fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) [ 2315.935793][T27322] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2315.943762][T27322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2315.951769][T27322] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a856d4 18:19:33 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:33 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x10ff, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0) 18:19:33 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x790000000000}]) 18:19:33 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000}, 0x0, 0x0) 18:19:33 executing program 5 (fault-call:11 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2316.241606][ T27] audit: type=1804 audit(5885547573.492:1541): pid=27348 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3708/bus" dev="sda1" ino=16257 res=1 18:19:33 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x7f191b3e9000}]) 18:19:33 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40200, 0x0) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = shmget(0x0, 0x1000, 0x0, &(0x7f0000ffa000/0x1000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_LOCK(r3, 0xb) r4 = socket(0x1000000010, 0x80002, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080)='NLBL_CALIPSO\x00') sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) bind$packet(r4, &(0x7f00000002c0)={0x11, 0x9, r5, 0x1, 0x7, 0x6, @remote}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) [ 2316.312229][ T27] audit: type=1800 audit(5885547573.522:1542): pid=27348 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16257 res=0 [ 2316.364246][ T9168] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 2316.459310][ T27] audit: type=1804 audit(5885547573.522:1543): pid=27348 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3708/bus" dev="sda1" ino=16257 res=1 [ 2316.483089][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 2316.503891][T27350] FAULT_INJECTION: forcing a failure. [ 2316.503891][T27350] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.531993][T27350] CPU: 0 PID: 27350 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 2316.540711][T27350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2316.550767][T27350] Call Trace: [ 2316.554070][T27350] dump_stack+0x11d/0x187 [ 2316.558415][T27350] should_fail.cold+0x5/0xf [ 2316.563074][T27350] __should_failslab+0x82/0xb0 [ 2316.567916][T27350] should_failslab+0x5/0xf [ 2316.572410][T27350] kmem_cache_alloc+0x23/0x5e0 [ 2316.577521][T27350] ? __gfn_to_pfn_memslot+0x36c/0xa60 [ 2316.582901][T27350] mmu_topup_memory_caches+0x70/0x2b0 [ 2316.588288][T27350] kvm_mmu_load+0x28/0xba0 [ 2316.593241][T27350] ? kvm_apic_has_interrupt+0x7c/0xf0 [ 2316.598618][T27350] vcpu_enter_guest+0x268b/0x3740 [ 2316.603652][T27350] ? debug_smp_processor_id+0x3f/0x129 [ 2316.609140][T27350] ? fpregs_mark_activate+0x79/0x160 [ 2316.614956][T27350] ? __this_cpu_preempt_check+0x3c/0x130 [ 2316.620602][T27350] kvm_arch_vcpu_ioctl_run+0x281/0xd60 [ 2316.626125][T27350] kvm_vcpu_ioctl+0x70b/0x9d0 [ 2316.630902][T27350] ? tomoyo_file_ioctl+0x30/0x40 [ 2316.636037][T27350] ? kvm_vcpu_block+0x730/0x730 [ 2316.640925][T27350] ksys_ioctl+0x101/0x150 [ 2316.645269][T27350] __x64_sys_ioctl+0x47/0x60 [ 2316.650115][T27350] do_syscall_64+0xc7/0x3b0 [ 2316.654718][T27350] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2316.660701][T27350] RIP: 0033:0x45ca29 [ 2316.664673][T27350] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2316.684622][T27350] RSP: 002b:00007f46a1a84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2316.693077][T27350] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29 [ 2316.701068][T27350] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 18:19:33 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x7fffffffefff}]) [ 2316.709038][T27350] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2316.717005][T27350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2316.725039][T27350] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a856d4 18:19:34 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 18:19:34 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaafbffffffe7f605d28cc94a72cb0180c20000008100000086dd6000004000472c00fe8000000000070000000000000000aa200100000000000000001c00000000000000ffffcd1a28ff6658349729bfe5f6dff1adc1f3fd0cb47d0e13f5faf160baf03664c43d491bd072a9f1011004b928dc501e24c92f7de19ef23d0f468c631647d870206283fd68bcb7e8b1d3af7ba61f37ee351f088df771304ef60fb3badf3e9f298aaf474cb8008000007dd08dba9340782838f94848c720e68c310d9d7650c3d2b1", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r0, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000bc0)=0x14) sendmmsg$sock(r2, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x55}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0xf3}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14}}], 0x90}}, {{&(0x7f0000000c00)=@ll={0x11, 0x4, r3, 0x1, 0xd, 0x6, @random="b3c37d221933"}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000c80)="51efc06252daedbb82ae487c43bb1f3b55e753db8a10f263d19d61460d038909b25581594c37bb5255d675d598d618d75b2caeb8831a8f25161b2fd302f9c1486b08e6c1359748d7ab2540f7867ce7f381e3337c4a52cdf022d1a3c4e5198b21be5f03664142fcefe437bd67abbdc163e757d5018ba5f85c6b0f92e6abcc3c7af0c2089a6828d2b63634be5c1f14d8c604cd4d9c448501ad4a55ba94dda13b4220", 0xa1}, {&(0x7f0000000d40)="d580977b749e9b10d3af26befb48c9dec3259f8fd559e9341f5095eb63bbf38ffd866ef3f6da8d96a95399df3a39a43372cdef225abdea40d70065678566d883e5371dc87f380719fd1b45409c4855c35ccf68dbc469e79fe5952bdaa2bfd8418c399f33811212ebff4805d30f804ccc9dbb16c365bb3a469f6a9304a8dae40a3313764023f2eecf9c10e3a63bd748fd3558fbaee4eb05b37b579d66ce3727361d9b2e", 0xa3}, {&(0x7f0000000e00)="dc0c821f9ff47a537ea0efab5eb1e2e09ef94e9e2e6892a896124fdd259076b78829044e28f7495673b3f70f0159822ba7e73b", 0x33}, {&(0x7f0000000e40)="ed4ba79149f7ac58d4b7e7e99e996c851b659051d579558c3e69840bb9b05652c182219bf4b4110a", 0x28}, {&(0x7f0000000e80)="1aa6624a84243f2a3452ed20e2ce25e6c388176d51170d1859f6412a50d3c1ca657e8db617b4c31a64f502013980e713b2178acb97e067e996b360939d5c06ce9d21c0e8", 0x44}, {&(0x7f0000000f00)="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", 0x1000}, {&(0x7f0000001f00)="c33769bb068b409c670551e0f106eac340ba4114841fc125612a2463b7a18c9ae656727c24d3a9aaf9eeaecf360959d80cfafade63fee908ed8e42b33a7a7f600d5e7c76607c8fd4ae2df373859520e215ba6b8bb356777006985158bc1f2cc38cdf4f7bd2dc09cd5da19ad9209c18e5c1dd347815ab20f4abb8a269e9a4443667861cd12142a0602599bfdf931acaee2b5432f735932a61d74175c69be68a1d62f747a52a485955067e08e118f563022941c82807b27d4b7565ee3a9fe110b31db2c73088fbf4d9b59c3e82b55d49c3030d04ce", 0xd4}, {&(0x7f0000002000)="7000367c1688abee549eb2d163c0dd", 0xf}, {&(0x7f0000002040)="00890cbd9a8811685bf7fc16cf089e550e7960cdbd429f93d0c186102ba37dc14b3a922938962ff11e7cac7b0df28d7905a9c741f3f7b17f537921173aa460ac09976dca2ced1953699d95ec1706d8844383a3fc90698291da850a0d34057cdaccfc6d2682848acbe6a921bc30b3c074ef47d3774eb4bbb4ec3da16a90bcd3fc6ec1b049bcbf4fadca977493d2eec8d35de52e29147ff7500b3bb12aeeffa7d7d083564a14e86d7d45948a3e1fe4d6b4489b73590cf66bdf46aa718e1e3bc870bfd9e5a961f0ef9ac7465c2648f687d42fc06b37b2ff860cddfd86393a7d3cb38b220be8fc10209a316d116bb2cf7bd0c5813ebca1070e", 0xf7}], 0x9, &(0x7f0000002200)=[@timestamping={{0x14, 0x1, 0x25, 0x2000}}, @mark={{0x14, 0x1, 0x24, 0xe0000000}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}], 0xd8}}], 0x2, 0x884) tkill(r1, 0x1000000000016) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x2, 0x4, 0x7, 0xffffffff, r1}) [ 2316.905102][ T9168] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2316.917253][ T9168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:19:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0xb90000000000}]) [ 2317.039053][ T27] audit: type=1804 audit(5885547574.292:1544): pid=27377 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3709/bus" dev="sda1" ino=16129 res=1 [ 2317.065681][ T27] audit: type=1800 audit(5885547574.292:1545): pid=27377 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 [ 2317.085021][ T9168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2317.089010][ T27] audit: type=1804 audit(5885547574.312:1546): pid=27377 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3709/bus" dev="sda1" ino=16129 res=1 [ 2317.098951][ T9168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.154250][ T9168] usb 3-1: Product: syz [ 2317.158455][ T9168] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2317.224190][ T9168] usb 3-1: SerialNumber: syz [ 2317.544243][ T9168] usb 3-1: 0:2 : does not exist [ 2317.564840][ T9168] usb 3-1: USB disconnect, device number 34 18:19:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:35 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 18:19:35 executing program 5 (fault-call:11 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:19:35 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000}, 0x0, 0x0) 18:19:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x40740000000000}]) [ 2318.058783][ T27] audit: type=1804 audit(5885547575.312:1547): pid=27404 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3710/bus" dev="sda1" ino=16353 res=1 18:19:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x903e1b197f0000}]) [ 2318.180168][T27409] FAULT_INJECTION: forcing a failure. [ 2318.180168][T27409] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.250698][T27409] CPU: 0 PID: 27409 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 2318.259570][T27409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2318.269623][T27409] Call Trace: [ 2318.272925][T27409] dump_stack+0x11d/0x187 [ 2318.277269][T27409] should_fail.cold+0x5/0xf [ 2318.284919][T27409] __should_failslab+0x82/0xb0 [ 2318.289761][T27409] should_failslab+0x5/0xf [ 2318.294180][T27409] kmem_cache_alloc+0x23/0x5e0 [ 2318.298977][T27409] mmu_topup_memory_caches+0x70/0x2b0 [ 2318.304360][T27409] kvm_mmu_load+0x28/0xba0 [ 2318.308772][T27409] ? vmx_get_nmi_mask+0xee/0x190 [ 2318.313708][T27409] ? kvm_apic_accept_events+0xf7/0x2c0 [ 2318.319211][T27409] vcpu_enter_guest+0x268b/0x3740 [ 2318.324288][T27409] ? debug_smp_processor_id+0x3f/0x129 [ 2318.329757][T27409] ? fpregs_mark_activate+0x79/0x160 [ 2318.335066][T27409] ? __this_cpu_preempt_check+0x3c/0x130 [ 2318.340704][T27409] kvm_arch_vcpu_ioctl_run+0x281/0xd60 [ 2318.346246][T27409] kvm_vcpu_ioctl+0x70b/0x9d0 [ 2318.350945][T27409] ? tomoyo_file_ioctl+0x30/0x40 [ 2318.355904][T27409] ? kvm_vcpu_block+0x730/0x730 [ 2318.360763][T27409] ksys_ioctl+0x101/0x150 [ 2318.365112][T27409] __x64_sys_ioctl+0x47/0x60 [ 2318.369720][T27409] do_syscall_64+0xc7/0x3b0 [ 2318.374224][T27409] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2318.380108][T27409] RIP: 0033:0x45ca29 [ 2318.384004][T27409] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2318.403861][T27409] RSP: 002b:00007f46a1a63c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2318.414781][T27409] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29 [ 2318.422744][T27409] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2318.430746][T27409] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2318.438723][T27409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2318.447068][T27409] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a646d4 18:19:35 executing program 5 (fault-call:11 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2318.535839][ T9168] usb 3-1: new high-speed USB device number 35 using dummy_hcd 18:19:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0xb0530000000000}]) [ 2318.646951][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 2318.675195][T27424] FAULT_INJECTION: forcing a failure. [ 2318.675195][T27424] name failslab, interval 1, probability 0, space 0, times 0 [ 2318.688306][T27424] CPU: 1 PID: 27424 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 2318.697097][T27424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2318.707141][T27424] Call Trace: [ 2318.710418][T27424] dump_stack+0x11d/0x187 [ 2318.714782][T27424] should_fail.cold+0x5/0xf [ 2318.719285][T27424] __should_failslab+0x82/0xb0 [ 2318.724270][T27424] should_failslab+0x5/0xf [ 2318.729550][T27424] kmem_cache_alloc+0x23/0x5e0 [ 2318.734311][T27424] ? debug_smp_processor_id+0x3f/0x129 [ 2318.739749][T27424] ? delay_tsc+0x8a/0xb0 [ 2318.744120][T27424] mmu_topup_memory_caches+0x70/0x2b0 [ 2318.749483][T27424] kvm_mmu_load+0x28/0xba0 [ 2318.753893][T27424] ? kvm_apic_has_interrupt+0x7c/0xf0 [ 2318.759262][T27424] vcpu_enter_guest+0x268b/0x3740 [ 2318.764284][T27424] ? debug_smp_processor_id+0x3f/0x129 [ 2318.769737][T27424] ? fpregs_mark_activate+0x79/0x160 [ 2318.775143][T27424] ? __this_cpu_preempt_check+0x3c/0x130 [ 2318.780766][T27424] kvm_arch_vcpu_ioctl_run+0x281/0xd60 [ 2318.786406][T27424] kvm_vcpu_ioctl+0x70b/0x9d0 [ 2318.791067][T27424] ? tomoyo_file_ioctl+0x30/0x40 [ 2318.796065][T27424] ? kvm_vcpu_block+0x730/0x730 [ 2318.800931][T27424] ksys_ioctl+0x101/0x150 [ 2318.805242][T27424] __x64_sys_ioctl+0x47/0x60 [ 2318.809901][T27424] do_syscall_64+0xc7/0x3b0 [ 2318.814407][T27424] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2318.820360][T27424] RIP: 0033:0x45ca29 [ 2318.824265][T27424] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2318.843955][T27424] RSP: 002b:00007f46a1a84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2318.852359][T27424] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29 [ 2318.860323][T27424] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2318.868272][T27424] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2318.876236][T27424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2318.884185][T27424] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a856d4 18:19:36 executing program 5 (fault-call:11 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:19:36 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0x0) [ 2319.054796][ T9168] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2319.075366][ T9168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2319.130489][T27437] FAULT_INJECTION: forcing a failure. [ 2319.130489][T27437] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.146765][T27437] CPU: 1 PID: 27437 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 2319.155457][T27437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2319.165524][T27437] Call Trace: [ 2319.168829][T27437] dump_stack+0x11d/0x187 [ 2319.173169][T27437] should_fail.cold+0x5/0xf [ 2319.177721][T27437] __should_failslab+0x82/0xb0 [ 2319.182485][T27437] should_failslab+0x5/0xf [ 2319.186905][T27437] kmem_cache_alloc+0x23/0x5e0 [ 2319.191674][T27437] ? delay_tsc+0x8a/0xb0 [ 2319.195944][T27437] mmu_topup_memory_caches+0x70/0x2b0 [ 2319.201469][T27437] kvm_mmu_load+0x28/0xba0 [ 2319.205999][T27437] ? kvm_apic_has_interrupt+0x7c/0xf0 [ 2319.211516][T27437] vcpu_enter_guest+0x268b/0x3740 [ 2319.216539][T27437] ? debug_smp_processor_id+0x3f/0x129 [ 2319.222018][T27437] ? fpregs_mark_activate+0x79/0x160 [ 2319.227308][T27437] ? __this_cpu_preempt_check+0x3c/0x130 [ 2319.233025][T27437] kvm_arch_vcpu_ioctl_run+0x281/0xd60 [ 2319.238467][T27437] kvm_vcpu_ioctl+0x70b/0x9d0 [ 2319.243146][T27437] ? tomoyo_file_ioctl+0x30/0x40 [ 2319.248077][T27437] ? kvm_vcpu_block+0x730/0x730 [ 2319.252908][T27437] ksys_ioctl+0x101/0x150 [ 2319.257235][T27437] __x64_sys_ioctl+0x47/0x60 [ 2319.261834][T27437] do_syscall_64+0xc7/0x3b0 [ 2319.266328][T27437] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2319.272212][T27437] RIP: 0033:0x45ca29 [ 2319.276103][T27437] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2319.295722][T27437] RSP: 002b:00007f46a1a84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2319.304210][T27437] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29 [ 2319.312219][T27437] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2319.320172][T27437] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2319.328392][T27437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2319.336342][T27437] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a856d4 [ 2319.454129][ T9168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2319.463347][ T9168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2319.471808][ T9168] usb 3-1: Product: syz [ 2319.476308][ T9168] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2319.504948][ T9168] usb 3-1: SerialNumber: syz [ 2319.814127][ T9168] usb 3-1: 0:2 : does not exist [ 2319.827767][ T9168] usb 3-1: USB disconnect, device number 35 18:19:37 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 18:19:37 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0xb0730000000000}]) 18:19:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:37 executing program 5 (fault-call:11 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:19:37 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000}, 0x0, 0x0) 18:19:37 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x100000000000000}]) 18:19:37 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x200000000000000}]) [ 2320.489053][T27478] FAULT_INJECTION: forcing a failure. [ 2320.489053][T27478] name failslab, interval 1, probability 0, space 0, times 0 [ 2320.535410][T27478] CPU: 1 PID: 27478 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 2320.544107][T27478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2320.554161][T27478] Call Trace: [ 2320.557462][T27478] dump_stack+0x11d/0x187 [ 2320.561810][T27478] should_fail.cold+0x5/0xf [ 2320.566332][T27478] __should_failslab+0x82/0xb0 [ 2320.571104][T27478] should_failslab+0x5/0xf [ 2320.575568][T27478] kmem_cache_alloc+0x23/0x5e0 [ 2320.580346][T27478] ? __gfn_to_pfn_memslot+0x36c/0xa60 [ 2320.585743][T27478] mmu_topup_memory_caches+0x70/0x2b0 [ 2320.591128][T27478] kvm_mmu_load+0x28/0xba0 [ 2320.598603][T27478] ? kvm_apic_has_interrupt+0x7c/0xf0 [ 2320.604075][T27478] vcpu_enter_guest+0x268b/0x3740 [ 2320.609160][T27478] ? debug_smp_processor_id+0x3f/0x129 [ 2320.614737][T27478] ? fpregs_mark_activate+0x79/0x160 [ 2320.620030][T27478] ? __this_cpu_preempt_check+0x3c/0x130 [ 2320.625761][T27478] kvm_arch_vcpu_ioctl_run+0x281/0xd60 [ 2320.631236][T27478] kvm_vcpu_ioctl+0x70b/0x9d0 [ 2320.635930][T27478] ? tomoyo_file_ioctl+0x30/0x40 [ 2320.641413][T27478] ? kvm_vcpu_block+0x730/0x730 [ 2320.646283][T27478] ksys_ioctl+0x101/0x150 [ 2320.650634][T27478] __x64_sys_ioctl+0x47/0x60 [ 2320.654100][ T9168] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2320.655240][T27478] do_syscall_64+0xc7/0x3b0 [ 2320.655269][T27478] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2320.673249][T27478] RIP: 0033:0x45ca29 [ 2320.677165][T27478] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2320.697124][T27478] RSP: 002b:00007f46a1a84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2320.705549][T27478] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29 [ 2320.713556][T27478] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2320.721614][T27478] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 18:19:37 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) [ 2320.729935][T27478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2320.737907][T27478] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a856d4 [ 2320.744749][ T9168] usb 3-1: Using ep0 maxpacket: 8 18:19:38 executing program 5 (fault-call:11 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:19:38 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x300000000000000}]) [ 2320.954742][ T9168] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2320.992119][ T9168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2321.075894][T27496] FAULT_INJECTION: forcing a failure. [ 2321.075894][T27496] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.096663][T27496] CPU: 1 PID: 27496 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 2321.106453][T27496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.116917][T27496] Call Trace: [ 2321.120227][T27496] dump_stack+0x11d/0x187 [ 2321.124677][T27496] should_fail.cold+0x5/0xf [ 2321.129198][T27496] __should_failslab+0x82/0xb0 [ 2321.134022][T27496] should_failslab+0x5/0xf [ 2321.138446][T27496] kmem_cache_alloc+0x23/0x5e0 [ 2321.143226][T27496] ? __gfn_to_pfn_memslot+0x36c/0xa60 [ 2321.148613][T27496] mmu_topup_memory_caches+0x70/0x2b0 [ 2321.154051][T27496] kvm_mmu_load+0x28/0xba0 [ 2321.158481][T27496] ? kvm_apic_has_interrupt+0x7c/0xf0 [ 2321.163929][T27496] vcpu_enter_guest+0x268b/0x3740 [ 2321.169041][T27496] ? debug_smp_processor_id+0x3f/0x129 [ 2321.174513][T27496] ? fpregs_mark_activate+0x79/0x160 [ 2321.179802][T27496] ? __this_cpu_preempt_check+0x3c/0x130 [ 2321.185437][T27496] kvm_arch_vcpu_ioctl_run+0x281/0xd60 [ 2321.186468][ T9168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2321.190956][T27496] kvm_vcpu_ioctl+0x70b/0x9d0 [ 2321.204684][T27496] ? tomoyo_file_ioctl+0x30/0x40 [ 2321.209673][T27496] ? kvm_vcpu_block+0x730/0x730 [ 2321.214535][T27496] ksys_ioctl+0x101/0x150 [ 2321.218914][T27496] __x64_sys_ioctl+0x47/0x60 [ 2321.219041][ T9168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2321.223597][T27496] do_syscall_64+0xc7/0x3b0 [ 2321.223624][T27496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2321.223644][T27496] RIP: 0033:0x45ca29 [ 2321.245930][T27496] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2321.265593][T27496] RSP: 002b:00007f46a1a84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2321.272520][ T9168] usb 3-1: Product: syz [ 2321.274092][T27496] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29 [ 2321.274103][T27496] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2321.274112][T27496] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2321.274158][T27496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2321.274177][T27496] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a856d4 [ 2321.288082][ T9168] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 18:19:38 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000}, 0x0, 0x0) 18:19:38 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x400000000000000}]) [ 2321.447253][ T9168] usb 3-1: SerialNumber: syz 18:19:38 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x500000000000000}]) [ 2321.584060][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 2321.584081][ T27] audit: type=1804 audit(5885547578.832:1553): pid=27505 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3712/bus" dev="sda1" ino=16336 res=1 18:19:38 executing program 5 (fault-call:11 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2321.706266][ T27] audit: type=1800 audit(5885547578.832:1554): pid=27505 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16336 res=0 [ 2321.784030][ T9168] usb 3-1: 0:2 : does not exist [ 2321.797298][ T9168] usb 3-1: USB disconnect, device number 36 [ 2321.852369][T27527] FAULT_INJECTION: forcing a failure. [ 2321.852369][T27527] name failslab, interval 1, probability 0, space 0, times 0 [ 2321.888800][T27527] CPU: 1 PID: 27527 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 2321.897940][T27527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2321.908094][T27527] Call Trace: [ 2321.911460][T27527] dump_stack+0x11d/0x187 [ 2321.915817][T27527] should_fail.cold+0x5/0xf [ 2321.920488][T27527] __should_failslab+0x82/0xb0 [ 2321.925262][T27527] should_failslab+0x5/0xf [ 2321.929767][T27527] kmem_cache_alloc+0x23/0x5e0 [ 2321.934622][T27527] ? __gfn_to_pfn_memslot+0x36c/0xa60 [ 2321.940039][T27527] mmu_topup_memory_caches+0x70/0x2b0 [ 2321.945428][T27527] kvm_mmu_load+0x28/0xba0 [ 2321.949913][T27527] ? kvm_apic_has_interrupt+0x7c/0xf0 [ 2321.955297][T27527] vcpu_enter_guest+0x268b/0x3740 [ 2321.960337][T27527] ? debug_smp_processor_id+0x3f/0x129 [ 2321.965810][T27527] ? fpregs_mark_activate+0x79/0x160 [ 2321.971154][T27527] ? __this_cpu_preempt_check+0x3c/0x130 [ 2321.976875][T27527] kvm_arch_vcpu_ioctl_run+0x281/0xd60 [ 2321.982354][T27527] kvm_vcpu_ioctl+0x70b/0x9d0 [ 2321.987099][T27527] ? tomoyo_file_ioctl+0x30/0x40 [ 2321.992052][T27527] ? kvm_vcpu_block+0x730/0x730 [ 2321.996983][T27527] ksys_ioctl+0x101/0x150 [ 2322.001415][T27527] __x64_sys_ioctl+0x47/0x60 [ 2322.006009][T27527] do_syscall_64+0xc7/0x3b0 [ 2322.010534][T27527] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2322.016519][T27527] RIP: 0033:0x45ca29 [ 2322.020500][T27527] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2322.040711][T27527] RSP: 002b:00007f46a1a84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2322.049162][T27527] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29 [ 2322.057138][T27527] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2322.065128][T27527] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2322.073104][T27527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2322.081080][T27527] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a856d4 18:19:39 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:39 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x700000000000000}]) 18:19:39 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 18:19:39 executing program 5 (fault-call:11 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:19:39 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000}, 0x0, 0x0) [ 2322.340888][ T27] audit: type=1804 audit(5885547579.592:1555): pid=27553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3713/bus" dev="sda1" ino=16380 res=1 [ 2322.428907][T27557] FAULT_INJECTION: forcing a failure. [ 2322.428907][T27557] name failslab, interval 1, probability 0, space 0, times 0 [ 2322.453365][ T27] audit: type=1800 audit(5885547579.592:1556): pid=27553 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16380 res=0 [ 2322.498203][T27557] CPU: 0 PID: 27557 Comm: syz-executor.5 Not tainted 5.7.0-rc1-syzkaller #0 [ 2322.506927][T27557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2322.517016][T27557] Call Trace: [ 2322.520347][T27557] dump_stack+0x11d/0x187 [ 2322.524693][T27557] should_fail.cold+0x5/0xf [ 2322.529253][T27557] __should_failslab+0x82/0xb0 [ 2322.534022][T27557] should_failslab+0x5/0xf [ 2322.538460][T27557] kmem_cache_alloc+0x23/0x5e0 [ 2322.543254][T27557] ? __gfn_to_pfn_memslot+0x36c/0xa60 [ 2322.548728][T27557] mmu_topup_memory_caches+0x70/0x2b0 [ 2322.554107][T27557] kvm_mmu_load+0x28/0xba0 [ 2322.558533][T27557] ? kvm_apic_has_interrupt+0x7c/0xf0 [ 2322.563916][T27557] vcpu_enter_guest+0x268b/0x3740 [ 2322.568962][T27557] ? debug_smp_processor_id+0x3f/0x129 [ 2322.574460][T27557] ? fpregs_mark_activate+0x79/0x160 [ 2322.579748][T27557] ? __this_cpu_preempt_check+0x3c/0x130 [ 2322.585393][T27557] kvm_arch_vcpu_ioctl_run+0x281/0xd60 [ 2322.590892][T27557] kvm_vcpu_ioctl+0x70b/0x9d0 [ 2322.595585][T27557] ? tomoyo_file_ioctl+0x30/0x40 [ 2322.600675][T27557] ? kvm_vcpu_block+0x730/0x730 [ 2322.605539][T27557] ksys_ioctl+0x101/0x150 [ 2322.609886][T27557] __x64_sys_ioctl+0x47/0x60 [ 2322.614538][T27557] do_syscall_64+0xc7/0x3b0 [ 2322.619058][T27557] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2322.624952][T27557] RIP: 0033:0x45ca29 [ 2322.628912][T27557] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:19:39 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x800000000000000}]) [ 2322.648549][T27557] RSP: 002b:00007f46a1a62c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2322.656965][T27557] RAX: ffffffffffffffda RBX: 00000000004e7fc0 RCX: 000000000045ca29 [ 2322.665049][T27557] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2322.673022][T27557] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2322.681008][T27557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 2322.689010][T27557] R13: 00000000000003c6 R14: 00000000004c6703 R15: 00007f46a1a636d4 [ 2322.752439][ T27] audit: type=1804 audit(5885547579.622:1557): pid=27553 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3713/bus" dev="sda1" ino=16380 res=1 [ 2322.856198][T20829] usb 3-1: new high-speed USB device number 37 using dummy_hcd 18:19:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x7fffffffffffffff}]) [ 2322.944555][T20829] usb 3-1: Using ep0 maxpacket: 8 [ 2323.146985][T20829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2323.183787][T20829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:19:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x8000000000000000}]) 18:19:40 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) 18:19:40 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00020000000000}, 0x0, 0x0) [ 2323.404698][T20829] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2323.426119][T20829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:19:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0xffefffffff7f0000}]) 18:19:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2323.468608][T20829] usb 3-1: Product: syz [ 2323.488376][T20829] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2323.607976][T20829] usb 3-1: SerialNumber: syz [ 2323.681219][ T27] audit: type=1804 audit(5885547580.932:1558): pid=27593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3714/bus" dev="sda1" ino=16380 res=1 [ 2323.774697][ T27] audit: type=1800 audit(5885547580.932:1559): pid=27593 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16380 res=0 [ 2323.840561][ T27] audit: type=1804 audit(5885547580.942:1560): pid=27593 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3714/bus" dev="sda1" ino=16380 res=1 [ 2323.953915][T20829] usb 3-1: 0:2 : does not exist [ 2323.973918][T20829] usb 3-1: USB disconnect, device number 37 18:19:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:41 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0xffffffff00000000}]) 18:19:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x2, 0x0) 18:19:41 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, 0x0, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:41 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000}, 0x0, 0x0) 18:19:41 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0xffffffffff600000}]) [ 2324.648079][ T27] audit: type=1804 audit(5885547581.902:1561): pid=27628 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3715/bus" dev="sda1" ino=16382 res=1 18:19:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x10, 0x0) [ 2324.733436][ T27] audit: type=1800 audit(5885547581.932:1562): pid=27628 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 [ 2324.833835][ T6058] usb 3-1: new high-speed USB device number 38 using dummy_hcd 18:19:42 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0xffffffffffffff7f}]) [ 2324.944481][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:19:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4c01, 0x0) 18:19:42 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x2}]) [ 2325.164554][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.188978][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:19:42 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000}, 0x0, 0x0) 18:19:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x541b, 0x0) [ 2325.394669][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2325.413937][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.448394][ T6058] usb 3-1: Product: syz [ 2325.454987][ T6058] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2325.489376][ T6058] usb 3-1: SerialNumber: syz [ 2325.823974][ T6058] usb 3-1: 0:2 : does not exist [ 2325.849359][ T6058] usb 3-1: USB disconnect, device number 38 18:19:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:43 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x3}]) 18:19:43 executing program 0 (fault-call:4 fault-nth:0): creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5421, 0x0) 18:19:43 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000000100", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SSIDS={0x30, 0x2d, 0x0, 0x1, [{0xa, 0x0, [0x18, 0xf, 0x20, 0x20, 0x15, 0x20]}, {0x8, 0x0, [0x1b, 0x3, 0x1c, 0x15]}, {0x6, 0x0, [0x10, 0x19]}, {0x6, 0x0, [0x1, 0x1a]}, {0x5, 0x0, [0x20]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0xfffff29e, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="340000004950aa71d42d004641378a253595dcd01a7e443a9531dc79279dc8dafabd62551150d06569b95dddca3205e40455964ae8dbd220"], &(0x7f0000000340)=0x3c) syz_emit_ethernet(0x6d, &(0x7f0000000400)={@random="514c7a2e1940", @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x33, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, r4, 0x0, 0x0, 0x5}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x100, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000000240)={'bond0\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000080)) 18:19:43 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00000000000000}, 0x0, 0x0) [ 2326.322901][T27707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:19:43 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x4}]) 18:19:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5450, 0x0) [ 2326.505004][T27707] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:19:44 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x5}]) 18:19:44 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0xf21, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x6e04140}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x114) syz_emit_ethernet(0x81, &(0x7f00000004c0)={@local, @link_local, @val={@void}, {@mpls_uc={0x8847, {[{0x9}, {0xffeff, 0x0, 0x1}, {0x6}, {0x5698}, {0x7, 0x0, 0x1}], @ipv6=@icmpv6={0x6, 0x6, "9c4ce2", 0x0, 0x3a, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, {[@dstopts={0x3a, 0x0, [], [@generic={0x1, 0x0, "bb3efcda9c1b3c334bc7d430b3ca0af3c64edd0a45d7403d6cf4f17bb398d10c23e19e08b742e1e12c475f359ba092a5c42d787d33efe04eb4f1ba2f9f85c681955e4353c8824ff93fffe7787651be24a28eadaae319"}, @ra={0x5, 0x2, 0xff00}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x0, @dev={0xfe, 0x80, [], 0xb}}, @hao={0xc9, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x0, {0x3, 0x0, 0x1, 0xa847, [0x8, 0xc5b, 0x8001]}}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @param_prob={0x4, 0x0, 0x0, 0x1f, {0x5, 0x6, "cfc99f", 0x9, 0x3c, 0x1, @ipv4={[], [], @broadcast}, @dev={0xfe, 0x80, [], 0x32}, [@dstopts={0x2e, 0x0, [], [@enc_lim={0x4, 0x1, 0x40}]}, @routing={0x2e, 0x0, 0x1, 0x80, 0x0, [@mcast2, @mcast1, @mcast2]}, @dstopts={0x2c, 0x0, [], [@calipso={0x7, 0x0, {0x0, 0x0, 0x2, 0x4, [0x4, 0x5, 0x3, 0x7, 0x3, 0x6b4]}}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0]}]}, @srh={0x2b, 0x0, 0x4, 0x0, 0xff, 0x68, 0x8, [@ipv4={[], [], @broadcast}, @local, @local]}, @hopopts={0x2b, 0x0, [], [@calipso={0x7, 0x0, {0x2, 0x0, 0x4, 0xffff, [0x4, 0x1]}}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x12, 0x0, 0x0, 0x6, 0x0, [@initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @rand_addr=0x64010100}]}, @routing={0x2f, 0x0, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, [], 0x21}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}, @hopopts={0xc, 0x0, [], [@padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x0, "46fb52742a551461c7791eaa0a3ea6a60af83b7418b1e836d118768f3f44a379f8802ffdbff26f7999"}, @pad1, @generic={0x6, 0x0, "7c96dcc64cf60bde0b13dee292a568501fdbeeb2be9dcfd120b6d419cabd12e98c8e03c133a498791e9e3f03314d9e2fb0c1"}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x0, {0x0, 0x0, 0xbb, 0x6, [0x0, 0xfffffffffffffffc, 0x1, 0x8001, 0x8, 0x69]}}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x6c, 0x0, 0x2, 0x1f, 0x0, [@mcast1, @local, @loopback, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={[], [], @remote}]}], "ea2034e86a71a6ef2e513d8dc66dadb825925a8a57a02a65e3dbe7cb18bc9c1cdae5133862b4f05c5637b0c2eb324a2051cd4bab04f97dee5430c308b10ab9105a5abc23ba9af7c55fa3837668e214af0444"}}}}}}}}, 0x0) [ 2326.698422][T20829] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2326.825544][T20829] usb 3-1: Using ep0 maxpacket: 8 18:19:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5451, 0x0) 18:19:44 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x7}]) [ 2327.034560][T20829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2327.074534][T20829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2327.160555][T27717] FAULT_INJECTION: forcing a failure. [ 2327.160555][T27717] name failslab, interval 1, probability 0, space 0, times 0 [ 2327.206198][T27717] CPU: 1 PID: 27717 Comm: syz-executor.0 Not tainted 5.7.0-rc1-syzkaller #0 [ 2327.214898][T27717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2327.225614][T27717] Call Trace: [ 2327.228913][T27717] dump_stack+0x11d/0x187 [ 2327.233258][T27717] should_fail.cold+0x5/0xf [ 2327.237798][T27717] __should_failslab+0x82/0xb0 [ 2327.242554][T27717] should_failslab+0x5/0xf [ 2327.246988][T27717] kmem_cache_alloc_trace+0x26/0x5f0 [ 2327.252283][T27717] ? __schedule+0x30f/0x6b0 [ 2327.256789][T27717] ? rwsem_optimistic_spin+0x13d/0x340 [ 2327.262351][T27717] iomap_dio_rw+0x11f/0x9a0 [ 2327.266913][T27717] ? rwsem_down_read_slowpath+0x45a/0xa10 [ 2327.272648][T27717] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2327.278604][T27717] ? ext4_inode_journal_mode+0x8d/0x260 [ 2327.284155][T27717] ? ext4_file_read_iter+0x2b4/0x360 [ 2327.289457][T27717] ext4_file_read_iter+0x2b4/0x360 [ 