='#em3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90)\x1c\xae\xe4\x92b\xd6y:\x06\x16\xac\xc1gQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gcg,\"\x1dD4\x17\xc0\xe6\b\x00\x00\x00\x00\x00\x00\x00v\xc1\f\xc7D:v(\xcaL\x0e\x94\xaf\xae\x89\x82\xed\xe3\x80\x9fC\xbc,Oob/~\xc2\xdd\x84\x1cVJ\xf0\xear E\xf1\xdem\x9c\xfa\xb4\x17\xa8z\x19\xebl\x17\x84\xd2\x86\xbf\x89.\xd7q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19pG\x99R\x9c\x93\xd1\xc4 )\xbf\x8c\x19\r\x81j\x88d\x9d5\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe68\x16\x02\xa8\x83%U\x8c\xf7\xb3\xbf\x8e9#\xfcJz\xe6\x1b\xd95)\x17\xef\xfb4\xff\xd2\t@\xda\x1d|\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\x93A\xf9\x02S;C\x99\a.$K\xe8]\" \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcf\xfa\x7f\an0\xabB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-~\xaa\x80\xec\xc7\xf1\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x85\xda\xa3\xe1\xc3\x84\x81\xc9+\xad\x81\x86/sa\xe6\xf1\v\xb90xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3}}, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0xa) close(r4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7fb}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000008012005fffff0000550214f9f407", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x387, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="e9e116196a16e5645aee32e78a7c5d98e4adeb47ec8d7d4e2b1deffc358500c83f42a8a801e3660e37f5b02647ddc405085c7e42029d", 0x36}, {&(0x7f0000000100)="18568d25c05b88f69423cf8a4921cddd6ec8f60067266122a20aad7d109d9a555ca6248714746159901c62c9d70ce76dc3fdede35480d65f5acd62", 0x3b}, {&(0x7f0000000240)="a402e722c7171236015ffac79e4f66482461fad6b06681444565c4f2e2b39694f348f96437e6d32342a1c0a6af9946823d5c2342b9020a5d3560eee124c1bd3f4b236eeca39878112bb16ed1657766772b396237d6d8ef172504115540e94cc420ce5e48394c934e092cdb2e75fa428c51314d615d8d45db0e639e10d075592767791722590a2d980775822726a0e2641bd47cab9843536b4dc81c37f29cfb38266026a8b2ac4fc90c7c6d8eba7ea9241dd45eea907d826ad576", 0xba}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000440)="3617dc3a7557251c666d2ec366e4b8347dc52fa20ed1537ff3c6b08c5b69c46cb07a3ed668d1e852b55b16f34ddf7b3a46ed923acf43ff455ba9450fdb167d9aeabeafdfc13b001ba9fbc8663fceb435a45314499541d77228f76ad86bddc67526edb68a186049eaf0cca5d6f96b690aa1722dfc838782dddccc5dfb5f2881bb06166c9898625ad7af0a67c50ce44927ca6cc17ffb7d1d649751fd867ad5a754b769e1cf6c238f33d383ef5e9f2d2ae5a1e1e822f3883e4e205bf7b7af76263167082e6b0a522613", 0xc8}, {&(0x7f0000000140)="9c41e0fa7513c206448383efc57cd15411fc8795241d3ecda6a2ed7f", 0x1c}, {&(0x7f00000001c0)="a5ebfdc168c740ea", 0x8}, {&(0x7f0000000300)="a276687d87fa6db9c47650df3c899116ef72370d3d3f1c2728565fecb1d1793b650123b9436d7368fce0e5b7fdebd4814b83a4b5f57a979f39304326f7777fca3ac373586bc7882f2ae9a4268434a9a3cc85658fed2d04ba93cabbcf8724817c987ce4487085c8fb5f92de410a90479f", 0x70}, {&(0x7f00000003c0)="988a4aadf20db82f999036ec6aa5ce917fc33d89c3c397df0328b9dc3ab78f1d2a9ec7579e7aea29c400af1dd00b6146a11772a0ebd837054a21", 0x3a}], 0x9, 0x4) 23:56:33 executing program 0: r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000000)) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x281, 0x0) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0x3, 0xffff, 0x400}) sendfile(r0, r0, &(0x7f0000000200), 0x87) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x809863, 0x0) [*** ] A start job is running for dev-ttyS0.device (50s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (51s / 1min 30s) [* ] A start job is running for dev-ttyS0.device (51s / 1min 30s) [** ] A start job is running for dev-ttyS0.device (52s / 1min 30s) [*** ] A start job is running for dev-ttyS0.device (52s / 1min 30s)[ 59.481309][ T22] audit: type=1400 audit(1593302193.781:9): avc: denied { module_load } for pid=2990 comm="syz-executor.0" path=2F6D656D66643A23656D33232F202864656C6574656429 dev="tmpfs" ino=14426 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 59.501969][ T2999] netlink: 871 bytes leftover after parsing attributes in process `syz-executor.4'. 23:56:33 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000c622d6fae6a095c40a06000000000000000000000001090261000100000000092100000001470000090581030100a819e33bd40000000000007be62ab37594a9efcc7f92c1731f169cb5d2ab2717308e11331cde17f45ecf39de3c8ba560a5c7bd1c97d2c65ceb64f5bf990c435a362ec2"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000204d041cc304000000000109022440010000a0000904000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r2 = syz_usb_connect$uac1(0x2, 0xd2, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x20, 0xf0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x3}, [@mixer_unit={0xb, 0x24, 0x4, 0x4, 0xf5, "bc7dbc9a3d04"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x300, 0x6, 0x3, 0x81}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x3, 0x6, [0xa, 0x4, 0x2, 0x0, 0x4, 0x9], 0x4}, @mixer_unit={0x5, 0x24, 0x4, 0x5, 0x80}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x8, 0x2, "d108ac"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x81, 0x4, 0x1, 0x7f, "c04549", 'R^\\'}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x7, 0x1f, "8453f54f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x3, 0x0, 0x1, "", "a3af41"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3a, 0x1f, 0x20, {0x7, 0x25, 0x1, 0x81, 0x8, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x9, 0x81, {0x7, 0x25, 0x1, 0x83, 0xf6, 0x3}}}}}}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x4, 0x28, 0x81, 0x8, 0x1f}, 0xbf, &(0x7f0000000200)={0x5, 0xf, 0xbf, 0x1, [@generic={0xba, 0x10, 0xb, "b3a1d49adc362e6ea1bf2e4cdaee8544841930e6b36d1b892f9ea8ac2a467093c8d97e10bab54ec4b9ab74c6fa789cd72cf76c02bc7b484e45ebd41e9f580f0645d5842ea8be19d84adeb4c1c58c0c349986c0a2d21a0a073963ac6b26de1384978f76b180fb1319593edaf0eed33da92bbddf6263a740f7681877d25bf08e7028dee65b07959647ab2f34035d6a285b4cc45b4fb738bac0751ca4094066bccc2bd6506dd0d13599e11029e87b3025764e93540c4dc8af"}]}, 0x1, [{0x91, &(0x7f00000002c0)=@string={0x91, 0x3, "005d1dd6243079c2d98ee96d64b4e96727356568993f0541774217a4e0f430a301c4f3c9f527261b4df079d5d2490e7c709b048ed3f2fbff045f7acabd38e190c5f859b32306c4820fee4a9c87190f683dff3af3515f9716eadcec096822a14234b70453183379d1d904988f3631b9e588d99f3735574af9f065f5b0ac58abea6afb21ee133f70fa8c9d4fea3c3a00"}}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) syz_open_pts(r3, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000c00)={0x2, 0x3, 0x5, 0x7, 0x16, "f836dccd649b664bfbf936ca5abe813a79f791"}) syz_usb_control_io(r2, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x40, 0x21, 0x9e, {0x9e, 0xb, "4f6b716e22c5e7ceddc34106e90aba8c05a7b0210ea8ed1e1b16743d754240d37d91b57311fc70fc59d643cad50d8a1b36d8acbfc539b964f94a48f7611621c5831c5b7b775fbc099f7244c812f40af5c46d0751b1ebb9176d56dbff38a039c06623e3a3b3a215166d084848ef52383c3e3018972d90b9d99b782a016b5ff0605a1f35c16bbc4896675c522ab836cfd37b696b9b03aacb208f2cf020"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x437}}, &(0x7f00000004c0)={0x0, 0xf, 0x73, {0x5, 0xf, 0x73, 0x4, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x5, 0xfc, 0xcb6}, @generic={0x5e, 0x10, 0x30a21edd8ed75f7c, "c0a8c3d3ce1bd23ebe45e094fd2126bb6ced53b1593ce55e4ee4dfa000a062763db9efc8193ecf7806e2aa72382f8b3b5ec34f94fc84c309e14bcab61e00fdb03ed384a155d63202570d62eab314502b1fce812f32c95d3be3d5c2"}]}}, &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x10, 0x5, 0x3f, "31ee6ef8", "28fdb926"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x18, 0x8, 0x1, 0x1, 0x200, 0xfff8}}}, &(0x7f0000000b40)={0x84, &(0x7f0000000600)={0x40, 0x8, 0xec, "4a43c7ad660efff23525502147a85f04c8c918bca6e4901022f40256dc79f633f89d8ca0a640bc09d37b00b9713c1a09459b47d92361c3c9124779f165ccdaeb9155a509a254c0ad4378743028e8b804c8a8e9e817ebe1a8897737825a0a510ef3a76d8e899deaf9e968c3b894172aa37a91c2c0fbc146ad584045d919a1188190665acff1dcf68d9c4dbec3a36ac482a16d8b765215ae2c126e9ff5ebb3ec576035b5b592ecb81b26af379be64393a4999c2acb5704d9792bb9c33193811b94eedbb5fd99bec8927059140835dafc18b0fc7647e1dd55bec8e1a1ddc5154f0ce420f2996b8bc5e00517578a"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x0, 0x80, [0xf00]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "0501"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000940)={0x40, 0x13, 0x6, @local}, &(0x7f0000000980)={0x40, 0x17, 0x6, @local}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "93d5"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0x5}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001c80)={0x84, 0x0, 0x0, 0x0, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x28eb37126f3845db}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:56:33 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000000)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x15, 0x0, &(0x7f0000000000)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ptrace$cont(0x9, r3, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r5 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000200030a1f0000080c1008000800040012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) 23:56:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40805}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001700010100000000000000000400000004001040cf3ed71de2a0ab94b8c9efea59000000000000000095a041b602b285adc49bacb1fb9a6da18a2d6f3d2c3ed3203724b17c06fee342077dd86ece94c2b4d25183ba26d6ce435d9ad0f4d8a360d4e744d60c1083ea1de605a0d7640fe74aaabf53e872d5ffca469ff0e00bda60d4a901fc62e56f5f3fb834163fbf24ff7f000000000000000000000083f3cfab05e34d75f9a78c6c064f49c81e8f6b33c480a4"], 0x18}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x600200, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x80000000, 0x0, 0x4}, &(0x7f00000008c0)=[{}, {}, {}, {}]) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x100002, r3}) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="05029b705fe78ab307ec0a9cafe019811da413e1b941c7a2d1df191953fe798baac66eddc4d0df0360d8a0c6e0455f6ead9de047776290954a9d110622fd6ed693c5346f89708232dc360928f2b62475ea4c", @ANYRES16, @ANYBLOB="7867ed86dbdb76dfc76ec6486592562604abe7ac933dc8cc937103c4960715ad8e"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r5 = io_uring_setup(0x869, &(0x7f0000000000)) dup2(r5, r0) 23:56:33 executing program 2: clone(0x2000000024000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000000)) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080), 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0xa, 0x4, 0x7fff, 0x6e, 0x0, 0xffffffffffffffff, 0x0, [0x31, 0x0, 0x0, 0x400100], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) r3 = memfd_create(&(0x7f0000000300)='/dev/a\xdatsF\xdf\x9f\x81*\x8e\x04\x0e\xad0\xf5?