2327.294585][T27717] new_sync_read+0x306/0x450 [ 2327.299193][T27717] __vfs_read+0x9e/0xb0 [ 2327.303354][T27717] vfs_read+0x13e/0x2b0 [ 2327.307515][T27717] ksys_read+0xc5/0x1a0 [ 2327.311760][T27717] __x64_sys_read+0x49/0x60 [ 2327.316316][T27717] do_syscall_64+0xc7/0x3b0 [ 2327.320832][T27717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2327.326725][T27717] RIP: 0033:0x45ca29 [ 2327.330632][T27717] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2327.350243][T27717] RSP: 002b:00007f9eb54bfc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2327.358793][T27717] RAX: ffffffffffffffda RBX: 00000000004fad40 RCX: 000000000045ca29 [ 2327.366786][T27717] RDX: 0000000000001000 RSI: 0000000020000a00 RDI: 0000000000000004 [ 2327.374787][T27717] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2327.383103][T27717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 2327.391073][T27717] R13: 000000000000087c R14: 00000000004cb55f R15: 00007f9eb54c06d4 [ 2327.513748][T20829] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2327.522853][T20829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.531070][T20829] usb 3-1: Product: syz [ 2327.535395][T20829] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2327.563860][T20829] usb 3-1: SerialNumber: syz [ 2327.903747][T20829] usb 3-1: 0:2 : does not exist [ 2327.912470][T20829] usb 3-1: USB disconnect, device number 39 18:19:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:45 executing program 3: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x40, @private0={0xfc, 0x0, [], 0x1}, 0xe}], 0x1c) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000030000380080001000000000014000200697076eb696e30000000000000000000080003000000000008000500e0"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x110, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x3b}}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x30}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xe000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9f48803d}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0000000f74300001312997a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) 18:19:45 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x8}]) 18:19:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5452, 0x0) 18:19:45 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0x0) 18:19:45 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1000) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2328.428002][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 2328.428019][ T27] audit: type=1804 audit(5885547585.682:1567): pid=27798 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3717/bus" dev="sda1" ino=16353 res=1 [ 2328.482595][ T27] audit: type=1800 audit(5885547585.712:1568): pid=27798 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16353 res=0 [ 2328.496866][T27805] IPVS: Unknown mcast interface: ipvin0 [ 2328.506179][ T27] audit: type=1804 audit(5885547585.752:1569): pid=27798 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3717/bus" dev="sda1" ino=16353 res=1 [ 2328.575625][T27805] IPVS: Unknown mcast interface: ipvin0 18:19:45 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x21}]) 18:19:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5460, 0x0) 18:19:45 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) tee(r0, r1, 0xc0f, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xca, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd672b9d0800903a00fc020000000000000000000000000001ff02000c000000000000000000000001010e023d00000000fe8000000000000000000000000002bb20010094dc077ddae0cb360000000002fc010000000000000000000000000000ff01000000000000000000000000000100000000000000000000000000000001fc020000000000d80000000000000001158900400000000000000000000001018400907802000700fe8000000000000000000000000000bafb4ed161bb6f420303f4b885a3635bf0e046a6416ab70568562af1f07b49385d91ae50ad3ebe7ef3f23a"], 0x0) [ 2328.815941][ T6058] usb 3-1: new high-speed USB device number 40 using dummy_hcd 18:19:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x300}]) [ 2328.926482][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:19:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x6364, 0x0) 18:19:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x500}]) [ 2329.136202][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.158424][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2329.357174][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2329.386669][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.409718][ T6058] usb 3-1: Product: syz [ 2329.421753][ T6058] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2329.483643][ T6058] usb 3-1: SerialNumber: syz [ 2329.816697][ T6058] usb 3-1: 0:2 : does not exist [ 2329.844699][ T6058] usb 3-1: USB disconnect, device number 40 18:19:47 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x700}]) 18:19:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8933, 0x0) 18:19:47 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x300) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:47 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000}, 0x0, 0x0) [ 2330.341666][ T27] audit: type=1804 audit(5885547587.582:1570): pid=27876 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3718/bus" dev="sda1" ino=16346 res=1 [ 2330.450371][ T27] audit: type=1800 audit(5885547587.622:1571): pid=27876 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16346 res=0 18:19:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x4000}]) [ 2330.575333][ T27] audit: type=1804 audit(5885547587.622:1572): pid=27876 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3718/bus" dev="sda1" ino=16346 res=1 18:19:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8946, 0x0) 18:19:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x60ff}]) [ 2330.723552][ T6058] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2330.824139][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:19:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8953, 0x0) 18:19:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x7900}]) [ 2331.023600][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2331.043184][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:19:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xb900}]) 18:19:48 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000}, 0x0, 0x0) [ 2331.234421][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2331.261903][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2331.291090][ T6058] usb 3-1: Product: syz [ 2331.305283][ T6058] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2331.398775][ T6058] usb 3-1: SerialNumber: syz [ 2331.439728][ T27] audit: type=1804 audit(5885547588.682:1573): pid=27888 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3718/bus" dev="sda1" ino=16346 res=1 [ 2331.502992][ T27] audit: type=1800 audit(5885547588.682:1574): pid=27888 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16346 res=0 [ 2331.537816][ T27] audit: type=1804 audit(5885547588.682:1575): pid=27892 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3718/bus" dev="sda1" ino=16346 res=1 [ 2331.743594][ T6058] usb 3-1: 0:2 : does not exist [ 2331.759967][ T6058] usb 3-1: USB disconnect, device number 41 18:19:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) 18:19:49 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x600) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x400000}]) 18:19:49 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d00000000000000}, 0x0, 0x0) [ 2332.324752][ T27] audit: type=1804 audit(5885547589.572:1576): pid=27964 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3719/bus" dev="sda1" ino=16331 res=1 18:19:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x407400}]) 18:19:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x40049409, 0x0) [ 2332.593466][T10145] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2332.694176][T10145] usb 3-1: Using ep0 maxpacket: 8 18:19:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x53b000}]) 18:19:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) [ 2332.894041][T10145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2332.915790][T10145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:19:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x73b000}]) [ 2333.114186][T10145] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2333.132304][T10145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.172442][T10145] usb 3-1: Product: syz [ 2333.201290][T10145] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 18:19:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x744000}]) 18:19:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) [ 2333.333438][T10145] usb 3-1: SerialNumber: syz [ 2333.586962][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 2333.586981][ T27] audit: type=1804 audit(5885547590.832:1579): pid=27972 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3719/bus" dev="sda1" ino=16331 res=1 [ 2333.693467][T10145] usb 3-1: 0:2 : does not exist [ 2333.701616][ T27] audit: type=1800 audit(5885547590.832:1580): pid=27972 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16331 res=0 [ 2333.734147][T10145] usb 3-1: USB disconnect, device number 42 [ 2333.783030][ T27] audit: type=1804 audit(5885547590.832:1581): pid=27973 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3719/bus" dev="sda1" ino=16331 res=1 18:19:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x0, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:51 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000}, 0x0, 0x0) 18:19:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x790000}]) 18:19:51 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x820) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x40186366, 0x0) 18:19:51 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) syz_emit_ethernet(0x8b, &(0x7f0000000000)=ANY=[], 0x0) sysfs$2(0x2, 0x0, &(0x7f00000000c0)=""/192) [ 2334.241702][ T27] audit: type=1804 audit(5885547591.482:1582): pid=28051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3720/bus" dev="sda1" ino=16351 res=1 [ 2334.332069][ T27] audit: type=1800 audit(5885547591.482:1583): pid=28051 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 18:19:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xb05300}]) 18:19:51 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b89c5d56700007d5af0beeb4615b463d24921e7059fa6cf99614852646b9faac69d98c9497c00000000000000"], 0x0) [ 2334.449973][ T27] audit: type=1804 audit(5885547591.492:1584): pid=28051 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3720/bus" dev="sda1" ino=16351 res=1 18:19:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 2334.573359][T10145] usb 3-1: new high-speed USB device number 43 using dummy_hcd 18:19:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xb07300}]) [ 2334.674045][T10145] usb 3-1: Using ep0 maxpacket: 8 18:19:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 18:19:52 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x80044d17, &(0x7f0000000180)) fcntl$setsig(r0, 0xa, 0x3b) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000100)={0x6, 0x7, 0x4, 0x200000, 0x3, {r5, r6/1000+60000}, {0x1, 0x2, 0x10, 0x80, 0x1, 0x6, "cc63e61f"}, 0x0, 0x4, @fd, 0x9, 0x0, r0}) ioctl$KDSIGACCEPT(r7, 0x4b4e, 0x33) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @link_local, @val={@void}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @local, @mcast2, @multicast, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}}}, 0x0) [ 2334.874318][T10145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2334.895474][T10145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2335.074230][T10145] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2335.091525][T10145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2335.143388][T10145] usb 3-1: Product: syz [ 2335.147659][T10145] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2335.205984][T10145] usb 3-1: SerialNumber: syz [ 2335.247735][ T27] audit: type=1804 audit(5885547592.492:1585): pid=28062 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3720/bus" dev="sda1" ino=16351 res=1 [ 2335.278200][ T27] audit: type=1800 audit(5885547592.492:1586): pid=28062 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 [ 2335.303607][ T27] audit: type=1804 audit(5885547592.492:1587): pid=28066 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3720/bus" dev="sda1" ino=16351 res=1 [ 2335.563996][T10145] usb 3-1: 0:2 : does not exist [ 2335.583928][T10145] usb 3-1: USB disconnect, device number 43 18:19:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 18:19:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xb90000}]) 18:19:53 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000006c0)={0xc, @multicast1, 0x4e24, 0x3, 'fo\x00', 0x21, 0x9, 0x7}, 0x2c) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/103, 0x67}], 0x1}}, {{&(0x7f0000000140)=@nfc, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f0000000240)=""/49, 0x31}, {&(0x7f0000000280)=""/145, 0x91}], 0x3, &(0x7f0000000380)=""/70, 0x46}, 0x3ff}], 0x2, 0x0, &(0x7f0000000580)={r2, r3+10000000}) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x9, 0xf07, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:19:53 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0) 18:19:53 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x840) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) [ 2336.063622][ T27] audit: type=1804 audit(5885547593.313:1588): pid=28136 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3721/bus" dev="sda1" ino=16336 res=1 18:19:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x1000000}]) 18:19:53 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7d, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101240", 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) dup(r0) 18:19:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) [ 2336.393295][T20829] usb 3-1: new high-speed USB device number 44 using dummy_hcd 18:19:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x2000000}]) 18:19:53 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xffff}]}}]}, 0x4c}}, 0x0) r4 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r4) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=@newpolicy={0x260, 0x13, 0x2, 0x70bd2c, 0x25dfdbff, {{@in6=@private2, @in=@broadcast, 0x4e22, 0x585, 0x4e24, 0x7, 0x2, 0x20, 0x80, 0x4, r3, r4}, {0x0, 0x7e4, 0x54b, 0x5, 0x10000, 0x4, 0x100, 0x5}, {0x80000001, 0x100000001, 0x1, 0x3}, 0x7f, 0x6e6bbe, 0x2, 0x0, 0x2, 0x3}, [@tmpl={0x184, 0x5, [{{@in=@rand_addr=0x64010101, 0x4d2, 0x33}, 0x2, @in=@local, 0x3504, 0x1, 0x1, 0x4e, 0x7, 0x800, 0x20}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@remote, 0x3505, 0x4, 0x2, 0x1, 0x1, 0x8, 0x3}, {{@in=@empty, 0x4d6, 0x2b}, 0x0, @in=@multicast1, 0x3506, 0x3, 0x2, 0x1, 0x7, 0x5, 0x3006}, {{@in=@multicast1, 0x4d4, 0x6c}, 0xa, @in6=@empty, 0x3501, 0x0, 0x3, 0x0, 0x10000, 0x1, 0xed}, {{@in=@multicast2, 0x4d2, 0x2b}, 0xa, @in=@multicast1, 0x3507, 0x1, 0x0, 0x4, 0xffffffff, 0x10, 0x6f6}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d4, 0x2a}, 0xa, @in=@empty, 0x3507, 0x0, 0x2, 0x1, 0x3, 0xda, 0x63c}]}, @lifetime_val={0x24, 0x9, {0x2, 0xfff, 0xffffffff, 0x8}}]}, 0x260}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000001) fdatasync(0xffffffffffffffff) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x48000) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) [ 2336.486011][T20829] usb 3-1: Using ep0 maxpacket: 8 18:19:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) [ 2336.606427][T28174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2336.695899][T20829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2336.714726][T20829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2336.739863][T28180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:19:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x3000000}]) 18:19:54 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0x0) [ 2336.894056][T20829] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2336.913240][T20829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.921980][T20829] usb 3-1: Product: syz [ 2336.957619][T20829] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 18:19:54 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe800009e600000000000000000000aa0000000000000000000000ff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) [ 2337.061132][T20829] usb 3-1: SerialNumber: syz 18:19:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 18:19:54 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x860) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2337.413261][T20829] usb 3-1: 0:2 : does not exist [ 2337.446019][T20829] usb 3-1: USB disconnect, device number 44 18:19:55 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x4000000}]) 18:19:55 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_DIRTY_TLB(r3, 0x4010aeaa, &(0x7f0000000080)={0xfffffffffffffc1c, 0x730}) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) 18:19:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x80086301, 0x0) 18:19:55 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x880) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:55 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f000000000000}, 0x0, 0x0) 18:19:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x5000000}]) 18:19:55 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000340", 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:19:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) [ 2338.225674][ T6058] usb 3-1: new high-speed USB device number 45 using dummy_hcd 18:19:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x7000000}]) [ 2338.346416][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:19:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000000)={0x67, 0x4, 0x0, 0x7f, 0xfffff160, 0xa642, 0x20}) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) dup3(r2, r0, 0x80000) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:19:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8108551b, 0x0) [ 2338.586644][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2338.602697][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2338.784242][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2338.796353][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.804817][ T6058] usb 3-1: Product: syz [ 2338.810354][ T6058] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2338.881925][ T6058] usb 3-1: SerialNumber: syz [ 2338.952008][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 2338.952030][ T27] audit: type=1804 audit(5885547596.193:1603): pid=28272 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3723/bus" dev="sda1" ino=16342 res=1 [ 2338.990416][ T27] audit: type=1800 audit(5885547596.193:1604): pid=28272 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16342 res=0 [ 2339.009847][ T27] audit: type=1804 audit(5885547596.193:1605): pid=28274 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3723/bus" dev="sda1" ino=16342 res=1 [ 2339.243218][ T6058] usb 3-1: 0:2 : does not exist [ 2339.249700][ T6058] usb 3-1: USB disconnect, device number 45 18:19:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:56 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={r2, 0x0, 0x9, 0x9, 0xbef, 0x80}, &(0x7f0000000080)=0x14) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 18:19:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x8000000}]) 18:19:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 18:19:56 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d01000000000000}, 0x0, 0x0) 18:19:56 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x8a0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2339.700162][ T27] audit: type=1804 audit(5885547596.943:1606): pid=28324 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3724/bus" dev="sda1" ino=16336 res=1 [ 2339.797740][ T27] audit: type=1800 audit(5885547596.943:1607): pid=28324 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16336 res=0 [ 2339.817276][ T27] audit: type=1804 audit(5885547596.943:1608): pid=28324 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3724/bus" dev="sda1" ino=16336 res=1 18:19:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x20000000}]) 18:19:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 18:19:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x21000000}]) [ 2340.063254][ T6058] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2340.153871][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:19:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 18:19:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xff600000}]) [ 2340.363118][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2340.383242][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:19:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 2340.491378][ T27] audit: type=1804 audit(5885547597.733:1609): pid=28328 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3724/bus" dev="sda1" ino=16336 res=1 [ 2340.519486][ T27] audit: type=1800 audit(5885547597.733:1610): pid=28328 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16336 res=0 [ 2340.550995][ T27] audit: type=1804 audit(5885547597.733:1611): pid=28338 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3724/bus" dev="sda1" ino=16336 res=1 [ 2340.615995][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2340.625725][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.637536][ T6058] usb 3-1: Product: syz [ 2340.641742][ T6058] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2340.680723][ T6058] usb 3-1: SerialNumber: syz [ 2341.013144][ T6058] usb 3-1: 0:2 : does not exist [ 2341.021687][ T6058] usb 3-1: USB disconnect, device number 46 18:19:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3a, &(0x7f00000003c0)={0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:19:58 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x8c0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:19:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x2000000000}]) 18:19:58 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c15000000000000}, 0x0, 0x0) 18:19:58 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:19:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc0105512, 0x0) [ 2341.565020][ T27] audit: type=1804 audit(5885547598.813:1612): pid=28424 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3725/bus" dev="sda1" ino=16313 res=1 18:19:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x2100000000}]) 18:19:58 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@broadcast, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:19:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) [ 2341.842998][T10145] usb 3-1: new high-speed USB device number 47 using dummy_hcd 18:19:59 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x3e80000000}]) [ 2341.943982][T10145] usb 3-1: Using ep0 maxpacket: 8 18:19:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 18:19:59 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x20) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, [], [{0x4, 0x9050, 0x7fc, 0x0, 0x0, 0x2}, {0x80000000, 0xfffffffc, 0x3f, 0x1, 0x9, 0x2}], [[], [], [], [], [], []]}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) [ 2342.143938][T10145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2342.164116][T10145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2342.364360][T10145] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2342.381188][T10145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2342.411632][T10145] usb 3-1: Product: syz [ 2342.422607][T10145] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2342.482447][T10145] usb 3-1: SerialNumber: syz [ 2342.803027][T10145] usb 3-1: 0:2 : does not exist [ 2342.811466][T10145] usb 3-1: USB disconnect, device number 47 18:20:00 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3a, &(0x7f00000003c0)={0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:20:00 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaa08aaaaaa0980c20000008100a3004000472c00fe8000000000000000000000000000aa00000000000000000000010000000001000000000000000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r0], 0x0) 18:20:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x803e000000}]) 18:20:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 18:20:00 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02000000000000}, 0x0, 0x0) 18:20:00 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x8e0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:00 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000140)={0x1, 0x4, 0x4, 0x400000, 0x5, {r3, r4/1000+10000}, {0x3, 0x2, 0x40, 0x1, 0x2, 0x5, "f35cd04b"}, 0xc68b028, 0x4, @fd, 0x3, 0x0, 0xffffffffffffffff}) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f00000001c0)={0x400, 0x1000, 0x3, 0x1}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x990000, 0xffffffff, 0x1, r0, 0x0, &(0x7f0000000000)={0xa20001, 0x0, [], @value=0xffff}}) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 18:20:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x400000000000}]) 18:20:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2) 18:20:00 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00df800013f57a1a0000000000000000aa00000000004600000000ffff7f0000010000000071cdbcd33f177abcb54a131e7eea336bf37ef28035bc10953da0687f5c03da6a424f976f4988a5e9d626c3c101667ec385c457907dbd397524b0e540b8f4e1833728b1c813dea11af6f33fee1a294ad7ed3147e2c68ba259219aecbbe6366544c6db6ceb58484519cc7171ccf8e5e2d50f04e9d38d09c1009d703a48037f05f0e3b2fd96b943b8277b49f3670e5c12bc8644bdbf0e387a07be32171e1c77c13664cc63", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) [ 2343.632928][ T6058] usb 3-1: new high-speed USB device number 48 using dummy_hcd 18:20:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x60ffffffffff}]) 18:20:01 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6d, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x33, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) [ 2343.746306][ T6058] usb 3-1: Using ep0 maxpacket: 8 [ 2343.953653][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2343.982987][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2344.138620][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2344.138639][ T27] audit: type=1804 audit(5885547601.383:1621): pid=28507 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3726/bus" dev="sda1" ino=16193 res=1 [ 2344.173548][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2344.187318][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.220627][ T6058] usb 3-1: Product: syz [ 2344.236255][ T6058] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2344.272921][ T27] audit: type=1800 audit(5885547601.383:1622): pid=28507 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16193 res=0 [ 2344.294278][ T6058] usb 3-1: SerialNumber: syz [ 2344.299570][ T27] audit: type=1804 audit(5885547601.423:1623): pid=28509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3726/bus" dev="sda1" ino=16193 res=1 [ 2344.662936][ T6058] usb 3-1: 0:2 : does not exist [ 2344.671049][ T6058] usb 3-1: USB disconnect, device number 48 18:20:02 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3a, &(0x7f00000003c0)={0x5, 0xf, 0x3a, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x2, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}, {0xba, &(0x7f0000001880)=@string={0xba, 0x3, "3331e99c22c4a773d4fb2ef8624d7454d177055e54fda8f9031e4b7f641e8cbf5f99ab5a213569547e33f3fcc804a9c436edd16bd3941fe41a7cce7c25d8fe9336974af9bdb1da44eed454d743c39ff7361e00021460592f68ffc004f7d621c1a916334de8bb62e7926ff13dc8aed2c2a75ccebe1df23332e757d5e77120b71375c882c3dc4b14fc0139f049d00fb75be00143dc17e6d9f0a8d7d519ec7193b3df32b1e9a981320f91a68505ff6f2dd66973e78bbbc133b3"}}]}) 18:20:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3) 18:20:02 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x85, &(0x7f0000000000)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x4b, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}, @mss={0x2, 0x4, 0x3}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:02 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x790000000000}]) 18:20:02 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd951e8a52000000}, 0x0, 0x0) 18:20:02 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x900) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2345.154543][ T27] audit: type=1804 audit(5885547602.403:1624): pid=28568 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3727/bus" dev="sda1" ino=16351 res=1 [ 2345.236204][ T27] audit: type=1800 audit(5885547602.403:1625): pid=28568 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 18:20:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa000040004784dcc64a42000000000000000000000000aa00000000000000000000ffff7f0000010000000000000000000000000d0000002000fec41ebd79f4fcc8d232eb5f8534850e0ff746f52fa80fc4ed6f2105dda7eaaecb337484c1a9457d234ac24bf8edc0440f2661fe52b20e861fe35c07e234ee6cbdbcf3e7c08586f3b0549cd24c00e2d8a320d86c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)=""/204, 0xcc}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/118, 0x76}, {&(0x7f00000003c0)=""/112, 0x70}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/64, 0x40}, {&(0x7f0000000580)=""/116, 0x74}], 0x9, &(0x7f00000006c0)=""/19, 0x13}, 0x40) 18:20:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4) [ 2345.336940][ T27] audit: type=1804 audit(5885547602.403:1626): pid=28568 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3727/bus" dev="sda1" ino=16351 res=1 18:20:02 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x7f191b3e9000}]) [ 2345.502864][ T9168] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2345.593629][ T9168] usb 3-1: Using ep0 maxpacket: 8 18:20:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x5) 18:20:02 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x7fffffffefff}]) 18:20:03 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x0, 0x3, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @multicast]}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000030000380080001000000000014000200697076eb696e30000000000000000000080003000000000008000500e0"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r4, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x822a8c8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) syz_emit_ethernet(0x99, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa8100000086dd60a80000005f2c01fe8000000000000000000000000000aa00000000000000000000ffff7f0000015c001ff865000000560080896700000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c000000090780005000022053c622dfe12f9897d6b3e8156e92eb5d904491b0a370000007d5a2000000100000000000000059fa6cfffff4852044cf8099f05009d98c9d988fd936d23c375d13654a61434f0ba76ba7b0cb9eb7be36a28df0fc61e120562fc987ad3b8caf05c7370d28dffebccb955cf50e54ec80281d54f2ccb8905bfda62dc1d55de0b8621e2302d203cd1809b54c9884e1661df85d6eab1da5f07ecabe7550897a61058ad166bfbda8aead74d018d3182e11b"], 0x0) [ 2345.815823][ T9168] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2345.845931][ T9168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2346.023635][ T9168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2346.040733][ T9168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2346.076263][ T9168] usb 3-1: Product: syz [ 2346.097387][ T9168] usb 3-1: Manufacturer: ㄳ鳩쐢玧ﯔ䵢呴矑帅ﵔ令ḃ罋Ṥ뾌饟媫㔡呩㍾ﳳӈ쒩毑铓簚糎鏾霶壘놽䓚퓮흔썃ḶȀ怔⽙ｨӀ훷섡ᚩ䴳믨澒㷱껈싒岧뻎㈳埧ⁱᎷ졵쎂䯜ﰔ㤁䧰࿐宷Ǡ힨᧕燬뎓㋟膩༲ꚑօ濿혭獩诧솻댳 [ 2346.165333][ T27] audit: type=1804 audit(5885547603.413:1627): pid=28574 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3727/bus" dev="sda1" ino=16351 res=1 [ 2346.188616][ T9168] usb 3-1: SerialNumber: syz [ 2346.194636][ T27] audit: type=1800 audit(5885547603.413:1628): pid=28574 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 [ 2346.214907][ T27] audit: type=1804 audit(5885547603.413:1629): pid=28579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3727/bus" dev="sda1" ino=16351 res=1 [ 2346.522884][ T9168] usb 3-1: 0:2 : does not exist [ 2346.531633][ T9168] usb 3-1: USB disconnect, device number 49 18:20:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:20:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6) 18:20:04 executing program 3: socket$packet(0x11, 0x3, 0x300) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x321002, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:04 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xb90000000000}]) 18:20:04 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000}, 0x0, 0x0) 18:20:04 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x920) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2347.028393][ T27] audit: type=1804 audit(5885547604.273:1630): pid=28645 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3728/bus" dev="sda1" ino=16372 res=1 18:20:04 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x40740000000000}]) 18:20:04 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a009000090780000131299107a853b2140e9e089eb8389c5d57d1334e9499ad187bf6700007d5ad249c69d98c9497c000000000000000000000000000027e513ac048fcdef608b27d22580aae3da646899ad4c26baa2d4d1347dce474135fedceb000000000000005aba29941dcd083a806bbb52d3a9aae071dcbe657cfe7935a21aec85d89d74b927823852ebda867ec990de87c480eb8b9a74d5cabbf1cb60e9190eda1054a9d4d20aea3693f685d233bce4ee6a067835ed31860000dc733c892d2aed353f54045e1658c127d36406c0dd1cc23d79116d6f83e8a631c3ededfd984255f730eeee4be902f2d01f5c842a68ea8cea8dac387dcc3f3fee875e3f8b9fe41d5214e45ff8699e82f46ed50577b44fa148da5e039e22ca59bd56297614718e0d15f62a30a797ae270b"], 0x0) 18:20:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x7) 18:20:04 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x903e1b197f0000}]) [ 2347.362808][ T6058] usb 3-1: new high-speed USB device number 50 using dummy_hcd 18:20:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x8) [ 2347.463498][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:20:04 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f00000000c0), 0x4) socket$packet(0x11, 0x3, 0x300) r1 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r1) ioprio_get$uid(0x3, r1) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000080)={0xa, 0x4, 0xfa00, {r6}}, 0xc) [ 2347.663627][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2347.691696][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2347.882826][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2347.891909][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2347.918868][ T6058] usb 3-1: Product: syz [ 2347.927619][ T6058] usb 3-1: Manufacturer: syz [ 2347.947309][ T6058] usb 3-1: SerialNumber: syz [ 2348.282728][ T6058] usb 3-1: 0:2 : does not exist [ 2348.290756][ T6058] usb 3-1: USB disconnect, device number 50 18:20:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:20:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xb0530000000000}]) 18:20:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x9) 18:20:05 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x12d6, &(0x7f00000004c0)={@local, @empty, @val={@void}, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "8c19eb", 0x129c, 0x2f, 0x0, @ipv4={[], [], @multicast2}, @local, {[@srh={0x6c, 0x4, 0x4, 0x2, 0x2e, 0x70, 0x8000, [@private0={0xfc, 0x0, [], 0x1}, @ipv4={[], [], @multicast1}]}, @dstopts={0x33, 0x5, [], [@pad1, @hao={0xc9, 0x10, @private2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @pad1, @pad1]}, @srh={0x3b, 0xe, 0x4, 0x7, 0xe1, 0x20, 0x3f, [@remote, @private1, @ipv4={[], [], @rand_addr=0x64010101}, @empty, @private2={0xfc, 0x2, [], 0x1}, @empty, @private2={0xfc, 0x2, [], 0x1}]}, @dstopts={0x0, 0x1, [], [@jumbo={0xc2, 0x4, 0x1}, @pad1, @padn={0x1, 0x1, [0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x6f, 0x0, [0x2, 0x7ff], "669f89b8e9dce94e44047f362565526011aa080e1b21efff92e1ffc3af956b126b1c7e0df36f015d9c056ca1df10844d44a5bb05d9ffc870fd023e5bb1de051d385e033db1bd7e889154715104e1264d540ec94133b70a0296963963b45aef375791cf0e7d18ba68d128a4419a5423"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x1, 0x80, 0x2], "2a7d48ac7db67b332bd66018fa2020148289d9c4cf3a4433445efeb9f9dd38819cf4d7b213934cfee2f26482a1b18689a2ac736f0bf8cfa719e5bfc25b11a7df9626c807cc6350e8104f94476ebc9102115f6cd26b0c9f16e0a4eff2908cbc3388b85cad9bd922f98648c0dcfded819f99965473539286dcc87a320d0e040fed49bcd2a4c9fdc0880bb9bc790e7a3353f37c91c7c6f36cdce1c36918712f6178f76cc46ce1073677e7de1e5701de25d8d4fe099c434189274aba0d4fefce07f2b1155b44ade37c7ae2a9e4c7c6077880523e4f903c9620"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x400, 0x3, 0x8], "41ffd1f6e19a96e82048c5a98e6b2cd50549"}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x6, 0x0, 0x1, 0x1, 0x5, 0x8}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x0, {{0xd, 0x2, 0x5, 0x1, 0x1, 0x2, 0x1, 0x4}, 0x2, {0x80000000, 0x20, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x2, "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"}}}}}}}, 0x0) 18:20:05 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}, 0x0, 0x0) 18:20:05 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x940) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xb0730000000000}]) 18:20:06 executing program 3: socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000000)={0x5, 0x7, 0x3, 0x4, 0x1, 0xfffffffffffffe00, 0x59, 0x8}, &(0x7f0000000040)={0xc9, 0x90, 0x80000000, 0xa3a4, 0x3, 0xb322, 0x0, 0x8}, &(0x7f0000000080)={0xfffffffffffffffc, 0x2, 0x875b, 0x4, 0x1, 0x1, 0x1f, 0x3}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x20bc000000000]}, 0x8}) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x1, 0x70bd25, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x11}, 0x4008080) 18:20:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa) 18:20:06 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x208500, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x22000, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000280)={0x0, r1}) syz_emit_ethernet(0x10b, &(0x7f00000000c0)={@remote, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0xd1, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "990009bfaf99c4383894e000"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497cb46c1109919575acb5d0d9903fd3bd4d2879f9a27d7c6be5e8d8dac4711c50da9c2bdd615aa96284bb8e1e513e75abbcdb9e1864ed01e41e1ae429522a23cb5505fcd155712a0d989a72d9f02e3ac678067a7247f0df498a10290e8af61f8c523eb604db75374be9befe9eb0d6e54024556c96f4282812bc0fcc0470880efdfc6ff4e14caed7981497cf"}}}}}}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x109000, 0x0) mq_getsetattr(r2, &(0x7f0000000040)={0x2, 0x38, 0x1, 0xfff}, &(0x7f0000000080)) 18:20:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x100000000000000}]) [ 2349.152712][T12334] usb 3-1: new high-speed USB device number 51 using dummy_hcd 18:20:06 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x12, "9dba495ff6c8ccb93f905bb814d24bfc"}]}}, {"7d5f3e37f5b008d39a5af0beeb4914b463d24921e70507000000000000006b"}}}}}}}, 0x0) [ 2349.268944][T12334] usb 3-1: Using ep0 maxpacket: 8 [ 2349.503482][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2349.531742][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2349.653747][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2349.653766][ T27] audit: type=1804 audit(5885547606.903:1639): pid=28730 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3729/bus" dev="sda1" ino=16341 res=1 [ 2349.703551][ T27] audit: type=1800 audit(5885547606.903:1640): pid=28730 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16341 res=0 [ 2349.724826][ T27] audit: type=1804 audit(5885547606.903:1641): pid=28733 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3729/bus" dev="sda1" ino=16341 res=1 [ 2349.792700][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2349.801903][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.810083][T12334] usb 3-1: Product: syz [ 2349.814516][T12334] usb 3-1: Manufacturer: syz [ 2349.819204][T12334] usb 3-1: SerialNumber: syz [ 2350.152671][T12334] usb 3-1: 0:2 : does not exist [ 2350.161024][T12334] usb 3-1: USB disconnect, device number 51 18:20:07 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}}) 18:20:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x200000000000000}]) 18:20:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xb) 18:20:07 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @link='syz1\x00'}}}, [""]}, 0x68}}, 0x8001) syz_emit_ethernet(0x7d, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, r0, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffd, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:07 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0) 18:20:07 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x960) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2350.654992][ T27] audit: type=1804 audit(5885547607.903:1642): pid=28791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3730/bus" dev="sda1" ino=16387 res=1 [ 2350.721855][ T27] audit: type=1800 audit(5885547607.903:1643): pid=28791 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16387 res=0 18:20:08 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xfffffffffffffe1c, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa2a0180c200000091004e00810000008137ffff0078061100002905ffffffffffff0007ffffffff39e0c29c8eb300403efde21236beb985c270c6b9d3e76fa2b99ae1d9e696566bd7cde32dbbb5b28ea2acd675382fb88ebe303b98fc21076f5bd6e3bab55f4682dfe609537aaa2c5e765caaec28aa441ecfe01da61f776e7a5d417f81c23e26e633b5210c67a1c4908d4c4b28dd6200c7458b643ae6c75bb2313cbb3314ed1d"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000100)={0x0, 0x81, 0x9f, [], &(0x7f00000000c0)=0x1}) [ 2350.768313][ T27] audit: type=1804 audit(5885547607.903:1644): pid=28791 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3730/bus" dev="sda1" ino=16387 res=1 18:20:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x300000000000000}]) 18:20:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc) 18:20:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x13}}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6003000000472c00fe80000000000000000000000000000000000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r4, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0xfffffff, 0x6, 0x673, r4, 0x0, &(0x7f0000000040)={0x9909e0, 0x1, [], @value64=0x100000000}}) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000240)={0xc, 0x8, 0xfa00, {&(0x7f00000000c0)}}, 0x10) 18:20:08 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x400000000000000}]) [ 2351.062592][ T6058] usb 3-1: new high-speed USB device number 52 using dummy_hcd 18:20:08 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) getpid() [ 2351.153451][ T6058] usb 3-1: Using ep0 maxpacket: 8 [ 2351.353217][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2351.402584][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2351.563431][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2351.572769][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2351.580798][ T6058] usb 3-1: Product: syz [ 2351.585376][ T6058] usb 3-1: Manufacturer: syz [ 2351.590812][ T6058] usb 3-1: SerialNumber: syz [ 2351.607572][ T27] audit: type=1804 audit(5885547608.853:1645): pid=28802 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3730/bus" dev="sda1" ino=16387 res=1 [ 2351.633082][ T27] audit: type=1804 audit(5885547608.863:1646): pid=28797 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3730/bus" dev="sda1" ino=16387 res=1 [ 2351.663184][ T27] audit: type=1800 audit(5885547608.863:1647): pid=28797 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16387 res=0 [ 2351.902567][ T6058] usb 3-1: 0:2 : does not exist [ 2351.923102][ T6058] usb 3-1: USB disconnect, device number 52 18:20:09 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}}) 18:20:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xd) 18:20:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x500000000000000}]) 18:20:09 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000000)=""/133) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000e1ffffff0000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) 18:20:09 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 18:20:09 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x980) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2352.465778][ T27] audit: type=1804 audit(5885547609.713:1648): pid=28867 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3731/bus" dev="sda1" ino=16339 res=1 18:20:09 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000beb316eb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) 18:20:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe) 18:20:09 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x700000000000000}]) 18:20:10 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000081000000813709000064090500000000ffffffffffff0005ffffffffffffffffffff0020e36f0f01cff59e2a2164d9078da8207fd962fa12f9292377b7e9c461d63ec4984495b0e4c412a5e3de372081c8a30d926285d1d403bc8b2b5bf980cc332d1df085c3c2a2ff120596e914d9712ba4436cc501d8824c1c533f43631b30ff6febbad2a74bcc3ae20dd9f95fb97ade82061ff85a95f18c038c052f08e40c9d0bd1b90b9fe2fa27831aa3d63c1c86f04dc049f2941772c03007b106"], 0x0) 18:20:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf) [ 2352.812540][T12334] usb 3-1: new high-speed USB device number 53 using dummy_hcd 18:20:10 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x800000000000000}]) [ 2352.923324][T12334] usb 3-1: Using ep0 maxpacket: 8 [ 2353.143361][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2353.161767][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2353.344503][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2353.357101][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2353.377467][T12334] usb 3-1: Product: syz [ 2353.386492][T12334] usb 3-1: Manufacturer: syz [ 2353.396609][T12334] usb 3-1: SerialNumber: syz [ 2353.712535][T12334] usb 3-1: 0:2 : does not exist [ 2353.720795][T12334] usb 3-1: USB disconnect, device number 53 18:20:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x10) 18:20:11 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) dup(r0) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x7fffffffffffffff}]) 18:20:11 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 18:20:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}}) 18:20:11 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x9a0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x8000000000000000}]) 18:20:11 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000004c0)={[0x7cb, 0x5, 0x7f, 0x8, 0x6e24, 0x3, 0x0, 0x9, 0xffffffff, 0x2, 0xfffffffa, 0x5, 0x1000, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0xfffffff9, 0x8000, 0x4, 0x3, 0x5, 0x9, 0xe496, 0x5, 0x8, 0x0, 0x3c49, 0x1, 0x5, 0x9, 0xffffff81, 0x6, 0x7ff, 0xc, 0xffff, 0x4, 0xff, 0x7, 0x9, 0x9, 0x2, 0x401, 0x1000, 0x800, 0x1ff, 0x8000, 0xff, 0x68, 0xcb, 0xb6, 0x5a89, 0x8000, 0x7fff, 0x1f, 0x8, 0xffff, 0x8000, 0xd77c, 0x6c4, 0x0, 0x1, 0x4, 0x8, 0x78b4, 0x9, 0x300, 0x1, 0x4, 0xfff, 0x1, 0x80, 0x10001, 0x401, 0x6, 0x6, 0x267f, 0x200, 0x0, 0x9, 0x100, 0x4, 0x10001, 0x4, 0x6, 0x8, 0x2, 0x10000, 0xff, 0x5, 0x3, 0x6, 0xff, 0xdd23, 0x5, 0x0, 0x3, 0x8, 0xfffffffd, 0xc2d, 0x5, 0x8, 0xe9b, 0x7, 0x6, 0x2, 0x0, 0x1, 0x4, 0x5, 0x1, 0x10001, 0x5, 0x0, 0x1, 0x10001, 0x3, 0x4a63, 0x8001, 0x10001, 0x6, 0x0, 0x8, 0xdd, 0xfffffffb, 0x3, 0xe8, 0x7, 0x7f, 0x10001, 0x1, 0x9db, 0x800, 0x1684, 0x1, 0x7f, 0x1, 0x0, 0x7, 0x8, 0xa, 0xd55, 0x0, 0xfffffffc, 0x8, 0x7, 0x3, 0x0, 0x9, 0x7fffffff, 0x10001, 0x2, 0x9, 0x1, 0xffffffff, 0x1f, 0x2, 0x800, 0x1ff, 0x7, 0x400, 0x180, 0xfff, 0x8, 0x0, 0x101, 0x1f, 0x2, 0x1, 0x8, 0xfffffffe, 0xff, 0x4, 0x8, 0x0, 0x4, 0x7, 0x9, 0xf498, 0x7349c894, 0x3, 0x3, 0xd, 0x7, 0x0, 0x8, 0x800, 0x3, 0x6, 0x5, 0x6, 0x1f, 0x2, 0x100, 0x7, 0xfffffffd, 0x1680000, 0x401, 0x10000, 0x3ca, 0x9, 0x3, 0x3, 0x3, 0x3d, 0x2, 0xb5, 0x0, 0x5b, 0x9, 0x0, 0xdb, 0x5f0a, 0x1f, 0x80000001, 0xffff, 0x200, 0x5, 0x7f, 0x4, 0x1, 0x3f, 0x4, 0x2, 0x9, 0x6, 0x1, 0xc64, 0x6, 0x7, 0x2, 0x401, 0x4f, 0xfff, 0xf89, 0x129, 0x200, 0x7f4, 0x0, 0x10000, 0x401, 0x5, 0x2, 0x7fffffff, 0x8, 0x7ff, 0xbe0, 0x0, 0x401, 0x6, 0xfffffffa, 0x9, 0xb3d8, 0x1, 0x80000001, 0x4, 0x800, 0x0, 0x2, 0xff, 0x3, 0x7, 0x1, 0x3ff, 0x0, 0x5, 0x7, 0x9d17, 0x9, 0x2, 0x0, 0x2, 0x6, 0x0, 0x80000001, 0x0, 0x1, 0x8, 0x4, 0x161, 0x2, 0x80000000, 0x9, 0x3, 0x7, 0xfff, 0x9, 0x892, 0x9, 0x9, 0xfffffd60, 0xe3, 0x9, 0x401, 0x680, 0xffffffff, 0x20, 0x9, 0x3, 0xc9f3, 0x81, 0x4, 0x1f, 0x6, 0x1, 0x6, 0x8, 0x1ff, 0xfffffffc, 0x4, 0x97, 0xb14000, 0x200, 0xc464, 0x4, 0x101, 0x7f, 0x7fff, 0x8, 0x7, 0x3, 0x1, 0xa4, 0x40, 0x7fff, 0x9, 0x8, 0x401, 0x20, 0x5, 0x3, 0x63, 0x6, 0xff, 0xffffffe0, 0x5, 0x0, 0x1, 0x7, 0x0, 0x7fc4, 0x400, 0x1000, 0x4, 0x2, 0x80000001, 0x200, 0xff, 0x8, 0xaa2, 0x7, 0x100, 0x7, 0x0, 0xfffffb98, 0x7, 0xfffffffd, 0x8, 0x1, 0x5, 0x8001, 0xb055, 0x5, 0x5, 0x6, 0x1, 0xd, 0x0, 0xc7bd, 0x6, 0x0, 0x81, 0x8, 0xfffffff7, 0x2, 0x8, 0x3, 0x9, 0x1ff, 0x6, 0x37, 0x5, 0x1, 0x1000, 0x0, 0x6, 0x7f, 0x80000000, 0x9, 0x8001, 0x9, 0xe2e, 0xaf, 0x6, 0x6, 0x4, 0x3, 0x3ff, 0x400, 0x9, 0x7, 0xff, 0xc7cc, 0xffffffff, 0x4, 0x8001, 0x6b, 0x3, 0xc95, 0xd2fa, 0xbc, 0x5, 0x1, 0xff, 0x80000001, 0x8, 0x6f39, 0x747, 0x40, 0x6, 0x2, 0x200, 0xffffffe1, 0xfffffffb, 0x0, 0x10001, 0x8, 0x2800, 0x2, 0x8, 0x7f, 0xe3a, 0x3ff, 0x3, 0x74f, 0xa00, 0x9, 0xffff, 0xa7, 0x2, 0xd0d, 0x3, 0x1f, 0x6, 0x1, 0x4, 0x1294, 0x7, 0x7f1, 0xffffffff, 0x5, 0x7e, 0x20, 0x40, 0x4, 0x2, 0xda6, 0x5, 0xab, 0x81, 0x9, 0x9, 0x3, 0x80000000, 0x1, 0xfffffff9, 0xff, 0xfffffff8, 0x9, 0x5, 0x80000000, 0x6, 0x3, 0x2c, 0x96, 0x1ed, 0x6, 0x21, 0x8000, 0x3000000, 0x3, 0x7, 0x2, 0x3, 0x40, 0x80000001, 0x0, 0x0, 0x0, 0x6, 0x9ff6, 0xbf, 0x7f, 0x5, 0x4f, 0x1b, 0x0, 0xe7, 0x9868, 0x2, 0x9, 0x2, 0xfecd, 0x9, 0xfffffff9, 0x30000000, 0x2, 0x0, 0x0, 0x9, 0xe80, 0x9e, 0x9, 0x0, 0x4, 0x3, 0x3, 0x9, 0x1f, 0x9, 0x7, 0xfffffff7, 0x10001, 0x5, 0x5, 0x0, 0x80, 0x1, 0x800, 0xc2e8, 0xfff, 0xf65, 0x7ff, 0xf39, 0xe2, 0x10000, 0x40, 0x6, 0xffffffff, 0x1ff, 0x7fff, 0xea, 0x0, 0x10000007, 0x7, 0x7fff, 0x800, 0x1, 0x6, 0x0, 0x3, 0x3, 0x0, 0x1, 0x8, 0x1000, 0xffffffff, 0x21d, 0x6, 0x2, 0x6198, 0x8001, 0xd0, 0x8, 0x8, 0x0, 0x6, 0xffffffff, 0x1d, 0x8, 0x7fffffff, 0x5, 0x7ff, 0xcc84, 0x100, 0x3f, 0x40, 0x8, 0x96, 0x7, 0x9, 0x2, 0x4, 0xaf, 0x8, 0xfffffffc, 0x1, 0x6, 0x0, 0x9, 0x7f, 0x2, 0x8fc, 0x3, 0x20, 0x7, 0x7ff, 0xffffff7f, 0x3, 0x10001, 0xffffffff, 0x8, 0x4, 0x4, 0x1, 0x6, 0x9, 0x8001, 0x6, 0x70, 0x65a, 0x3, 0x9cd, 0x7fffffff, 0x6, 0x70, 0x7fffffff, 0x5, 0x2, 0xb82, 0x8, 0x6, 0x100, 0x7f, 0x8, 0xdea, 0x9, 0x73e, 0xff, 0x5, 0x1, 0x5, 0x1, 0x1, 0x3f, 0x5, 0xa7, 0x9232, 0xe6d3, 0x8, 0x7498, 0xdc56, 0x7ff, 0x3, 0x0, 0x2, 0x200, 0x2, 0x101, 0x81, 0x0, 0x4, 0x5, 0x10000, 0x9, 0x9, 0x3f4, 0x3, 0x5, 0x3, 0x5, 0x7, 0x7fffffff, 0xffffffff, 0x6, 0x7ff, 0x10, 0xffffffff, 0xff, 0x1ff, 0x1, 0x7, 0x4, 0x1, 0x7, 0x80, 0x2, 0x6, 0xfff, 0x5f62, 0x0, 0x80000001, 0x80000001, 0x5, 0x5896ef6b, 0x4, 0xffffffff, 0x6, 0x3, 0x1, 0x1, 0x6, 0x1, 0x7fffffff, 0x3, 0xfffffeff, 0x0, 0x7, 0xffff, 0x6, 0x200, 0x2, 0x2, 0x1, 0xdb5c, 0x3, 0x423, 0x8, 0x7, 0x5, 0x504b91b2, 0xffffc33a, 0x5, 0x7fffffff, 0x3, 0x2, 0x1, 0x7f, 0x1, 0x3, 0x2, 0x0, 0x4ffc, 0x4a, 0xa692, 0x1, 0x0, 0x7, 0x8, 0x0, 0x80000001, 0x7fffffff, 0x8, 0x0, 0x3c, 0x20, 0x10001, 0x1, 0x3e90, 0x81, 0x5, 0x4, 0x10000, 0x9, 0xffff8001, 0x4, 0x2, 0x8000, 0x7, 0x1, 0x9, 0x8, 0x1, 0x6, 0x6, 0x1, 0x7d, 0x4, 0x0, 0xff, 0x6, 0x9, 0x6, 0x80, 0x6, 0x1ff, 0xfffffffa, 0x9, 0x80000000, 0x7ff, 0xfffffffc, 0x8, 0x3, 0xffff, 0x9, 0x9, 0x1ff, 0x3, 0x3, 0x81, 0x300, 0x7, 0x40, 0x7fff, 0x2, 0x757, 0x2, 0x1, 0x80000001, 0xa83, 0x80000000, 0x80000000, 0xffffffff, 0x5, 0xfffffffa, 0x8, 0x40, 0x401, 0x400, 0x5, 0x6, 0xf5ef, 0x10000, 0x8001, 0x8001, 0x4, 0x40, 0x4f10, 0x3, 0x400, 0x10001, 0x8, 0xe1e0, 0x8, 0x9, 0x1, 0x3, 0x65ee, 0x8, 0x40, 0x3, 0x0, 0xefd, 0x7, 0x20000000, 0x8, 0x8, 0x7f, 0x80, 0x101, 0x80000001, 0x7, 0x5, 0x2, 0x1, 0x32c, 0x5, 0x8000, 0x6, 0x7, 0x800, 0x8, 0x2f904725, 0x8, 0x8, 0x3, 0x5, 0x54def338, 0x9, 0x6, 0x6, 0xcbf7, 0x9, 0x40, 0xfffffffc, 0x2, 0x2, 0x3a, 0x7, 0xffff, 0x3, 0x5, 0x8, 0x10000, 0xfe4, 0x4, 0x0, 0x800, 0x644, 0x4, 0x6, 0x5, 0x8, 0x401, 0x6, 0x1, 0x1000, 0x0, 0x6, 0x8, 0x0, 0x3f, 0x34daf94c, 0x4, 0x6, 0xd36, 0x6, 0x8, 0x6, 0x3f, 0x1, 0x2, 0x6, 0xf3, 0x400, 0x8, 0x1, 0x7, 0x4, 0x3, 0xb2, 0x70d, 0x1000, 0x944c, 0x9, 0x6, 0x7, 0x7, 0x3, 0x10000, 0x80, 0x9, 0x1, 0x9, 0x10000, 0xff, 0x7, 0x1000, 0x400, 0x1, 0x8, 0x98ab, 0x2, 0x4, 0x7fffffff, 0x0, 0x8001, 0x2, 0x1, 0x74, 0x100, 0x7, 0x2, 0x6, 0x1ff, 0x8000, 0x6, 0x7, 0x8001, 0x7, 0x5, 0xcc, 0x0, 0xffffff00, 0x80000001, 0x80, 0x6, 0x81, 0x10001, 0x3ff, 0x6, 0x80000001, 0xaaa5, 0xffff0000, 0xd7a, 0x1f, 0x0, 0x6, 0x100, 0xfff, 0x4, 0x7ff, 0xfffffffa, 0xf57a, 0x4, 0xfffff000, 0x3f94, 0x9, 0x10000, 0x2, 0x8, 0x9, 0x80000001, 0x6, 0x10001, 0x6, 0x5, 0xfffffffb, 0x6, 0xbc, 0x23, 0x0, 0x7fff, 0x2, 0x7ff, 0x2, 0x2, 0x5, 0x8, 0x9, 0xd6, 0x0, 0x2, 0x9, 0x3, 0x8, 0x3, 0x9, 0x200, 0x2, 0x5, 0x3, 0x6, 0x1, 0x9, 0x2, 0x8, 0x9, 0x7, 0x8, 0x9, 0x2, 0x5, 0x1, 0x0, 0x6, 0x4, 0x2, 0xaaa9, 0x641, 0x7fff, 0x9]}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1410, 0xa00, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4011) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x11) 18:20:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xffefffffff7f0000}]) [ 2354.552438][T12334] usb 3-1: new high-speed USB device number 54 using dummy_hcd 18:20:11 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x100, 0x9, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x8000}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24040040}, 0x1) [ 2354.653246][T12334] usb 3-1: Using ep0 maxpacket: 8 18:20:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xffffffff00000000}]) 18:20:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x12) 18:20:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2481, 0x8) r6 = socket(0x1000000010, 0x80002, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x200000, 0x41) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x400}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048020}, 0x800) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) [ 2354.853279][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2354.880141][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:12 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xffffffffff600000}]) [ 2354.993650][T28999] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:20:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x13) [ 2355.073167][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2355.102512][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.149526][T12334] usb 3-1: Product: syz [ 2355.162888][T12334] usb 3-1: Manufacturer: syz [ 2355.177397][T12334] usb 3-1: SerialNumber: syz [ 2355.189971][T29016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2355.404770][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2355.404786][ T27] audit: type=1804 audit(5885547612.653:1657): pid=28949 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3732/bus" dev="sda1" ino=16372 res=1 [ 2355.444964][ T27] audit: type=1800 audit(5885547612.653:1658): pid=28949 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16372 res=0 [ 2355.468963][ T27] audit: type=1804 audit(5885547612.653:1659): pid=28953 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3732/bus" dev="sda1" ino=16372 res=1 [ 2355.534960][T12334] usb 3-1: 0:2 : does not exist [ 2355.575695][T12334] usb 3-1: USB disconnect, device number 54 18:20:13 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x0, 0x0}]}) 18:20:13 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0xffffffffffffff7f}]) 18:20:13 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0) 18:20:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x71, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x3b, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000000)={0x8, 0x2, 0x4, 0x0, 0xfff, {0x0, 0x2710}, {0x4, 0x0, 0x1f, 0x0, 0x80, 0x8, "efdc67c7"}, 0x43a1, 0x4, @offset=0x7, 0x7, 0x0, r0}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80204c0}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xac, r4, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 18:20:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x14) 18:20:13 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x9c0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2356.043210][ T27] audit: type=1804 audit(5885547613.293:1660): pid=29053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3733/bus" dev="sda1" ino=16331 res=1 18:20:13 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2356.136223][ T27] audit: type=1800 audit(5885547613.323:1661): pid=29053 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16331 res=0 18:20:13 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) [ 2356.225330][ T27] audit: type=1804 audit(5885547613.323:1662): pid=29053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3733/bus" dev="sda1" ino=16331 res=1 18:20:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x15) [ 2356.362364][T12334] usb 3-1: new high-speed USB device number 55 using dummy_hcd 18:20:13 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x2}]) [ 2356.463049][T12334] usb 3-1: Using ep0 maxpacket: 8 18:20:13 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x231, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6000000090780000050200007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c9942139d76d02b92ae2db1399a6ba2970fb70a850d1410dde67f175d2315d51226c63a9d8daa869201765b9cb6172c128a91e3e55a5b5b49dce1ba13ec57e117095eb180135883d5d8fb1211f036b0c501b696b8883c2638647b1ce2c317da773ede486556c4460018f7e0a96ff0ccee0b09c7843204eb1d05ba717074d1008eba38609316a8105ef44a10a5d74ea2d1769bbb3b3e1ed88c02ff084e9b943fd9b5dd3c0d8d9bc9faef807e63c6736d4326dc304d2d97630b758817a375efce"], 0x0) 18:20:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x16) [ 2356.673140][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2356.691901][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2356.963080][T12334] usb 3-1: string descriptor 0 read error: -22 [ 2356.969292][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2356.988658][ T27] audit: type=1804 audit(5885547614.234:1663): pid=29061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3733/bus" dev="sda1" ino=16331 res=1 [ 2357.012855][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2357.026430][ T27] audit: type=1800 audit(5885547614.234:1664): pid=29061 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16331 res=0 [ 2357.066597][T12334] usb 3-1: 0:2 : does not exist [ 2357.266059][ T9168] usb 3-1: USB disconnect, device number 55 18:20:15 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x0, 0x0}]}) 18:20:15 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x3}]) 18:20:15 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r5) lchown(&(0x7f0000000140)='./file0\x00', r3, r5) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000100)=""/7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) read$hiddev(r7, &(0x7f0000000000)=""/96, 0x60) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x140a, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) 18:20:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x17) 18:20:15 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0) 18:20:15 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x9e0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2357.870057][ T27] audit: type=1804 audit(5885547615.114:1665): pid=29131 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3734/bus" dev="sda1" ino=16339 res=1 18:20:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) [ 2357.954328][ T27] audit: type=1800 audit(5885547615.114:1666): pid=29131 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16339 res=0 18:20:15 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x4}]) 18:20:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x18) 18:20:15 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x5}]) [ 2358.242230][T12334] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2358.342963][T12334] usb 3-1: Using ep0 maxpacket: 8 18:20:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x19) 18:20:15 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x7}]) [ 2358.575174][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.603218][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2358.912227][T12334] usb 3-1: string descriptor 0 read error: -22 [ 2358.918613][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2358.928571][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.985786][T12334] usb 3-1: 0:2 : does not exist [ 2359.185141][T14691] usb 3-1: USB disconnect, device number 56 18:20:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x0, 0x0}]}) 18:20:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1a) 18:20:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000020c0)={0x1, r4, 0x1}) r6 = gettid() tkill(r6, 0x1000000000016) r7 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r7) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r9) r10 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r10, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002200)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)=[{&(0x7f00000004c0)={0x438, 0x41, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@generic="3ff0aa86818241156e227aff75c755b1494f3def849d11580e9e25e688d123ccc6aadc5a37efac64dea1c230738d014292ec3b9435a3bd4172c18fb81da5455c6512e970edb5061969d59dd61f8d4f1de1e4621fc2a2df8b39a3d0c61ab7c0e0ac3df662d282b7174efa930357226e5a9d01f72a0b381bab53053f363339fccdaeb4f4f4a96fe72fc8d9c6939596f7d6cfa17024c7edac63b1bf1e27567291e561b27d4ad5e556516300bfd99b540b7601f0419b56439864a1a2b167fb77277133f913f81bee5c2e058d6fa797db703b06b433257a89aade48294dac433ccdf290d8b157c57602", @typed={0x8, 0x3a, 0x0, 0x0, @uid}, @typed={0x5, 0x5d, 0x0, 0x0, @str='\x00'}, @nested={0xad, 0x77, 0x0, 0x1, [@generic="510e691c6945c56fbe1495b5bda65ae734f2983414cb93d61d7cce33dd399541d0cba70a21bab7701ac72551006c2e474d1978217f53e22b5dccdb0acf9e866c7cb3c4ffb7887d290eae6b9a1fd9515b00e196783451028c77495d821ba28ccaeefdd0641669de73d6214b9bfea3349b4f36560151c44189417b01d46728e82011427a8993828c0ee0d56aa516c49c019177fa85c61f1b3af7b387e7cc0be296c460845690", @typed={0x4, 0x38}]}, @typed={0xc, 0x56, 0x0, 0x0, @u64=0x6}, @generic="77324b87ef1b0ffd4ca1a26058a539a75ed24247474b6ff884612345db7ae97a336d1ea445b8fd53727ad2e271d74913fc78d6aed2e49463f44437ea94ce9e8e8046c8b8a301dd1d08b07b34c73d3ac196861aa9e37e0ab2ae9fcbd94eaca922cfefc3549ef964fa0f82825c2f526b723a32f9079e6e307ea8172f2301b7efff4f450bccb4551f08ad9222e779b7fd447fc0f8bbd70e5def6d58ef349d1bd9d3af440f075e75d97c", @nested={0x1cc, 0x71, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x4, 0x2}, @generic="9e568d3ad3fbd85fc4de2fde644ddbaf7fea942d0e52ea7fb0a51c22c3569cc84fa7b5fb8de5a1c4cc78f9a2432b444b395b19db319f4e01edf814e3fcaab052617e80fbab384433f4c59121554ed6c52305b4153d86a96e0fe5e00e40ebd71b7494d9d2c03b6eacd0c2ca0082c0224ac45a3b6679ffbb4c7debc87b67c8e7f8a5827481768f8816f25a3b4381b47b10f450ab3da3fb257f3a3a5774d34d8c21a66012671a10b57bff0ec73981087323", @typed={0xff, 0x3b, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x7}]}]}, 0x438}, {&(0x7f0000000080)={0x88, 0x40, 0x800, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x4d, 0x0, 0x0, @pid}, @generic="1b7147e566f2a7b3c944a2cb6e31c23aa3bf5987f105c6249070142072c3abd3e67ac7c18ae2f177ee7ba3b44285a5844fc48311f2c3e15a51865bda6168b4dd5eef3c226345c752", @generic="96f61dc8c18efd56ace47b47bff90bc25ccd01768ee6d37ad0b3f3932f3f", @typed={0x8, 0x57, 0x0, 0x0, @ipv4=@remote}]}, 0x88}, {&(0x7f0000000900)={0x1074, 0x37, 0x10, 0x70bd29, 0x25dfdbfc, "", [@typed={0x8, 0x2f, 0x0, 0x0, @uid}, @nested={0x1004, 0xa, 0x0, 0x1, [@generic="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"]}, @generic="c0c57a2310162fca79eae43e50111937aeaea7012171e40ad990581e69b940f87740e80e4b4e8906f59c298ec973c8d0d8b5f0234041398b551e9dcbc2d9b84c007a7d962752963e68edc57389", @generic="29b5", @typed={0x8, 0x7f, 0x0, 0x0, @fd=r0}]}, 0x1074}, {&(0x7f0000001980)={0x60c, 0x28, 0x400, 0x70bd2c, 0x25dfdbff, "", [@generic="b63bf41a1dab5556b77f87f7bacae2339447726e537a2a7d2d2444074b79de1774c541c7e2d7938c79d100f44b96de8691fe5ef6c21c6d1b6fd198e723004f0e7e4850b72e6f9ab6171a453562ef37cfd2e4960690cc3b156a6b2a12272eaa269eb268d7aeecf498c00e401bbd59d7a41f49ba83f61908aefe5a1fcf8c3afee262b5ae5a62073efd3aa88484b73dcb00d1c4464291504489d6dc57717545fc195af7d1d794eec165564b03adb75baa52f543ac26a04341f2779f819f96f660ac3ff97bccd90cdc4bbaf84b19749a01611466a7ac88ae1140a377e0532f27ae0ee91b273d02a89c6bb5b1cf4e2dfec0caad93c9c96f76", @nested={0x83, 0x3a, 0x0, 0x1, [@generic="4f0ebee1eeacefacf3bd267096bbb0cee89421ca29436efe44219126efbf5c7c7fbfe75f78cbbdb07d3ca53ae502da996d500c9a31270f1dd83e348d818dd3ac7f0aa0", @typed={0x8, 0x45, 0x0, 0x0, @uid}, @generic="f876dfd21843c1d8ea191d12baedce3d066b35896971e66624037f7ea72153dd17f9533aa0bf53c3f4a8dc12666c06e1d0451c6b"]}, @generic="52511f0b7627d1d73721d1982b3c14aae86bc3609c3732631606329536e5ee81d3aa811ac5666506446f36bc6ff9675fce54a96a7661db3aa13edd00b03f92e2efba418eb73a5306228bb4945230ff580cf783c8b159865b7bb757b648a551efdf69320d701bc830e643eadc7b455d425ae7639df6a52d116bbebfec7a572528807f66da3da2bf79fd590c61240acf403b0615d0338942524c63d47b58ec6dd1b1e4b138e3f96490511bb8ce9db176878a6b6ad7c6084cb89516fa01162f168ecee434d010544255d26ef9005f4557d693ab3c14fe519caa6238b14617e6745fb0b19439", @nested={0x2ac, 0x1d, 0x0, 0x1, [@generic="6fa0fc051d94d91dfd751b875ea7308980392be1ee7a27a4882390b0aecd41a43bfe3f9d223bd10ae9495598ea6c850e04816fc946bcee1110c29c996d80b2dec6e6a80c283a4bbc00480a16d2564a32c8bc40d881d3d226b703aabb59d97b78859db2fa135c0775209a81515474d4076f60bc144d5b79418fa57e23c66e48eb7a03fa74721fec3b8606a1b2b5f2", @typed={0x8, 0x40, 0x0, 0x0, @uid}, @generic="0ddb4ff8b56047612e5be02bf15dc1368f0e8ee2df7a2f5f9ca91c4f1f58a981cbfb86ca072ac74f8c2c7f83a19875bb04bc4ff44744b82c6dda0a7dfca69dfcb0d12d1bfdf5b782bb0fe89f7aae8b", @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, [], 0x1f}}, @typed={0xaf, 0x2f, 0x0, 0x0, @binary="a9d679c9e6f774c5cfca054a6fd652cb5e35a2bbc83a7a98cbb5af4238fd185bf473fd1350b1db8eeeba6f00360617b790263cb1be9abeeffc5d8bc890db9194b30a17d4e93bfa1a940e8fcfd34e6ae77eaf652763937d1e400fa40326d31ea294d1349bb2d4d97ed2a4d2a70ef06656f8d787ddf2cc411efe05e5c91f4e2f105e7ca37c41b050b4741c68a41a7b89c6d76facecad5769c952feece771f7ce28bc0693538e13313ed7a027"}, @generic="b361d58d2e12a8a365490c8cff7ae51edc0ea43061b8d773dec8aaf1ad3ca591be1da99f4415154df588297f1d7c9fe823808c9c8cc2c2edd5074ce0c831f07600ee197d4b81777f587202a976248c4e15380fce653a05621ad2d5fbe28c267f7ad5f2d49be7c41539645783346acf03793fd8ad66c955a095539f28425ba7b0074d9ec64d04a70f139a7f150276497f25338f3dc6dbcf833f57c7bd241f9f2476ac", @generic="d7be337440b7e7c92c273047b101b43993e1de7ef3672bab3420c87a36a8ee69418ac6ae6dac285ad91b40be559416fbf99bae10bb6720e3146e42d765dc4f845377", @generic="75cd48ee80d4c871aa2ce50f629fa5e825b27b", @typed={0x8, 0x1f, 0x0, 0x0, @fd=r0}]}, @generic="5df7c8e083f86006563c98725848f59413ff01f234b68aa68b7454a49317f8e9c15f3ff2ad9b8b70c330f4cfe824cbadc3727942fcd323f149b5333e3e896780858ed0f9f77be1142874c121011fa557499b0317f92d89928f9a56779457482a3bc9c93919531431f043e25429d2667fd5a65ad5a21e4b11af7df31ad7cee908b261edb3f1c2ad9e3183c443158803ba21db328185f7c48c953d3d7351cfc9759e3f92ebfb08a78939beb08e3a948a5dd303793c2ed15e978dc02b6543062894c68e865acaf82f4435afa3b23f116a427d6f142fd4ebf5f839d94b42b178c8795aac4f18499ee78688dbe6", @nested={0x4, 0x68}]}, 0x60c}], 0x4, &(0x7f0000002100)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r9}}}, @rights={{0x18, 0x1, 0x1, [r10, 0xffffffffffffffff]}}], 0xf0, 0x20040040}, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:16 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) 18:20:16 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x8}]) 18:20:16 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xa00) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:17 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x21}]) 18:20:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1b) 18:20:17 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x300}]) [ 2360.122231][ T6058] usb 3-1: new high-speed USB device number 57 using dummy_hcd 18:20:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1c) [ 2360.223162][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:20:17 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x500}]) [ 2360.422915][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2360.433158][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 2360.433185][ T27] audit: type=1804 audit(5885547617.684:1674): pid=29220 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3735/bus" dev="sda1" ino=16369 res=1 [ 2360.441703][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:17 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xa20) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2360.480955][ T27] audit: type=1800 audit(5885547617.684:1675): pid=29220 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16369 res=0 [ 2360.515048][ T27] audit: type=1804 audit(5885547617.684:1676): pid=29223 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3735/bus" dev="sda1" ino=16369 res=1 [ 2360.643482][ T27] audit: type=1804 audit(5885547617.824:1677): pid=29268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3736/bus" dev="sda1" ino=16369 res=1 [ 2360.686788][ T27] audit: type=1800 audit(5885547617.824:1678): pid=29268 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16369 res=0 [ 2360.717895][ T27] audit: type=1804 audit(5885547617.834:1679): pid=29262 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3736/bus" dev="sda1" ino=16369 res=1 [ 2360.772540][ T6058] usb 3-1: string descriptor 0 read error: -22 [ 2360.780460][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2360.792226][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2360.847524][ T6058] usb 3-1: 0:2 : does not exist [ 2361.048117][ T6058] usb 3-1: USB disconnect, device number 57 [ 2361.075447][ T27] audit: type=1804 audit(5885547618.324:1680): pid=29268 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3736/bus" dev="sda1" ino=16369 res=1 [ 2361.117880][ T27] audit: type=1800 audit(5885547618.324:1681): pid=29268 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16369 res=0 [ 2361.144146][ T27] audit: type=1804 audit(5885547618.324:1682): pid=29273 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3736/bus" dev="sda1" ino=16369 res=1 18:20:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4}}]}) 18:20:18 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x700}]) [ 2361.912091][ T6058] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2362.032819][ T6058] usb 3-1: Using ep0 maxpacket: 8 [ 2362.242088][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2362.252819][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2362.432139][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2362.441723][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2362.450270][ T6058] usb 3-1: Product: syz [ 2362.454550][ T6058] usb 3-1: Manufacturer: syz [ 2362.459786][ T6058] usb 3-1: SerialNumber: syz 18:20:20 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) syz_emit_ethernet(0x7d, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1d) 18:20:20 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) 18:20:20 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xa40) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:20 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x4000}]) [ 2362.792070][ T6058] usb 3-1: 0:2 : does not exist [ 2362.800472][ T6058] usb 3-1: USB disconnect, device number 58 [ 2362.914798][ T27] audit: type=1804 audit(5885547620.164:1683): pid=29331 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3737/bus" dev="sda1" ino=16325 res=1 18:20:20 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x60ff}]) 18:20:20 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f00008b7000/0x3000)=nil, 0x3000, 0x2000005, 0x11, r1, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r1}, 0x2, 0x8, 0x4}) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x7, 0x2200) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) 18:20:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1e) 18:20:20 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4}}]}) 18:20:20 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x7900}]) 18:20:20 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131260853cb301378099107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7614852646b9faac69d98c9497ca4b3e5b4a3c9b3ade3dd2aeaeef4e4c8e60422682557d309bffe34f2530b0e09f5232c103364cb0f2845775c98930047265e6c7ccc30442ec0087ed248f0ae0fd3cf2dcf5de03a7614dbe51bf6371e6f54eadc0e2b5976ae4259c822a1bc002fdd9b8915dcbcaea4192e8f5610f64d608882cf446472"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/62, 0x3e}], 0x1, &(0x7f0000000200)=""/159, 0x9f}, 0x2001) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000300)=0x4, 0x4) 18:20:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x22) 18:20:20 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0xb900}]) 18:20:20 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={@any, 0x3}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000400) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f00000000c0)={@none, 0x1, 0x51f, 0x9}) 18:20:21 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0) [ 2363.752170][ T9168] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2363.872767][ T9168] usb 3-1: Using ep0 maxpacket: 8 18:20:21 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xa60) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x24) 18:20:21 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x400000}]) [ 2364.082765][ T9168] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2364.094635][ T9168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:21 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x407400}]) [ 2364.282802][ T9168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2364.302281][ T9168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:20:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x26) [ 