\xaca\xdb\x99,a\xa5Lc0B\xfd\t:v?\xb5\x00\x00\a\x00\x00\x00\x92\a\x05\x00\x00\x00P\xb3\v\xc8\xaa\xfb\x11\xf2\\\xbe\xe1\x01\xfc\x93\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd4\x97)\xb6\x86v\xd8\xd5\xb90\xe4\xa9]\xc4\a\xcd\xd9\xde\x99!s\x89[ w\xbbw!O\xc8f\x02\x8c\x1cq\x97\xda\x00\xefl\xd1\'ER\xa33%pn\xcd\xb0\xf3k\xc6\xf3\xe4\xd1\xa7\xa5\xd6qb\xba\xd0\xa64\x91\xf0(\x97[\xa0\x1c(\x8d\xf8\x86\x1d\x8br\x02$\x11\xa6=~#^s\x9a\xcc\x04Hg\xe9\x04\xadz\x1f\xfe\xef\xf1\xc7\xf0\xd7\x80\xef\x17qc\xeeG\xea\x19\xd5\x9bf\f\x13\x94\x19Q\xc0\xe7 \x88\xfc=\xde7\xc2!\xda\x97|\x96\x91H (<\x1f\\v\x89w\x7f\v!\x9aS\x17-\x87#\x8aG@D\x9d\x92<\xa1\x82\xc47\xfb\xbd\x8c\x0fW\b\x000\x12i\x82\xe1\xefj\t\x91\x9e\t\xe2\xff5u\xff\x17\xad\xf2\xd9\xdf\xebG\x94H\xc2\x8c \x10\t\x01\xbb\xd7\a\f\xc9\x03\x96\x1c\xa0\xfc\xf1H\x8d\x95\xb0Z\xd6*\xff\xca\f\xaaW\x8aB\x10\bOz\xb6\xcc\xc9\xb9\xadQo\x92*\xc1\xb0`~;\x99\xa8{ \x97\x01\x17\x85#\x9b9J\xcc\xb4\xad\xd2!\xb2\xe2\x1e\xa9q\x13^a\xb7\x19\xa5(\x81t\xcb\xa7\xce\xd9m\xd9u\xa1xl\xf4\x8f\x98\xc1E\xea1\xc2\x8ar#\xf2\x95\xfc\xac\x84\x8dG\xa8]\xd9\xb4c\x85\xde\x8e\xdf\xc7\x9cw\x1c\x98{\xd63\xda\xd0\x0f\xf9\x1d5\xe2\x8f\x1bY\x89%\xfcC\x1e%T\x8eV\x9f\\\xd8X\x8f\rx\xc7\xc4\x1bpp\x16\x10\xde1\x16\xd1\r\n\xb6\xfd\x1fW\x8a\x93}\xd7)\"O\x83\xdd\xd8&Z\x94\xcd', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xd0000000, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter\x00') prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/udplite6\x00') [ 59.546729][ T2999] netlink: 871 bytes leftover after parsing attributes in process `syz-executor.4'. 23:56:33 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x15, 0x0, &(0x7f0000000000)) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x15, 0x0, &(0x7f0000000000)) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) ptrace$cont(0x9, r3, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r5 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000200030a1f0000080c1008000800040012000000140000001a00ffffba16a0aa1c09000000000000", 0x38}], 0x1}, 0x0) [ *** ] A start job is running for dev-ttyS0.device (53s / 1min 30s)[ 59.668875][ T3025] device lo entered promiscuous mode [ 59.689583][ T3025] Y­4`Ò˜: renamed from lo 23:56:34 executing program 1: openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000200)={0x38, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x4000000000003bb, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141040, 0x0) clone(0x200183, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x90000, 0x0) pipe(&(0x7f00000003c0)) wait4(0x0, 0x0, 0x4, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0xfffffffffffffdfb, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0xffc, 0x200, 0x40000000000, 0x0, 0x300000000000000, 0x0, 0x100000000000, 0x3}, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x0) 23:56:34 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file1/file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') setxattr$system_posix_acl(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x5}}, 0x24, 0x0) 23:56:34 executing program 5: socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) pselect6(0x40, &(0x7f0000000140)={0x5ad, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x80000, 0x0, 0x5}, 0x0, 0x0, 0x0, 0x0) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x1, 0x3, 0x6}, 0x2}}, 0x18) 23:56:34 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000240)='./bus\x00', 0xedc506eefb2d12b1, 0x1) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="316c6f7765726469723d2e3a66696c65307ad7084f53b523583e8058622d7353c27a885116d543683374b4b44879e564a1bac08f7d1adeac01125e5a325ff6e1c86087a7dbe79cf86623b3be234cff47bce1a2df4852a56d70b3ae06b5328cf5b4ce8ba79d9264b68cc3be8fa5b9dd6ef40d8336616b18afd9446b9dd24ef996265f94d7aee545bc816f173b0ef08bc13cb81169127c77e909a652b763c64b4e7801131a1282016bab33f23a067dcd930541514aeb754ac315da0d836bba2e27051dc1d6a65548b9a2afaa7dff2f69605da0bc9b27fb8438fbb597cd252176ba2565"]) utimes(&(0x7f0000000140)='./bus\x00', &(0x7f0000000280)={{0x0, 0x2710}, {0x77359400}}) chdir(&(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) finit_module(r0, &(0x7f00000002c0)=']\'*]+\x00', 0x1) [ 59.974392][ T3049] overlayfs: workdir and upperdir must reside under the same mount [ 59.981446][ T3050] overlayfs: unrecognized mount option "1lowerdir=.:file0z×OSµ#X>€Xb-sSÂzˆQÕCh3t´´Hyåd¡ºÀ}Þ¬^Z2_öáÈ`‡§Ûçœøf#³¾#LÿG¼á¢ßHR¥mp³®µ2Œõ´Î‹§’d¶ŒÃ¾¥¹Ýnô ƒ6ak¯ÙDkÒNù–&_”×®åE¼o;ð‹Á<¸i|wé ¦R·cÆKNx‚k«3ò:}Í“AQJëuJÃÚ ƒkº.'ÁÖ¦UH¹¢¯ª}ÿ/i`] ¼›'û„8ûµ—Í%!vº%e" or missing value [ 59.984325][ T3049] overlayfs: workdir and upperdir must reside under the same mount 23:56:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010003904000000000000000200000000", @ANYRES32=r4, @ANYBLOB="0300000000000000030008000000000073697c8714000280080001009b759a236777bd497ca89abc3a526437abb839f49e1d0e12eaf0728c4f1dff608b1a8505e7977f9896cd2b79dddca26782e7ab6305dfc1d5027622d547253d97b74de9ac834b398cc8808fd9bae3fa00b3188015ef6f0d90784093194362e48180f8b43a45688db455f3842ea388eefb58b6b299e234fbaea659f94c7be0cd930e08c42e39bb3c6a28464d4788d4ef4f10ddf00742cd8db48f772124388e85ffdd2cc2b6861a56978f000000000000000000", @ANYRES32=r3], 0x48}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev, 0x0, r3}) 23:56:34 executing program 5: r0 = creat(&(0x7f0000000280)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfd14) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0xc, 0x1f16, 0x0, 0x3, 0x0, r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc, 0x0, 0x1}]) r3 = open(&(0x7f0000000100)='./bus\x00', 0x103002, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4302011, r3, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000002c0)={0x23, 0x3, 0x0, {0x0, 0x2, 0x0, '&:'}}, 0x23) socket$inet6(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x15, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @reserved="97630c503c782709eb25ed477dfdc3c46306c13dcfedb2d74abd622bf790d9cf"}}) [ 60.013826][ T3050] overlayfs: unrecognized mount option "1lowerdir=.:file0z×OSµ#X>€Xb-sSÂzˆQÕCh3t´´Hyåd¡ºÀ}Þ¬^Z2_öáÈ`‡§Ûçœøf#³¾#LÿG¼á¢ßHR¥mp³®µ2Œõ´Î‹§’d¶ŒÃ¾¥¹Ýnô ƒ6ak¯ÙDkÒNù–&_”×®åE¼o;ð‹Á<¸i|wé ¦R·cÆKNx‚k«3ò:}Í“AQJëuJÃÚ ƒkº.'ÁÖ¦UH¹¢¯ª}ÿ/i`] ¼›'û„8ûµ—Í%!vº%e" or missing value [ *** ] A start job is running for dev-ttyS0.device (53s / 1min 30s)[ 60.058900][ T3066] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 23:56:34 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000000010902240001000000001f000000490300000009200020000122dc01090581"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x10000002, 0x0, 0xb, 0x0, 0x0, 0x4000020}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{&(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="ee2b915ae12f4243a3926d0098f7b8fd6e6103dbe9c6983f98c56ef61b3d43f84fa71cb6ed98262574de7733db7d18a8250c4dd411b57ce0d03d7da528aaa3a786f2407cc9e6507ae65445faeb449800cd62f1b03ec7860dec57e8ce2d0b8790853cf9b0caddf5188e4a997c01ca92a229612ae3e0da60ec9ae8d44e9d3d513bad61fe94fd5a74dd6871cfeafcb76e86b4b6d296b2d409796b812883dab35ab764ffa07efc1ef24446d0184eb33deecf3ec6700593fc6682e845fb56903214dc8cee7fdd31698be3746b561200000000000000000000000000000097f97feab59c636ee25dddeba1", @ANYRES16=r2, @ANYBLOB="00042abd7000fcdbdf250200000008000500ffffffff08000200000010000c0003000400000000000000060006000000000008000900010000000800080000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340)="a1636b6393f87e34c41411619663788869596bfb6d37320055b6db1726bc18c460544b4f189f5718fb82b008231152f903e29a5a21432aac0ae534ffdecc7aaa237e5656c020e8eb94d3cc08c35f96b5fdaaf55f3351d506818c92c598a285a343d974bb2c5c6679ddf9496021c594908e0dff0ff0cf75d692a62b8c1740d4f677f426946b653e3cc145c657b2adb0cbdc15e2479c65672f05475e864e0f0cd4150cfd37aedd11c9388a6ded865e6045c98e40e46f6bfa952ecf154239e4f9ca88fdb7f00ca3edfc4d54d9f635054722a2fb147b3dcc734300000000cfdf3e30e0", 0xe1) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x60, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x36a) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00726f75e724d77a472618b22c48393db959f8c37d8d398b1e7383546f0678516ef049dc3849996970a274b645d1d8e9a732b79cf3a8608ceb969de60d76ac45f8379e03e5bc7a4a6fd6ddeea12125a26f199878b660072a7b1ade1d71d15486e078947b6c0630b496132e202d39f404eaf6f880c87c36cd5d5dda898b5e1f6697cae93a19743862af7a8fd207b341f6cdaed7d37e8ebd9b7b0232cf93179988702dc88f13fdeefb5fa32900b2e4dd", @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) [ 60.105595][ T3078] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 60.460923][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ ***] A start job is running for dev-ttyS0.device (54s / 1min 30s)[ 60.740947][ T12] usb 4-1: device descriptor read/64, error 18 [ 60.990677][ T3091] cgroup1: Unknown subsys name 'perf_event' [ 60.996924][ T3091] cgroup1: Unknown subsys name 'net_cls' [ 61.131032][ T12] usb 4-1: device descriptor read/64, error 18 [ **] A start job is running for dev-ttyS0.device (54s / 1min 30s)[ 61.401060][ T12] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ *] A start job is running for dev-ttyS0.device (55s / 1min 30s)[ 61.671110][ T12] usb 4-1: device descriptor read/64, error 18 [ 62.061054][ T12] usb 4-1: device descriptor read/64, error 18 [ 62.071532][ T72] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ **] A start job is running for dev-ttyS0.device (55s / 1min 30s)[ 62.181158][ T12] usb usb4-port1: attempt power cycle [ 62.341098][ T72] usb 1-1: device descriptor read/64, error 18 [ ***] A start job is running for dev-ttyS0.device (56s / 1min 30s)[ 