2364.335849][ T9168] usb 3-1: Product: syz [ 2364.352722][ T9168] usb 3-1: Manufacturer: syz [ 2364.368740][ T9168] usb 3-1: SerialNumber: syz [ 2364.721952][ T9168] usb 3-1: 0:2 : does not exist [ 2364.739632][ T9168] usb 3-1: USB disconnect, device number 59 18:20:22 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4}}]}) 18:20:22 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x53b000}]) 18:20:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2e) 18:20:22 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) 18:20:22 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xa80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:22 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x73b000}]) 18:20:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x30) [ 2365.582921][ T6058] usb 3-1: new high-speed USB device number 60 using dummy_hcd 18:20:22 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x744000}]) [ 2365.673715][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:20:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x36) 18:20:23 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x790000}]) [ 2365.873778][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2365.912683][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:23 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0) [ 2366.113531][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2366.137019][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:20:23 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0xb05300}]) [ 2366.176573][ T6058] usb 3-1: Product: syz [ 2366.190410][ T6058] usb 3-1: Manufacturer: syz [ 2366.206825][ T6058] usb 3-1: SerialNumber: syz [ 2366.425781][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 2366.425799][ T27] audit: type=1804 audit(5885547623.674:1698): pid=29456 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3739/bus" dev="sda1" ino=16346 res=1 [ 2366.531895][ T6058] usb 3-1: 0:2 : does not exist [ 2366.547220][ T27] audit: type=1800 audit(5885547623.674:1699): pid=29456 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16346 res=0 [ 2366.557927][ T6058] usb 3-1: USB disconnect, device number 60 [ 2366.611938][ T27] audit: type=1804 audit(5885547623.704:1700): pid=29460 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3739/bus" dev="sda1" ino=16346 res=1 18:20:24 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xaa0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x5c, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3e) 18:20:24 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0xb07300}]) [ 2367.103714][ T27] audit: type=1804 audit(5885547624.354:1701): pid=29527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3740/bus" dev="sda1" ino=16336 res=1 18:20:24 executing program 2: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x940) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:24 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0) [ 2367.228597][ T27] audit: type=1800 audit(5885547624.384:1702): pid=29527 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16336 res=0 18:20:24 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0xb90000}]) 18:20:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4f) [ 2367.334250][ T27] audit: type=1804 audit(5885547624.384:1703): pid=29527 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3740/bus" dev="sda1" ino=16336 res=1 [ 2367.473984][ T27] audit: type=1804 audit(5885547624.664:1704): pid=29547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir693498552/syzkaller.69uW2O/2884/bus" dev="sda1" ino=16342 res=1 18:20:24 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x1000000}]) [ 2367.581932][ T27] audit: type=1800 audit(5885547624.664:1705): pid=29547 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16342 res=0 18:20:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x64) [ 2367.686546][ T27] audit: type=1804 audit(5885547624.684:1706): pid=29547 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir693498552/syzkaller.69uW2O/2884/bus" dev="sda1" ino=16342 res=1 18:20:25 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x2000000}]) 18:20:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x65) [ 2368.399588][ T27] audit: type=1804 audit(5885547625.644:1707): pid=29539 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3740/bus" dev="sda1" ino=16336 res=1 18:20:25 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xac0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:25 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x3000000}]) 18:20:25 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0) 18:20:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x66) 18:20:25 executing program 2: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x940) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:25 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x4000000}]) 18:20:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x67) 18:20:26 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x5000000}]) 18:20:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa9) 18:20:26 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x7000000}]) 18:20:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x300) 18:20:26 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0) 18:20:27 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xae0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:27 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x8000000}]) 18:20:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) 18:20:27 executing program 2: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x940) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:27 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x20000000}]) 18:20:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x500) 18:20:27 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0x21000000}]) 18:20:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x600) 18:20:27 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0x0) 18:20:27 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0xff600000}]) 18:20:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x700) 18:20:28 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x0, 0x0, 0xffffffff}]) 18:20:28 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xb00) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x900) 18:20:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0)='wireguard\x00') r1 = dup2(r0, r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup2(r5, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x6) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000100)=0x8000, 0x8) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r7, &(0x7f0000000000)="98", 0x1}]) ioctl$CAPI_NCCI_OPENCOUNT(r3, 0x80044326, &(0x7f00000001c0)=0x199) 18:20:28 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b89c5d56700007d5af0beeb4615b463d24921e7059fa6cf99614852646b9faac69d98c9497c00000000000000"], 0x0) 18:20:28 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0) [ 2371.470391][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 2371.470410][ T27] audit: type=1804 audit(5885547628.714:1728): pid=29747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3743/bus" dev="sda1" ino=16382 res=1 18:20:28 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344}, 0x0, 0x20) syz_emit_ethernet(0xcd, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x93, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, r0, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x7fff, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c3aa3ede129b820f3b91738c9aafa82aa0e1645d4d86915a94c2d301e53a8dc72e7226c1b9e3de983ed81a66b04b6156364ccf71286faa43188f62e5d862a12125f1ec413fc58e2b55d6b936f"}}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000000)="a4dbfb485a51c28c112276bf28e21c667ab6b2628974efd51cd1854c92c4a7", &(0x7f0000000040)=""/195, &(0x7f0000000140)="ba806b30a90254213d7dc929df0443d105a28a846b862e065996c5b86198579a8035bfe76657a88b", &(0x7f0000000180)="38ed56a5eecf47336296deaed7cda2cc05d4e4dd1728c1a49b94a005edec3d8374dfe3881aa6734056e4582fab261c70e2a85fcff2f9a3f580dc1e7ed47b0e35d34624c6799722f1c04ec63497eca9f68cf253e22b017b187b", 0x6, r2}, 0x38) [ 2371.601177][ T27] audit: type=1800 audit(5885547628.714:1729): pid=29747 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 18:20:29 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) eventfd2(0x8852, 0x80800) socket$pppoe(0x18, 0x1, 0x0) [ 2371.720051][ T27] audit: type=1804 audit(5885547628.724:1730): pid=29747 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3743/bus" dev="sda1" ino=16382 res=1 18:20:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa00) 18:20:29 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x85, &(0x7f0000000000)={@local, @link_local, @val={@val={0x9100, 0x5, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:29 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 18:20:29 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r1, 0x8917, &(0x7f0000000080)={'tunl0\x00', @ifru_ivalue=0xec5}) fcntl$notify(r0, 0x402, 0x26) io_setup(0x4, &(0x7f00000004c0)) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r2, 0x0, 0xa5}, 0x0, &(0x7f0000000080), &(0x7f0000000180)=""/165) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000100), &(0x7f0000000240)=0x4) 18:20:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x3) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) [ 2372.715685][ T27] audit: type=1804 audit(5885547629.964:1731): pid=29752 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3743/bus" dev="sda1" ino=16382 res=1 18:20:30 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xb20) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 18:20:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000000)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x0, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:20:30 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x2000, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000080)) 18:20:30 executing program 3: setreuid(0x0, 0x0) getgid() socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b37200000b000100666c6f77657200001c000200100054800c0005800800010000000000080055800400038038d5d6f9bbf2bd9bc2355c84b1e79db50971ba769000b93865"], 0x4c}}, 0x0) mknod(&(0x7f00000007c0)='./file0\x00', 0x200ff4, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001740)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f610000000000006507000002000000070700004c0000001f75000000000000bf540000000000000704000004004109ad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27dfce3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814ccdd8a5c2831d2966d702006484877b4f5c45a6a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bd994a6538b89dc6c60bf70d742a81b7"], &(0x7f0000000100)='GPL\x00'}, 0x48) execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000f80)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00'], &(0x7f0000000200)=[&(0x7f0000000280)='&\x00']) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0a5114145f4320b979600000090781299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf00000000646b9faac69d98c9497c"], 0x0) 18:20:30 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0) [ 2372.789818][ T27] audit: type=1800 audit(5885547629.964:1732): pid=29752 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 [ 2373.008963][ T27] audit: type=1804 audit(5885547629.964:1733): pid=29754 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3743/bus" dev="sda1" ino=16382 res=1 18:20:30 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x3, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x18803}, 0x40000) io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7f) ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000040)={0x81, "176530132892967e883c5f2bc61fa450c83b721daa6e96d4a934d986766c254e7c912b68123bc6b6bfa4a0344eab6eb5d9d9c42799f28d4657ab99ff5b626d22"}) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc00) [ 2373.165001][ T27] audit: type=1804 audit(5885547630.244:1734): pid=29821 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3744/bus" dev="sda1" ino=16241 res=1 [ 2373.234554][T12334] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2373.297731][ T27] audit: type=1800 audit(5885547630.244:1735): pid=29821 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16241 res=0 [ 2373.354572][T12334] usb 3-1: Using ep0 maxpacket: 8 18:20:30 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2373.442961][ T27] audit: type=1804 audit(5885547630.254:1736): pid=29821 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3744/bus" dev="sda1" ino=16241 res=1 18:20:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xd00) [ 2373.575436][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2373.595920][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:30 executing program 1: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendto(r4, &(0x7f0000000300)="a2c08002a39d9207651c0c1231e5d24df565ab7fc7f89b1bd08a79b31f68c5d93298969eb610dd08ed5acc94b5139a2bd6461e57c839c0bcd9765fa78f5a67a26794800e5d8eb311627506df676b0440117e2bb982e0", 0x56, 0x4004000, &(0x7f00000003c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000009c0)=@sack_info={0x0, 0xffffff45, 0xfff}, &(0x7f0000000a40)=0xc) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000440)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)="6156cf9c3604d96834663a411bb4446d9c676b195e0cbc8c54c771be3b2f35f361dffa19398b4c6695b6b02c795aa2d787308ef1090b5b628d4323b91f3e4d041dae50765eb76aaf9de78e3725a55f5a6660d8ff85e34cec0416ac84ec8016fa5363f05af48bcfad31478f615201331d2607f47076b8931201118821f0d79d57a829896ce2facebdd6737b6faf05cde7997ceb2216771518669d063f00b37802bbf8a1ddb6e1bbf94c4ae1b679d3790c91592422c3b3e348bb48751d5c4e22cec14d9c7b46451fa491690214340e2e72e64c909cd02487c2769284a9", 0xdc}, {&(0x7f0000000600)="a20b29f045c9a2f2819976d6606b8d4bd1d57a86a2bdb22583dcc19f8ff328256279ea135b429924f520a5c2dabee715edbfb850ce6e8da799e8370ad8d4231a617aae9851ebab012238d48f695956ffc06c15ff63", 0x55}, {&(0x7f0000000680)="e5fd346cc1098247fda41ce6a18c35e2a181e50c5c79dc18c463c43eaade011efe30ab441deb3608d46146c74403c6f4cb17bd998d09eee938e510d33ededc57f2e3ff88df7f75e4ad40550d25b689d832442b969eb1145e29f068ec16fd31f76aa0fb0e9fb69dd5b4c7fa38d0c58259d5487f9718549812de6d54d56674b8421acf2e39a117154987baa96a12401448457cf59bb1439c8ac29eeac71b69a0d063ba5590d777661fc5c8cfe6c08339fd41740d762f976a09f29d79da55", 0xbd}, {&(0x7f0000000240)="40a832ff614b00b5f1eecd93cb167fcf159995c219d0c833a64db21f4a3bc6459940d26569", 0x25}, {&(0x7f0000000740)="3480106369b4b00868358b3beaaadd3fb2e45ba4aa296ffa14484e24bf3ad8150452e71a2b6a2c118c073a93fbc3f83263586187b71500f0ad7d304fc75c4eb8791b326174afb76a52646bed60d22fa4a43ccd5f2651c0524992887cd4bc3ee24a17df290dca2b43eda8942b0239224c6cdece", 0x73}, {&(0x7f0000000380)="12eb667668e4b6ddfe187bd740de4bcd67e195512e32344516f83b14a0f9bdb4116e5eecf50483986b9366415dafc9f143", 0x31}, {&(0x7f00000007c0)="5f8f8ba34b336f8faf1ae0cad327495705178b88e0f433ec2857aa16385ea7d636c43fdc444eb942b4f2fc38985264df7b4c77e20f6dc5ea3e5691367bd7718b8ae97935c40c464a12f0577efac88a5d0fb31e67f296f4f3ea2d66905a6ad70243", 0x61}], 0x7, &(0x7f00000008c0)=[{0x88, 0x10f, 0x9, "7efaba34f2b5ff7f4bdcd5a06e4d1bf0948b1eae8f4c86a9eb7ed88ad7de90b0ed4ea6ca8624e85aab4d6bbdc95039f51053400a0eaf723c78326b01cf025651538a6f44c183ec911e53d41f4ad252e28a1d22f2d62bbcff4e5f1643072087104022155535858120f188c470d34b13b36c4c"}, {0x10, 0x118, 0x2}], 0x98}, 0x4001) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x1}]) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f00000001c0)={0x2, 0xffffffff, 0x5, 0x2, 0xbd2, 0x2}) 18:20:30 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0) [ 2373.814874][T29859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2373.834722][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2373.849502][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2373.889068][T12334] usb 3-1: Product: syz [ 2373.904377][T12334] usb 3-1: Manufacturer: syz [ 2373.920734][T12334] usb 3-1: SerialNumber: syz [ 2374.111651][ T27] audit: type=1804 audit(5885547631.354:1737): pid=29824 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3744/bus" dev="sda1" ino=16241 res=1 18:20:31 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xb40) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe00) [ 2374.271545][T12334] usb 3-1: 0:2 : does not exist [ 2374.284969][T12334] usb 3-1: USB disconnect, device number 61 [ 2374.554797][T29862] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:32 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, 0x0, 0x0) 18:20:32 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 18:20:32 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x2a4000, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x2001, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r6, 0x0) r7 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r10, 0x0) r11 = pidfd_getfd(0xffffffffffffffff, r10, 0x0) io_submit(r0, 0x9, &(0x7f0000001800)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x100, r3, &(0x7f0000000040)="c525f18710fc022c59ae96d58878c76a7f0aa7f5cc0e65b278ac0dab23718d65f26d2925b46348daf0e001bbdb6a71e47c48674b9177f80a34d22549660a83297daee48dbf6af4c7c5778553fc8ea5fbfc0d56e10384bec11fb1164d9fdc1baa8979afcb0188b92b47544c92", 0x6c, 0x200, 0x0, 0x3, r5}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x8, r6, &(0x7f0000000100)="e7a084cc4cb01d88b5fa94c5356cb6242876780b380bfb38bb2551e5e75895bb1b7dc9aeecc6f6b0f1a3ed559b8cda9972ee4a9f4e29f5f593a11b021af4a437bcd7019bdd846efea9ad9474d7262f8cab19ba29ebce5f8d4ef50ec12717f595f7858721e798baf2716864bbcc5a71ae05210b9b968d84b881de", 0x7a, 0x0, 0x0, 0x2}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x9, r7, &(0x7f0000000500)="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", 0x1000, 0x5, 0x0, 0x1, r9}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r11, &(0x7f0000000200)="db3ab0a991c422099845552313e6108481a6ca4219a21c44451bc325f7cbf701ae2653", 0x23, 0x6, 0x0, 0x2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x101, r11, &(0x7f0000000280)="03dc0a406389c7871be7216a9f9ac9df5d9f255218fe2614e6c3cffa7eb95112d3db78b22bf7173ff9a33f0ba1f885eb5d28daa73877851950997c3b69f3d4dd62655932672beb3509ad7ae566bb7d1c9d9fae27808a58f7af9927883dcd0f8d83c23a43dee32965c15a47d9556c4c522cff972e3276c658a9098bfe2773c4a181871343a14257117f6e123b7f10809d4f148afa216845e05162e88c9018a154d61efd0b7f8694ce64a3f7ff926e10163fd396dc787c4a338c35d31611a3c75a5fddc71865627007cddf07c034a7cb46f37c33b52c4c3f2eb15c423cdbbd12", 0xdf, 0x5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x5, 0xfffa, 0xffffffffffffffff, &(0x7f0000001500)="87475572cbfaf74c595ea05fb2d56f6cb5dced637fd966cf057b79b4b898f58201b3002890e12bdbc81b4db69aa8dad01af8426149fed33dc8dbc77118c4d61cca68fddf69e01452e13a516193a93cc721196e89c72ad6e910aef5244716590f601aaede48b18da9122cc2e97ebafa7606b125f064894adb881a175168fd2e74d005bedfdd4c5eed97cdb24dfb16ee91cd2ed61350ab233720802a73c2fc5b611a83e7b396f179", 0xa7, 0x80, 0x0, 0x1}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0x4, r6, &(0x7f0000000480)="17814904479645e11449f35a6a382a4101073477015e69da3744b18da829cfa229660fb8f928e11b288a1f6471ddd25052", 0x31, 0x100000000, 0x0, 0x1}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x8, 0x8, 0xffffffffffffffff, &(0x7f0000001600)="856b12c9daf9387b29280df20305f306669af646b95d7e8e2222c72023380fda8700e9e1207392372b0fe60b57902824915949f9438fc1344b176b3755b0e8ef6375d18ea7e18d8e92c32ada2adc9246008d", 0x52, 0x3ff, 0x0, 0x4, r3}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x3, 0x40, 0xffffffffffffffff, &(0x7f0000001740)="b2ef806291b39ff3730ce04d0bfb3ae3b0a663721c72154357e6022937992b2d1207146e3967b82ebd23a56980fe5084ac9b8b2b6d7256e4b4301c4749478711edf374247348b736e97918b8a001dcd49be33fc53c512f81a0c0ce523e40602f858b605571f73506dd817f93a0a1776cf109f12262919963acf275b929e295", 0x7f, 0x7, 0x0, 0x0, r5}]) 18:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 18:20:32 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240)='wireguard\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="7f454c4605010104070000000000000002003e00f9ffffff6101000038000000da010000060000000400200002008e0d90f3000000000000040000000100000004000000d88c0000960000000600000008000000ff03000005000000030000000008000008000000ffffff7fff7f00000400000004000000e3fdbfc4dedf25752f5b89db57573d99646252f37c4c1ccb894b2b3a68df27664a6b138eef22110c273bbe153cb83a6889bc75843e7229703b8e0f448050af1d785303d3f38091daeae74d9548c7fc54eaf9d7b59f5504ffb46a548c252cdd8739d812e61e93323f9a6b08516e5aa53db39876c155df3c88d22745cac6f3d20cd339b7d7532b5e92576bdc2727ef5322f6151a33ced4e6a56a6633818663e151382afe03acc738961e10c6e03453c1f03b2c0322628e0bd3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff000000000000000019db5a156ac666bec1c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021bbe49f47c24100000000000000f2779331c4602cc13e1b3d24646edd965b187bf76e071a236f2aa48692741d8a7b28630767b48782c5bd38d5ceaf0be0819da2e31d5cc0368ac8c6c50854759dedba6e027f7ac9ff65dc0214af4d5866dd4b81129379128d6b32f73daebd07b87300787646a615fcec5324f21d6e684dbc4fe408079787bd6051b8a94c07daa8383e4bc64c1b"], 0x430) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000040)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="036308403b9ff73310e5f4c11a5fec2739692b550c7adf2616a1a6a25675b7100815f4cff1fbcb0777d4a484ceee83e85ff10ae72442039ccbc828d3bc16d6c48eecc5f2138d2c1eb3f5122f4409455f7af070863ca157e9391cb4856ad64ff3fffaceb687c602be36f0fe0f43f26d22e5da387395fd0082c17bf236bb2ba1a4f9e831c0d8eca96d7a1375b12a", @ANYRES16, @ANYBLOB="0463044002000000"], 0x3b, 0x0, &(0x7f00000001c0)="501ce284e4aebc0924ce0fe9c68d888658fb08db14ed15bc7ff2dbbcadeaee0e6d817a6070e463bd17d4ae8b76e8f1b4ea2448c9583f098d19094a"}) uselib(&(0x7f0000000080)='./file0\x00') ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x280a4) r5 = socket(0x1000000010, 0x80002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r2, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$HIDIOCGSTRING(r7, 0x81044804, &(0x7f0000000300)=ANY=[@ANYBLOB="32006f1512e014000ee0459c8496b845518865fb0846eeb5aefffffffffffff7000000000000006ec561"]) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2375.161413][T14691] usb 3-1: new high-speed USB device number 62 using dummy_hcd 18:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1200) [ 2375.262205][T14691] usb 3-1: Using ep0 maxpacket: 8 18:20:32 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xb60) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:32 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1}]) [ 2375.462144][T14691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2375.482192][T14691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1300) 18:20:32 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000240)='ip6gre0\x00') sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000040)=""/73, 0x20000, 0x1000, 0x6, 0x1}, 0x20) 18:20:32 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14d}, 0x0, 0x0) [ 2375.661473][T14691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2375.671316][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2375.691410][T14691] usb 3-1: Product: syz [ 2375.702196][T14691] usb 3-1: Manufacturer: syz [ 2375.722557][T14691] usb 3-1: SerialNumber: syz [ 2375.749163][T29965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1400) [ 2375.847942][T29973] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2376.061415][T14691] usb 3-1: 0:2 : does not exist [ 2376.074974][T14691] usb 3-1: USB disconnect, device number 62 18:20:33 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) socket$inet_tcp(0x2, 0x1, 0x0) 18:20:33 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x1}]) 18:20:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1500) 18:20:33 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xb80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:33 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a}, 0x0, 0x0) [ 2376.654402][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 2376.654517][ T27] audit: type=1804 audit(5885547633.904:1752): pid=30016 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3747/bus" dev="sda1" ino=16380 res=1 [ 2376.800551][ T27] audit: type=1800 audit(5885547633.954:1753): pid=30016 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16380 res=0 18:20:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x5, 0x2, 0x8a}) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000180)={0x7, 0x8, {0x52, 0x8, 0x4, {0xadcb, 0x8}, {0xff, 0x8}, @rumble={0x0, 0x5}}, {0x57, 0x8, 0x81, {0x20, 0x7ff}, {0x600, 0xffff}, @ramp={0x79, 0x81, {0x0, 0x81, 0x8, 0x8001}}}}) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2376.877424][ T27] audit: type=1804 audit(5885547633.954:1754): pid=30019 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3747/bus" dev="sda1" ino=16380 res=1 [ 2376.900293][T12334] usb 3-1: new high-speed USB device number 63 using dummy_hcd 18:20:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1600) [ 2377.012320][T12334] usb 3-1: Using ep0 maxpacket: 8 18:20:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000080)={0x7fff, 0x3, 0x6a4, 0xfff9, 0x66, 0x1}) [ 2377.224359][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2377.240171][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1700) 18:20:34 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0xfffffff9, &(0x7f0000000080)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2377.434370][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2377.464998][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2377.504107][T12334] usb 3-1: Product: syz [ 2377.517481][T12334] usb 3-1: Manufacturer: syz [ 2377.533201][T12334] usb 3-1: SerialNumber: syz 18:20:34 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)) 18:20:34 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0) [ 2377.893088][T12334] usb 3-1: 0:2 : does not exist [ 2377.908089][T12334] usb 3-1: USB disconnect, device number 63 [ 2378.019720][ T27] audit: type=1804 audit(5885547635.265:1755): pid=30024 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3747/bus" dev="sda1" ino=16380 res=1 [ 2378.111216][ T27] audit: type=1804 audit(5885547635.265:1756): pid=30019 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3747/bus" dev="sda1" ino=16380 res=1 [ 2378.183786][ T27] audit: type=1800 audit(5885547635.265:1757): pid=30019 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16380 res=0 18:20:35 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x400, 0x7f, 0x2, 0x2}, {0x81, 0xf7, 0x0, 0xf1}, {0x1, 0x1, 0x9, 0x4}]}) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x7, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0x0, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:20:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1800) 18:20:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040)={0x4}, 0x4) 18:20:35 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xba0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2378.438854][ T27] audit: type=1804 audit(5885547635.685:1758): pid=30097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3748/bus" dev="sda1" ino=16339 res=1 18:20:35 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x400382, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, {0xffffffff, 0x7, 0xfffff0e7, 0x4}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_OVERLAY(r4, 0x4004560e, &(0x7f0000000100)=0x1) [ 2378.534673][ T27] audit: type=1800 audit(5885547635.715:1759): pid=30097 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16339 res=0 18:20:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1900) [ 2378.618838][ T27] audit: type=1804 audit(5885547635.715:1760): pid=30097 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3748/bus" dev="sda1" ino=16339 res=1 18:20:36 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0) 18:20:36 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="e8f924d9665e0ccf7196d048f32c29d148fd6449d4e8a68cb548d57bb8afbe8a81af4169e4582892b21bbd39526b8987dabeda1247a59873091b58abd0f3d80ee71cb5ad4efbafb70256a65ca7e90efc82ea378784e59c8162ebea1f34e2c2", 0x5f}, {&(0x7f0000000000)="e47b193fb3b658650553d84b176927fc6865baef10d9bef27ba9cd", 0x1b}, {&(0x7f0000000100)}, {&(0x7f0000000200)="303d82f2285bd2d7d118ee6acc69bf6ea005c0289ec7d2fc889d12772ee9c86f6d91b882efdc7f1187beabb01efd236d655d851ca8ad98a2ec58c1f884a8fd3746da3a2d1033b8486d0b87cbd60fd4f1a5a8d048722e740e25efcc43", 0x5c}], 0x4, &(0x7f00000002c0)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xb3}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x40048c1}], 0x1, 0x80) openat$fb0(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fb0\x00', 0x406200, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='/dev/nullb0\x00', 0xc) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x20) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000003c0)=[0x5, 0x89b, 0x3, 0xc8, 0x98c5, 0x1, 0x2, 0x2, 0x7, 0xf9], 0xa, 0x7, 0x3f, 0x9, 0x1, 0x400, 0x6561ed9d, {0x1000, 0x1, 0xfeff, 0x9, 0x8, 0xfd, 0x9, 0x53c, 0xbf6, 0x54, 0x6, 0xff, 0x10001, 0x2, "6c35651afa81c44da7e2e501da5f64c21092427592ec594401e8f8bc73082f6a"}}) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000080)="ac618993023d3bddb6c175d8428b4f8e62051e9b0529832dea4f5c6f8809284370b9ca2e48a1540f5619f9758ed0e47ee3fed37a22", 0x35, 0x0, 0x0, 0x2}]) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x100, 0x0) r5 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20\x00', 0x680, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_VERSION(r7, 0xc0106407, &(0x7f0000000580)={0x9b, 0x5, 0x8, 0x800}) ioctl$USBDEVFS_RESET(r5, 0x5514) ioctl$TIOCEXCL(r4, 0x540c) prctl$PR_SET_ENDIAN(0x14, 0x2) [ 2378.841232][T24871] usb 3-1: new high-speed USB device number 64 using dummy_hcd 18:20:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1a00) [ 2378.941239][T24871] usb 3-1: Using ep0 maxpacket: 8 18:20:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1b00) 18:20:36 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x4c2c80, 0x0) io_setup(0x5, &(0x7f00000004c0)=0x0) r2 = gettid() tkill(r2, 0x1000000000016) ptrace$getsig(0x4202, r2, 0xfffffffffffffff7, &(0x7f0000000040)) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$CAPI_MANUFACTURER_CMD(r5, 0xc0104320, &(0x7f00000000c0)={0xffff, &(0x7f0000000280)="8ae5f9a7df6100616caa94f48d62a37ade98ad54d673234facbf22963141363b102edba8ab250401a85afae46e35ad9ea60519cc442b01b7cde51d51acb5230744383aaf5912f7442ce1186b8dd44e7f1101a8fd65e17d6ba8ed46134cc377c77541aec818771013671c891a0e84363ba5089b296125cafa8930bee1007f7ba956d44da52e988bf81ef74c8bfa2207fa193bf9535ecb1c28b45b6de87b39ea84cbce6f5b2441d1d899cee0cd8613cb08b054ea9199a858dd4ea0e27bd8be3fce67678592de8fa0e7a910029486a817c6e43bc4"}) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) r6 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0xae2b, 0x20101) io_submit(r1, 0x2, &(0x7f0000000240)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)='\x00', 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r3, &(0x7f0000000180)="3e4271d4a50e35cc6381f409f67eb175e7e62731cd93893942da3bba", 0x1c, 0x6, 0x0, 0x1, r6}]) [ 2379.174576][T24871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2379.194744][T24871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1c00) [ 2379.412104][T24871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2379.429203][T24871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2379.437980][T24871] usb 3-1: Product: syz [ 2379.446590][T24871] usb 3-1: Manufacturer: syz [ 2379.451674][T24871] usb 3-1: SerialNumber: syz [ 2379.648842][ T27] audit: type=1804 audit(5885547636.895:1761): pid=30102 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3748/bus" dev="sda1" ino=16339 res=1 [ 2379.801273][T24871] usb 3-1: 0:2 : does not exist [ 2379.814824][T24871] usb 3-1: USB disconnect, device number 64 18:20:37 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xbc0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1d00) 18:20:37 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0) 18:20:37 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_extract_tcp_res(&(0x7f0000000040), 0x101, 0x7) syz_emit_ethernet(0x6d, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "100069", 0x33, 0x2c, 0x0, @loopback, @ipv4={[], [], @loopback}, {[], {{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x883e}, @val={0x1, 0x1, 0x5, 0x1, 0x5, 0x1ff}, @llc={@llc={0x7e, 0xff, "1ee5", "21237c0983b46803774c5aed28acc4066b5ca5a3f782319572c13bb06cd0e2547a60328a405705efd0fd"}}}, 0x3c) 18:20:37 executing program 2: r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = gettid() tkill(r1, 0x1000000000016) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x7, 0x0, 0x1f, r1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="7707296cad64b5c183135b78b119b8d02a2e7ae4203c7ba44fe19823525df0a46086cdd922df54b4a9006731d97d0e65f6576ad63bd552a5dffb3798315c3eff586392ac29fb80cefa43cf3897b1acfe6c453f4fe624ee5c96d37cc7fc9beafeed2c2ec1c7cade4c07756bc7999d1c0f0a75866b7520fe903aad1d3296195d0d5c0e06fb1fea0d51e5ddeb59b8972bcc644d6ed0c80a301426c004d86de8cfb438d6ad45a878db9cfe32e9873e55f152b51c", 0xb2) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902a30003010000000904000000010100000a24012b0000000201020924030000000000000c24070000000055953c71d60c24020000000600000000000904010000010200000904010101010200001124020207000800010b0d24c95db4cd610724012f010107c1ff0904020000010200000904020101010200000b240201070409079f9234090582091000040000002501025a04002963f8500000d4ffb7585bdabea8657a5873e3dfce4ef0cc45e6f10a4d1d9c7ab0f111bc5876f852df83b6081d787d"], &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x2, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r4 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r5, 0x0) splice(r4, &(0x7f00000000c0)=0x6, r5, &(0x7f0000000100)=0x3, 0x80, 0x1) r6 = open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000180)={r7}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r6, 0x4010641c, &(0x7f0000000140)={r7, &(0x7f0000000340)=""/224}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000340)={r7, 0x2, &(0x7f0000000140)=[0x1, 0xcb], &(0x7f0000000280)=[0xcd0f, 0x3], 0x25, 0x3, 0x7, &(0x7f00000002c0)=[0x4, 0x80000001, 0x20], &(0x7f0000000300)=[0xefc, 0x8000, 0x7fff, 0x4, 0x800]}) 18:20:37 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) 18:20:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1e00) 18:20:38 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r3, 0x1000, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e23, 0x3, @private0, 0x7ff}}}, 0x118) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0xc, @broadcast, 0x4e23, 0x3, 'sed\x00', 0x1a, 0x3, 0x63}, 0x2c) 18:20:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 18:20:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) socket$packet(0x11, 0x3, 0x300) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaa0000000000000000000000ffff7f00000100"/53, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={r4, r5+60000000}, &(0x7f0000000080)) 18:20:39 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000180)="989f9758dac7c762a48bd796191c566383ca8b03724f8af7b69177d9287991ee0b0ff79cb6bac113a38a14e019ca43ba5190ac0ccb99d8fefdc51344720949bf09997de72b80cd44af5382b6fddc7b0e504ddbea4b12fe15afd4dc", 0x5b}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000080)={0x5}) 18:20:39 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xbe0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:39 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0) 18:20:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2200) 18:20:39 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000080)="998c57d3271f1c241258f290b82f95e2791a860b4b8406719e800f99f109dcdb245fc95442db89a70a4e26937c3769fae3c6d2adefbc3506e817e16d8a33d10499791e3be598944519f6377b59c21167a0bf99f785042371cb5e5fed2c86a002f1be3918f687c9dd", &(0x7f0000000300)=""/236, &(0x7f0000000400)="307b5fa1e0a4b94e605af95015eaaa67cee09cf6251b40a92738911ad5d25dad48d5e047eb913d395f64b6443fa0ea9d1902fa00e7ca8e52e1b60f08883655ae401a4dadc89d618ea18dc19ee237a0440d46543ec1230aa5114aeae6962b2c46732286306f75887d4579d6dc9e38f863cae4b455aa868efd5ea94293fee0ae9f4af3ea605a080c16442ce21636e53702cfed0b5b51eb420278674b7b9a5f8c7a014dae36408ee3c7d45d0fe3f1d8e9", &(0x7f00000004c0)="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", 0x8, r2}, 0x38) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x9, 0x8001, 0x7fff, 0xfbff, 0x9]}, 0xe) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x42700, 0x0) [ 2382.354016][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2382.354034][ T27] audit: type=1804 audit(5885547639.605:1770): pid=30249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3750/bus" dev="sda1" ino=16344 res=1 [ 2382.388075][ T27] audit: type=1800 audit(5885547639.615:1771): pid=30249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16344 res=0 [ 2382.461584][ T27] audit: type=1804 audit(5885547639.625:1772): pid=30249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3750/bus" dev="sda1" ino=16344 res=1 18:20:39 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="06082bbd7000fbdbdf25040000000600030076f77d8e8af8be5613ffff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x100, 0x0) write$tun(r4, &(0x7f00000025c0)=ANY=[@ANYBLOB="030305000000ff00080001bcee577024b584e51a48e943c4a92307da49dc9da138baa43f0076528c96a65db2ef4b9101bfac1298471c3ad8b04c42d95f594d0a9b4b65a8663d6157d9c91661a9c44a8d1cbfa71087c366d9239eb7f35d0052d544d010ab844dd3f039641923c553fba1b43b2183360f78b7fe6e201fa7a795180809fbc99db3273f8f2e124a579f447aa7d02cf7ee32637c720e4cfd571b45e9fe60a1f745c8118ffe1edc2b84786c52a252196b18688a362e323c32941400b3ba29884780e7cf151da93c24f67638f48cc45fd362d04a292bd5f2ea5c5527efc63d70d350ad782eb137a83fc9bbf5609523d4f9c3517f61cd1d0b037f8317bdc18746f707cb8bc7b5931c72dd8e251de9f945b77ae190a55a7c750d3f417605f4e7b777973a9ccd2d47dc58fdd06056209b3ec27c046b0a0a474862dfcd6e49056d2592e59ca7e46e720f61b718796d665b3065db3c49716783d4a33283c255a62ef5aec679a0d52ac0bbb6a716d5f0f90ab03259ab91c68dad37b235abbaeaccfef501ece11b8283ee6878cb351ca55967e171f25dfe83649a8aa2045f45006117a931c98b31d02e9da5e730f1d8425ae24b242c9a75d305ea302d4cf99fb6741a5b83f5f1da874c6f7a47817215be4c3ab40ff37b8ecfd462a61fdb13a49a82557ac56a0355aabe5197b5a30c2f393d36f59710778d76f59d23cb9c6d36404ce229a17bfba8fb17329e5b7cfbd93aa94cceb39a3fb7bee85109927726c845be02d80b1d137f3f71201a73600d43f169052b3372165ee0a776379a337431a6ffc646c653db500e41caac6e9200f319a979840e9c8b5afbe7e4f3c3d3d706791fbecc551b5f2263b951c6984c568b9c9f83cc96e7801de0d69a03aa1b40a06d2c4d3fe1a8ab37276ceb6027fdc7ad7997df973d1d27bacbcfc5c8c8d2193fb8f0be0f48ae53b5d74c7bfb33664fed61c0092830f42f64556fe69002e882c71c136a8dcf71ff8bae381e0ef680489b54f1959e92936da9d9f66d8f21ef178a1dc8470452c21aba1dfde6acfdbf208e4c6baf4d68f7cd80c7b90a4fefd1e9f52e9adf2e3a6022068c95d2c8a84309c0d892664e410a0632d72e5364326f7caf936331944f9a6a55d56825750009af1b55091dd53bdb673cab15640a77c987fc092ed9d87be0ea440f1750b6015628d4c7cad4bf0917d23c1e2c4cce2cf2a9beb4a0ef718bd92853108e0357d152f9f5f07365754637ac057ce02f5f05dac35b808356fa63d0834e4b27b2f3017a7b97c1086a10bbe614b5416eb44d40f46c11b2e6bc727cdac50b283edf277fe14c87a6142124ea84f8c41d5a211e2eb728a4938fb5b8eea995058f162b9c3719bd72c026c39de67b02c5185c6fd144a23a326753e6968a73aef02cc75fe55b560bbde484aab9f6b0c19e1fb78788b15d0420f06314e017f4299eaf645ff27fe0a92c5011e5035ad4d6f50c77c5ff14a1e3bf34f3eee94333e48d7f46a89be6a5843afbce184187cb293929370f455114ad499eaa84e33f3f3112fafcac1aae83f9c03a402371e9f26e613aac3b1c526e8c6821a9f3763b05c0ce5450caa84a28cbe367016fa30bca91e73c619895cef71a3eb3f34c719259b7eb779dfba3bf131db5c585ae8a6c792f63f6c15f4d2675ac2297874f3164963722f60c1b23e040e885bb2c6aca0f0835c0f20d31a2fa57e7c5a664e077404aa65c7e6f21b96b8442c443165c4b9f6fc675db2919d5b778b92a9f0e65a54592b32a3104bd97cf0b4fb3c947ea24b4b12d7ac0f29027b87496c4ada394f268496699eb9ab3bbee004a65e1f98b44d547597e0d95f562da02a7c53fbb9eb574595f852d2b85bc7f5c3c37b0c991807cb1ddbe83ecd6ca8afd30a20343d26a04a18646370fe30c0471a2fab54df8ecda0dc0f9cc054b9ceb9879275b196e5dd20bf9fbf60c75e35f5b2f65fb87f83580423897fda7b4fd17c6d75f479995bf3e751f664f61d6999f7e136f48d1c8874dfa966201dba7726c461027e39e5e2a6b57be3f7b467760a34f4973ec6b47584837d3554e43da47158aff9c25ab9df6a4385c454ff66402f4f34dd8380bd926aeec4f233caece27932fdfc2479a11c01c23be129d8e1d1a5033107b330a1e218c5947f598e652fd8c3b1d029a86b967ff79bc56b99f190f0804fb3cd8cfc87e76600e83f30cb9e17217a5def596b17aed6a4ce89439312d7b977567ec03588531771f78e19dfcc95eba8fa48b97601bf32ba10985e2d2322096ba1427adfdc81bc540a5febe98946a0892925dc92d0fe004ab6f5e2bf7ca7c94c4c938401dc832a8010572bc0b8984431b6358e9713b6865d0b7dea5439aa39c01d32d60da1c8a67af489d5ea627ad4cc8b11accb408c77e0d905eaef556f665074a670710471dd9b9f8ecb762cacf30b86b1de0e1835e080528a619ec256fe16d669d954ea9c1351f98a6e88c33fa0e3200cb847d6c8066d8c7c038518d3bb1e4a448f6247e3a4c87b4d4fcdb448ffd55a703823b83b8c47c3e01b409333e74c0d82e0450c870343aaf63ea411467f0c9a2a1b84608c91dbc8df315c52465b4dbe9f552e250e9b4df2812ae0ee9a535c1147551a89e17e4a2517d9f35cbd5ad6d58eb75bc14cd21a662fc150a8aa6b75b68b7bb9f6511815e2b40b1798695b56e738be90d03563983b904538dd1cd245a0385d7f69222922d2f30f8788be6c07bcb2dea69eeec452354a4b46fce98d33f0417ffcadfbe10ade658816bab984f477dfe13b98f168777d996a94ae0ee6f8d6264d665e25317d5af04619ac226fe96b3f3151562c5969f02cf5a1703ec4740b5ff33548c1fe09b6ff97d812bb10d7e7bd2940cca6616c8d9a268aabed44bd8c843a6218fd6f88c02fb4c5d7f93d97142134adb83ba8c19cb82dcfb1fbd3d11e683ccfbf500cc7a89a5c8ed3608b4c802ae7adff5f41941f93bc13d5953457723830712ff73a7c77db62fc95f1db5b0f51e947335f85fd93b37d09cc107f2af08dfa4ddbb8e8a775f011525138ea2f33338803a16c520045237f992ec9d3a94640a3d63fb6da32218f336800968428c4606dd5d2709420a0fcd2dc1d645756506638e065d1a8e4fa93776e6906453e767b114c8e5a4feb6aba4f016d6b32ae1a4462c229a93c2f6d5058d74c775b238c6a3819e978b541c476c10eb1e054162ef9d65517ec7954e7ea812f5baa0ed1b6e15da50dff4ce2939cda0a42e7879bf9848869dd34873a7268797bea024dc963fcf54ee3f698ff178b95e162caf4b458e22f5cd398cc0b4bfe56e016b002ba4af7bd275bc2a2064207131fbe8453ab594862be65f5bcce001318d4f780b38eabf1aa8854c4cfa5c9b799273595c735db3775a182bf9749ddbef4003db35c7cbde0d2f6d4df0c839da4a43298d03574594ec7f88043482adf768fd1ef8a1792389b6ed8e4db04dcb34c60120263e2a560298af7c740cac9388ae02f89784b3ce507c1fa3d37fc0f14bbf41008d47c0bb9f235179da670329f75d1e77ab8b229e6d8e532f79d4167bfb29925e41ebcfb6bd9e9a13c129b9834d3fe49bd2df810d90d907533ec4ebe9f23218e18d8ddff2326ee0b90ef0a2b482ba394b3d7dbff6bdab0115b35bc04d3dd0d278ac10b13ffb15343741563f3ef6da54203d2b46ff39a4375793cf2cc3841afc72eeb341e0a3e2d05f949dc68f5d9df25dacf6c3b6872893f54d7623a68269dc4b23c4e3002e653c385b45d8fd57e7d7110733cdb570fe53ded2b8134020b7ea5fc01846ad4faa08256d196a51dfa3387a3141cc59f30fcc747d1d757be8b9a557723e189ca790c9ec02f577ca826490613ddbee1f75960be474d4e5e7ca584bc3008934bbadf459da315df620f361e4548e303bf3f41f5e683ffa6c5561f1f00b15e52086a8aaf24f9d1df62e6e31aa9cc7847715bd9bfbc21d0334c8507a01bbe1484487701edf646ecd1394206819a846e07547a34636c65d0da74d5972d00fff685f643deace9ba975519652ca4599ed5e4978e27db4ccc2957286ab06c573267f8d359c9ef6b51f281daa6b9710b712dbceaff67d32af5363c7ff5cfe4221d526b55cfe0ec5663ec11d4a2d1a287d6f005a23cf82537ba2ea3650b7b5fe03c052785cd865cb8c6a926cd3258eb95660ebbdf529211fc44f8d7e8ac3109e20bf6cf760e01ef62ccf49fd77ac75081d62aa29d7b750161539fd51124414d8e9beb138a197d0ae37dee971c0d60b5c26f9c75512c8dd61a7cbf997d16a368b7158e675d0e073a7629cc1a764be5f0fe8ac8e09a93d95393f00eae82bf57052d0daf2db79ad6c1870ceca97bc77537398409417950390c2b3e42ebe5f536269a7f0069c146af5bf102d61379eab78e97b9b2107cdf2911a486fc0f14cbfe5298785bc1506167d9176f67c19c0c690a29852a78d1e0ea3f234790a1110dd84789d44f2cd001dd736419ff51749b9954a809f941d7308ff2379c2fe0e5a1bff92d48d213f563904ba95d1e1292c2b0bd53b2e0651b10110bd5e5c9756f0ed2100a709a1cc60d8f980b462161ddc28b66e4b1682227e89741444a2f3ef80e188c12ce146ab573df388715a11faa8fa1b25df1c8c67a99feaae81eff1299178c16b1c3f4075a4bdd002cfc1354b7674a2b0bdb3244069dface7247f123c901d63b68227c42bb03a06823b3577b56b8f85d28fabc8115010b9518c44b4b16215c21673227450c4895d6af310da4fb1c037b6f8d82bfa9134c85dfe0b99b7988f9b83fe61bba7af78e5e0b86566ef607e6a81f10bfcd1d2a2123faf7a2b44693bc84b83e0972ffe3dee0860018d9e3278f72dbe7eb9397146549d944e464371bb8aa549e9fff85a5ed79bcdee1395602560997f33d69a22d3eed17c2a4468d432f07efcbbbc3cee4ff7c6dc877a41c287fdd81383d851c2de0aa9d317291679da6bd74371ccdf218c4fda5205c03e1d9a0905312c3c6a7bda916e2a5c9062b25df81ee63294e83f0e6b7619145bc44e203218cb08fc369ec5dc95525d3fc00f8713c27029aa852187d6d9b76e7c89e8062580192d509ce201501bbc38868af980686e9041e46aa821bff02f75b675876d71e8103b778718a2eb0535eda7acb9e84ca90fde4efcda04db2af9c0b3fd75f79f842f8d6b64e545b124e0a24e91e4d1d03a5be3e6767f3fba820e7912e8bcbcae618b18f72c328effa1ec8fbfedf194e19e1dc41bcea3670664cbf685e5eee9a506406af0cceaec781f0b8de06055454fe81e3b48ddb09f6465c7f943042f65d589d1a448da4b92422b40e6998a1e46ff9b1d0550d86e9a154c49c92f72d00f24eb76d78f3fe721b0c89d51131b5a1d2cde92536b92a38094263f0c865d5c881f995262a09a6c0e160a76bd8dbe33344ded8446e94fcbcad3b06a4cb17021da216cd55d0e984591f7697a1be8c5f55ed9f24c290e959c1a7bab5efc6a71c852625fd8a7d9d689c276cd332e8515a6488b1ca88d0a93cf41e0219f47ed49d88e2851b01c44e9a5bac66b381e215b99095d331fb7dc87ec00a90cfc441bd8ae21abf3b81c9febc8ec5a5858b9216aa360e623f53787389147c6c22a74fd7ed322830068bcb690f8f2b2c7de71ae294bd97749beac026cc4057064ad1e748a6ca368fb12a045d0cc3085717c40dfbfc640f31b0d1b80c3df14dff23dad3ff7b0586969d34617399aa22dcd85cb021573bd1ad73fc21fc337aa9a8f0ca02e5ab56dd576cfea9dbebd7db7b0e77340bbb6ab1269ed8e669251115184745bf07e3d30ef0a2a7296e015a85287349e08658970ab5d7988429283c6c6294c7a5919ae6ab12814226c1e89e44e861ffa478d55ea12b4fc4823d818bd754631350152bc30d50ae6e0ac3b8ddcda9193982cbfdff9ec8a04a17008f70cf370cdbc0bf7857b"], 0x100d) [ 2382.934303][ T27] audit: type=1804 audit(5885547640.185:1773): pid=30259 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3750/bus" dev="sda1" ino=16344 res=1 [ 2382.964687][ T27] audit: type=1800 audit(5885547640.185:1774): pid=30259 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16344 res=0 [ 2382.988942][ T27] audit: type=1804 audit(5885547640.185:1775): pid=30261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3750/bus" dev="sda1" ino=16344 res=1 18:20:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:20:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x81, r0, &(0x7f0000000040)="98", 0x1, 0xfffffffffffffffe, 0x0, 0x2}]) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) ioctl$int_out(r2, 0xfca2, &(0x7f0000000000)) 18:20:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2400) 18:20:40 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000000)) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:40 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xc00) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:40 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, 0x0) [ 2383.514828][ T27] audit: type=1804 audit(5885547640.765:1776): pid=30275 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3751/bus" dev="sda1" ino=16376 res=1 [ 2383.595315][ T27] audit: type=1800 audit(5885547640.765:1777): pid=30275 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16376 res=0 18:20:40 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x20000, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="709764a5a0f34ddfc6469bb8d6548e2d", 0x10) io_setup(0x4, &(0x7f00000004c0)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000040)={0x2a, 0x4, 0x0, {0x4, 0x9e, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000180)="91721e2b1214463745a38cb00215938cc435cdf4990e14aa5cdf097d6988f7b0d8a59bb2b49e7be3adf920159b43e05355d8f3e20f368269890463f72d0f8b05db8eb399b21496601f6dfc5d42c930f1d51927511d0d9f7aa3e7da66b1be7df36796a5dd46d0c240a5fac98d33a734a87521cbae467c6ee2ff9d235c5f3e7b7deceda9edc97e0245d179bb1dd99e05b1a6a4079758b63e7493ae50c78698abda9bbc9cabffd61bce7a80cc018049d49752d649a66a9d1317ece4a5f8a8330c9f202c7491b0", 0xc5) [ 2383.654438][ T27] audit: type=1804 audit(5885547640.785:1778): pid=30275 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3751/bus" dev="sda1" ino=16376 res=1 18:20:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2600) 18:20:41 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x6000009, 0x11, r1, 0xd1cc1000) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) syz_emit_ethernet(0x1d, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESOCT=r3], 0x0) [ 2383.861022][T12334] usb 3-1: new high-speed USB device number 65 using dummy_hcd 18:20:41 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_ONE_REG(r5, 0x4010aeac, &(0x7f0000000040)={0x0, 0x1}) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000080)="d0c3ae49922e95c08dac905329547a2745fe84f1842924dc12", 0x19, 0x3}]) [ 2383.961765][T12334] usb 3-1: Invalid ep0 maxpacket: 136 18:20:41 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd600000400047dbe509e5fd46d645000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) 18:20:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2e00) [ 2384.113446][T12334] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2384.211986][T12334] usb 3-1: Invalid ep0 maxpacket: 136 [ 2384.217629][T12334] usb usb3-port1: attempt power cycle [ 2384.547877][ T27] audit: type=1804 audit(5885547641.795:1779): pid=30288 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3751/bus" dev="sda1" ino=16376 res=1 [ 2384.951032][T12334] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2385.240983][T12334] usb 3-1: device descriptor read/64, error 18 [ 2385.670940][T12334] usb 3-1: device descriptor read/64, error 18 [ 2385.940935][T12334] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2386.220953][T12334] usb 3-1: device descriptor read/64, error 18 18:20:43 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x6d, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaac9aaaaaa0180c20000008100000086dd6000004000332c01fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) 18:20:43 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000080)="1a323245886fbf653ef6bc706455ee07eee3a5a1cd", 0x15) io_setup(0x4, &(0x7f00000004c0)=0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) write$binfmt_elf64(r3, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0xb3f) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:43 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, 0x0) 18:20:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3000) 18:20:43 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xc20) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2386.610894][T12334] usb 3-1: device descriptor read/64, error 18 [ 2386.731037][T12334] usb usb3-port1: unable to enumerate USB device 18:20:44 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x10000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$sock_int(r0, 0x1, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200f9008100000086dd6000004000472c00fe8000000000000000000000000000aa00100000000000040000ffff7f0000caa8110c687e81b8a78f29d6a2c80c9f2344dc6470ee426f0ba07f2482c1bbd89f29b2fc4f00b9658ccb2e26c6f07dea84eb5fd88853", @ANYRESDEC=r1, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af045000000b463d24921e7059fa6cf99614852646b9faac69d98c9497c6db00fefb1e4c3850d5c3c88c5c1c431d3fe136d6c9b248a67920eec3996f86e0c892a10b87677079345462b4f10c3476785460db0e15f88496fe682100af2139caef29d59e0b465212545e7eee88056c326de2ff00799ec0e080a2445878137454484850746a54709810bf98d7b49faf29efc0138df02"], 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@short={0xb, @dev, @rose, 0x1, @netrom}, &(0x7f0000000140)=0x1c, 0xf724578a847a941b) 18:20:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3600) 18:20:44 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xb, 0x11, 0x1cd, &(0x7f00000004c0)="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"}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'ip_vti0\x00', {}, 0x9}) 18:20:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3e00) 18:20:44 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb3a6211bfee4915b463d24921e7059fa6cf99614852646b9faac6"], 0x0) 18:20:44 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0) 18:20:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 18:20:45 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100600000400047d000fe8000000000000000000000000000aa00000000000000000000ffff7f0000010000000074aac5ca4d66e09cf7bac07822618b6c47bba397023d00"/96, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000010490780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0xab7, 0x4) 18:20:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4f00) [ 2387.970237][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 2387.970256][ T27] audit: type=1804 audit(5885547645.215:1785): pid=30357 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3752/bus" dev="sda1" ino=16325 res=1 18:20:45 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xc40) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2388.088535][ T27] audit: type=1800 audit(5885547645.215:1786): pid=30357 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16325 res=0 [ 2388.214792][ T27] audit: type=1804 audit(5885547645.245:1787): pid=30359 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3752/bus" dev="sda1" ino=16325 res=1 18:20:45 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xffff}]}}]}, 0x4c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x6, &(0x7f0000000100)=@raw=[@initr0, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call, @map={0x18, 0x5}], &(0x7f0000000140)='syzkaller\x00', 0x8001, 0xd7, &(0x7f00000004c0)=""/215, 0x100, 0xc, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0xca5a}, 0x10, r6, r5}, 0x78) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x7, &(0x7f0000000040)=@raw=[@exit, @map={0x18, 0xa}, @alu={0x7, 0x0, 0x5, 0x2, 0xd, 0xfffffffffffffff0, 0xffffffffffffffff}, @alu={0x4, 0x0, 0x5, 0x6, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x6, &(0x7f0000000100)=""/6, 0x40f00, 0x8, [], r3, 0x3, r4, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x2, 0x5, 0x6}, 0x10, r6, r8}, 0x78) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r9, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:45 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) r0 = socket(0x1000000010, 0x80002, 0x10000) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:20:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6400) [ 2388.329933][ T27] audit: type=1804 audit(5885547645.405:1788): pid=30421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3753/bus" dev="sda1" ino=16351 res=1 [ 2388.405531][T30433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2388.431662][ T27] audit: type=1800 audit(5885547645.405:1789): pid=30421 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 [ 2388.516088][T30439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2388.560880][ T27] audit: type=1804 audit(5885547645.405:1790): pid=30421 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3753/bus" dev="sda1" ino=16351 res=1 18:20:45 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) recvfrom$l2tp(r0, &(0x7f0000000000)=""/41, 0x29, 0x40000000, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) 18:20:45 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0) 18:20:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6500) 18:20:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x100) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x1}) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000180)="8762c24cb2c82b87ae0fc1755fa38f33562e661943f13c5311ef24f373345004bedfba45559f86c13ea4c808d5d158d33e2fe89af374c4226c9f72bdbdbd93d6e5bb7a8c5bab881b3eb54d27443ad59026bd3e93d3965fe2f40dcce5a9f97a7b8b71b777271f138982902a0b1549d4250ada8c54432807340e7c32c13185d1f4e7f6f65dd1cd0860efd0238a962700c8e88df4889f577c50b533", 0x9a}]) 18:20:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6600) 18:20:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000040)=0x9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 2389.245951][ T27] audit: type=1804 audit(5885547646.495:1791): pid=30426 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3753/bus" dev="sda1" ino=16351 res=1 18:20:46 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xc60) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2389.385937][ T27] audit: type=1800 audit(5885547646.495:1792): pid=30426 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 18:20:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6700) [ 2389.466279][ T27] audit: type=1804 audit(5885547646.495:1793): pid=30429 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3753/bus" dev="sda1" ino=16351 res=1 [ 2389.570557][ T27] audit: type=1804 audit(5885547646.765:1794): pid=30483 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3754/bus" dev="sda1" ino=16369 res=1 18:20:46 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x41c080, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f0000000180)={0xc, 0x7f, 0x1, 'queue0\x00', 0x3}) r7 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000100)={0xa30000, 0x0, 0x0, r7, 0x0, &(0x7f0000000080)={0x9c090c, 0x2521, [], @value64=0xfffffffffffff152}}) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:46 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000ff7f000001000000007fdcd5bd13312668d77d5fc5789d80148c4d5335ec937e59ce593c8e70f086aa3fa822319994d7b376c6b2f422408a080c094264be783a2760c1da34bdeafe1fb71bbeb8b04381876baaa4b62b330a1fe293463c9badb739f7b57c07eedf8756a88776650351871cb5591ac31547e1573493c93edc9df5b9800d651000a8edc30c83344dfa24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) 18:20:46 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x0, 0x0) 18:20:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa900) 18:20:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)) io_setup(0x0, &(0x7f0000000040)=0x0) syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x7, &(0x7f00000016c0)=[{&(0x7f0000000180)="4d641ea8a42e492937226829e9c2538290c5cdb578a548bb08d8f7a7fe05451d0d862bbd354d24ba4981d0c7b38ba42c813063a2ecda7dd69f1f86e4c32f16bae877a47856a297f4b9be1611a34b0aa682d17ad652cfb7c50136b414aaa4235389c47f963f7eb26241a2634eab7e897f77ed20d6bd38b4daaef8ccfe04936d3eb81fc65593a1152ec588795935a40d03485e3417fd6b8a5d607b8d8dc4817123f66800e58bd82be42e0dfa", 0xab, 0x9a3c}, {&(0x7f0000000500)="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", 0x1000, 0x1}, {&(0x7f0000000240)="d60f83f6035efa5d5e1899cbbc6aa788672c4f63c5757f52f4692665bfa42769649820bc3781e599a54601b8967fae80c40abb9e8c28aca4ae84e19d2c5768", 0x3f, 0x5}, {&(0x7f0000000280)="43a30d863bde355a4125b93453d28d163ef8a6ec9172edfdcc16743397556833ec74f9d6be838ef9684fd3293c6c5c8490a02e374856799727ff03eb04b49048c925d6937d188771151f8d1d8f122468a29aa1c430a28ab1ddcbd7fb9952000b6e81de4a4f90fbbe73d6731148c9877814610fb4d5cc7cc6c8120c3da6777baa85f438d76d0f60f96ad75010943306177a4296813da64839", 0x98, 0xffff}, {&(0x7f00000003c0)="c7e45bcf962622c826b2e995a47938a7228a1d8ec5c6f78d50882b65916517939280df5172c34febc65bf16d5979fc179d0f91a2565c6fd1abade7501f12bdf766086e5dcfcfe57eb3f6ab3f7156aa41e63f", 0x52, 0x1000}, {&(0x7f0000001500)="c0954dd91aafd86f1d6f1dd5da9e238f483d87df5cffa04f5b470b5d0ed391910e74ac510c88e1f6f26dab81e1d6ac829952fa9c393e95633fe7400d845c0ce6cb8b012d1616fc31664154fc93f577e7c85f7243fe1bb4dfe9c0e8a9c90d12fd534522aeb841a225d9d8bb5806d9bd7563b7f81a4e6110829b88929fb5f34a2a7d6e8656695fe447b494605e70ea41eb416a1fa5e832b9344b684e9f1e5b0cc351c9c9ef585545bb065b0915570f75aa3d79c1333f13ab1e83a67c8b13f00e0f6ce5b39df20b03b574598347eadb", 0xce, 0x4}, {&(0x7f0000001600)="7c62331b20c320a58a98ede9ba92da91429f11fcc69107ca4a4103e1bedfab87f5699cc52cdd34cac880ba8347ee6467662ded134ccccff77c1cdfbb0f2e8ebf2b2646bc15ba3315b1ada6854b9c813dbb183a1a18b2b3e67600e0f4d4ea2ca301f1085cb211d3ea456fcc3ed0d3e036df85971cd567ef8d4966c88557b3add1c59bddcf9399bd9028396c765ef7b6e70ca1efbe1f1b29ce834265d0e15c60a75e2e3398c6d6876e7b0c55cbcbebe5", 0xaf, 0x8}], 0x1, &(0x7f0000000340)='/dev/nullb0\x00') io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x5, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x80000}]) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$l2tp(r2, &(0x7f0000000440)={0x2, 0x0, @private=0xa010102, 0x4}, 0x10) 18:20:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000000)={{0xe4, 0xfc}, {0x1f, 0x80}, 0x2, 0x4, 0x4}) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x336, &(0x7f0000000340)={@local, @link_local, @val, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "ad9504", 0x2f8, 0x3a, 0x1, @dev={0xfe, 0x80, [], 0x38}, @remote, {[@srh={0x6c, 0xe, 0x4, 0x7, 0x0, 0x40, 0xfff7, [@remote, @loopback, @ipv4={[], [], @loopback}, @dev={0xfe, 0x80, [], 0x2c}, @private0, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @rand_addr=0x64010102}]}, @dstopts={0x32, 0x6, [], [@pad1, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x84, 0x4, 0x4, 0x2, 0x0, 0x60, 0x5, [@loopback, @dev={0xfe, 0x80, [], 0x43}]}, @hopopts={0x2c, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [], @local}}, @enc_lim={0x4, 0x1, 0x3f}]}, @dstopts={0x84, 0x2, [], [@hao={0xc9, 0x10, @ipv4={[], [], @loopback}}]}, @dstopts={0x3c, 0x0, [], [@enc_lim={0x4, 0x1, 0xfc}]}, @routing={0x3b, 0xe, 0x1, 0x40, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @ipv4={[], [], @empty}, @empty, @empty, @remote, @private2={0xfc, 0x2, [], 0x1}, @mcast2]}, @srh={0x6, 0x2, 0x4, 0x1, 0x81, 0x78, 0x6, [@rand_addr=' \x01\x00']}], @mlv2_report={0x8f, 0x0, 0x0, 0xf33, 0x5, [{0x21, 0x2, 0x4, @private1={0xfc, 0x1, [], 0x1}, [@private0={0xfc, 0x0, [], 0x1}, @dev={0xfe, 0x80, [], 0x14}, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}], [0x7fff, 0x38]}, {0x81, 0x2, 0x1, @private2, [@private1], [0x8, 0x4e]}, {0x5, 0x5, 0x1, @empty, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'], [0xf3, 0xb6, 0x3, 0xff, 0x9]}, {0x81, 0x2, 0x3, @dev={0xfe, 0x80, [], 0x39}, [@rand_addr=' \x01\x00', @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00'], [0x537e, 0x2]}, {0x4, 0x0, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@private0={0xfc, 0x0, [], 0x1}]}]}}}}}}, 0x0) 18:20:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = pidfd_getfd(r2, r0, 0x0) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000040)) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc0fe) 18:20:47 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x22, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@can={0xc, {{0x1, 0x0, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "4b914869cdb98ba8"}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendto$ax25(r1, &(0x7f0000000040)="83cf1002823bc33ef312aa12ce295993052fc98567caca97074c2b21e6f2562ab90bab3f10b2b1b7b13874c90e8a678187065e4fd0b2d0f3d6c39f919260d60eaa1e48fa632f40adafd81f397258f11eca19eacdd8153baf4bcbc009ad07dfd0b7364829bdbc6f113cda5adb43a8e6fd5a83adb8a59cddab2698151768dc4d0c73faaa751b07f7c231c80e31d3132048418308e8ef440823c0dd0e29558c3b507f", 0xa1, 0x40080, 0x0, 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x3, 0x81, 0x0, 0x1, 0x80, 0x89, 0x81, 0x0, 0x5, 0x2, 0x80, 0x0, 0x0, 0x80000001, 0xfa, 0x5, 0x1f, 0x5, [], 0x8c, 0x100000000}) 18:20:47 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x3, &(0x7f0000000300)=[{&(0x7f00000003c0)="43d771daa321a38a15172db2964f3b15c43b3f1f70e8a65c88b106b057916a49b3b3238953e9b19d6fbeca3852fbc1cd03a171b1b1fc8a97f2042dbecf704e417a66d20c011aa50106e5a10a5abed53f302771de466763555361534e734e987cdf7e1eb7736d8a2e3ab883aa7eebc2afc5b9d38dac4c9674ee08bff6840213de72ecbada93b464a8e3916bd909f60b9af04835bb22fd", 0x96, 0x8001}, {&(0x7f0000000500)="4893e2fceb107b51f1d8e0efa4a66ab53937c8268795dbf52e9a1eb70bc337906131c731ea0f187bf7afa62724ef6c7d79fd939b12780ad16f6643b237b76e4055940c58cd8ec5cea52d7641befb0f8a391e9b7f0927d222e3ca3c42d7a9ccea4552f7c3713e1da970fff6fc5bbd61721555f52c6844657d779bb180779b8f45330af0c66b0a73591020b4683e1785b51498312f3d1f38d4d261", 0x9a, 0xfab}, {&(0x7f00000005c0)="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", 0x1000, 0x8}], 0x1000000, &(0x7f0000000100)={[{@discard_size={'discard'}}], [{@measure='measure'}]}) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:47 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xc80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:47 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x82e01, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe0fe) 18:20:48 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00}, 0x0, 0x0) 18:20:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x5) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3000000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x40000}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r8 = accept$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000100)=0x1c) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x100, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x84800, 0x2) io_submit(r4, 0x3, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f0000000180)="69c6b7edc78e87ce8787b697398f4f93ba1c9db8faf98f47ef06d5bf4f39c19784d9a01650cf7cf8603220a9e161737846ea9cd5b3bffb47dffaaca0a6116ff42598a7534e7cc4f7481de911d41ef187a1b0f5589bfeebceb3c33f376335e714bc5a4a45befb4ee8e7b9b196d364cf3385f9c23613e4bb8fc59a60ef5f1cd1d43a58d1cb0c9fe22941961062d1b16fb8554463c10f5c5875984d9fdf300d6e4267359350ae28cc23d9d7ff31fbe721b165f2cb980e6e805f162a6e141eab4c7545330ff81207b7064e7930880146d226898b4bfbbccb36a4094fde4cecb27d440548900a81e4d48ab351331d9dbfb34ff63140603e", 0xf5, 0x1, 0x0, 0x1, r6}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x1000, r8, &(0x7f0000000500)="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", 0x1000, 0x100, 0x0, 0x2, r9}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x8, r10, &(0x7f00000003c0)="22a2b49901f5ff21d6eede180907adac26f4b1a08e6ce777e70a55b599b81fcd50f64e4c7cf226ea1b1aa11743184403660a3d4a2e2f2eb848e5df8789982eb7c5121e5cf5928b9c4cdca8fd108ae8586f777538304ff1", 0x57, 0x7, 0x0, 0x2}]) 18:20:48 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7d, &(0x7f0000000400)={@remote, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe803) 18:20:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) socket$can_raw(0x1d, 0x3, 0x1) 18:20:48 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaabaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000100000aa00000000000000000000ffff0a9531afedf64691777f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) 18:20:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xff00) 18:20:48 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DBG_G_CHIP_INFO(r3, 0xc0c85666, &(0x7f0000000180)={{0x4, @name="a26d7e1905c823e149908b5529e835761cafb0d66ce86be7fe4d0f07a4dcfa6f"}, "262272d0808225bc5cc9e0624be9fee8c3b58a68ca5a2822ac0c1ed7b9285297", 0x2}) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x1}]) 18:20:48 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x311, &(0x7f0000000000)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "a02132", 0x2d7, 0x21, 0xff, @ipv4={[], [], @empty}, @mcast1, {[@srh={0x47, 0x8, 0x4, 0x4, 0xfe, 0x50, 0x0, [@mcast2, @remote, @remote, @remote]}, @dstopts={0x11, 0x1d, [], [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo, @generic={0x6, 0xd5, "1e954a96896e865cfa8e6a22d9e7ca28c93dec6f35b42f02be1c48a67931ccc010b2f6e770832d14c763f8d54f20a7369eb0b9d1bba4cc5dae244ee01062dca12e4338a03dd2561efcde191b10d040a77968c0a42edcf5180fd47ee6fda86c8454f62ca8af978453db723dbb025b278e0b8080c1d9ed2d844958ca731df1c77ee86adfacea804479d4c998ac92f5bf579a5110001937c9b89d8bac94d565577ffbf83e3e9a0ee20138534207642f3f699fe874567cef7656f3e60443524f711903451f067e2ba7484f9a7f5a41045f13a4bd7643ea"}, @enc_lim={0x4, 0x1, 0x3e}]}, @dstopts={0x87, 0x0, [], [@pad1]}, @hopopts={0x5e, 0x4, [], [@calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x6, [0x5, 0xdc3e, 0x20]}}, @pad1]}, @fragment={0x89, 0x0, 0x2, 0x1, 0x0, 0x0, 0x66}, @hopopts={0x2b, 0x7, [], [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={[], [], @multicast1}}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x5, 0x7, "fd1578", 0xfa, "4fdaf5"}, "4fa1a1c3b68f4684a3816f8f157b70d08e8969b11df650452767f3c9aa2d18fefc85c97a9fabad119d687a3fdc64d46d8a20af97d636058c19bdc0e92898fd72e4b6a6f683e65d2f51711819fc3d7f658d32faecdb5eca438378f900521e088ed8c37e467cac909c8db5681125f2fe6f602c0b897d80567f30c45d7dd9a6a0a1ebeed676b2b6529906928471c8f5e7853663135133025e3a5d714f706a0a92498393e9423c62649967705d58dba931173eefb3574debeb59e5896eaa320acdd51d9cc6281170da5c1a3a5ca61b31aaf019be8eb79983abff5b994a38ebbc6d684b2c96e5fbcade04006d265c2ced5f42a3fb15d0e5553c"}}}}}}, 0x0) times(&(0x7f0000000340)) 18:20:49 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xca0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc0000) 18:20:49 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x0, 0x0) 18:20:49 executing program 3: socket$packet(0x11, 0x3, 0x300) socket$inet_icmp(0x2, 0x2, 0x1) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@local, @link_local, @val={@void}, {@x25={0x805, {0x1, 0xfd, 0x23, "60440e7d7ba47593077856a64b5c5b379dc39cd1bda78c080000007f84de3c2e2f4f8b8cef45da0affbb6956acedf49a8c653e7ad7c1cf6d0d7373418b4900e54e0ce81960a8230df795ebc8d006726d84adff8bf6805a353a475dd17c8d4f7f61464252361de22bc599c3d458a299e0298ae559b4efa5dc0ef7b4b0ef8e81da8bd6c2867e07756bcf"}}}}, 0x0) clone(0x20080, &(0x7f00000000c0)="25df82b2e9cb8ff72dafc278a2fd4dd1bb100a14eef9231e5bec96909854a3c1e899fbbcdf39187ec41f173202bd86dc51a7791a", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="a04f955ecfa43d96404f1ccec15b6551dc9c88efb25bd8894eff2ade69a5cf8a01c13f19e0cf02f837fe4caa38071ec3b07924c2a5ea176f2ff81d7857c2369fecaec15cd2ca864f871f0ccbb6e44016f428f3f22f972202f479bb6192cc79bc38a016bdea11e69be8d08ec17a2140b481d3d754b55faf1b9a0b570b2d41b64265f2457658fe29b29f285992ff05e3f948d5a9b6f124437f291b02609f60b6151e76ca452b6a5a8abf5e45c0737c339816d22302e80dba793684ef3cdc7d48f868a35c81") 18:20:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x5) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x40000}]) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x1, r0, &(0x7f0000000000)="9f", 0x1}]) 18:20:49 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x3f, r0, &(0x7f0000000000)="98", 0x1, 0x4000000000000000, 0x0, 0x3}]) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x1, "b9da21fa24c1c596"}) 18:20:49 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000000)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00SE', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "e8ad340f6598fd51f506deccfe248c81"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) 18:20:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfee00) 18:20:49 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) io_setup(0x1, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000fec000/0x13000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000000000)="52c432d63cfbf8a8a1e1", 0xa, r0}, 0x68) 18:20:49 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) io_setup(0xff, &(0x7f0000000080)=0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000100)="98", 0x1}]) 18:20:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x100000) 18:20:50 executing program 1: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0xe874, r1, &(0x7f00000001c0)="79a57b9043abf42c20dee889c11d23bb3880b580380d0a904d6f8d201081b8da486e684b3928e15d54d6836f7cea82a534f9975f08d2726482160b41f4ffaff51bc411f6240f60f49527fa771cf039b0cbcc0dd61bcd0e82dcaec79f90bf0c3a804c4ebb58bd1aab1759e23c614e25a58de71a7228ae90a774247c60ff5fbade81d63172587f90abdac42e8b25d478b5c721ff4a5bc4cbe1f6d07462793cd2ea66e76022ac2742f5df381ca0fe3103cb7c0b2aad0374ad48a68d0e", 0xbb, 0x20, 0x0, 0x0, r2}]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x141500, 0x0) listxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/127, 0x7f) getsockopt$netrom_NETROM_T4(r4, 0x103, 0x6, &(0x7f0000000100)=0x6, &(0x7f0000000180)=0x4) r5 = dup2(r3, r3) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_inet_SIOCSIFNETMASK(r6, 0x891c, &(0x7f0000000340)={'virt_wifi0\x00', {0x2, 0x4e20, @local}}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r5, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0xe96, 0x3, 0x401}) 18:20:50 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xcc0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:50 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a000000090780000131299107a853b2140e9e089eb6089c5d56700007d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"], 0x0) 18:20:50 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200}, 0x0, 0x0) 18:20:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x231860) 18:20:50 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) io_setup(0x4, &(0x7f00000004c0)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x5) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3000000, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)="f0abe79f5afc307ee93e5ac6d4e23d4a7bddc18e570d01b7e5a672948f19a558c5835c4e09000000d8329b9294c80e7b", 0x30}]) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400, 0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x4, r3, &(0x7f00000003c0)="a781748f8bf965a7b68a07761277407cb684abda5a2d7fd3984d877745d438a2790b684064510e6cfee6745bb7a2f954eb64ece06b8b8fed243bec3a150da1606990f29d96d1216c09a7976e356b10bf484703583b57494393c97b9a0ba88373a4e34932f50053954c6d116a027350eaf15545065a20c9cec25200b4ded1bf89ca635a4834b9023f539b848eda95e3a16fb325e130a370bef5fc3e08e277fea6917e62c4f1afd846c77dc8b6413f8074ab446d934ae9394e367d22cfe81cc5b7185ce01b9f94c407f43adc7e75f79ae68c29e9646af2dd7f799fc7dad7190dd5af93cfd0cb7e82f5aceb2dfacda154177c", 0xf1, 0xffffffffffffffff, 0x0, 0x1, r4}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r3, &(0x7f0000000280)="17313e77901dc5956eec9f0fea365198cbdf8a236f2815bdf10ff2af48255dcd0b8cab3c0aa841db3813d20a0bdc1a65281131d946c8e04174e9b3", 0x3b, 0x101, 0x0, 0x0, r1}]) [ 2393.178121][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 2393.178150][ T27] audit: type=1804 audit(5885547650.425:1813): pid=30632 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3756/bus" dev="sda1" ino=16328 res=1 [ 2393.262266][ T27] audit: type=1800 audit(5885547650.425:1814): pid=30632 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16328 res=0 [ 2393.323423][ T27] audit: type=1804 audit(5885547650.455:1815): pid=30634 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3756/bus" dev="sda1" ino=16328 