62.731115][ T72] usb 1-1: device descriptor read/64, error 18 [ 62.891119][ T12] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 62.991221][ T12] usb 4-1: Invalid ep0 maxpacket: 0 [ 63.001602][ T72] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ *** ] A st[ 63.141142][ T12] usb 4-1: new high-speed USB device number 5 using dummy_hcd art job is running for dev-ttyS0.device (56s / 1min 30s)[ 63.281158][ T72] usb 1-1: device descriptor read/64, error 18 [ 63.621199][ T12] usb 4-1: device not accepting address 5, error -71 [ 63.628074][ T12] usb usb4-port1: unable to enumerate USB device [ *** ] A start job is running for dev-ttyS0.device (57s / 1min 30s)[ 63.671416][ T72] usb 1-1: device descriptor read/64, error 18 [ 63.791273][ T72] usb usb1-port1: attempt power cycle [*** ] A start job is running for dev-ttyS0.device (57s / 1min 30s)[ 64.501269][ T72] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.601323][ T72] usb 1-1: Invalid ep0 maxpacket: 214 23:56:39 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) splice(r3, &(0x7f0000000000), r2, 0x0, 0x7, 0x0) 23:56:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x7}]}]}]}, 0x34}}, 0x0) 23:56:39 executing program 4: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40805}, 0x0, 0xc, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="180000001700010100000000000000000400000004001040cf3ed71de2a0ab94b8c9efea59000000000000000095a041b602b285adc49bacb1fb9a6da18a2d6f3d2c3ed3203724b17c06fee342077dd86ece94c2b4d25183ba26d6ce435d9ad0f4d8a360d4e744d60c1083ea1de605a0d7640fe74aaabf53e872d5ffca469ff0e00bda60d4a901fc62e56f5f3fb834163fbf24ff7f000000000000000000000083f3cfab05e34d75f9a78c6c064f49c81e8f6b33c480a4"], 0x18}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x600200, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000140)={0x80000000, 0x0, 0x4}, &(0x7f00000008c0)=[{}, {}, {}, {}]) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x100002, r3}) symlinkat(&(0x7f0000000080)='./file0\x00', r3, &(0x7f00000000c0)='./file0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="05029b705fe78ab307ec0a9cafe019811da413e1b941c7a2d1df191953fe798baac66eddc4d0df0360d8a0c6e0455f6ead9de047776290954a9d110622fd6ed693c5346f89708232dc360928f2b62475ea4c", @ANYRES16, @ANYBLOB="7867ed86dbdb76dfc76ec6486592562604abe7ac933dc8cc937103c4960715ad8e"], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000001440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) r5 = io_uring_setup(0x869, &(0x7f0000000000)) dup2(r5, r0) 23:56:39 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d000005"], 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair(0xb, 0x802, 0x5, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x404c010}, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x77, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0xff, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "0133"}, {0x5, 0x24, 0x0, 0x211}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x2, 0x5, 0x2}, {0x6, 0x24, 0x1a, 0x6, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x1f, 0x43, 0x0, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1f, 0x20, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xba}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x34, 0x4, 0x80}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x8, 0x4, 0x80, 0x10, 0x7}, 0x82, &(0x7f0000000400)={0x5, 0xf, 0x82, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x80, 0x8, 0x9}, @generic={0x51, 0x10, 0xa, "65005ea131e01b18048ce1a23fd57898975cadf4905329d8683a6a3817285e623805800cf7afadf4dc64dd656ca4109cc44bee19ab66f73f77353143ae39519becebc2dc883cc03346185ed1b5ed"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x0, 0x6, 0x7, 0x38}, @wireless={0xb, 0x10, 0x1, 0x2, 0x80, 0x1, 0x6, 0x20, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x2, 0xee0f, 0x100}]}, 0x2, [{0xca, &(0x7f00000004c0)=@string={0xca, 0x3, "1787108e3694339809277f02104475f7dc887f155310181769974c792a8876c276bf10489dccbf1c0d475157e28746078a7bdd69a2e11dc747582b0f5308e4b93ed758773239709d1c063df3aa117887a7c900b8be5a84a672c02ec9c79f0cb66d2e839840523d93497963ce53ac5e1adb80449ecf501a34c0cf7e6b9a6d7502e5f67890d34b04bddb9e8cfd6571e67bec479f117ddbc3af80e3d910da36c4745a0d6aefd11616655eca740b4c4e90f6f031727b95f20f84413ddd77091b9f559de9cc4cbc641154"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40c}}]}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r3, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008084}, 0x4000010) socketpair(0xb, 0x802, 0x5, &(0x7f00000001c0)={0xffffffffffffffff}) r5 = add_key$user(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={'syz', 0x1}, &(0x7f00000006c0)="6c5b449fc5e6b5ea4c9ff88f38b931db2ee040cfe337b23b17904e05fce0cb609dbc1d02604b3ce914de26ddf61e73ce97368a911abef1f0f24c5da5250d2a45c7c95ba3eb7a4b36aec9dbea806bdd3c730836aee217af5055c97d8ea3", 0x5d, 0xffffffffffffffff) keyctl$assume_authority(0x10, r5) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16=r6, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x404c010}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:usr_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008084}, 0x4004010) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4041) 23:56:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000140)={r2, 0x1, 0x6, @random="396376c7b0c3"}, 0x10) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000f303060000000000000000000000000a140000005304010000000000000000000000000aee4e7af50e45f4710a75fa3ec36fd1850b8ba4eac1515f92e9e5b08a2b0e9e5e768f06cf7ecd930002113ae7c1daf433d83be9f1cc25b601e303afd01bb414966eb31b5aa6c8aa9c63fd70cdfedc1d5c6071a24e56f2172ea33b003d1bc2e70736ba94d8c05c410c7459cbae1d07fbf9a5762121260d001e2be3350eb862c59f04"], 0x28}}, 0x0) 23:56:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='vxfs\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='security.evm\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="03010800000001004cd621002211d0d9c30c4e6aa9977f448b09f4bc15601742b41628c390f7cb0c633973502531a981face1011b067132348ffcddb7b2f43f1ffa39626336ffb5626fa28bef2622d1b9a71ce3898ac7678b330a5"], 0x55, 0x2) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x80000, 0x0) accept4$tipc(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000340)=0x10, 0x800) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000380)='/dev/full\x00', 0x82, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000040)=0x3ff) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x1d9e42, 0x0) dup3(r4, r3, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x8, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}]) io_destroy(r5) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000440)='./file0/../file0\x00') mknod(&(0x7f00000000c0)='./file0\x00', 0xd001, 0x1) [** ] A start job is running for dev-ttyS0.device (58s / 1min 30s)[ 64.761290][ T72] usb 1-1: new high-speed USB device number 5 using dummy_hcd 23:56:39 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6b, 0x1e, 0xb, 0x0, 0x5c6, 0x9077, 0x21ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x0, 0x0, 0x85, 0xd1, 0xf7, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x4}]}}]}}]}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x101141) 23:56:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@icmp={{0x8, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @remote}, @timestamp}}}, 0x100c) [ 64.829973][ T22] audit: type=1107 audit(1593302199.120:10): pid=3514 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='' 23:56:39 executing program 5: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x1000000, &(0x7f00000002c0)='e'}) [ 64.881393][ T72] usb 1-1: device descriptor read/8, error -71 23:56:39 executing program 3: r0 = syz_usb_connect_ath9k(0x3, 0x92, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc0c, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"]) syz_open_dev$hidraw(0x0, 0x0, 0x180041) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x2) write$hidraw(r1, &(0x7f0000001200)='\x00', 0x128e84bc) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = syz_open_dev$hidraw(0x0, 0x0, 0x0) r3 = syz_open_dev$hidraw(0x0, 0x0, 0x0) read$hidraw(r3, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, 0x0) read$hidraw(r2, &(0x7f0000003200)=""/4096, 0xffffffad) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x660c, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) 23:56:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20600) shutdown(r0, 0x2000000) 23:56:39 executing program 5: syz_open_procfs(0x0, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = open(&(0x7f0000000100)='./bus\x00', 0x11250c2, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) [ 64.945690][ T3545] binder: 3544:3545 ioctl c0306201 20000100 returned -14 [ 64.967531][ T3551] binder: 3544:3551 ioctl c0306201 20000100 returned -14 23:56:39 executing program 0: r0 = socket$inet(0x2, 0x3, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x1) 23:56:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x2f, &(0x7f0000000040), &(0x7f0000cab000)=0xc) 23:56:39 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x0) [ 65.091316][ T72] usb 1-1: device descriptor read/8, error -71 [ 65.097544][ T90] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 65.131323][ T12] usb 2-1: new low-speed USB device number 2 using dummy_hcd [* ] A start job is running for dev-ttyS0.device (58s / 1min 30s)[ 65.221415][ T72] usb usb1-port1: unable to enumerate USB device [ 65.231300][ T113] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 65.471372][ T90] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 65.481501][ T90] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 65.490948][ T90] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 65.511432][ T12] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 65.521785][ T12] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.533598][ T12] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.543865][ T12] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 65.553269][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.601752][ T12] hub 