res=1 [ 2393.383777][ T27] audit: type=1804 audit(5885547650.605:1816): pid=30682 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir883404243/syzkaller.Rg2tfw/3135/bus" dev="sda1" ino=16372 res=1 18:20:50 executing program 3: socket$packet(0x11, 0x7, 0x300) memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f00002a5000/0x3000)=nil, 0x3000, 0x3000004, 0x11, r1, 0x92c05000) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) syz_emit_ethernet(0x81, &(0x7f0000000100)=ANY=[], 0x0) 18:20:50 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x9a200, 0x50) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2393.507582][ T27] audit: type=1804 audit(5885547650.615:1817): pid=30689 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3757/bus" dev="sda1" ino=16382 res=1 18:20:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) [ 2393.602846][ T27] audit: type=1800 audit(5885547650.615:1818): pid=30689 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 18:20:50 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000000)) syz_emit_ethernet(0x81, &(0x7f0000000400)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00@', 0x47, 0x2c, 0x0, @local, @ipv4={[], [], @loopback}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "99107a853b2140e9e089eb8389c5d567"}]}}, {"7d5af0beeb4915b463d24921e7059fa6cf99614852646b9faac69d98c9497c"}}}}}}}, 0x0) [ 2393.656704][ T27] audit: type=1804 audit(5885547650.615:1819): pid=30689 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3757/bus" dev="sda1" ino=16382 res=1 18:20:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xffff}]}}]}, 0x4c}}, 0x0) bind$can_raw(r2, &(0x7f0000000040)={0x1d, r5}, 0x10) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/pfkey\x00', 0x105000, 0x0) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000280)) 18:20:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xee0f00) [ 2393.945038][T30719] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2394.030946][T30721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:51 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x157c}, 0x0, 0x0) [ 2394.590518][ T27] audit: type=1804 audit(5885547651.835:1820): pid=30692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3757/bus" dev="sda1" ino=16382 res=1 [ 2394.640314][ T27] audit: type=1800 audit(5885547651.835:1821): pid=30692 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 [ 2394.663887][ T27] audit: type=1804 audit(5885547651.865:1822): pid=30696 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3757/bus" dev="sda1" ino=16382 res=1 18:20:51 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xce0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 18:20:51 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000400)='/dev/full\x00', 0xc2840, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000006c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x16c, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x538}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x34}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc722}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffc}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x22}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x77}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xcb01a2ce}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xc791}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x16c}}, 0x10) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6b}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) io_setup(0x16, &(0x7f0000000040)=0x0) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x2}]) 18:20:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 18:20:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcsu\x00', 0x311800, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) write$FUSE_NOTIFY_INVAL_ENTRY(r9, &(0x7f0000000700)=ANY=[@ANYBLOB="31010000030000000000000000e7431f37007774442257de9d68fb9c0f00000003000000003e382f00110000000000000000007c3a2ef26a307365637d7269747900"], 0x31) io_submit(r1, 0x4, &(0x7f00000006c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0xff00, r3, &(0x7f00000001c0)="781a1344e850d741089def25300e8ccfe56fb856546cd984bb9b55b0a0ba", 0x1e, 0x4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000240)="c544cde1bf8bc48a392ebf8edffd6ad9283615fcf9409c89b07354571bec10ed07c1f3000ae92f9e5332c61a32ff6a668eb07ec7e2003e9cf52646008385d2420fa0714128cbe16afaf71f5fab46820fe98dd93d9300e65b290c903e3af0f07824a905511d2fee427f227158f659c2f4cb66139729ca3831cbb1d7a212485823d7fd90de4f0f37e8b96bf63a22a9ed7e171017babfbe3cb0d054bad16e4bf746d1f5f4163c01f5d445c512fe2ed0ec626835eae6a9e48664000ca75cf83b0a6c80f3287b18908e0682db1cd11d57a97ede3dd6aedc5f47796510d1a91c9f7cf7fb9f61425febc910d69d87cfacbf83b32bd6c1d5f4067473", 0xf8, 0x145, 0x0, 0x3, r3}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x6, 0x20, r4, &(0x7f0000000500)="c69b0ed47da3f3b7", 0x8, 0x4, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x0, r5, &(0x7f00000005c0)="aeaa715552118485b5bd17e2f5b618e7a8de9600afcd4dd0d971dc444ebd834abf757bcf2c4882f17d4a46e21b5fca342ce7568211377f9259b2e567e274757c8a26545498ff35e3940fcd598a8239b639be8f0792c1424e31bb0c4553f530986501838b09ec380104e818bbefb5ea0abbd4940da9cb50a491a1135a6454168c2267c155e05c", 0x86, 0x9, 0x0, 0x1, r7}]) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80000, 0x0) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000180)={0x4000, &(0x7f0000000100), 0x8, r3}) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000040)) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000440)={0x38, 0x140a, 0x1, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040800}, 0x4c0c0) 18:20:52 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d00}, 0x0, 0x0) 18:20:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 18:20:52 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 18:20:53 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x2, 0x0, r2, &(0x7f0000000000)="98", 0x1}]) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="fc010000000000000109022400010000000009e78500000301000009210000000122015a79b700090581030000000000bc224ceda86ebce1e8b20c25c44965d8684edca772776ef9e445760dea4b58decdf8b2d300000002343cab0000"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) r5 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0x7fff, 0x200000) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000600)=0xfe8) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000500)=[{}], &(0x7f0000000540)=0x8) syz_usb_control_io(r3, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, &(0x7f0000000780)=ANY=[@ANYRESDEC=r1], &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f0000000580)=ANY=[@ANYBLOB="00220500800093fc4ad482"], &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7f, 0x7, 0x1, {0x22, 0x8a0}}}}, &(0x7f0000000340)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="20171e000000d89e3c728c8436a64bbefe1326b4c4bdc3086f59b460761bb6f87467ed79"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x3b}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000840)={0x20, 0x1, 0x100, "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"}, &(0x7f0000000300)={0x20, 0x3, 0x1, 0x3}}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x84200, 0x0) ioctl$KIOCSOUND(r6, 0x4b2f, 0x3) 18:20:53 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xd00) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 18:20:53 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00}, 0x0, 0x0) 18:20:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 18:20:53 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x10480) sendmmsg$inet6(r0, &(0x7f00000021c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000500)="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", 0x1000}, {&(0x7f00000000c0)="171ddcb2943519", 0x7}, {&(0x7f0000000100)="5e9b99af1da99af2706ee1488be49b7f91b412f16c80115a2ed52beaae4781589748d6b6f7ddef49678a9b50b6a15eb2ed55c965c330cc57bfae2d6e7509b3568dfe9cdcf5d5742f0712232eb24a45f07aed2873e637cb9370c4d89eda81319d3a4ee811c3cf788e2f76a3f2a815ec79cd69b616f8381fe6fc5c95f46b6f25d3771d1d1bf2b794c56e7aa5ef42df2ece67e11b089a8b01aa0c3f7385ea4a2886c806a8456e95f499", 0xa8}, {&(0x7f00000001c0)="2a17a6a4372e3e3419c9f95dadcc351c1bed8ad447353164f9876a80d1f6001c2ee7f9bf9769a261a6c9afcba5de0b00145c2c9cf01e38e8343666d02d6b0720fc06913ba71a70196778fabcd54981fbc76db994e327661684d74001bac76916ec2f0b4f80b4dd9ba6bbbb09fe456d66795d1d092ae8a2365d175a779c8ed87da2e943236a6c357463c86075f56fbd87c036c1ff7dabfc2cc9a5657d7fba09d16fe6c3", 0xa3}, {&(0x7f0000000280)="b21831489a4000b59e0095cf6801fd60c4e797ea318a3b50fe2243d6f60fbbbe27a3e9b107874752c9fea771c270f57ffff3aba9c89145f219dd1fab9bc2169aee29da849fb4e6f91e3a8afc74d4258c4049e5d0a9b02bbe285fae70b6061d31723eae77236ccc941046ea0ebdf4a1132cb44d44927c3f30dba9bd18bd03b44c28cb039cba2256316202bc034211d8c4893b904b7f80dad99bfb3a2a7e9e5c2a7d92c6cf8bb44f50bbff811f44757afa96bbcfe31ce35a049f93fe877abd5e7908622cdc51e65afce42de5aa", 0xcc}, {&(0x7f00000003c0)="97ad5849ee76f29a23e6d7615143a94b619dbe2fb3f4734174f1eac190aaa981663a845e2e15b6d7b57a536958829b6b15841caed1bc8259324f3eeb9fc46b56c9", 0x41}, {&(0x7f0000000440)="dae28db16f97e78b7a6ae793b273b65469548cb8107ce8d18b584ea60395de9ac6a151efd1ee19b449d0755d4a4965b7db761f50f420", 0x36}, {&(0x7f0000000480)="5ff1501537ca1eb0f8cebcf81d4decd541644f12b5b32f1c9c3d20ef97c63930a153416c1984027def", 0x29}, {&(0x7f0000001500)="3702ee00fb36c20aca42ad866478799cc5cf142d3e907ad26943beba307f90d0d651459c321178bae092d61c4c2a8c194d20e68553056662d3c2005cc3249377f3e6", 0x42}, {&(0x7f0000001580)="7ba3b92faf85c841cab09020ba80885bc1f28fde01e9965c22dd5b181214df6af82fe3f85421f8ba1bd0a624fa338eed34c78449d2f4958322df4994edf053cb52c3f27fa1fd59eaeaff59b142c123ed66c3d22b08f3eed2774ac2483b6df6ee452033640c1df2e4e0d21ed51044a88395d035e8d0ceaf8f981b918d1ed115aec3bbdc78f9a7fa3b96c1ad58ae5076484d215a77130a1c59f6da5ac68f6f15218cbe032d6813b9f0f8845bf9b31d55d73fc413fa4c9d61a7d78d1e12da9d303f5c1269", 0xc3}], 0xa}}, {{&(0x7f0000001740)={0xa, 0x4e21, 0x3f, @private2={0xfc, 0x2, [], 0x1}, 0x81}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001780)="6f1678af0b614db971579db803c6637fcc78e8b579fb919c8c7036d9a1813924c98fb8a4beddf5d51c658ed06e7df4174580fb8b39ded33e8c0f0e1b5ae19da3b9b3543f5ed51557f143bdb91f89a0a17994f56ca25f25b22c4a5f4517", 0x5d}, {&(0x7f0000001800)="4ad3729b49160c35c9464d59ad4e85193c45ef9eecafc93be04bdfcb3458e444d42c732eef2ee6cebc30dcce8cadfb94e47f04b8f637628852cff66ef31883c323d10c0c7b4fae7cbe3029f561d727bcb0124c3c01c207d311b463a57725e4c79fb2282998b12f3381785625656443f546a1671b42842d873c6af237c94f64", 0x7f}], 0x2, &(0x7f00000018c0)=[@rthdr_2292={{0xb8, 0x29, 0x39, {0x84, 0x14, 0x2, 0x3, 0x0, [@loopback, @dev={0xfe, 0x80, [], 0x43}, @dev={0xfe, 0x80, [], 0x1e}, @empty, @private2={0xfc, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x15}, @private2={0xfc, 0x2, [], 0x1}, @mcast2, @private2, @private2={0xfc, 0x2, [], 0x1}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x8, 0x0, [], [@jumbo={0xc2, 0x4, 0xec}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0xf0}}, {{&(0x7f00000019c0)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0x31}, 0x800}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001a00)="186c65a4dd4b66", 0x7}, {&(0x7f0000001a40)="d0b06cff7c093317c6e4edd50f596d3824fdd3dbbecc1eef4167b1888c41040d51c7ec13d522aea6b5b0b52528b32ac650bd1a544040e8ad07e5021aa1fa", 0x3e}], 0x2}}, {{&(0x7f0000001ac0)={0xa, 0x4e22, 0x3, @private1}, 0x1c, &(0x7f0000001dc0)=[{&(0x7f0000001b00)="1e78a2abbb32835627d619c03d2c872db11d0da0db0797fef33209f17528d9f914b93ac3d8a0eea4046e1da161a0d06b70934729b21331d2aa5870c2651a8be23066604498cb47d4e5b8af8808491a4d0ecfe2d3659f0a958ad64a0b7a5a19e36b900237ec5294ae045fd9cb13ce1b5d4ee0c2a06dce00921b03fb5397a6d4fefb67fa6fddbc26760ce49bfa8f8cdf5de39f05220164af757165b4bb273e1e2571e9ee6c4eb3413c", 0xa8}, {&(0x7f0000001bc0)="81094476365b353f3d6efafd4a4155f93209142222c4340bee369f6ac2a8f5bbf0e661575bff9484a5325ec34f1f4aa521c787d8dcf29a1c5f6b50e168f7da589d64b707a16cc01cdbcff71b786d57964e59ad47fec640199fbbe793", 0x5c}, {&(0x7f0000001c40)="b119649f4cd5654e557038692d173ba6dad1b6758e0f8080137b93f38b5b21c43e166cc5d755b744e32f24afc8ab5517ba59a324a8a47d25f7eca0d7f7f8715c809a5a174abe64a8bd85a9fc0e3c1b861fcbca8d76a28a78c1199db403a483eabe55135dc00f6152f0aa7f961b6b0af968cb4a09f661831d1cc2c7221f632884a2866f63b5aea03dd25da3f8b1e6a238f431f788c36e7ca30a588e3547ae325ecd3437da6951153fc63ecaf3b36a119bc74c28b52266413aa498518afe57da1c64a1d25df9407bcb16834d4f3c38e5f379e6818ad39fc3689222f12803b01b25f9e8ae", 0xe3}, {&(0x7f0000001d40)="9485474e6783bd460cd425bf1fc4f6d752d9c099e5020fe25c5a2ca5a8c6e66bfb9a1bd76cdad7d517996b3d5a68ad9d9c51612a93e60fe3c7f0cb0284e03bdecc9ad554bb7ca0934024dfe010d9685125", 0x51}], 0x4, &(0x7f0000001e00)=[@dontfrag={{0x14, 0x29, 0x3e, 0xc8}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x8, 0x0, [], [@pad1, @pad1]}}}, @rthdrdstopts={{0x198, 0x29, 0x37, {0x3b, 0x2f, [], [@generic={0x1, 0x34, "475df752bb27bf97189c2135b2f6d68ddb347dec56d4c99c15c94b6d3b1fd9279bca6b1b7567f5ca46cfd5f8f4c9bb994608a0fa"}, @hao={0xc9, 0x10, @private2}, @generic={0xb1, 0xf7, "99cad1857d69478f50bdd5e11776b3905ea1b8caea66db1a4412714704da1266511c1a5ad56ffb48a75bf5a8763bf43f73c5481c81ee097360e8b73fc98b9486a09d7416d0e12026cc76dc3a83f29602a8bff33c68562e0495fa510d91162e94e34d6c293cd23b93d573aba007885177d69c80cad28a529fb2c4ac3221f6948956352f2e6d1293895dbd2e78e9f941a49ce4976d99c14397187bd41142163684e1fa4d31e853dc661e63d1def8f1676e2ebbd392e87536914c3725b68d768ce1e5448edbed06fdd385613ba8d313ac8fad90d4bb15a348f954420e19accb39791318903794803eef14bff38cecb7e7a7cdf066263c33a1"}, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @private2}, @jumbo={0xc2, 0x4, 0x1000}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x10}}, @enc_lim={0x4, 0x1, 0xff}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x381}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x3c, 0x1f, [], [@calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x7, [0x6, 0x7fff, 0x6]}}, @calipso={0x7, 0x18, {0x3, 0x4, 0x0, 0x6, [0x7ff, 0x7fffffff]}}, @jumbo, @padn={0x1, 0x1, [0x0]}, @generic={0x5, 0x16, "ee77b68bd6a1b40e817343b90cdc73528815c543e8bc"}, @jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x42}, @generic={0x4, 0x93, "59e0088defcdadd2dbfb3893c357a85e8efca34c8a5f6bf9d05e414503d26cfe25cf9f3eead47618b80972f0c80c7fa7f08ade0e642ed57e27ce283040d1f89bf5b42261a667487f3990bc59ed6b95bb4c58a4f9b19d45387252f2927b27c2f72e3303df53f1b1e24b3e58ba6c3a1c641c14dd461873f8639b9a4ad6f113dc97794f69fc2529bb3c9b0d6386cca3d24dfd21cc"}]}}}, @hopopts={{0x90, 0x29, 0x36, {0x5a3319bba070a8f, 0xe, [], [@ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x58, {0x1, 0x14, 0xff, 0x78, [0xffffffff7fffffff, 0xffff, 0x9, 0x0, 0x0, 0x4, 0x0, 0x4, 0x401, 0x24]}}, @jumbo={0xc2, 0x4, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x800}]}}}], 0x3a8}}], 0x4, 0x4) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x242141, 0x0) 18:20:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 18:20:54 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x1}]) 18:20:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 18:20:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x5) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x3000000, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x40000}]) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x38) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8, r0, &(0x7f0000000180)="27614f6b329ad5820bddbff8e2bad4b416a54580a4608de21a5f7bd45f48135834db5315f9e11802015e53f7e68efb35dab25a6a68549a546af94a54994cd6c7ae6b90e5cc25ad8962dabf948591905d0ada3a0e8d7ece03bf016827fbbdecfa8ca62c23f814259f0f7daf7a12e71ce5c73a02916affec7e9c79e170298c4de62c0e0105ed6447e81c87cf3d8e865e8f141344a4193b066dd968d1b98d8dcb8e226af2db3d60683b27b65776dcbf6111", 0xb0, 0x6e3, 0x0, 0x2, r5}]) 18:20:54 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f40}, 0x0, 0x0) 18:20:54 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xd20) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:20:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x9000000) 18:20:54 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$rds(r2, &(0x7f0000001800)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/146, 0x92}, {&(0x7f00000015c0)=""/152, 0x98}], 0x8, &(0x7f0000001740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x1}, &(0x7f0000000100)=0x67, &(0x7f0000001700)=0x80200000, 0x400000000000000, 0x9, 0x4, 0x5, 0x61, 0x6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9dbe}, @rdma_dest={0x18, 0x114, 0x2, {0x48dc, 0x9}}], 0x88, 0x800}, 0x40080c4) 18:20:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) 18:20:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(0x0, 0x0, 0x0) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@release={0x400c630e}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x73b000, 0x0}) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) [ 2397.881070][T30907] binder: 30904:30907 unknown command 0 [ 2397.896344][T30907] binder: 30904:30907 ioctl c0306201 20000540 returned -22 18:20:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 18:20:55 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket(0x5, 0xa, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x1}, 0x4) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:20:55 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0) 18:20:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) 18:20:55 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x2, @remote, 0x10000}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3ff}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}], 0x68) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2398.513177][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 2398.513196][ T27] audit: type=1804 audit(5885547655.766:1840): pid=30880 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3760/bus" dev="sda1" ino=16341 res=1 18:20:55 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xd40) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2398.602533][ T27] audit: type=1800 audit(5885547655.766:1841): pid=30880 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16341 res=0 18:20:55 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) write$binfmt_aout(r1, &(0x7f0000000400)={{0x108, 0x0, 0xee, 0x3b9, 0x20d, 0x5, 0xd1, 0x10000}, "23f523e5d1385484c5b1754a5e192b4df34203324cc83210a9be5f24d821584e525ace697bbeaf96a06afe78324afb2d4c2dabc7176bfb1b06674935bea7470fba9addcc2594bb8b4024ed113cc5521bd061b33509ca6f043e2399942a669b34bdba8c850f6d1dab1f16ca45b5069d5199340bc174c7a4dd5ddd10f689af4b6fe0", [[], [], [], [], [], [], [], [], []]}, 0x9a1) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x1, 0xff}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000040)={r3, 0x63}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) [ 2398.656119][ T27] audit: type=1804 audit(5885547655.796:1842): pid=30884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3760/bus" dev="sda1" ino=16341 res=1 18:20:56 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) socketpair(0x2, 0xa, 0x5f7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x4, 0xa0}) finit_module(r0, &(0x7f0000000080)='posix_acl_access}\x00', 0x1) io_setup(0x2, &(0x7f0000000040)) 18:20:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) [ 2398.795923][ T27] audit: type=1804 audit(5885547655.976:1843): pid=30956 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3761/bus" dev="sda1" ino=16351 res=1 [ 2398.870498][ T27] audit: type=1800 audit(5885547655.976:1844): pid=30956 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 [ 2398.955355][ T27] audit: type=1804 audit(5885547655.986:1845): pid=30956 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3761/bus" dev="sda1" ino=16351 res=1 18:20:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 18:20:56 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0) 18:20:56 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket(0x11, 0x1, 0x3) syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd6176"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x804}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x32, &(0x7f00000003c0)={0x5, 0xf, 0x32, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @generic={0x9, 0x10, 0x2, "7a23389df35a"}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:20:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 18:20:56 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000440)=ANY=[@ANYBLOB="e8475937febc51589b65c19003456a03de2f0dedab469ef135e9ea400c3bc7c10bcdd1e8647a2013fad2b1bb68cb81d0dac3cdaff64fe31baca74af6dd896b31c0083781526a7f73c791e0184f6cdc708e18121e0628e155708129e94dc18bebd06e05f42e8f8a77000000553f99bb99c020401da25277d4161af7e79e7184dd1a9dcc13a762c12ccba6bfde614baaa617219127006066db03e737fd9a5ab5c840923900412f92c91dcc2d40f9211e5fa468fec7c36f70"]) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x3, 0x13, 0x6, 0xfffa}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000100)='/bdev\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)='net/udp\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000500)='+^ppp0em1]ppp1wlan1trusted+^cpusetem1%md5sumproc&\x00', r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r4}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r4}, 0xc) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2399.800323][T12334] usb 3-1: new high-speed USB device number 69 using dummy_hcd 18:20:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 18:20:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000040)=0x1) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2399.900897][T12334] usb 3-1: Using ep0 maxpacket: 8 [ 2400.019510][ T27] audit: type=1804 audit(5885547657.266:1846): pid=30960 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3761/bus" dev="sda1" ino=16351 res=1 18:20:57 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xd60) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2400.074330][ T27] audit: type=1804 audit(5885547657.296:1847): pid=30958 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3761/bus" dev="sda1" ino=16351 res=1 [ 2400.143412][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2400.155971][ T27] audit: type=1800 audit(5885547657.296:1848): pid=30958 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 [ 2400.192807][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:20:57 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f}, 0x0, 0x0) [ 2400.257538][ T27] audit: type=1804 audit(5885547657.506:1849): pid=31029 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3762/bus" dev="sda1" ino=16351 res=1 18:20:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x12000000) [ 2400.400974][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2400.410062][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:20:57 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x101100, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000000180)={0x3, 0x3, 0x6, 0x4, 0x7ff, 0x3}) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xfffffffffffffffe) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000030000380080001000000000014000200697076eb696e30000000000000000000080003000000000008000500e0"], 0x44}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040011}, 0x4084) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer\x00', 0x8000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@fwd={0x5}, @struct={0x7, 0x3, 0x0, 0x4, 0x0, 0x89, [{0xb, 0x3, 0x2}, {0x6, 0x2, 0xffc00000}, {0x9, 0x4, 0xf540}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x5f]}}, &(0x7f0000000680)=""/161, 0x5b, 0xa1}, 0x20) sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x64, 0xa, 0xa, 0x700, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xa5}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @fwd={{0x8, 0x1, 'fwd\x00'}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8}]}}}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x48001) [ 2400.442950][T12334] usb 3-1: Product: syz [ 2400.457499][T12334] usb 3-1: Manufacturer: syz [ 2400.473477][T12334] usb 3-1: SerialNumber: syz 18:20:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x13000000) [ 2400.664089][T31046] IPVS: Unknown mcast interface: ipvin0 18:20:58 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='veth1_virt_wifi\x00') io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2400.810234][T12334] usb 3-1: 0:2 : does not exist [ 2400.853941][T12334] usb 3-1: USB disconnect, device number 69 18:20:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x14000000) [ 2401.540178][T14691] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 2401.630973][T14691] usb 3-1: Using ep0 maxpacket: 8 [ 2401.850972][T14691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2401.864038][T14691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2402.043296][T14691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2402.055884][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2402.082239][T14691] usb 3-1: Product: syz [ 2402.094806][T14691] usb 3-1: Manufacturer: syz [ 2402.105294][T14691] usb 3-1: SerialNumber: syz 18:20:59 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x389000, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x3, 0xff) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x7c, 0x0) syz_emit_ethernet(0x3bc, &(0x7f0000000180)={@random="b4fdacbab388", @multicast, @val={@void}, {@ipv6={0x86dd, @tcp={0x2, 0x6, "5f7a12", 0x382, 0x6, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2, {[@fragment={0x73, 0x0, 0x6, 0x1, 0x0, 0xd, 0x66}, @dstopts={0x87, 0x12, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, [], 0x1}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x58, {0x1, 0x14, 0x1, 0x0, [0x1, 0x7fff, 0x9, 0xffff, 0x8, 0x4, 0x16, 0xe281, 0x20, 0x4]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x81}]}, @dstopts={0x62, 0x11, [], [@generic={0x4, 0x5e, "eaa6237e9301992e5853d1b65eb7b23fc5eff42b7618077917af9da31dad86f107fefe2f8119b89417086952ceb7113b002df5e0c171b480d9ba2056093601de1a4fa1640b4f5d60147dd13c6cd68895af91efacf66e74a1d7f14fca556a"}, @calipso={0x7, 0x28, {0xc442500bdda4ebdf, 0x8, 0x8c, 0x8, [0x1920, 0x9, 0xb14c, 0xfffffffffffffffc]}}, @ra={0x5, 0x2, 0xff24}]}, @routing={0xff, 0x6, 0x2, 0x7f, 0x0, [@private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @rand_addr=0x64010101}, @dev={0xfe, 0x80, [], 0x11}]}, @dstopts={0x4, 0xb, [], [@calipso={0x7, 0x58, {0x1, 0x14, 0x2, 0x5, [0x8, 0x5, 0x2, 0x7, 0x8, 0x401, 0xfffffffffffff801, 0x9, 0xbb, 0xffffffff80000000]}}, @enc_lim={0x4, 0x1, 0x1}]}, @dstopts={0x32, 0x1, [], [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}]}, @srh={0x84, 0x12, 0x4, 0x9, 0x8, 0x8, 0x4, [@private0, @private1, @local, @private1, @private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @ipv4={[], [], @multicast1}, @local, @loopback]}, @fragment={0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x64}], {{0x4e20, 0x4e21, r1, r2, 0x0, 0x0, 0xb, 0x80, 0x400, 0x0, 0xa08e, {[@sack_perm={0x4, 0x2}, @mptcp=@mp_join={0x1e, 0x3, 0xd}, @exp_fastopen={0xfe, 0x12, 0xf989, "8fab18d75d4192c6070fd1b33639"}]}}, {"b8b959dd8b3d426ba5c02cfd7c9458f7dcd00c111f819334548501b0e4203df8bb0bbaf6797ed8660e93652dc90452770362cc8e86f311ca3b5dd65d85797fe6d472bec9cbfc878598b773dd7dc7727b03b4fc06166ebe90bd08a71255a203e76e47f7ed4dea01b8f0055c7f5139e498b4e3dd39c3d896edf69f537baa90572e3059b1ebb8e95d538c3fc0124311dbce989c414ee9e03ddbe57da7ccc1a8f6082830b8faec633f3b3b2a7d484802b98419d974814f338734753fb900f136352028edb6a343f2"}}}}}}}, 0x0) 18:20:59 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0xfffff800, 0x9f, "387127160193d3de70fa89cfb94f6eb53878f7cb200f5e8277ecf3d8a86b0f3dae9fe41e897fb4e66c2a60dd9214024094000402b2d07a1b72513829bd68358189eb9ae627462254788a9e49e7db96b1d7dd91e1353e02e01d609971f4d47b7b525264ef659a736e47bf3c7ca026559c0b071b0214b665074b6e8f5115260b4491f043118b5ec701d2204ec22e66fd8a0e867ca8373288525206cb877215c0"}) io_setup(0x4, &(0x7f00000004c0)) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x5) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ftruncate(r5, 0x5) dup3(r6, r5, 0x0) io_submit(0x0, 0x0, &(0x7f0000000080)) r7 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r7, 0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x8, 0xfffd, r7, &(0x7f0000000000)="98", 0x1}]) 18:20:59 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d01}, 0x0, 0x0) 18:20:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x15000000) [ 2402.430165][T14691] usb 3-1: 0:2 : does not exist 18:20:59 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xd80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2402.469957][T14691] usb 3-1: USB disconnect, device number 70 18:20:59 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000440)=ANY=[@ANYBLOB="e8475937febc51589b65c19003456a03de2f0dedab469ef135e9ea400c3bc7c10bcdd1e8647a2013fad2b1bb68cb81d0dac3cdaff64fe31baca74af6dd896b31c0083781526a7f73c791e0184f6cdc708e18121e0628e155708129e94dc18bebd06e05f42e8f8a77000000553f99bb99c020401da25277d4161af7e79e7184dd1a9dcc13a762c12ccba6bfde614baaa617219127006066db03e737fd9a5ab5c840923900412f92c91dcc2d40f9211e5fa468fec7c36f70"]) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x3, 0x13, 0x6, 0xfffa}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000100)='/bdev\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r2, 0x0, 0x1, &(0x7f0000000040)='\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)='net/udp\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000500)='+^ppp0em1]ppp1wlan1trusted+^cpusetem1%md5sumproc&\x00', r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r4}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r4}, 0xc) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:00 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x0, &(0x7f00000000c0)) 18:21:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x16000000) 18:21:00 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$rds(r2, &(0x7f0000001800)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000200)=""/201, 0xc9}, {&(0x7f0000000300)=""/65, 0x41}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/146, 0x92}, {&(0x7f00000015c0)=""/152, 0x98}], 0x8, &(0x7f0000001740)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0x1}, &(0x7f0000000100)=0x67, &(0x7f0000001700)=0x80200000, 0x400000000000000, 0x9, 0x4, 0x5, 0x61, 0x6}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9dbe}, @rdma_dest={0x18, 0x114, 0x2, {0x48dc, 0x9}}], 0x88, 0x800}, 0x40080c4) 18:21:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x17000000) 18:21:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 18:21:00 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x4) io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket(0x1000000010, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = memfd_create(&(0x7f0000000540)='ev\xd7auts\x00', 0xc) io_submit(r0, 0x5, &(0x7f00000005c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, &(0x7f00000000c0)="3bc739fda1fa2c6159ec2111f8b5333148a448723db9b642fc7832bf9c54ce117f37abd0dc1c6d324d7eaa", 0x2b, 0x2b6, 0x0, 0x2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x40, r1, &(0x7f0000000240)="48e612a45d44759847fe050e33a4941b49ed49a9f21703e03a2cf0ec56e501a24515a1f15455f89beacad5ad5eccd57fdd9653c4351773ca60a6e05585ec007b54f2820020f448437c428c0a1df2f4bd9072e80b0fa25456ae716aef928065059fc99e8e7d7dea15883a05d99861f07b276e24886cd6afae69164b778a813d9165185444d91f634f33bcd914624ae1cc2bb260dac619a561fe31ee9d3e9d204a240d9fb600676b806ca9835119a31accbdef", 0xb2, 0xa8fc, 0x0, 0x0, r3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x1000, r4, &(0x7f00000003c0)="ce445227f78bc9f108bd14ecf750dc7084c494a1e74df4c526d07798ab66a4b029468a278dc2c974ed03555b0f5a853416dac4a4e0fbe3d3d527adf2ecaac0e98594c8dcb7c7558b6fb3bae5084cc9bf520573f2", 0x54, 0x7, 0x0, 0x2, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0xa0227ebb0304e854, 0x1, 0xffffffffffffffff, &(0x7f0000000600)="a887925b26b43da7e842ea1256bb9c6e3acf63307c3e03db40e02d6855aca3b284d7fd583771ceb8f5620def88ff7d5257f17e9e27f9c498789bee2f35749f8d182c19a5772a54adb319637a0da4aaed42b01a8f30095fa9da99e53c1099b153ef6371b8348a2a71e944cc56fc2ba9b7f57e40e580d3", 0x76, 0x10000, 0x0, 0x0, r8}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x2, 0x8000, r9, &(0x7f0000000340)="369f7fd57782a4f3a75c5d6d62", 0xd, 0x6, 0x0, 0x3}]) ioctl$sock_inet6_SIOCDIFADDR(r8, 0x8936, &(0x7f0000000680)={@remote, 0xd}) 18:21:00 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c15}, 0x0, 0x0) 18:21:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 18:21:00 executing program 3: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xc80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:00 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000b0b4ea2d815631c232d9a3e35703f650fbfd7747b02330c21a21682c975927668528a1878fd78a7582bdd99f9812740df201c9c2a04bc41fd18a1bee78d573f919fbb8024521168638c7d7742a26c7982d772c763540c9f29a210760e540447fbfda9ea9f7d8a5e06631cd5ddd7aa3198e318f09658cbb046474532bf3d64d0ffcd155488b65f13f4037ec2cb0546717804872fba87cf1ae8d1ede518123dbc07f0b49124d36", @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000040)={'ip6tnl0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) [ 2403.777517][T31185] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2403.777606][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 2403.777676][ T27] audit: type=1804 audit(5885547661.026:1861): pid=31184 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir986082305/syzkaller.wrcRv5/3957/bus" dev="sda1" ino=16081 res=1 [ 2403.913457][ T27] audit: type=1800 audit(5885547661.076:1862): pid=31184 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=16081 res=0 [ 2404.002802][ T27] audit: type=1804 audit(5885547661.076:1863): pid=31184 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir986082305/syzkaller.wrcRv5/3957/bus" dev="sda1" ino=16081 res=1 18:21:01 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xda0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000200)={0x9b0000, 0xe972, 0x5, r0, 0x0, &(0x7f00000001c0)={0x98090c, 0x3f, [], @p_u8=&(0x7f0000000180)=0xb7}}) read$hidraw(r4, &(0x7f0000000240)=""/66, 0x42) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f0000000080)="15600ffc2c89dd08e5bcce5251e752171afa563a55d463f5774ff3c11bbe4a05d48115c107f9e2850ace8ebf559c060c5809c1363853f8c3a2bc2332536dded5bd2d2b267a691ebe81350fdc119143182676fa59347306abb0f1cec5", 0x5c, 0x4, 0x0, 0x1, r6}]) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000140)) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCGWINSZ(r8, 0x5413, &(0x7f0000000040)) 18:21:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x19000000) [ 2404.101997][ T27] audit: type=1804 audit(5885547661.246:1864): pid=31129 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3763/bus" dev="sda1" ino=16018 res=1 [ 2404.200881][ T27] audit: type=1800 audit(5885547661.246:1865): pid=31129 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16018 res=0 [ 2404.300057][ T27] audit: type=1804 audit(5885547661.246:1866): pid=31131 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3763/bus" dev="sda1" ino=16018 res=1 [ 2404.398646][ T27] audit: type=1804 audit(5885547661.426:1867): pid=31200 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3764/bus" dev="sda1" ino=16002 res=1 18:21:01 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1a000000) 18:21:01 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2={0x5, 0x1, 0xc, 0x5, 0xa, "5049e83360c4ff01c066"}, 0x13, 0x3) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2404.495587][ T27] audit: type=1800 audit(5885547661.426:1868): pid=31200 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16002 res=0 18:21:01 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a02}, 0x0, 0x0) [ 2404.602266][ T27] audit: type=1804 audit(5885547661.436:1869): pid=31200 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3764/bus" dev="sda1" ino=16002 res=1 18:21:02 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000038}]) 18:21:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1b000000) 18:21:02 executing program 3: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xc80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:02 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000003c0)={0xc5, 0x29, 0x2, {0x5, [{{0x0, 0x3, 0x7}, 0x3, 0x6, 0x7, './file0'}, {{0x4, 0x2, 0x2}, 0x1380, 0xc1, 0x7, './file0'}, {{0x10, 0x0, 0x7}, 0x9, 0x7b, 0x7, './file0'}, {{0x10, 0x2, 0x1}, 0xfffffffffffffffb, 0x5, 0x7, './file0'}, {{0x2, 0x4, 0x8}, 0x8, 0x5, 0x7, './file0'}, {{0x2, 0x3, 0x4}, 0x1, 0x0, 0x7, './file0'}]}}, 0xc5) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000040)={@remote, @broadcast}, &(0x7f0000000080)=0x8) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1c000000) 18:21:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0x200, 0x7ff, 0x5, 0x4, 0x7fffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001540)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001640)=0xe8) connect$can_bcm(r4, &(0x7f0000001680)={0x1d, r5}, 0x10) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000d, 0x20010, r4, 