2-1:118.0: bad descriptor, ignoring hub [ 65.607909][ T12] hub: probe of 2-1:118.0 failed with error -5 [ 65.617167][ T12] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [** ] A start job is running for dev-ttyS0.device (59s / 1min 30s)[ 65.691439][ T90] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.700517][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.708542][ T90] usb 3-1: Product: syz [ 65.712733][ T90] usb 3-1: Manufacturer: syz [ 65.717300][ T90] usb 3-1: SerialNumber: syz [ 65.761988][ T90] cdc_ncm 3-1:1.0: skipping garbage [ 65.767256][ T90] cdc_ncm 3-1:1.0: bind() failure [ 65.781420][ T113] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 65.790597][ T113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.798907][ T113] usb 4-1: Product: syz [ 65.803759][ T113] usb 4-1: Manufacturer: syz [ 65.808353][ T113] usb 4-1: SerialNumber: syz [ 65.921445][ T90] usb 2-1: USB disconnect, device number 2 [ 65.967515][ T3518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 65.981138][ T113] usb 3-1: USB disconnect, device number 2 [*** ] A start job is running for dev-ttyS0.device (59s / 1min 30s)[ 66.271468][ T12] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 66.521449][ T12] usb 2-1: Using ep0 maxpacket: 8 [ *** ] A start job is running for dev-ttyS0.device (1min / 1min 30s)[ 66.651455][ T12] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 66.661773][ T12] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.673432][ T12] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.683772][ T12] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 66.693274][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.741816][ T12] hub 2-1:118.0: bad descriptor, ignoring hub [ 66.747930][ T12] hub: probe of 2-1:118.0 failed with error -5 [ 66.758111][ T12] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 66.761406][ T90] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 67.061537][ T72] usb 2-1: USB disconnect, device number 3 [ *** ] A st[ 67.141477][ T90] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config art job is runni[ 67.151995][ T90] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 ng for dev-ttyS0[ 67.162828][ T90] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 .device (1min / 1min 30s)[ 67.331565][ T90] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.340697][ T90] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.349308][ T90] usb 3-1: Product: syz [ 67.353751][ T90] usb 3-1: Manufacturer: syz [ 67.358322][ T90] usb 3-1: SerialNumber: syz [ 67.402073][ T90] cdc_ncm 3-1:1.0: skipping garbage [ 67.407354][ T90] cdc_ncm 3-1:1.0: bind() failure [ 67.421461][ T12] usb 2-1: new high-speed USB device number 4 using dummy_hcd 23:56:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0xf, &(0x7f00000bfff0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x3]}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 23:56:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x40000008, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'vlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503d0329a7f3e0400a00000c513f7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 23:56:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cc76cdcf5dcf3db12002200000000000660100"}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) [ 67.604803][ T3608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.610890][ T90] usb 3-1: USB disconnect, device number 3 [ *[ 67.638201][ T3622] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. *[[ 67.646108][ T3624] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended 0;31m*] A st[ 67.659288][ T3624] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock art job is running for dev-ttyS0[ 67.671780][ T12] usb 2-1: Using ep0 maxpacket: 8 .device (1min 1s[ 67.677789][ T3624] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock / 1min 30s)[ 67.677795][ T3624] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 67.699701][ T3624] EXT4-fs error (device loop2): ext4_fill_super:4592: inode #2: comm syz-executor.2: iget: root inode unallocated [ 67.711859][ T3624] EXT4-fs (loop2): get root inode failed [ 67.717614][ T3624] EXT4-fs (loop2): mount failed [ 67.851575][ T12] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 67.862099][ T12] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.874272][ T12] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.884509][ T12] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 67.893937][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.942013][ T12] hub 2-1:118.0: bad descriptor, ignoring hub [ 67.948145][ T12] hub: probe of 2-1:118.0 failed with error -5 [ 67.956023][ T12] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 67.970448][ T113] usb 4-1: USB disconnect, device number 6 [ **] A start job is running for dev-ttyS0.device (1min 1s / 1min 30s)[ 68.261633][ T12] usb 2-1: USB disconnect, device number 4 [ *] A start job is running for dev-ttyS0.device (1min 2s / 1min 30s)[ 68.911561][ T90] usb 2-1: new low-speed USB device number 5 using dummy_hcd 23:56:43 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6b, 0x1e, 0xb, 0x0, 0x5c6, 0x9077, 0x21ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x0, 0x0, 0x85, 0xd1, 0xf7, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x4}]}}]}}]}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x101141) 23:56:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000002000000000000000a4c000000090a0104000000000000000000000000080005400000002d0900010073797a300000000008000a40000000000900020073797a310000000008000f4000000000080003400000000028000000000a0101000000000000000003000000080002400000001f0900010073797a310000000028000000000a03000000000000001400030000000900"], 0xc4}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x43, 0x0) 23:56:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x100c) 23:56:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f00000004c0)='net/fib_triestat\x00') ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "cc76cdcf5dcf3db12002200000000000660100"}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006cca8000000000000200000002000000004000007a40000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4807, 0x0) 23:56:43 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xd, 0x1}]}}, &(0x7f0000000280)=""/222, 0x26, 0xde, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 23:56:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0xf, &(0x7f00000bfff0)={&(0x7f0000000440)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ **] A start job is running for dev-ttyS0.device (1min 2s / 1min 30s)[ 69.281633][ T90] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 69.291923][ T90] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 69.303195][ T90] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.313135][ T90] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 69.322247][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.361971][ T90] usb 2-1: can't set config #118, error -71 [ 69.364100][ T3655] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.377327][ T3655] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 69.382767][ T3662] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.389321][ T3655] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 69.402217][ T90] usb 2-1: USB disconnect, device number 5 23:56:43 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001300)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x0, 0x981241) ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000100)=""/118) 23:56:43 executing program 3: ptrace(0x19, 0x0) 23:56:43 executing program 3: 23:56:43 executing program 0: 23:56:43 executing program 3: 23:56:43 executing program 3: [ 69.406924][ T3655] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 69.432132][ T3655] EXT4-fs error (device loop2): ext4_fill_super:4592: inode #2: comm syz-executor.2: iget: root inode unallocated [ 69.444877][ T3655] EXT4-fs (loop2): get root inode failed [ 69.453923][ T3655] EXT4-fs (loop2): mount failed [ ***] A start job is running for dev-ttyS0.device (1min 3s / 1min 30s)[ 69.701597][ T12] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.761610][ T90] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 70.071684][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.082710][ T12] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.092457][ T12] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 70.101467][ T12] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.110388][ T12] usb 5-1: config 0 descriptor?? [ 70.121690][ T90] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 70.131994][ T90] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 70.143259][ T90] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.143280][ T90] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 70.143290][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ *** ] A start job is running for dev-ttyS0.device (1min 3s / 1min 30s)[ 70.202124][ T90] hub 2-1:118.0: bad descriptor, ignoring hub [ 70.208247][ T90] hub: probe of 2-1:118.0 failed with error -5 [ 70.216124][ T90] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 70.521714][ T113] usb 2-1: USB disconnect, device number 6 [ 70.592429][ T12] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 70.602686][ T12] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0001/input/input4 [ *** ] A start job is running for dev-ttyS0.device (1min 4s / 1min 30s)[ 70.684239][ T12] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 70.799361][ T12] usb 5-1: USB disconnect, device number 2 [ 70.881679][ T113] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 71.121659][ T113] usb 2-1: Using ep0 maxpacket: 8 [*** ] A start job is running for dev-ttyS0.device (1min 4s / 1min 30s)[ 71.281742][ T113] usb 2-1: unable to get BOS descriptor or descriptor too short [ 71.361797][ T113] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 71.370188][ T113] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 71.380630][ T113] usb 2-1: config 118 has no