0x3db3b000) signalfd(r3, &(0x7f0000000080)={[0x4]}, 0x8) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r6, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2405.293554][ T27] audit: type=1804 audit(5885547662.546:1870): pid=31251 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir986082305/syzkaller.wrcRv5/3958/bus" dev="sda1" ino=16081 res=1 18:21:02 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xdc0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1d000000) 18:21:02 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000b}, 0x0, 0x0) 18:21:02 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) io_submit(r0, 0x3, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r2, &(0x7f00000000c0)="548f69033ca069aa0263ac953e3885adb90e0a078f1bcb42c1c6bebde84d48a91e05f0dc01421aadc1dd636e9239421fb62164264fb20bac41b181d79871666974b83a", 0x43, 0xfff, 0x0, 0x1, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x3, r5, &(0x7f0000000140)="46baf8fee356eaef5e1a3c41c8cb91ac872bb34d9a7686e6395af4da31cb41e408d4a2f35c5e7520af7925a993e88aed94f31580955c87", 0x37, 0xfffffffffffff800, 0x0, 0x3, r4}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000000500)="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", 0x1000, 0x4, 0x0, 0x1}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r7, 0x0) socket$bt_rfcomm(0x1f, 0x0, 0x3) r8 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r8, 0x0) r9 = dup2(r8, r6) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="7300000005000000400000007add1e2110ce67dada990826d9cdc8aee6c13deda4f6c3f4c16c64bd9ed8f03f77081bfc774ede9ee7d6d2bfcbf61f39db3c409e260823fbfe4dfa5ea9ec1f7dc418c4c3bb07325b2d1c8cbf25e7fa0c649b3ca20bd7ba6ea42300f096c5f3a7158d1d297bbff4611bdf2b52457f5c49d27122"]) 18:21:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1e000000) 18:21:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_PBSS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4088861) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$HDIO_GETGEO(r6, 0x301, &(0x7f0000000100)) r7 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x9, 0x0, &(0x7f0000000080)) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x3, r4, &(0x7f00000003c0)="98", 0x1, 0x0, 0x0, 0x3}]) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r9, &(0x7f0000000280)="4cae40000000a53a2a6d2af2798a57ae475a25c07412202fd171508ba9f0af3a79ef099590ee9c11f0e90ea933142b46bcd67944e04e5293917fe57304e05ed371b06d595235b14795f281b8f63552ace7c0d63bc017b873814d1656ce4a76e7d68a5285b55275eb8348ed3dfb6850990b1d78132e4ae2d9fb9002000055cb4de1f630550c7c57ba221fff5115c8530934fa65dc2353f1e00af53d9ba293e107967954491f7c0597b1b309840959c5faf33a895e2af48ab271ee4f20a62c78424b6625", &(0x7f0000000500)=""/217}, 0x20) 18:21:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) [ 2406.086742][T31297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2406.193217][T31306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:21:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x22000000) 18:21:03 executing program 3: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xc80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:03 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x20) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=@random={'user.', '/dev/nullb0\x00'}) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') 18:21:03 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d000}, 0x0, 0x0) 18:21:03 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x24000000) 18:21:04 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xde0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:04 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x980, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000180)) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x26000000) 18:21:04 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x4000, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x100000001) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2e000000) 18:21:04 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) r4 = dup3(r2, r3, 0x80000) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000080)=0x4) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:04 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0) 18:21:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x30000000) 18:21:05 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x6000009, 0x11, r1, 0xd1cc1000) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) syz_emit_ethernet(0x1d, &(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRESOCT=r3], 0x0) 18:21:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x22000, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x36000000) 18:21:05 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xe00) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)) r1 = syz_open_dev$usbfs(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x100, 0x2) mmap$usbfs(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x10, r1, 0x6) io_setup(0x2, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1}]) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000180)}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xa00, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$VHOST_SET_VRING_ENDIAN(r3, 0x4008af13, &(0x7f0000000100)={0x5, 0x3f}) 18:21:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3e000000) 18:21:05 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e8000}, 0x0, 0x0) 18:21:05 executing program 3: io_setup(0x4, &(0x7f00000004c0)=0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendto(r4, &(0x7f0000000300)="a2c08002a39d9207651c0c1231e5d24df565ab7fc7f89b1bd08a79b31f68c5d93298969eb610dd08ed5acc94b5139a2bd6461e57c839c0bcd9765fa78f5a67a26794800e5d8eb311627506df676b0440117e2bb982e0", 0x56, 0x4004000, &(0x7f00000003c0)=@nl=@unspec, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000009c0)=@sack_info={0x0, 0xffffff45, 0xfff}, &(0x7f0000000a40)=0xc) sendmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000440)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000500)="6156cf9c3604d96834663a411bb4446d9c676b195e0cbc8c54c771be3b2f35f361dffa19398b4c6695b6b02c795aa2d787308ef1090b5b628d4323b91f3e4d041dae50765eb76aaf9de78e3725a55f5a6660d8ff85e34cec0416ac84ec8016fa5363f05af48bcfad31478f615201331d2607f47076b8931201118821f0d79d57a829896ce2facebdd6737b6faf05cde7997ceb2216771518669d063f00b37802bbf8a1ddb6e1bbf94c4ae1b679d3790c91592422c3b3e348bb48751d5c4e22cec14d9c7b46451fa491690214340e2e72e64c909cd02487c2769284a9", 0xdc}, {&(0x7f0000000600)="a20b29f045c9a2f2819976d6606b8d4bd1d57a86a2bdb22583dcc19f8ff328256279ea135b429924f520a5c2dabee715edbfb850ce6e8da799e8370ad8d4231a617aae9851ebab012238d48f695956ffc06c15ff63", 0x55}, {&(0x7f0000000680)="e5fd346cc1098247fda41ce6a18c35e2a181e50c5c79dc18c463c43eaade011efe30ab441deb3608d46146c74403c6f4cb17bd998d09eee938e510d33ededc57f2e3ff88df7f75e4ad40550d25b689d832442b969eb1145e29f068ec16fd31f76aa0fb0e9fb69dd5b4c7fa38d0c58259d5487f9718549812de6d54d56674b8421acf2e39a117154987baa96a12401448457cf59bb1439c8ac29eeac71b69a0d063ba5590d777661fc5c8cfe6c08339fd41740d762f976a09f29d79da55", 0xbd}, {&(0x7f0000000240)="40a832ff614b00b5f1eecd93cb167fcf159995c219d0c833a64db21f4a3bc6459940d26569", 0x25}, {&(0x7f0000000740)="3480106369b4b00868358b3beaaadd3fb2e45ba4aa296ffa14484e24bf3ad8150452e71a2b6a2c118c073a93fbc3f83263586187b71500f0ad7d304fc75c4eb8791b326174afb76a52646bed60d22fa4a43ccd5f2651c0524992887cd4bc3ee24a17df290dca2b43eda8942b0239224c6cdece", 0x73}, {&(0x7f0000000380)="12eb667668e4b6ddfe187bd740de4bcd67e195512e32344516f83b14a0f9bdb4116e5eecf50483986b9366415dafc9f143", 0x31}, {&(0x7f00000007c0)="5f8f8ba34b336f8faf1ae0cad327495705178b88e0f433ec2857aa16385ea7d636c43fdc444eb942b4f2fc38985264df7b4c77e20f6dc5ea3e5691367bd7718b8ae97935c40c464a12f0577efac88a5d0fb31e67f296f4f3ea2d66905a6ad70243", 0x61}], 0x7, &(0x7f00000008c0)=[{0x88, 0x10f, 0x9, "7efaba34f2b5ff7f4bdcd5a06e4d1bf0948b1eae8f4c86a9eb7ed88ad7de90b0ed4ea6ca8624e85aab4d6bbdc95039f51053400a0eaf723c78326b01cf025651538a6f44c183ec911e53d41f4ad252e28a1d22f2d62bbcff4e5f1643072087104022155535858120f188c470d34b13b36c4c"}, {0x10, 0x118, 0x2}], 0x98}, 0x4001) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x1}]) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x80000) ioctl$HIDIOCGUSAGE(r7, 0xc018480b, &(0x7f00000001c0)={0x2, 0xffffffff, 0x5, 0x2, 0xbd2, 0x2}) 18:21:05 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4000005, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x0, 0x4, 0x0, 0x1, 0x8000, 0x1, 0x3b9, 0xffffffff, 0x3, 0x400, 0x7a, 0xf, 0x1000, 0xcc, 0x10, 0x10, {0xff, 0x80000001}, 0xfe, 0xfb}}) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x8, r0, &(0x7f0000000000)="98", 0x1, 0x3, 0x0, 0x1}]) 18:21:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) [ 2408.788060][T31444] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:21:06 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, &(0x7f0000000040)) 18:21:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4f000000) 18:21:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x60182300) 18:21:06 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xffff}]}}]}, 0x4c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_subtree(r3, &(0x7f0000000540)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a40)={&(0x7f0000000580)=@deltfilter={0x4bc, 0x2d, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {0xffff, 0xfff2}, {0x10, 0xa}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x478, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff3}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xe, 0x8}}, @TCA_BPF_ACT={0x438, 0x1, [@m_csum={0x11c, 0x1b, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0x6, 0x0, 0x2, 0x7ff}, 0xf}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x6, 0xffffffffffffffff, 0x9, 0xfffffffc}, 0x32}}]}, {0xb6, 0x6, "4e6c312366e0029fee49e383ebbebdec3d88437f094cffddf118ec15dcc531215855ad218d3aeeea95650d585bf34fdbb667f4260576bb16c50888f07fb532f7da3734c567ca9982b1e0d52e7a6911034bacea736101d335df313bb7f9620b4713988c9635b79b3bd9aad5be59a6c561695df9865cedbe2f33e3c768de1fd2ed905964418c72b6f3e92492a83b4759f3e83d0028499d36fe8cde483f64131e4bc135c80714c395dfd7c89ab8d1d0d78ad97f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ipt={0x144, 0xf, 0x0, 0x0, {{0x8, 0x1, 'ipt\x00'}, {0xd8, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd3, 0x6, {0x9, 'nat\x00', 0x8, 0x8000, "937b3d91ad0ea93984b5d0d80bbefb3d25fac2af48584420cc618dfabe94b2416aca7e072196d5c41c0a278bc287762cc98af665c8d9db95a2c73edd7c045d0475b1c3535a3ff025b3514ec212acdd3d21d1bd48746182a51f21148c3e0f0b4ea5f9d021981fd731ee8a0dc2be5f7b06264e535246c46fc2748183b7bfc29664ace51fd3076e35192154646b65f7d4436dd0ea89828aa5ee943a334ecd122929015294456952fc8370"}}]}, {0x47, 0x6, "dab7e6066845d662eb8b9fca32df068ebddec67d5594f69bc7bd04a149327572b45c2ae29a22578d9b03d19012cc14a88aea4b79fa41138be4d021188a85609161a395"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xb4, 0x6, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r4}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x9, 0x4, 0x4, 0x7fffffff}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0xa}]}, {0x43, 0x6, "c460474092cc34f8691bc2f013fe5929d047c35bfca6c20956a3e264a786213427b7d92352a3ea675bed67daf05f8cb94d8b31b858697454efda2cdd947dd2"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0x120, 0x1d, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x641}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x58f}]}, {0xc9, 0x6, "8cc95885f1a8dd76f8b4f130a5479f498f9a38ef38c7baeecdcbd34f907a774acc3aa625bb43e758980ae168b65b5ef8d2497711002b011883b76c5b7b94931b39ad249dbd245f2529f237ca3f338d40722198f9a4267fdd00b2a2cc52d8877e87dc3e6103252bc9f80d9b5eafcdf96d1ab4de81b6e4fb7bd29b96c3cbd5543e9f1c185cf2f2225926c378bd28fab12fe4acbe7c17c487aa359fe79029638a029ffd0b21dfb30f2f5624e270f99d76312538bd8e9166e76fb6757958fa184c09c6311074a9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xffe1}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x7}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xffffff7d}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x81}, 0x4040) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x0) r6 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="ebf34329aacd33569a7b2d7139b5b3ea1d59bbac369a344b9a5836ca4935cbc95a48a139dad82c63f8bb4e3ccdd58149f2fd7775187817e76124e915067c17e4a552202843724d8adebdc147ec32be1f1103de0d565b4a576f5b79559f3a77bd6de7862f68887be39e8632176ad2b70d4bcaf413759719191b0237f591b7daeff22eb03c806afb81bb66b60f355dd7", 0x8f, r5) keyctl$assume_authority(0x10, r6) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)='self\x00', &(0x7f0000000240)='[)trusted\x00'], &(0x7f0000000440)=[&(0x7f00000002c0)='/\x9a\')\x00', &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)='user\x00', &(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)='GPLppp1vboxnet0\x00']) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000480)={0xf6b9, 0x0, 0x1f, 0x11, 0x8000}, 0xc) [ 2409.448111][ T27] kauditd_printk_skb: 23 callbacks suppressed [ 2409.448128][ T27] audit: type=1804 audit(5885547666.696:1894): pid=31415 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3767/bus" dev="sda1" ino=16098 res=1 18:21:06 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0) 18:21:06 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xe20) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2409.601007][ T27] audit: type=1800 audit(5885547666.696:1895): pid=31415 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16098 res=0 18:21:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x64000000) 18:21:07 executing program 3: setreuid(0x0, 0x0) getgid() socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b37200000b000100666c6f77657200001c000200100054800c0005800800010000000000080055800400038038d5d6f9bbf2bd9bc2355c84b1e79db50971ba769000b93865"], 0x4c}}, 0x0) mknod(&(0x7f00000007c0)='./file0\x00', 0x200ff4, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000f80)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00'], &(0x7f0000000200)=[&(0x7f0000000280)='&\x00']) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0a5114145f4320b979600000090781299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf00000000646b9faac69d98c9497c"], 0x0) [ 2409.743490][ T27] audit: type=1804 audit(5885547666.696:1896): pid=31420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3767/bus" dev="sda1" ino=16098 res=1 18:21:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_submit(r1, 0x2, &(0x7f0000000180)=[&(0x7f00000000c0)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0xce, r2, &(0x7f0000000080)="96276ab8e03df5b05e5ced3ed338176c41a17a64e91a0cbac6fadb4dae60548cf2faaea7c6a79b775fe384775921109878", 0x31, 0x80000001, 0x0, 0x2, r4}]) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r5, 0x0) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000000040)={0xfffffffd, 0x3, 0x401, 0x30, 0x8}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) [ 2409.883683][ T27] audit: type=1804 audit(5885547666.976:1897): pid=31498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3768/bus" dev="sda1" ino=16129 res=1 [ 2410.018296][ T27] audit: type=1800 audit(5885547666.976:1898): pid=31498 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 18:21:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x65000000) [ 2410.152351][ T27] audit: type=1804 audit(5885547666.976:1899): pid=31498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3768/bus" dev="sda1" ino=16129 res=1 18:21:07 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r4, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) fcntl$setown(r4, 0x8, r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r8, r10}}, 0x18) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:07 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x66000000) 18:21:07 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0) 18:21:08 executing program 3: setreuid(0x0, 0x0) getgid() socket(0x1000000010, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000000000000b37200000b000100666c6f77657200001c000200100054800c0005800800010000000000080055800400038038d5d6f9bbf2bd9bc2355c84b1e79db50971ba769000b93865"], 0x4c}}, 0x0) mknod(&(0x7f00000007c0)='./file0\x00', 0x200ff4, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) execve(&(0x7f0000000480)='./file0\x00', &(0x7f0000000440)=[&(0x7f0000000f80)='=cB\xc6+\xbf\xcc_\x81 \xd5\xb9.%\xd1\xec\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa4\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4B\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\x95\xdb\x052\xbf\xa8#\x83\a\t\xcb\x04\x1f\x1e8\xe2\xa11\x8f\xbe\xe4o\xaf\xe6\xb2z\x11\xa9\xae\xaa\xc2Wi\xa8\x9aQ7\xea\x1b\x02\xf0\x82~=\x017\xa8\xaaF\xe6\x80t\xd8\xc7\xff\x9f\aT\xc4\x94\x9a\xe9\ty\x16)\x9b>\xca;\xf4\x94\x8a\x9f{a\xe0\x86\xf0\xffp\xfcXs\xf1F\x9a\xab\xf4\xf0\x80\x1e\x9cA\x95X\xf9\x10@\xa4\x89gp;\t\b\xa7\x87n\xc7\x93\x9e\x80!R:N\x82\x00'], &(0x7f0000000200)=[&(0x7f0000000280)='&\x00']) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x81, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100000086dd6000004000472c00fe8000000000000000000000000000aa00000000000000000000ffff7f00000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0a5114145f4320b979600000090781299107a853b2140e9e089eb8389c5d56700007d5af0beeb4915b463d24921e7059fa6cf00000000646b9faac69d98c9497c"], 0x0) 18:21:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x67000000) [ 2411.249966][ T27] audit: type=1804 audit(5885547668.496:1900): pid=31503 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3768/bus" dev="sda1" ino=16129 res=1 18:21:08 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xe40) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2411.345438][ T27] audit: type=1804 audit(5885547668.496:1901): pid=31498 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3768/bus" dev="sda1" ino=16129 res=1 18:21:08 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa9000000) [ 2411.485238][ T27] audit: type=1800 audit(5885547668.496:1902): pid=31498 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16129 res=0 [ 2411.578199][ T27] audit: type=1804 audit(5885547668.766:1903): pid=31559 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3769/bus" dev="sda1" ino=15921 res=1 18:21:09 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803e00}, 0x0, 0x0) 18:21:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) 18:21:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x64000000) 18:21:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf0ffffff) 18:21:09 executing program 3 (fault-call:2 fault-nth:0): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:10 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:10 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf2ffffff) 18:21:10 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00700}, 0x0, 0x0) 18:21:10 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xe60) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:10 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902a30003010000000904000000010100000a24010000000201020924030000000000000c24070000000055953c71d60c24020000000600000000000904010000010200000904010101010200001124020206000800010b1d24c95db4cd610724012f03000009050109400000fa960725010107c1ff0904020000010200000904020101010200000b240201070409079f9234090582091000080308072501025a0400"], &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f3d000603100b071002087c03000b00010c2100fc0103005a03100b1410043f70c257582a814e30c420147eca037afa0c100a0560000000000f0900"], 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r8, 0x1}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x7, 0x4, 0x4, 0x9, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r3, 0xc01064b3, &(0x7f0000000040)={r9}) 18:21:10 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x80080, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup2(r9, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r11, 0x0) io_submit(r1, 0x8, &(0x7f0000000680)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x101, r2, &(0x7f0000000000)="be67941c61e7e9b8a70c14506aa182590934474a9bf11e08b8ea8bac109fba5a00bb892a89a74ecefcd6d544fbcc020aef47b01d27718b196131d9ccfbacaeea", 0x40, 0x4, 0x0, 0x0, r4}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x5, r5, &(0x7f0000000080)="22afc8845b42bca15a3b973c61", 0xd, 0x2, 0x0, 0x3, r7}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x6, r7, &(0x7f0000000100)="5592f23fc7d9a31c72df0c495dbf7dd84c3cda5eab921e4e0f0461edd0f4742ae78a3b5f8149682af51f2cd1a89594c9720b9cbc78339e8313a97b85e573384bbefd9189d7bea377f75ecfdfb31735e8e72bae64f106076d9868bb2db68a3238a87ad6dac0c3066d10a856924747a3adbeced2badcb4bc4f9a2f94f6a7ea5664f96c336ad932ea64cfb50ca037ede1455ab2419b9843d95c795345b24db637ca708a67d8ee9253a4993b0eb9e24ed09d9434a610ad5028c46649bc4f2ecb0ff1acf58e252f06a1cce258ad6bab2fa8cf3316dda97d9685e0b9f7", 0x57, 0x9, 0x0, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000240)="4872da3454a24e218e265fa48009259d1be2390f736bf73b91d9ee3e362acbcd46cc1c7bcf18326fa0e2b234d19dcff0f2625f7858af2dfd05495d0d7c86a51df087ad31c41bafe55c17b7", 0x4b, 0x4, 0x0, 0x0, r4}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x200, r8, &(0x7f0000000300)="e45de45d24331d9ac3ca4b74606ade525acdfb", 0x13, 0x100, 0x0, 0x3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x800, r4, &(0x7f00000003c0)="6fdadbbefe135a517151980f17264d5c97b8c3d4c0fcc569a98ae7c1", 0x1c, 0x640bcd3d, 0x0, 0x0, r10}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f0000000440)="434bdbe1b3a9d3c9bb9b1abfcd50ac2050ef0abe40b3035f9a5939981926a4c454793c341b614158926bac35102467bd5fd39b47d5faab1a2e280337158d70cbb499b013646ffcfb831c95a7520047abda88779189179b46588a9c0cdbc032e5f01956ac2f3fcf28b831d8a2b3a43be111f640", 0x73, 0x1ff, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x7, 0x7f, 0xffffffffffffffff, &(0x7f0000000580)="7763fbcb7f8ec8cf091cdbe8a9f9e6a2b657630facab211fef33a5f2d24497b98559fc175a76b8c3e7dbd12cbffe7e3bf324dc204deeefaab28c26183bee004bc2a8c8b6f236a6b8077f9792c17b202dffde2ff0a90bb3240c411c66a2df1a73a12269227906aece09cdc650c825a0fa5a2f7834065d82a81f71fe902674812a1c3507d701456a857ca64b001623d73a2088149ac87dee88d16d7cf066aa8c1126fe11cccb68e1f863f4577e7f61", 0xae, 0x5c24a9c, 0x0, 0x3}]) 18:21:10 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf3ffffff) 18:21:11 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x1) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:11 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0, 0x3}], 0x1, 0x0) [ 2413.959676][T12334] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 2414.070327][T12334] usb 3-1: Using ep0 maxpacket: 8 18:21:11 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0, 0x300}], 0x1, 0x0) 18:21:11 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfec00000) 18:21:11 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2414.200448][T12334] usb 3-1: descriptor type invalid, skip [ 2414.206294][T12334] usb 3-1: descriptor type invalid, skip [ 2414.233403][T12334] usb 3-1: descriptor type invalid, skip [ 2414.284068][T12334] usb 3-1: descriptor type invalid, skip [ 2414.390263][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2414.419603][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:11 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000900000030000380080001000000000014000200697076eb696e30000000000000000000080003000000000008000500e0"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x140, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x54}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x7f}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'xfrm0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x35}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x800}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40800}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000002c00270d000069010684b9d475a02cf92783a8d20e232678a3556f980a5081180819fd8694442496b4cb7f4ce6fe8f0236480ca58966ec3f", @ANYRES32=r3, @ANYBLOB="00001000000000000e00000009000100666c6f77000000001c0002000800010030490000080002000100000008000400ffff0000"], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000068c0)={'wg0\x00', r3}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) r7 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r7, 0x0) close(r7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000006900)={0x4, 0x2, 0x7b, 0x8, 0x462, r0, 0x0, [], r4, r6, 0x1, 0x1, 0x2}, 0x40) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)) [ 2414.538469][T31677] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:21:11 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0) [ 2414.650312][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2414.658947][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2414.658967][ T27] audit: type=1804 audit(5885547671.906:1912): pid=31626 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3770/bus" dev="sda1" ino=16351 res=1 [ 2414.659373][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:21:12 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xe80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2414.674480][ T27] audit: type=1800 audit(5885547671.906:1913): pid=31626 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16351 res=0 [ 2414.729580][T12334] usb 3-1: Product: syz [ 2414.751754][ T27] audit: type=1804 audit(5885547671.926:1914): pid=31629 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3770/bus" dev="sda1" ino=16351 res=1 [ 2414.755434][T12334] usb 3-1: Manufacturer: syz [ 2414.813300][ T27] audit: type=1804 audit(5885547672.066:1915): pid=31690 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3771/bus" dev="sda1" ino=16380 res=1 [ 2414.825956][T12334] usb 3-1: SerialNumber: syz [ 2414.864977][ T27] audit: type=1800 audit(5885547672.096:1916): pid=31690 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16380 res=0 [ 2414.908359][ T27] audit: type=1804 audit(5885547672.096:1917): pid=31690 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3771/bus" dev="sda1" ino=16380 res=1 [ 2415.176159][ T27] audit: type=1804 audit(5885547672.426:1918): pid=31692 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3771/bus" dev="sda1" ino=16380 res=1 [ 2415.214123][ T27] audit: type=1800 audit(5885547672.426:1919): pid=31692 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16380 res=0 [ 2415.238176][ T27] audit: type=1804 audit(5885547672.426:1920): pid=31693 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3771/bus" dev="sda1" ino=16380 res=1 [ 2415.269782][T12334] usb 3-1: 0:2 : does not exist [ 2415.292169][T12334] usb 3-1: USB disconnect, device number 71 18:21:12 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902a30003010000000904000000010100000a24010000000201020924030000000000000c24070000000055953c71d60c24020000000600000000000904010070a3680d9cf96c6b54b17a5b2ccf4d0000010200000904010101010200001124020207000800010b1d24c95db4cd610724012f03000009050109400000fa960725010107c1ff0904020000010200000904020101010200000b240201070409079f9234"], &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:12 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0, 0x0, 0x3}], 0x1, 0x0) 18:21:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfee00000) 18:21:12 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xea0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:12 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x3, 0x4) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000040)="d858d9e93fc9e803314ee886f220a650d6d2fcb536fbb1bd2be080499788b703616024168d2110c83d959e9ce60be47aea", 0x31, 0x0, 0x0, 0x2}]) socket$inet6_tcp(0xa, 0x1, 0x0) 18:21:12 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0) [ 2415.778232][ T27] audit: type=1804 audit(5885547673.026:1921): pid=31725 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3772/bus" dev="sda1" ino=16325 res=1 18:21:13 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0, 0x0, 0x300}], 0x1, 0x0) 18:21:13 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x5, 0xb, r0, &(0x7f0000000040)="98", 0x1, 0x200000000000000}]) 18:21:13 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xff000000) 18:21:13 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x300, 0x0) 18:21:13 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2416.231468][T10145] usb 3-1: new high-speed USB device number 72 using dummy_hcd 18:21:13 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000180)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) r4 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r4, 0x0) r5 = dup2(r0, 0xffffffffffffffff) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r7) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000200), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x60002, 0x0) ioctl$SCSI_IOCTL_SYNC(r5, 0x4) [ 2416.320112][T10145] usb 3-1: Using ep0 maxpacket: 8 [ 2416.519543][T10145] usb 3-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 2416.555320][T10145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2416.759501][T10145] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2416.768736][T10145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2416.776980][T10145] usb 3-1: Product: syz [ 2416.781280][T10145] usb 3-1: Manufacturer: syz [ 2416.785868][T10145] usb 3-1: SerialNumber: syz [ 2417.109472][T10145] usb 3-1: 0:2 : does not exist [ 2417.118175][T10145] usb 3-1: USB disconnect, device number 72 18:21:14 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x3) 18:21:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xffff0000) 18:21:14 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) clone(0x41be, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = getpid() r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x15, &(0x7f00000000c0)) ptrace(0x10, r3) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000024000b0f0200"/20, @ANYRES32, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008"], 0x38}}, 0x0) ptrace$setregs(0xf, r2, 0x0, &(0x7f0000000140)="235b80a0") ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000000)={0x0}) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x1}]) 18:21:14 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0) 18:21:14 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xec0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:14 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() tkill(r1, 0x1000000000016) sched_getscheduler(r1) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000400)={[0x8, 0x4, 0x401, 0x101, 0x7fff, 0xfffffff8, 0x7, 0x2c, 0xffffffff, 0x1, 0x800, 0x9, 0x7ff, 0x62be, 0x5, 0x51b, 0x4b, 0x1000, 0xff, 0x81, 0x1, 0xfffffff8, 0x4, 0xeb, 0x7, 0x6, 0x70daeb6c, 0x5, 0x100, 0x1f, 0x9, 0x401, 0x1f, 0x1f, 0x1, 0x2, 0x80000000, 0x589, 0x5, 0x7, 0x6, 0x4a0, 0x7, 0x7e, 0x80, 0x17, 0xa59c, 0x8001, 0x1, 0x5, 0x1, 0x6, 0x6, 0xff, 0x40, 0x7b, 0xd0c, 0x1ff, 0x6, 0x9, 0x80000000, 0x4, 0x21bc, 0x1, 0x9, 0x4271, 0x7f, 0x0, 0x180, 0x7f, 0x80000000, 0x6, 0x1, 0x4, 0x754, 0x4, 0x80000000, 0x9, 0x8, 0xffff, 0x2, 0x200, 0xfffffffe, 0x7, 0x0, 0x0, 0x6, 0x4, 0x10001, 0x9, 0x7fffffff, 0x0, 0x9, 0x2, 0x16a0, 0x96, 0x7fffffff, 0x5, 0x6, 0x80000001, 0x7ff, 0x4, 0x1, 0xffffffff, 0x1, 0x3, 0xfffff6b7, 0xdd, 0x6, 0x4, 0x2, 0x8, 0x17f, 0x2, 0xf57f, 0x5a4e25d0, 0x4, 0x2, 0x0, 0x40, 0x6, 0x9, 0x8000, 0x8, 0x800, 0x80000001, 0x8000, 0x800, 0x180000, 0x5, 0x3e7, 0x2, 0x4, 0x8000, 0x200, 0x100, 0xfffffff8, 0x800, 0x63b5ee59, 0x7f, 0x0, 0x2, 0x0, 0x2, 0x848, 0x25, 0x0, 0x2, 0x1, 0x8, 0x7fff, 0x101, 0x1, 0x8, 0x401, 0x85, 0x6, 0x8, 0x10000, 0x7, 0x101, 0x5290, 0x4, 0x2, 0x9, 0xfffffffd, 0x1, 0x0, 0x0, 0x51a, 0x170, 0x7fffffff, 0x20a4, 0x4, 0x7, 0xfffffffc, 0x4, 0x8, 0x7, 0x163, 0xf15, 0x6, 0x1, 0x3, 0x6, 0x7ff, 0x80, 0x7c0, 0x81, 0xc, 0x1, 0x0, 0xaf, 0x5, 0x1, 0x9, 0xffffff42, 0x1, 0x20, 0x8, 0x25, 0xffff606e, 0x3, 0x67d, 0xffff, 0x7fff, 0x3f, 0x1000, 0x8, 0xffffffff, 0x400, 0x5, 0x1f, 0xffffffff, 0x8, 0x800, 0x3, 0x80000001, 0x3ff, 0x5, 0x2, 0x100, 0x6, 0x6, 0x5, 0x5, 0x80000001, 0x4, 0x7f, 0x2, 0x6, 0x0, 0x3f, 0x4, 0x7fff, 0x7, 0x5, 0x1, 0x1, 0x8, 0x3ff, 0x2, 0x4, 0x8, 0x401, 0x5, 0x6, 0xff, 0x7, 0x3000000, 0x80000001, 0xe28, 0x0, 0x697, 0x3, 0x2, 0xffff, 0x101, 0x4, 0x7f, 0x2, 0x9, 0x401, 0x9387, 0x7, 0x7, 0x5, 0x7fff, 0x10000, 0x1, 0x10000, 0x4, 0x3, 0x7, 0x9, 0x8c, 0x9, 0x20, 0x1ff, 0x7f, 0xe4d, 0x1, 0xb3, 0x6, 0x2a, 0x0, 0x8, 0x1, 0xc4ef, 0x5, 0x0, 0x5, 0x0, 0x3, 0x1f, 0x8, 0x200, 0x1, 0xff, 0x80, 0xfffffff9, 0x0, 0x7fff, 0xc30, 0x8001, 0x6, 0x80000000, 0x1, 0x5, 0x8, 0x7f, 0x40, 0x0, 0x0, 0x68b9, 0xffffffff, 0x9, 0x9, 0x6, 0x20, 0xfff, 0x1bd5, 0x3d51, 0x1ff, 0x5, 0x28000, 0xffffff01, 0x5, 0x0, 0x4, 0x7, 0x1, 0xf1, 0x9, 0x7, 0x80000001, 0x9, 0x79dc, 0x6, 0x7, 0x1, 0x3, 0x8adb, 0x1, 0x7, 0x5, 0x2088, 0x1, 0x1, 0x400, 0x3, 0x40, 0x5d, 0xfa, 0xfffffff9, 0xc0f2, 0x9, 0x2200, 0x6, 0x100, 0xfffffffb, 0x0, 0x10001, 0x1, 0x9, 0x5, 0x101, 0x4, 0x96b, 0x7fff, 0x7, 0x41, 0x5, 0xec, 0x7, 0x0, 0x8, 0x1, 0x7fff, 0x2, 0x8, 0x4, 0x94, 0x3, 0x5, 0x80000001, 0x1774feca, 0x1000, 0x8, 0x2, 0x0, 0x4, 0x5, 0x5, 0x2, 0xffffffff, 0xffff0001, 0x7, 0x9, 0x9, 0x7f, 0x324d, 0x3, 0x693, 0xfc0, 0x9, 0x3, 0x4, 0x8000, 0x0, 0x7, 0x8, 0x1000, 0x7, 0x80, 0xfffffffa, 0x5, 0x4, 0x5, 0xfffffffe, 0x3, 0x7, 0x4, 0x80000001, 0x3ff, 0x0, 0x8000000, 0x1, 0x7fff, 0xffff4714, 0x80000000, 0x5, 0x7, 0xfffffc01, 0x3, 0x3f, 0x1, 0x4, 0x200, 0x3, 0x5, 0x80000000, 0xfffffff9, 0x4149, 0xe5e, 0x7fff, 0x80000001, 0x4, 0x3, 0x8001, 0x2, 0x414, 0x7, 0x9, 0x5, 0x72e, 0x2, 0x1f, 0xef, 0xfff80000, 0x9cd, 0x0, 0x7fffffff, 0x4, 0xad, 0x5, 0x9589, 0x10000, 0x3, 0x0, 0x80000000, 0xfff, 0x2b, 0x0, 0x0, 0x0, 0x8000, 0x7, 0xff, 0x7fffffff, 0xffffffff, 0xffff, 0x7, 0x800, 0x7, 0x81, 0x8, 0xc2f9, 0x1, 0x5, 0x20, 0x9, 0x0, 0x4, 0x7, 0x0, 0x5, 0xffffffff, 0x9ef, 0x6, 0x9359, 0x0, 0x6ba, 0x4, 0x20, 0x6c, 0x6, 0x5, 0x2a, 0x5, 0x7fffffff, 0x4, 0x10000, 0xffffffe0, 0x9, 0x0, 0x1f, 0x5b4e, 0x7ff, 0x4, 0x9d39, 0xd99, 0x1f, 0x6, 0xfffffbb5, 0x8, 0x10001, 0x4, 0x7fffffff, 0x20002000, 0x8, 0x189f7ee4, 0x1ff, 0x20, 0x6, 0x9, 0x82f, 0x6, 0x800, 0x8, 0x9, 0x1, 0x0, 0x9b6, 0x80, 0x3e, 0x0, 0x1ff, 0x2, 0x3, 0x5, 0x1, 0x6, 0x7, 0x6, 0x8, 0xff, 0x8, 0x7ff, 0x4, 0xfffffff7, 0x293b5597, 0x3c, 0x16d24370, 0x2, 0xffff, 0x4, 0x9, 0xde, 0x7c6, 0x7, 0x6, 0xffffffff, 0x0, 0x10000, 0xb5c2, 0x5, 0x2, 0x0, 0x401, 0x8, 0x2, 0x7, 0x0, 0x8, 0x401, 0x6, 0x3ff, 0x4, 0x81, 0xfff, 0x0, 0x8, 0x8, 0x1, 0xb064, 0x0, 0x1, 0x1, 0x5, 0x9, 0x401, 0x800, 0xfff, 0x6, 0x0, 0x4, 0xffff, 0x4, 0x6, 0x7, 0x1, 0x5, 0xe70, 0x10000, 0xfffffffd, 0xed5d, 0x1, 0x5e5b, 0x10000, 0x1, 0x5, 0x0, 0x8, 0xfffffbff, 0x7f, 0x8000, 0x401, 0x6, 0x1f, 0x5, 0x5, 0x7f, 0x9, 0x10000, 0x27, 0x6, 0x80000001, 0x1, 0x6, 0x387b9559, 0x100000, 0xa40, 0x8, 0x80, 0xcbf5, 0x5, 0x7fffffff, 0x5, 0xffff, 0x8000, 0x80, 0x6, 0xfff, 0x7fff, 0x100, 0x3, 0x1, 0xfe, 0x80000001, 0x401, 0x10000, 0x8, 0x9, 0x1, 0x1, 0x0, 0xffffffff, 0x3, 0x7, 0x0, 0x7fff, 0x8, 0x3, 0x30, 0x400, 0x4, 0xbc7b, 0x5, 0x5, 0x9, 0x3, 0x7fff, 0x0, 0x7, 0x7fffffff, 0xfff, 0x2, 0x6996, 0x7, 0x2, 0x20, 0x6, 0x3, 0xfffffffc, 0x7ff, 0x808, 0x4, 0x2, 0x8, 0x9, 0x1, 0x2, 0x1f, 0x10001, 0x6, 0x1, 0xd7, 0x400, 0x8, 0x447, 0x9, 0x5, 0x7, 0x1, 0x51c, 0x1, 0x7, 0x1, 0x7, 0x1, 0x20, 0x0, 0x6, 0x10000, 0x81, 0x6da2ce56, 0x0, 0x40, 0x7, 0xb65d, 0x5d69, 0x81, 0x8, 0x5, 0x4, 0xffffd4f2, 0x8001, 0x9, 0x7, 0xffffffff, 0xffffffe0, 0xa65c, 0xfff, 0x100, 0x470c7058, 0x100, 0x7, 0x9, 0x2, 0xe89, 0x7, 0x6, 0x1, 0x8c, 0x7, 0x8, 0x9, 0xffff, 0xfffffffc, 0xc00000, 0x3, 0xb50b, 0x4, 0x80000001, 0x59b, 0xb0, 0xffffffff, 0x1f5, 0x2, 0x9, 0x3, 0x4, 0xa3c, 0xfffffffe, 0x3, 0x0, 0xffffffc0, 0x89, 0x100, 0x200, 0x101, 0xb8, 0x5, 0x3, 0x1, 0x3df8717, 0x40, 0x5, 0x1000, 0x4, 0x2, 0x3, 0x7f, 0x8, 0x1, 0x3, 0x80, 0x1, 0x5, 0x4, 0x8a, 0xfffffffd, 0x7fffffff, 0xffff, 0x3, 0x8, 0x39e, 0x879, 0xfffffffe, 0x2, 0xaa, 0xff, 0x200, 0x7, 0x5, 0x6, 0x8001, 0x3f, 0x9, 0x80000000, 0x5, 0x2, 0x400, 0x4, 0x7, 0x8, 0x800, 0x7, 0x3, 0x1000, 0x3, 0x4, 0x1, 0x7, 0x7, 0x6, 0xdc95, 0x1, 0x3, 0x9, 0x6, 0x5, 0x3ff, 0x10001, 0x48e42f5d, 0x5, 0x2c5, 0x5, 0x8, 0x8000, 0x2, 0x1, 0x3, 0x6, 0x7, 0x7ff, 0x3, 0x90, 0x2, 0x4d3a, 0x4457, 0x80, 0x6, 0xa6, 0x0, 0x7f, 0x6, 0x16, 0x80, 0x8, 0x0, 0xd2eb, 0x2, 0x3b, 0x80000001, 0x5, 0x3ff, 0x1, 0x1, 0x1, 0x7, 0x6, 0x401, 0xff, 0x2, 0x0, 0x6, 0x7, 0x147b, 0xcb, 0x8d2, 0x40, 0x1, 0x7, 0x1ff, 0x80000001, 0x5, 0xe22, 0x7ff, 0x7, 0x13e1, 0x80000001, 0xa5f1, 0x80000001, 0x3ff, 0xf6, 0x0, 0x0, 0x0, 0x80000000, 0x9, 0x6, 0xf3, 0x85, 0x9, 0x1, 0x4, 0x714d, 0x2, 0x8, 0x5, 0xfffffff9, 0x3, 0x3, 0xffff, 0x5, 0xffffffff, 0x7, 0x8000, 0x2ca, 0x7, 0x101, 0x9, 0xffffffff, 0x8, 0x8001, 0x4, 0xfffffffc, 0x7fff, 0x8, 0x3, 0x8, 0x5, 0x5, 0x8, 0x7f, 0x56b, 0x3, 0xfff, 0x0, 0x0, 0xf5, 0x5, 0x42a, 0x800000, 0x4, 0xfcb, 0x8, 0x3, 0x49, 0x6, 0xffffffff, 0x5, 0x101, 0x1, 0x0, 0x0, 0x7, 0x81b, 0x0, 0x1400, 0x1000, 0x0, 0x7fffffff, 0x3bbb, 0x3, 0x3, 0x9, 0xac, 0x0, 0x2, 0xc, 0x100, 0x5, 0x8, 0x400, 0x7, 0x8000, 0x9, 0x20, 0x1, 0xbd4, 0x5, 0x390c9bb7, 0x9, 0x9d, 0x1, 0x81, 0x7ff, 0x5, 0x5, 0x7, 0x1612, 0x8, 0x6, 0x3, 0x7, 0x4b, 0x8, 0x8, 0x8, 0x2, 0x6, 0x4, 0x6, 0xaf60, 0x80000001, 0x9, 0xffffff1d, 0x20, 0x8, 0x6, 0x7fffffff]}) 18:21:14 