interface number 0 [ 71.387053][ T113] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 71.471743][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 71.480834][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 71.489017][ T113] usb 2-1: SerialNumber: syz [ 71.532207][ T113] hub 2-1:118.230: bad descriptor, ignoring hub [ 71.538513][ T113] hub: probe of 2-1:118.230 failed with error -5 [ 71.546702][ T113] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device [ 71.571728][ T90] usb 5-1: new high-speed USB device number 3 using dummy_hcd [** ] A start job is running for dev-ttyS0.device (1min 5s / 1min 30s)[ 71.851790][ T72] usb 2-1: USB disconnect, device number 7 [ 71.931779][ T90] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.942706][ T90] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.953178][ T90] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 71.962540][ T90] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.971071][ T90] usb 5-1: config 0 descriptor?? [* ] A start job is running for dev-ttyS0.device (1min 5s / 1min 30s)[ 72.221734][ T113] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 72.282327][ T90] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 72.291941][ T90] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input5 [ 72.374195][ T90] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 72.433011][ T90] usb 5-1: USB disconnect, device number 3 [ 72.471805][ T113] usb 2-1: Using ep0 maxpacket: 8 [ 72.631784][ T113] usb 2-1: unable to get BOS descriptor or descriptor too short [** ] A start job is running for dev-ttyS0.device (1min 6s / 1min 30s)[ 72.711813][ T113] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 72.720202][ T113] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 72.731145][ T113] usb 2-1: config 118 has no interface number 0 [ 72.737770][ T113] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 72.821819][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 72.830884][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 72.839365][ T113] usb 2-1: SerialNumber: syz [ 72.882174][ T113] hub 2-1:118.230: bad descriptor, ignoring hub [ 72.888518][ T113] hub: probe of 2-1:118.230 failed with error -5 [ 72.896804][ T113] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device 23:56:47 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6b, 0x1e, 0xb, 0x0, 0x5c6, 0x9077, 0x21ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x0, 0x0, 0x85, 0xd1, 0xf7, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x4}]}}]}}]}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x101141) 23:56:47 executing program 4: 23:56:47 executing program 0: 23:56:47 executing program 2: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd6, 0xf1, 0x17, 0x40, 0xc45, 0x608c, 0x3c28, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd, 0x1e, 0x43}}]}}]}}, 0x0) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x0) 23:56:47 executing program 5: 23:56:47 executing program 3: 23:56:47 executing program 5: 23:56:47 executing program 4: 23:56:47 executing program 0: 23:56:47 executing program 3: 23:56:47 executing program 5: 23:56:47 executing program 4: [*** ] A start job is running for dev-ttyS0.device (1min 6s / 1min 30s)[ 73.221931][ T113] usb 2-1: USB disconnect, device number 8 [ 73.261747][ T12] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 73.581824][ T113] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 73.621902][ T12] usb 3-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=3c.28 [ 73.631014][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ *[[ 73.640312][ T12] usb 3-1: config 0 descriptor?? 0;1;31m** ] A start job is running for dev-ttyS0.device (1min 7s / 1min 30s)[ 73.882795][ T12] usb 3-1: USB disconnect, device number 4 [ 73.951834][ T113] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 73.962216][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 73.973330][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.983461][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 73.992499][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.032220][ T113] hub 2-1:118.0: bad descriptor, ignoring hub [ 74.038357][ T113] hub: probe of 2-1:118.0 failed with error -5 [ 74.046836][ T113] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ *** ] A start job is running for dev-ttyS0.device (1min 7s / 1min 30s)[ 74.351885][ T90] usb 2-1: USB disconnect, device number 9 [ ***] A start job is running for dev-ttyS0.device (1min 8s / 1min 30s)[ 74.651789][ T90] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 74.701828][ T72] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 74.951767][ T72] usb 2-1: Using ep0 maxpacket: 8 [ 75.021929][ T90] usb 3-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=3c.28 [ 75.031188][ T90] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.041792][ T90] usb 3-1: config 0 descriptor?? [ 75.111746][ T72] usb 2-1: unable to get BOS descriptor or descriptor too short [ **] A start job is running for dev-ttyS0.device (1min 8s / 1min 30s)[ 75.191765][ T72] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 75.200158][ T72] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 75.211390][ T72] usb 2-1: config 118 has no interface number 0 [ 75.217996][ T72] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 75.286287][ T90] usb 3-1: USB disconnect, device number 5 [ 75.302084][ T72] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 75.311110][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 75.319552][ T72] usb 2-1: SerialNumber: syz [ 75.382021][ T72] hub 2-1:118.230: bad descriptor, ignoring hub [ 75.388339][ T72] hub: probe of 2-1:118.230 failed with error -5 [ 75.396380][ T72] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device [ *] A start job is running for dev-ttyS0.device (1min 9s / 1min 30s)[ 75.701727][ T113] usb 2-1: USB disconnect, device number 10 [ 76.051590][ T113] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ **] A start job is running for dev-ttyS0.device (1min 9s / 1min 30s)[ 76.291521][ T113] usb 2-1: Using ep0 maxpacket: 8 [ 76.451538][ T113] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.531572][ T113] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 76.540195][ T113] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 76.550595][ T113] usb 2-1: config 118 has no interface number 0 [ 76.556949][ T113] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ ***] A st[ 76.641553][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef art job is runni[ 76.650841][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 ng for dev-ttyS0[ 76.660793][ T113] usb 2-1: SerialNumber: syz .device (1min 10s / 1min 30s)[ 76.701876][ T113] hub 2-1:118.230: bad descriptor, ignoring hub [ 76.708247][ T113] hub: probe of 2-1:118.230 failed with error -5 [ 76.716501][ T113] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device 23:56:51 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6b, 0x1e, 0xb, 0x0, 0x5c6, 0x9077, 0x21ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x0, 0x0, 0x85, 0xd1, 0xf7, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x4}]}}]}}]}}, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x101141) 23:56:51 executing program 3: 23:56:51 executing program 0: 23:56:51 executing program 4: 23:56:51 executing program 5: 23:56:51 executing program 2: 23:56:51 executing program 2: 23:56:51 executing program 5: 23:56:51 executing program 0: 23:56:51 executing program 3: 23:56:51 executing program 4: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x200000000a008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x538, 0x198, 0x0, 0x198, 0x308, 0x0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:etc_mail_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00'}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30, 'dccp\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x598) socket$inet_udplite(0x2, 0x2, 0x88) 23:56:51 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) setuid(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') [ 76.866407][ T22] audit: type=1400 audit(1593302211.160:11): avc: denied { relabelto } for pid=3803 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=packet permissive=1 [ 77.051568][ T113] usb 2-1: USB disconnect, device number 11 [ *** ] A start job is running for dev-ttyS0.device (1min 10s / 1min 30s)[ 77.401413][ T113] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ *** ] A start job is running for dev-ttyS0.device (1min 11s / 1min 30s)[ 77.761386][ T113] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 77.771866][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.783000][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.792942][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 77.801972][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.841662][ T113] hub 2-1:118.0: bad descriptor, ignoring hub [ 77.847891][ T113] hub: probe of 2-1:118.0 failed with error -5 [ 77.856280][ T113] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [*** ] A start job is running for dev-ttyS0.device (1min 11s / 1min 30s)[ 78.161351][ T113] usb 2-1: USB disconnect, device number 12 [ 78.511182][ T113] usb 2-1: new high-speed USB device number 13 using dummy_hcd [** ] A start job is running for dev-ttyS0.device (1min 12s / 1min 30s)[ 78.751194][ T113] usb 2-1: Using ep0 maxpacket: 8 [ 78.911162][ T113] usb 2-1: unable to get BOS descriptor or descriptor too short [ 78.991179][ T113] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 78.999800][ T113] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 79.010148][ T113] usb 2-1: config 118 has no interface number 0 [ 79.016428][ T113] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 79.101195][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 79.110387][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.118871][ T113] usb 2-1: SerialNumber: syz [* ] A start job is running for dev-ttyS0.device (1min 12s / 1min 30s)[ 79.161627][ T113] hub 2-1:118.230: bad descriptor, ignoring hub [ 79.167901][ T113] hub: probe of 2-1:118.230 failed with error -5 [ 79.176222][ T113] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device [ 79.481107][ T90] usb 2-1: USB disconnect, device number 13 [** ] A start job is running for dev-ttyS0.device (1min 13s / 1min 30s)[ 79.831043][ T90] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 80.070939][ T90] usb 2-1: Using ep0 maxpacket: 8 [*** ] A start job is running for dev-ttyS0.device (1min 13s / 1min 30s)[ 80.230946][ T90] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.310966][ T90] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 80.319358][ T90] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 80.330254][ T90] usb 2-1: config 118 has no interface number 0 [ 80.336904][ T90] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 80.420993][ T90] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 80.430059][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 80.438517][ T90] usb 2-1: SerialNumber: syz [ 80.481235][ T90] hub 2-1:118.230: bad descriptor, ignoring hub [ 80.487648][ T90] hub: probe of 2-1:118.230 failed with error -5 [ 80.495876][ T90] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device 23:56:54 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6b, 0x1e, 0xb, 0x0, 0x5c6, 0x9077, 0x21ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3f, 0x0, 0x0, [{{0x9, 0x4, 0x5, 0x0, 0x0, 0x85, 0xd1, 0xf7, 0x0, [@hid_hid={0x9, 0x21, 0x7, 0x4}]}}]}}]}}, 0x0) 23:56:54 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) syz_open_procfs(0x0, &(0x7f0000272000)) 23:56:54 executing program 3: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000140)={'icmp\x00'}, &(0x7f0000000180)=0x1e) 23:56:54 executing program 2: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 23:56:54 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 23:56:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:56:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:56:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) [ 80.592801][ T3841] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 23:56:54 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:56:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'vlan0\x00', 0x4}, 0x18) ioctl(r0, 0x8916, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES64], 0x2}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000000b0102000000000000000000000007080003b3f485df6ca7c891fddc400000000000e0"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x810ee0f, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x3) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@empty, @rand_addr=' \x01\x00', @ipv4={[0xd], [], @remote}, 0x0, 0x0, 0x0, 0xff000000, 0x0, 0x400003}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x20040000) 23:56:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:56:54 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) [ *** ] A start job is running for dev-ttyS0.device (1min 14s / 1min 30s)[ 80.687744][ T3841] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 80.830971][ T113] usb 2-1: USB disconnect, device number 14 [ *** ] A start job is running for dev-ttyS0.device (1min 14s / 1min 30s)[ 81.180792][ T113] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 81.540784][ T113] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 81.551095][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 81.562219][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.572185][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 81.581219][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.621060][ T113] hub 2-1:118.0: bad descriptor, ignoring hub [ 81.627189][ T113] hub: probe of 2-1:118.0 failed with error -5 [ 81.635139][ T113] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ ***] A start job is running for dev-ttyS0.device (1min 15s / 1min 30s)[ 81.940755][ T90] usb 2-1: USB disconnect, device number 15 [ **] A start job is running for dev-ttyS0.device (1min 15s / 1min 30s)[ 82.300596][ T90] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 82.540578][ T90] usb 2-1: Using ep0 maxpacket: 8 [ *] A start job is running for dev-ttyS0.device (1min 16s / 1min 30s)[ 82.700632][ T90] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.780618][ T90] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 82.788949][ T90] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 82.799447][ T90] usb 2-1: config 118 has no interface number 0 [ 82.805919][ T90] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 82.890607][ T90] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 82.899796][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 82.908368][ T90] usb 2-1: SerialNumber: syz [ 82.950909][ T90] hub 2-1:118.230: bad descriptor, ignoring hub [ 82.957189][ T90] hub: probe of 2-1:118.230 failed with error -5 [ 82.965675][ T90] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device [ **] A start job is running for dev-ttyS0.device (1min 16s / 1min 30s)[ 83.270532][ T113] usb 2-1: USB disconnect, device number 16 [ 83.620458][ T113] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ ***] A start job is running for dev-ttyS0.device (1min 17s / 1min 30s)[ 83.860399][ T113] usb 2-1: Using ep0 maxpacket: 8 [ 84.030400][ T113] usb 2-1: unable to get BOS descriptor or descriptor too short [ 84.120472][ T113] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 84.128808][ T113] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 84.139555][ T113] usb 2-1: config 118 has no interface number 0 [ *[0;1[ 84.146187][ T113] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 ;31m** ] A start job is running for dev-ttyS0.device (1min 17s / 1min 30s)[ 84.230406][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 84.239482][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 84.247473][ T113] usb 2-1: SerialNumber: syz [ 84.290813][ T113] hub 2-1:118.230: bad descriptor, ignoring hub [ 84.297200][ T113] hub: probe of 2-1:118.230 failed with error -5 [ 84.305337][ T113] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device 23:56:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:56:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:56:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:56:58 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) 23:56:58 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x0, 0x6487c64a81fe0411}, @func, @func, @func, @generic], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4095, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x48}, 0x70) 23:56:58 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302060100052406000005240000000df5dbfde2647d0413000000000c241b07000104070104007f0524150500082407e30004f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffffffffff3b, 0x0) 23:56:58 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:56:58 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 23:56:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:56:58 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ppoll(&(0x7f0000000080)=[{r1}, {r0}], 0x2, 0x0, 0x0, 0x0) 23:56:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:56:58 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 23:56:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:56:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:56:58 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 84.620448][ T113] usb 2-1: USB disconnect, device number 17 [ *** ] A start job is running for dev-ttyS0.device (1min 18s / 1min 30s)[ 84.660281][ T12] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 84.900341][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 84.970278][ T113] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 85.020277][ T12] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.030482][ T12] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.042149][ T12] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 85.055801][ T12] usb 1-1: config 1 interface 0 has no altsetting 0 [*** ] A start job is running for dev-ttyS0.device (1min 18s / 1min 30s)[ 85.220307][ T12] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 85.229356][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.238055][ T12] usb 1-1: Product: syz [ 85.242502][ T12] usb 1-1: Manufacturer: syz [ 85.247071][ T12] usb 1-1: SerialNumber: syz [ 85.330238][ T113] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 85.340732][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.352710][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.363017][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 85.372355][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.420634][ T113] hub 2-1:118.0: bad descriptor, ignoring hub [ 85.426863][ T113] hub: probe of 2-1:118.0 failed with error -5 [ 85.434890][ T113] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 85.510175][ C0] ================================================================== [ 85.518258][ C0] BUG: KASAN: slab-out-of-bounds in snd_usb_mixer_interrupt+0xaa7/0xc30 [ 85.526661][ C0] Write of size 4 at addr ffff8881cd057860 by task swapper/0/0 [ 85.534167][ C0] [ 85.536473][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.4.49-syzkaller-00898-g54ec87ec7a59 #0 [ 85.546502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.556565][ C0] Call Trace: [ 85.559831][ C0] [ 85.562659][ C0] dump_stack+0x14a/0x1ce [ 85.566983][ C0] ? show_regs_print_info+0x12/0x12 [ 85.572151][ C0] ? printk+0xd2/0x114 [ 85.576193][ C0] print_address_description+0x93/0x620 [ 85.581710][ C0] __kasan_report+0x16d/0x1e0 [ 85.586467][ C0] ? snd_usb_mixer_interrupt+0xaa7/0xc30 [ 85.592072][ C0] kasan_report+0x36/0x60 [ 85.596381][ C0] snd_usb_mixer_interrupt+0xaa7/0xc30 [ 85.602005][ C0] ? usb_unanchor_urb+0x128/0x2f0 [ 85.607002][ C0] __usb_hcd_giveback_urb+0x265/0x3b0 [ 85.612354][ C0] ? usb_hcd_giveback_urb+0x107/0x3d0 [ 85.617808][ C0] dummy_timer+0x778/0x4260 [ 85.622349][ C0] ? dummy_free_streams+0x310/0x310 [ 85.627542][ C0] ? trigger_load_balance+0x115/0x760 [ 85.632888][ C0] ? perf_event_task_tick+0x974/0x990 [ 85.638248][ C0] ? load_balance+0x4330/0x4330 [ 85.638260][ C0] ? dummy_free_streams+0x310/0x310 [ 85.648265][ C0] call_timer_fn+0x154/0x340 [ 85.654935][ C0] ? dummy_free_streams+0x310/0x310 [ 85.660114][ C0] ? dummy_free_streams+0x310/0x310 [ 85.665322][ C0] expire_timers+0x35c/0x470 [ 85.669897][ C0] __run_timers+0x662/0x7b0 [ 85.674408][ C0] ? enqueue_hrtimer+0x1cf/0x230 [ 85.679327][ C0] ? detach_timer+0x260/0x260 [ 85.684018][ C0] ? __run_hrtimer+0x601/0x7a0 [ 85.688763][ C0] ? clockevents_program_event+0x214/0x2d0 [ 85.694551][ C0] ? hrtimer_interrupt+0xe75/0x10a0 [ 85.699750][ C0] run_timer_softirq+0x19/0x30 [ 85.704498][ C0] __do_softirq+0x2d5/0x725 [ 85.708986][ C0] ? __irqentry_text_end+0x1fc47b/0x1fc47b [ 85.714774][ C0] ? hrtimer_init+0x340/0x340 [ 85.719438][ C0] ? kvm_sched_clock_read+0x15/0x40 [ 85.724623][ C0] ? sched_clock_cpu+0x18/0x380 [ 85.729454][ C0] irq_exit+0x16d/0x180 [ 85.733592][ C0] smp_apic_timer_interrupt+0x281/0x3f0 [ 85.739115][ C0] apic_timer_interrupt+0xf/0x20 [ 85.744020][ C0] [ 85.746932][ C0] RIP: 0010:default_idle+0x1f/0x30 [ 85.752020][ C0] Code: ff e8 05 22 42 fd 90 90 90 90 90 65 8b 35 81 51 2a 7c bf 01 00 00 00 e8 ff ad 30 fd e9 07 00 00 00 0f 00 2d 5b 3e 49 00 fb f4 <65> 8b 35 62 51 2a 7c bf ff ff ff ff e9 e0 ad 30 fd 41 57 41 56 53 [ 85.771597][ C0] RSP: 0018:ffffffff84c07d18 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 85.780032][ C0] RAX: 464c6c45f6398f01 RBX: ffffffff84c14980 RCX: ffffffff8124c6e0 [ 85.787979][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 85.797006][ C0] RBP: ffffffff84c07e20 R08: dffffc0000000000 R09: fffffbfff0982931 [ 85.804953][ C0] R10: fffffbfff0982931 R11: 0000000000000000 R12: ffffffff84d900a0 [ 85.812985][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffffffff0982930 [ 85.820985][ C0] ? do_idle+0x1f0/0x5e0 [ 85.825208][ C0] ? default_idle+0x11/0x30 [ 85.829683][ C0] do_idle+0x209/0x5e0 [ 85.833838][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 85.839011][ C0] ? __rcu_read_lock+0x50/0x50 [ 85.843748][ C0] ? find_next_bit+0xd8/0x120 [ 85.848417][ C0] ? cpumask_next+0xc/0x20 [ 85.852823][ C0] ? schedule+0x13b/0x1d0 [ 85.857149][ C0] cpu_startup_entry+0x15/0x20 [ 85.861904][ C0] start_kernel+0x7a3/0x873 [ 85.866494][ C0] ? __early_make_pgtable+0x157/0x1a2 [ 85.871861][ C0] ? arch_call_rest_init+0xa/0xa [ 85.876791][ C0] ? kasan_early_init+0x2c5/0x31f [ 85.881793][ C0] ? check_loader_disabled_bsp+0x92/0x131 [ 85.887483][ C0] ? load_ucode_bsp+0xef/0x105 [ 85.892240][ C0] secondary_startup_64+0xa4/0xb0 [ 85.897236][ C0] [ 85.899540][ C0] Allocated by task 12: [ 85.903676][ C0] __kasan_kmalloc+0x12c/0x1c0 [ 85.908412][ C0] kmem_cache_alloc_trace+0xc3/0x280 [ 85.913675][ C0] snd_usb_mixer_apply_create_quirk+0xad1/0x30c0 [ 85.919981][ C0] snd_usb_create_mixer+0x22c3/0x31a0 [ 85.925330][ C0] create_composite_quirk+0x221/0x510 [ 85.930690][ C0] usb_audio_probe+0xd69/0x2470 [ 85.935538][ C0] usb_probe_interface+0x631/0xad0 [ 85.940627][ C0] really_probe+0x764/0xf70 [ 85.945099][ C0] driver_probe_device+0xe6/0x230 [ 85.950097][ C0] bus_for_each_drv+0x17a/0x200 [ 85.954919][ C0] __device_attach+0x27b/0x420 [ 85.959650][ C0] bus_probe_device+0xbb/0x200 [ 85.964417][ C0] device_add+0x13db/0x17c0 [ 85.968891][ C0] usb_set_configuration+0x197f/0x1f00 [ 85.974320][ C0] generic_probe+0x82/0x140 [ 85.979190][ C0] really_probe+0x764/0xf70 [ 85.983666][ C0] driver_probe_device+0xe6/0x230 [ 85.988667][ C0] bus_for_each_drv+0x17a/0x200 [ 85.994794][ C0] __device_attach+0x27b/0x420 [ 85.999624][ C0] bus_probe_device+0xbb/0x200 [ 86.004363][ C0] device_add+0x13db/0x17c0 [ 86.008853][ C0] usb_new_device+0xda7/0x1710 [ 86.013589][ C0] hub_event+0x2963/0x4fa0 [ 86.017995][ C0] process_one_work+0x777/0xf90 [ 86.022825][ C0] worker_thread+0xa8f/0x1430 [ 86.027556][ C0] kthread+0x2df/0x300 [ 86.031684][ C0] ret_from_fork+0x1f/0x30 [ 86.036080][ C0] [ 86.038388][ C0] Freed by task 3207: [ 86.042355][ C0] __kasan_slab_free+0x181/0x230 [ 86.047358][ C0] slab_free_freelist_hook+0xd0/0x150 [ 86.052790][ C0] kfree+0x12b/0x600 [ 86.056664][ C0] ext4_release_dir+0xc5/0x150 [ 86.061400][ C0] __fput+0x27d/0x6c0 [ 86.065470][ C0] task_work_run+0x176/0x1a0 [ 86.070074][ C0] prepare_exit_to_usermode+0x286/0x2e0 [ 86.075661][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 86.081576][ C0] [ 86.083879][ C0] The buggy address belongs to the object at ffff8881cd057800 [ 86.083879][ C0] which belongs to the cache kmalloc-64 of size 64 [ 86.097730][ C0] The buggy address is located 32 bytes to the right of [ 86.097730][ C0] 64-byte region [ffff8881cd057800, ffff8881cd057840) [ 86.111319][ C0] The buggy address belongs to the page: [ 86.116927][ C0] page:ffffea00073415c0 refcount:1 mapcount:0 mapping:ffff8881da803180 index:0x0 [ 86.126521][ C0] flags: 0x8000000000000200(slab) [ 86.131844][ C0] raw: 8000000000000200 ffffea0007374bc0 0000000c0000000c ffff8881da803180 [ 86.140419][ C0] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 86.148971][ C0] page dumped because: kasan: bad access detected [ 86.155560][ C0] [ 86.157869][ C0] Memory state around the buggy address: [ 86.163482][ C0] ffff8881cd057700: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.171535][ C0] ffff8881cd057780: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 86.179571][ C0] >ffff8881cd057800: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 86.187605][ C0] ^ [ 86.194788][ C0] ffff8881cd057880: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.202821][ C0] ffff8881cd057900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.210853][ C0] ================================================================== [ 86.218889][ C0] Disabling lock debugging due to kernel taint [** ] A start job is running for dev-ttyS0.device (1min 19s / 1min 30s)[ 86.461524][ T72] usb 1-1: USB disconnect, device number 6 [ 86.520254][ T90] usb 2-1: USB disconnect, device number 18 [* ] A start job is running for dev-ttyS0.device (1min 20s / 1min 30s)[ 86.869992][ T90] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 87.109981][ T90] usb 2-1: Using ep0 maxpacket: 8 [** ] A start job is running for dev-ttyS0.device (1min 20s / 1min 30s)[ 87.229972][ T72] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.270006][ T90] usb 2-1: unable to get BOS descriptor or descriptor too short 23:57:01 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) read$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 23:57:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 87.350088][ T90] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 87.358579][ T90] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 87.369692][ T90] usb 2-1: config 118 has no interface number 0 [ 87.387933][ T90] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 87.430088][ T90] usb 2-1: string descriptor 0 read error: -71 [ 87.436300][ T90] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 87.446224][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 87.469988][ T90] usb 2-1: can't set config #118, error -71 [ 87.476487][ T72] usb 1-1: Using ep0 maxpacket: 8 [ 87.482585][ T90] usb 2-1: USB disconnect, device number 19 [ 87.599987][ T72] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.610109][ T72] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.621964][ T72] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 87.635583][ T72] usb 1-1: config 1 interface 0 has no altsetting 0 23:57:02 executing program 0: r0 = syz_usb_connect$cdc_ecm(0x0, 0x92, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000002000008ba0d0010400001020301090280000101000000090400ff0302060100052406000005240000000df5dbfde2647d0413000000000c241b07000104070104007f0524150500082407e30004f8ff06240701050008241c04001f3c0d152412feffa317a88b045e4f01a607c0ffcb7e392a090581030004"], 0x0) syz_usb_ep_write(r0, 0x0, 0xffffffffffffff3b, 0x0) 23:57:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:02 executing program 3: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x92}}) close(r0) 23:57:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:02 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bond0\x00', 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000075, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 23:57:02 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) [*** ] A start job is running for dev-ttyS0.device (1min 21s / 1min 30s)[ 87.799951][ T72] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 87.812177][ T72] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.829949][ T90] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 87.840947][ T72] usb 1-1: Product: syz [ 87.855129][ T72] usb 1-1: Manufacturer: syz [ 87.889979][ T72] usb 1-1: can't set config #1, error -71 [ 87.896580][ T72] usb 1-1: USB disconnect, device number 7 [ *** ] A start job is running for dev-ttyS0.device (1min 21s / 1min 30s)[ 88.219886][ T90] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 88.230323][ T90] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 88.242345][ T90] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.252596][ T72] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 88.260111][ T90] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 88.269112][ T90] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.311658][ T90] hub 2-1:118.0: bad descriptor, ignoring hub [ 88.317833][ T90] hub: probe of 2-1:118.0 failed with error -5 [ 88.326479][ T90] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ 88.509815][ T72] usb 1-1: Using ep0 maxpacket: 8 [ 88.629878][ T72] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 88.629915][ T113] usb 2-1: USB disconnect, device number 20 [ 88.640254][ T72] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.657515][ T72] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.657526][ T72] usb 1-1: config 1 interface 0 has no altsetting 0 [ *** ] A start job is running for dev-ttyS0.device (1min 22s / 1min 30s)[ 88.829848][ T72] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 88.838986][ T72] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.847795][ T72] usb 1-1: Product: syz [ 88.851970][ T72] usb 1-1: Manufacturer: syz [ 88.856546][ T72] usb 1-1: SerialNumber: syz [ 88.979763][ T113] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ ***] A start job is running for dev-ttyS0.device (1min 22s / 1min 30s)[ 89.219705][ T113] usb 2-1: Using ep0 maxpacket: 8 [ 89.379709][ T113] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.387779][ T72] usb 1-1: USB disconnect, device number 8 [ 89.459777][ T113] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 89.468133][ T113] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 89.479145][ T113] usb 2-1: config 118 has no interface number 0 [ 89.485457][ T113] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 89.569725][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 89.578798][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.586798][ T113] usb 2-1: SerialNumber: syz [ 89.630291][ T113] hub 2-1:118.230: bad descriptor, ignoring hub [ 89.636849][ T113] hub: probe of 2-1:118.230 failed with error -5 [ **] A s[ 89.645413][ T113] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device tart job is running for dev-ttyS0.device (1min 23s / 1min 30s)[ 89.949716][ T113] usb 2-1: USB disconnect, device number 21 23:57:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:57:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="6ffe000000000000000003000000140001800e0001006574683a74"], 0x28}}, 0x0) 23:57:04 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 23:57:04 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) read$hidraw(0xffffffffffffffff, 0x0, 0x0) 23:57:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:57:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) [ *] A start job is running for dev-ttyS0.device (1min 23s / 1min 30s)[ 90.357394][ T4022] tipc: Enabling of bearer rejected, failed to enable media 23:57:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:57:04 executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7fffffff) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r3, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_settings={0x6, 0x0, @sync=&(0x7f0000000040)={0x7, 0x0, 0x4}}}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x341040, 0x80) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], 0x82) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xfd12, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2e, 0x25dfdbfe, {{}, {}, {0x8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x800) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r6, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0xffffffff, 0xff, 0x6}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040840}, 0x20040881) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="000000cb06d521a2ff48584bf636b606dd02799f2317e5efbfe31f8402ac9ac8f0e97b9e2e01000100", @ANYRES16=r6, @ANYBLOB="000426bd7000fcdbdf25010000000000000002410000000c00136574683a6c6f0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r6, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4800) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040801}, 0x40) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008049}, 0x40) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x488a5) 23:57:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:04 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f00000033c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:57:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:04 executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/wireless\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x7fffffff) [ 90.619587][ T72] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ **] A start job is running for dev-ttyS0.device (1min 24s / 1min 30s)[ 90.979608][ T72] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 90.989926][ T72] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 91.001069][ T72] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.011123][ T72] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 91.020316][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.059926][ T72] hub 2-1:118.0: bad descriptor, ignoring hub [ 91.066055][ T72] hub: probe of 2-1:118.0 failed with error -5 [ 91.074078][ T72] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [ ***] A start job is running for dev-ttyS0.device (1min 24s / 1min 30s)[ 91.379576][ T72] usb 2-1: USB disconnect, device number 22 [ *** ] A start job is running for dev-ttyS0.device (1min 25s / 1min 30s)[ 91.729410][ T72] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 91.969458][ T72] usb 2-1: Using ep0 maxpacket: 8 [ 92.129416][ T72] usb 2-1: unable to get BOS descriptor or descriptor too short [ *** ] A start job is running for dev-ttyS0.device (1min 25s / 1min 30s)[ 92.209461][ T72] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 92.217798][ T72] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 92.228899][ T72] usb 2-1: config 118 has no interface number 0 [ 92.235529][ T72] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 92.319463][ T72] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 92.328630][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 92.337308][ T72] usb 2-1: SerialNumber: syz [ 92.379730][ T72] hub 2-1:118.230: bad descriptor, ignoring hub [ 92.386010][ T72] hub: probe of 2-1:118.230 failed with error -5 [ 92.394407][ T72] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device [*** ] A start job is running for dev-ttyS0.device (1min 26s / 1min 30s)[ 92.699414][ T113] usb 2-1: USB disconnect, device number 23 23:57:07 executing program 1: r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201fe0109003c0800040042ef420000000109021b00017600230009040000010209bd000705810700"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(0xffffffffffffffff, &(0x7f0000001200)='\x00', 0xffffff45) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201fe2109003c0800040042ef420000010109021b0001760023000904e600010209bd000705810700014d3187f4f97039d4efee58b7dff01421fb425d4740a1de9c8f3443c573449a27019ef612c20f3e3e5a8c6babd32109a2acc0005af3153a79b7058fed6b69a3120dd6b0e20edfc557d5144c13274719e8eb498c62b6627597f5b69eae4cb9c435e38b9d9a8c6d8e1541b8a70e0e9c7a243f17be419aa9e2ab13221ae0ee78c5ff86fbf434e4258f737f1b3ac158bc2321aa8a0d0abad62aa417b912a3de"], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000180)='/dev/hidraw#\x00', 0x0, 0x200) 23:57:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f00000033c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:57:07 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:07 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\xa1\xab\x86', 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 23:57:07 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48050}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3f5, 0x400, 0x70bd2c, 0x25dfdbfe}, 0x10}}, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200), 0x4) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) write(r2, &(0x7f00000001c0), 0xfffffef3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e24, 0xfffff278, @ipv4={[], [], @rand_addr=0x64010100}, 0x2}, 0x1c) 23:57:07 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f00000033c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 23:57:07 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000033c0)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) 23:57:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r4], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xfc}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x1000}}]}, 0x40}}, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:07 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\xa1\xab\x86', 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 23:57:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:57:07 executing program 3: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00\x00\xa1\xab\x86', 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x0, 0x2012, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) [** ] A start job is running for dev-ttyS0.device (1min 26s / 1min 30s)[ 93.379251][ T113] usb 2-1: new low-speed USB device number 24 using dummy_hcd [* ] A start job is running for dev-ttyS0.device (1min 27s / 1min 30s)[ 93.759280][ T113] usb 2-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 93.769604][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 93.780728][ T113] usb 2-1: config 118 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.790752][ T113] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 93.799807][ T113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.839555][ T113] hub 2-1:118.0: bad descriptor, ignoring hub [ 93.845688][ T113] hub: probe of 2-1:118.0 failed with error -5 [ 93.855990][ T113] cdc_wdm 2-1:118.0: cdc-wdm0: USB WDM device [** ] A start job is running for dev-ttyS0.device (1min 27s / 1min 30s)[ 94.159286][ T72] usb 2-1: USB disconnect, device number 24 [ 94.509182][ T72] usb 2-1: new high-speed USB device number 25 using dummy_hcd [*** ] A start job is running for dev-ttyS0.device (1min 28s / 1min 30s)[ 94.749120][ T72] usb 2-1: Using ep0 maxpacket: 8 [ 94.909117][ T72] usb 2-1: unable to get BOS descriptor or descriptor too short [ 94.999119][ T72] usb 2-1: config 118 has an invalid interface number: 230 but max is 0 [ 95.007688][ T72] usb 2-1: config 118 has an invalid descriptor of length 49, skipping remainder of the config [ 95.018186][ T72] usb 2-1: config 118 has no interface number 0 [ 95.024485][ T72] usb 2-1: config 118 interface 230 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 95.109130][ T72] usb 2-1: New USB device found, idVendor=0400, idProduct=4200, bcdDevice=42.ef [ 95.118408][ T72] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.126897][ T72] usb 2-1: SerialNumber: syz [ *** ] A start job is running for dev-ttyS0.device (1min 28s / 1min 30s)[ 95.169513][ T72] hub 2-1:118.230: bad descriptor, ignoring hub [ 95.175786][ T72] hub: probe of 2-1:118.230 failed with error -5 [ 95.183827][ T72] cdc_wdm 2-1:118.230: cdc-wdm0: USB WDM device [ 95.489127][ T113] usb 2-1: USB disconnect, device number 25