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x300) 18:21:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 18:21:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfffffff0) 18:21:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfffffff2) 18:21:15 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = gettid() tkill(r2, 0x1000000000016) ptrace$getregs(0xc, r2, 0x6, &(0x7f0000000180)=""/218) 18:21:15 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0) 18:21:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfffffff3) 18:21:15 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xee0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:15 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x3000000) 18:21:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x7f46a1a85700) 18:21:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc0fe00000000) 18:21:17 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xf00) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe0fe00000000) 18:21:17 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0) 18:21:17 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x3b9ac9ff) [ 2420.738069][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 2420.738087][ T27] audit: type=1804 audit(5885547677.987:1939): pid=31922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3775/bus" dev="sda1" ino=16344 res=1 18:21:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc000000000000) [ 2420.839857][ T27] audit: type=1800 audit(5885547678.027:1940): pid=31922 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16344 res=0 [ 2420.917571][ T27] audit: type=1804 audit(5885547678.027:1941): pid=31922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3775/bus" dev="sda1" ino=16344 res=1 18:21:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x8001) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0xfffffe12, &(0x7f0000000040)=0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/23, 0x17}, {&(0x7f0000000200)=""/160, 0xa0}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/245, 0xf5}, {&(0x7f00000004c0)=""/33, 0x21}], 0x5, 0x0, 0x0, 0x40000}, 0x40000800) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x6, r2, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x0, r5}]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), 0x5, 0x4, 0x4, 0x0, 0xc028}) [ 2421.560283][ T27] audit: type=1804 audit(5885547678.817:1942): pid=31922 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3775/bus" dev="sda1" ino=16344 res=1 [ 2421.591473][ T27] audit: type=1800 audit(5885547678.817:1943): pid=31922 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16344 res=0 18:21:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) 18:21:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000480)=ANY=[@ANYBLOB="12015002000000086b1d0101400001020301098164f39eaced1f8dd5e9c38502a30003010000000904000000010100000a24010000000201020924030000000000000c24070000000055953c71d60c24020000000600000000000904010000010203000904010101010200001124020207000800010b1d24c95db4cd610724012f03000009050109400000fa960725010107c1ff0904020000010200000904020101010200000b24020107046fd229f034090582091000080308072501025a0400"], &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x3f}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x44, r4, 0xc694d42685586125, 0x0, 0x0, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}]}, 0x44}}, 0x40000) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002d32429ba26fbc54ae00000006000600a09d4a1e393e67a1b5040000f507000700", @ANYRES32=r1, @ANYBLOB="0800090002000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20006041}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000000)={0x2, {0x3, 0x7, 0x401, 0x6b}}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000300)={0x1}) getsockname$l2tp(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) 18:21:18 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0) 18:21:18 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0xfefdffff) 18:21:18 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xf20) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:19 executing program 1: io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x440200) [ 2421.807276][ T27] audit: type=1804 audit(5885547679.057:1944): pid=31966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3776/bus" dev="sda1" ino=16344 res=1 18:21:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x57a8a1467f0000) [ 2421.905678][ T27] audit: type=1800 audit(5885547679.107:1945): pid=31966 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16344 res=0 [ 2421.970123][ T27] audit: type=1804 audit(5885547679.107:1946): pid=31966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3776/bus" dev="sda1" ino=16344 res=1 18:21:19 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) io_setup(0x4, &(0x7f00000004c0)=0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, 0xffffffffffffffff, 0x0) r3 = dup(0xffffffffffffffff) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 18:21:19 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x6bf, &(0x7f0000000040)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r4) fchown(r0, r2, r4) 18:21:19 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0xaa200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)="15f574f847869efa1306f705c33b41aa0564f99a2a33fa50603bdf60d883aec05eb0048b994e40ec3b43280e92f9ccb60c", 0x31, r2}, 0x68) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002000000086b1d01014000010203010902a30003010000000904000000010100000a24010000000201020924030000000000000c24070000000055953c71d60c24020000000600000000000904010000010200000904010101010200001124020207000800010b1d24c95db4cd6107000009050109400000fa960725010107c1ff0904021640010200000904020101010200000b240201070409079f9234ff0582091000080308072501025a040000000000"], &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xee0f0000000000) 18:21:19 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) 18:21:19 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0) 18:21:19 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0xffc99a3b) 18:21:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) [ 2422.778489][ T27] audit: type=1804 audit(5885547680.027:1947): pid=31977 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3776/bus" dev="sda1" ino=16344 res=1 [ 2422.809207][ T9168] usb 3-1: new high-speed USB device number 73 using dummy_hcd 18:21:20 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xf40) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2422.830750][ T27] audit: type=1800 audit(5885547680.027:1948): pid=31977 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16344 res=0 18:21:20 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000240)=0x1, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000580)={0x24, &(0x7f0000000300)={0x0, 0x1, 0x11, {0x11, 0x22, "0b178e4c124dcc7d5c26bc42c3f804"}}, &(0x7f0000000800)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "768f7d61869ea98b91f9d1454091dfc68fa301e918439f767ee507e05a39d999e7e024115971167f2aed5a62c36cf2fe3f76d79cc924d87c905008fadf3645488300d790329fc46ce299809a91eda25ac4c378b4d004a3965bee51beee013bab35a9745b48cd730a5583668d"}}, &(0x7f0000000500)=ANY=[@ANYBLOB="002212000000a737014ac334c2d1ad1bef0ec2af858d85d6"], &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x842d}}}}, &(0x7f0000000780)={0x2c, &(0x7f00000005c0)={0x40, 0x14, 0x6f, "28a023b75f3b4538b4be33944f104cc7e63d1040bd740d47cd0e6da7033e58dc838f3a6b4124363136f322e295cb6fe321d99444341fb7710697a6a0b42f621f6bcb4474a162f573e937a6808e1dfe26c7b47a746c976cdd371e7287ad2a0de584ebf0e3c6356c6c18c603c8996605"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000006c0)={0x20, 0x1, 0x6b, "ab4f2a0bacd2b056a954563db46f86fdc1e1d6edf73443b952ddf6d57bd9db80ed37b55e7fe10850440d3b297b8482fc1bfc7121282054cb6c494be7d147c419aa4a2e1b28b9faef7b86200730cb95cc32f0bb7fca3a05ab67e4403fd113fe23bc2fb0d002f944219abdeb"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0xfc}}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) open(&(0x7f00000007c0)='./file0\x00', 0x2, 0x20) r5 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r5) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@remote, 0x4e24, 0xffff, 0x4e22, 0x9, 0x2, 0xa0, 0xa0, 0x2b, r4, r5}, {0x7f, 0x6, 0x5, 0x1ff, 0x7, 0x7fffffff, 0xffff, 0x800}, {0x2, 0x9, 0x10001, 0xff}, 0xcb6, 0x6e6bb3, 0x2, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x34ff, 0x0, 0x1, 0x4, 0x6d, 0x2, 0x8}}, 0xe8) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4) [ 2422.939169][ T9168] usb 3-1: Using ep0 maxpacket: 8 18:21:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 18:21:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) [ 2423.162595][ T9168] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2423.182970][ T9168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2423.381835][ T9168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2423.403533][ T9168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:21:20 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) [ 2423.432251][ T9168] usb 3-1: Product: syz [ 2423.436470][ T9168] usb 3-1: Manufacturer: syz [ 2423.451544][ T9168] usb 3-1: SerialNumber: syz 18:21:20 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0) [ 2423.799148][ T9168] usb 3-1: 0:2 : does not exist [ 2423.839891][ T9168] usb 3-1: USB disconnect, device number 73 18:21:21 executing program 1: openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x40040, 0x0) io_setup(0x4, &(0x7f00000004c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x990000, 0xffff, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980918, 0x20, [], @ptr=0xf507}}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x80, 0x0, 0x8001, 0x3, 0x9, 0x8, 0x8, 0x8, r4}, &(0x7f0000000180)=0x20) 18:21:21 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0xfffffdfe) 18:21:21 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xf60) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 18:21:21 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x7ff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140e, 0x300, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000140)="af8e4d5726a752081f9bf1906b7db05318c37ec7edbccad7859c52e24e4f0aab5d", 0x21}, {&(0x7f00000001c0)="1dff9407e47b18a02deebea27f1204f8843ab850f6f40354a074a71811c69d0b70ed183f53f998173917e905b75ad96f99e9ce0fa2a58f373d050fbd025c42e75ebab10ac7c12edf9e98576f21f357e159b07a3b8d5f311ba52b679383be6c056eb7af8a53708846db5a21b30c41250e3700b1ed5bf0a7d3725fbb4f7bd01257e2233b3d475138b25f260250479befefe3", 0x91}], 0x2) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:21 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) 18:21:21 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000}, 0x0, 0x0) [ 2424.719101][ T9168] usb 3-1: new high-speed USB device number 74 using dummy_hcd 18:21:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) [ 2424.831264][ T9168] usb 3-1: Using ep0 maxpacket: 8 [ 2425.029935][ T9168] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2425.040437][ T9168] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 18:21:22 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xf80) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:22 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000000)) 18:21:22 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) process_vm_writev(r5, &(0x7f0000000440)=[{&(0x7f0000000040)=""/69, 0x45}, {&(0x7f0000000240)=""/240, 0xf0}, {&(0x7f00000003c0)=""/97, 0x61}, {&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000000340)=[{&(0x7f0000001500)=""/234, 0xea}, {&(0x7f0000001600)=""/249, 0xf9}], 0x2, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000180)="e75b962dc9e329bbe098382ff288fc886afffccb616fa819a80a64540bcf9f4fcf18ceece40027be48bae3ef06179deb74f449a0b3917629c5f40b9b1702b04218a4c17d7939afd82813b98b5229218f64395e981f4ffd135b9c460f02a5a54a10d095a19c299ec1b03269d334400dd7e21cc0c222f554b513c4427ffe33df6d19e7c2a818", 0x85}]) [ 2425.219736][ T9168] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2425.236523][ T9168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2425.265147][ T9168] usb 3-1: Product: syz [ 2425.274915][ T9168] usb 3-1: Manufacturer: syz [ 2425.289482][ T9168] usb 3-1: SerialNumber: syz 18:21:22 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) [ 2425.348854][T32188] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:21:22 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x586d}) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) fsync(r0) [ 2425.476432][T32199] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 18:21:22 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x0, 0x0) 18:21:22 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5201) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2425.619062][ T9168] usb 3-1: 0:2 : does not exist [ 2425.656998][ T9168] usb 3-1: USB disconnect, device number 74 [ 2426.073853][ T27] kauditd_printk_skb: 16 callbacks suppressed [ 2426.073873][ T27] audit: type=1804 audit(5885547683.327:1965): pid=32177 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3779/bus" dev="sda1" ino=16380 res=1 [ 2426.107617][ T27] audit: type=1800 audit(5885547683.327:1966): pid=32177 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16380 res=0 [ 2426.136547][ T27] audit: type=1804 audit(5885547683.327:1967): pid=32181 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3779/bus" dev="sda1" ino=16380 res=1 [ 2426.338981][T24871] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 2426.429655][T24871] usb 3-1: Using ep0 maxpacket: 8 [ 2426.649012][T24871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2426.660066][T24871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2426.829016][T24871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2426.838228][T24871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2426.848878][T24871] usb 3-1: Product: syz [ 2426.855378][T24871] usb 3-1: Manufacturer: syz [ 2426.860176][T24871] usb 3-1: SerialNumber: syz 18:21:24 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) dup2(r1, r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) connect$x25(0xffffffffffffffff, &(0x7f0000000080)={0x9, @remote={[], 0x1}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_RELEASE(r6, 0x6431) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x204181, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r8, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r7, 0x84, 0x16, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000e52d7ba456104efad4e890f182ec05697882e3ca8bb856c20600c300"], 0x10) 18:21:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa00000000000000) 18:21:24 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x7, 0x10001, 0x400, 0xc560, 0x5, 0x2f, 0x59}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000000c0)=""/200) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000000)) 18:21:24 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xfa0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:24 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000}, 0x0, 0x0) 18:21:24 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/43) dup(r0) syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x0, 0x6, 0x0, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x3f, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f0000000100)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) getcwd(&(0x7f0000000080)=""/89, 0x59) [ 2427.179154][ T27] audit: type=1804 audit(5885547684.437:1968): pid=32249 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3780/bus" dev="sda1" ino=16372 res=1 [ 2427.202601][T24871] usb 3-1: 0:2 : does not exist [ 2427.240079][T24871] usb 3-1: USB disconnect, device number 75 [ 2427.323686][ T27] audit: type=1800 audit(5885547684.487:1969): pid=32249 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16372 res=0 18:21:24 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000000), 0x4) 18:21:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xb00000000000000) [ 2427.412898][ T27] audit: type=1804 audit(5885547684.487:1970): pid=32261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3780/bus" dev="sda1" ino=16372 res=1 18:21:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) 18:21:25 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0xfffffffa, 0x40, 0x100, 0x6}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2427.739445][T24871] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 2427.848949][T24871] usb 3-1: Using ep0 maxpacket: 8 18:21:25 executing program 3: r0 = socket(0x1e, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4001014) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000107f00000000000000000000000000a5263f032750b96a678a5ea5858a1fac7b55e52b", @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)={0x3, 'ip6_vti0\x00', {}, 0x73}) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BLKSECDISCARD(r5, 0x127d, &(0x7f0000000100)) [ 2428.049744][T24871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2428.077043][T24871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xd00000000000000) 18:21:25 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000200}, 0x0, 0x0) 18:21:25 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x40000000}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(r2, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) [ 2428.309765][T24871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2428.345880][T24871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2428.384596][T24871] usb 3-1: Product: syz [ 2428.396435][T24871] usb 3-1: Manufacturer: syz [ 2428.408960][T24871] usb 3-1: SerialNumber: syz [ 2428.565271][ T27] audit: type=1804 audit(5885547685.817:1971): pid=32261 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3780/bus" dev="sda1" ino=16372 res=1 18:21:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe00000000000000) 18:21:25 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xfc0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2428.676681][ T27] audit: type=1800 audit(5885547685.817:1972): pid=32261 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16372 res=0 [ 2428.738899][T24871] usb 3-1: 0:2 : does not exist [ 2428.760910][T24871] usb 3-1: USB disconnect, device number 76 [ 2428.765366][ T27] audit: type=1804 audit(5885547685.847:1973): pid=32274 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3780/bus" dev="sda1" ino=16372 res=1 [ 2428.923705][ T27] audit: type=1804 audit(5885547686.127:1974): pid=32360 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3781/bus" dev="sda1" ino=16369 res=1 18:21:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 18:21:26 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000}, 0x0, 0x0) 18:21:26 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 18:21:26 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000100)={0x5a1f8750c81d4b2b, 0x0, {0x1, 0x7fffffff, 0x3f, 0x401}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="050f3d000603100b071002087c03000b10010c2100fc0103005a03100b1410043f70c257582a814e30c420147eca037af00c100a056000000000c216d2eda7c68ac13cce45dfd5eab4dc5e954e96edd61effb171445e84d8b2ace368b35a7ab49a6e76950caeb3fd7609d349e211b051319c456be4a3422fb41b0fa1affa93f2f359ef1264056b67cfaf3fbda23539d7a589ccead596aa004028821055bf774053d4a0dc65aebd6ea1b6cc2b04b2b7a2b005c5807b83efc113f16310d40615338a3f64067452359f8f66341a9b16ff8b926915c4559439004ef0ec843ee7894d725ddfb991c7f84cc81e4c99edca5eebcf89dfb604ab"], 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) [ 2429.798813][T12334] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 2429.909497][T12334] usb 3-1: Using ep0 maxpacket: 8 18:21:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) [ 2430.149581][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2430.176625][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:27 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0xfe0) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1300000000000000) 18:21:27 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x0, 0x0) [ 2430.379521][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2430.397446][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2430.424671][T12334] usb 3-1: Product: syz [ 2430.444507][T12334] usb 3-1: Manufacturer: syz [ 2430.472953][T12334] usb 3-1: SerialNumber: syz 18:21:27 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000) [ 2430.818791][T12334] usb 3-1: 0:2 : does not exist [ 2430.853256][T12334] usb 3-1: USB disconnect, device number 77 18:21:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1500000000000000) 18:21:28 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000}, 0x0, 0x0) 18:21:28 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@mcast2}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) 18:21:28 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1600000000000000) [ 2431.468208][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2431.468228][ T27] audit: type=1804 audit(5885547688.717:1983): pid=32423 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3782/bus" dev="sda1" ino=16382 res=1 18:21:28 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1002) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2431.578057][ T27] audit: type=1800 audit(5885547688.717:1984): pid=32423 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 [ 2431.630781][ T27] audit: type=1804 audit(5885547688.757:1985): pid=32428 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3782/bus" dev="sda1" ino=16382 res=1 [ 2431.766241][ T27] audit: type=1804 audit(5885547688.997:1986): pid=32487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3783/bus" dev="sda1" ino=16382 res=1 18:21:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1700000000000000) 18:21:29 executing program 3: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x480, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00000000c0)=""/184) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r4) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r6) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r8) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0xee01, r10) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x7, 0xee00}, {0x2, 0x7}, {}, {0x2, 0xa}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x5}], {0x4, 0x2}, [{0x8, 0x6}, {0x8, 0x0, r4}, {0x8, 0x0, r6}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x4, r8}, {0x8, 0x2, r10}], {0x10, 0x6}, {0x20, 0x6}}, 0x94, 0x3) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2431.868726][T12334] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 2431.891070][ T27] audit: type=1800 audit(5885547688.997:1987): pid=32487 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 [ 2431.973058][ T27] audit: type=1804 audit(5885547689.007:1988): pid=32487 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3783/bus" dev="sda1" ino=16382 res=1 [ 2431.999479][T12334] usb 3-1: Using ep0 maxpacket: 8 18:21:29 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x54b4c2, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0xc) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) [ 2432.209623][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2432.226948][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:29 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0) [ 2432.432143][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2432.458036][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:21:29 executing program 3: r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000000)={0x2, 0x1d73ba4b}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$usbfs(r4, &(0x7f00000000c0)=""/253, 0xfd) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2432.509626][T12334] usb 3-1: Product: syz [ 2432.532258][T12334] usb 3-1: Manufacturer: syz [ 2432.555710][T12334] usb 3-1: SerialNumber: syz 18:21:29 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1900000000000000) 18:21:29 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0x4}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:30 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{r0, 0x8280}], 0x1, 0x0) [ 2432.888744][T12334] usb 3-1: 0:2 : does not exist [ 2432.897633][T12334] usb 3-1: USB disconnect, device number 78 [ 2432.963747][ T27] audit: type=1804 audit(5885547690.217:1989): pid=32493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3783/bus" dev="sda1" ino=16382 res=1 [ 2433.038493][ T27] audit: type=1800 audit(5885547690.217:1990): pid=32493 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16382 res=0 [ 2433.069242][ T27] audit: type=1804 audit(5885547690.237:1991): pid=32495 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3783/bus" dev="sda1" ino=16382 res=1 18:21:30 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x51, &(0x7f0000000000)={0x5, 0xf, 0x51, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x3, 0xf00, 0x9, [0x180c0, 0x3f0f, 0xf, 0x0, 0x4100]}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) write(r2, &(0x7f0000000080)="127351020681fd9996ccaf6e6c6833447af4235872c015b70da19e00f11e9d7fb452bf5bca0bd0939dd0387f1edaa3c2f862450342d62d03d999b21d4c9c661726ceadd8638353d9e7f04845ad9a0aff3221444c0b671f3bf65645296b35260ece48", 0x62) 18:21:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) 18:21:30 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1003) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:30 executing program 3: r0 = socket(0x1e, 0x5, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001440)={0x2400, {"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", 0x1000}}, 0x1006) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:30 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0, 0x0) [ 2433.536757][ T27] audit: type=1804 audit(5885547690.787:1992): pid=32579 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3784/bus" dev="sda1" ino=16356 res=1 18:21:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000) 18:21:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000) [ 2433.998630][T14691] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 2434.091443][T14691] usb 3-1: Using ep0 maxpacket: 8 18:21:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1d00000000000000) [ 2434.289398][T14691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2434.289482][T14691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:31 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000}, 0x0, 0x0) 18:21:31 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1004) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2434.449590][T14691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2434.449611][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2434.449624][T14691] usb 3-1: Product: syz [ 2434.449637][T14691] usb 3-1: Manufacturer: syz [ 2434.449653][T14691] usb 3-1: SerialNumber: syz 18:21:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000) [ 2434.768780][T14691] usb 3-1: 0:2 : does not exist [ 2434.780056][T14691] usb 3-1: USB disconnect, device number 79 18:21:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) 18:21:32 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000000)={0xdf, 0x1, {0x3, 0x3, 0x7f, 0x1, 0x40}, 0x7da}) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:32 executing program 3: r0 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r0, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000000)) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r2}], 0x1, 0x0) 18:21:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2200000000000000) 18:21:32 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d000000}, 0x0, 0x0) 18:21:32 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0xa495, 0x7, &(0x7f0000000540)=[{&(0x7f00000000c0)="efd6221d2adea00025155369ea4c4aaa973339c7a36cfeed51b2ecb936d1cdc90daf43e7eec32aecf84b2d5d4c0959438ce0a0a6950e36fe7a2a3cc81d504d850c", 0x41, 0x4}, {&(0x7f0000000140)="544e87af177025fb16e376dd2ab99aa55e96c818c4012f404666419a7f902dec4f64467ff463ad3d7431fff93f16026a7e5fa74082d015bc69f579564ce39c888d48c112a5c8b9e2cb6cc27e1efcc533d7008ce2cdd0077b101517634ec2fd268ce9196510979a154eaaae8e2a423129870b460601e655e583bb63b6299fca3d6ed498f0d6dc13ae2d82445c2e46e6ba776949cb0bba513eef6950a3573420fb23b4542e0af66a0845a275b33bf24bc589ef6503fac40d77a56035fde6ed8b95b35510c454e623179e08d432ceeafc226dc268827a3b76d6aeb253a1a20f3f76157720e56d3ddc3d1d02", 0xea, 0x7}, {&(0x7f0000000280)="f681d2ea750ac233640924c00c356cd20a15f2ff21636451aa0b174675068970d7141ca5d3b2e3c38ce7147901e994515dabd8fb84a55ea8edf94e93759e5c30b97240fee2ba2a907dd6cf437536fc42f28dcd2290b60f4203c6aff6f6184a0a25368cc92a7eaa64f09387af2749362ab3baf30a52623b061660c4c8a28ead167b3c2c766594eab47f47ed9d24d17a5dc54c8ba1399a882e33c049d759acec7894cc2629092fc0d4875078cd11d117f360a26ca6fc6acae19666a37ff35536621b65590b12281954e9a126727c9f6def479684", 0xd3, 0x4}, {&(0x7f0000000380)="f511ff28a57b8676317a75b4c72ef16f163d9c64206da86071fc17d84806f65a26", 0x21, 0x7}, {&(0x7f00000003c0)="6c1d8fe90e5a9e2b8c3efd58ac94029b4342264585843863466b6c071e26f478f3279163523a74c836f6e7762b9ec440ff69ef7e4917fd538a8077ef3b473e16e2a9c84eb20debd5e812be6296a85d16bf495826470b31246bde7a73b1277ebaab1e", 0x62, 0x6}, {&(0x7f0000000440)="0019e16c9992d54dfdee25948edbcebe4149cca8cdf2cb7ef53992a8a248b0df55f58fdd115dfb319024a3091bb4788703a08f4fd90405cf5cb6f5047ea88a0d2c73e139343aa772efe2ebfa2d96066e749345a8187f42703cad777adff9f9b4667d19e21f7c8176f1a6", 0x6a}, {&(0x7f00000004c0)="a3a62678364d976b61378e4842ae4b94dc3c967a14774c0e8e23e249724d9d5d2357dc89b7736c2b4e56c8b1569ab15b960bd4d4d95a6c6388972eb0d052667e8ac2e29cf90695084f9deae5b9354934f601bb7337b9ccda4aa8025b0fa69621f20ae3ee0746bb3bdf", 0x69}], 0x2000, 0x0) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2400000000000000) 18:21:32 executing program 3: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x8, 0x7, 0x4, 0x8, 0x1, {0x77359400}, {0x4, 0x2, 0x5, 0x3, 0x4, 0x1, "983b969c"}, 0x400, 0x3, @fd, 0x7ff, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) r3 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@int=0xfffffff7, 0x4) poll(&(0x7f0000000240)=[{r3}], 0x1, 0x0) [ 2435.768553][T12334] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 2435.869306][T12334] usb 3-1: Using ep0 maxpacket: 8 18:21:33 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1005) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2600000000000000) [ 2436.099256][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2436.120780][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2e00000000000000) [ 2436.329391][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2436.349694][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2436.380649][T12334] usb 3-1: Product: syz [ 2436.393933][T12334] usb 3-1: Manufacturer: syz [ 2436.408962][T12334] usb 3-1: SerialNumber: syz 18:21:33 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x0, 0x0) 18:21:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3000000000000000) [ 2436.728545][T12334] usb 3-1: 0:2 : does not exist [ 2436.748994][T12334] usb 3-1: USB disconnect, device number 80 [ 2437.125008][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 2437.125025][ T27] audit: type=1804 audit(5885547694.377:2007): pid=32713 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3786/bus" dev="sda1" ino=16356 res=1 [ 2437.213948][ T27] audit: type=1800 audit(5885547694.377:2008): pid=32713 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16356 res=0 18:21:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_TSC(0x1a, 0x2) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) [ 2437.270245][ T27] audit: type=1804 audit(5885547694.377:2009): pid=32716 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3786/bus" dev="sda1" ino=16356 res=1 18:21:34 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x800, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000100)) r1 = socket(0x1, 0x1, 0x3) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x4010, r2, 0x0) r3 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) poll(&(0x7f00000000c0)=[{r1, 0x4403}, {r2, 0x1041}], 0x2, 0x4) 18:21:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3600000000000000) 18:21:34 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1006) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2437.415916][ T27] audit: type=1804 audit(5885547694.667:2010): pid=302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3787/bus" dev="sda1" ino=16328 res=1 [ 2437.512261][ T27] audit: type=1800 audit(5885547694.697:2011): pid=302 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16328 res=0 18:21:34 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'veth1_to_batadv\x00', {0x1e6cffc5}, 0x101}) 18:21:34 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0x0) 18:21:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3e00000000000000) [ 2437.612953][ T27] audit: type=1804 audit(5885547694.697:2012): pid=302 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3787/bus" dev="sda1" ino=16328 res=1 [ 2437.648449][ T6058] usb 3-1: new high-speed USB device number 81 using dummy_hcd 18:21:35 executing program 3: r0 = socket(0x1e, 0x5, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3ff, 0x100) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000080)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x1, 0x80, 0x0, 0x2, 0xacb0, 0x2, 0x8}, 0x1c) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2437.759120][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:21:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) [ 2437.959124][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config 18:21:35 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x402000, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x400, 0x70bd2c, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r1}], 0x1, 0x0) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x21) getsockname$inet(r2, &(0x7f0000000300)={0x2, 0x0, @remote}, &(0x7f0000000340)=0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8001, 0x0, 0x3, 0x40, 0x6, 0x3, 0x6}, 0x1c) [ 2438.003128][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2438.209373][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2438.233926][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:21:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4f00000000000000) 18:21:35 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) poll(&(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000)=0x3f800, 0x4) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x20040010}, 0xc000) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') [ 2438.272656][ T6058] usb 3-1: Product: syz [ 2438.290447][ T6058] usb 3-1: Manufacturer: syz [ 2438.310888][ T6058] usb 3-1: SerialNumber: syz [ 2438.650761][ T6058] usb 3-1: 0:2 : does not exist [ 2438.671927][ T27] audit: type=1804 audit(5885547695.927:2013): pid=313 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3787/bus" dev="sda1" ino=16328 res=1 [ 2438.684754][ T6058] usb 3-1: USB disconnect, device number 81 [ 2438.697217][ T27] audit: type=1804 audit(5885547695.957:2014): pid=312 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3787/bus" dev="sda1" ino=16328 res=1 [ 2438.798975][ T27] audit: type=1800 audit(5885547695.957:2015): pid=312 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16328 res=0 [ 2439.358454][ T6058] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 2439.448967][ T6058] usb 3-1: Using ep0 maxpacket: 8 [ 2439.648403][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2439.658535][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2439.818414][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2439.827486][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2439.835871][ T6058] usb 3-1: Product: syz [ 2439.840202][ T6058] usb 3-1: Manufacturer: syz [ 2439.844793][ T6058] usb 3-1: SerialNumber: syz 18:21:37 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000200)=@req={0x3fc, 0x0, 0x0, 0xfffffffe}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xf8, 0x14, 0x1, 0x70bd2d, 0x25dfdbfd, {0x5, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "762324b226292caee2f3739ed8fff1d1a0ffdf6564c964090f89b5ad3d0d6291d0ded84577b938bdc44393b42bb3710eeaef8679cfc711811d77f3813ff8d7c355ff8447191bc444e33c05f9bd9ea2902705a0a19f5ff68cfb27a0d1de192de93fa300be8e48241987379da7af429c20cc709f970438598b8c5680c766d884da0653e780785d46eeda8984b246b2b7a9a518b977abb60dc0e21c4fba5b99b135520e1ea0caace3f28c947c037478250449d3e261dc5a5fcf23f8b8ad642ddeacb552eec16ec8c83faebef96664f5ee281bd1a24d6aa7cde317ed54dc0a082665"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0xc0) 18:21:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x507c451600c9ffff) 18:21:37 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0) 18:21:37 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1007) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:37 executing program 1: socket$pppoe(0x18, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x1ff, 0x4, 0x5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000080)={r4}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000180)={0xa30000, 0x10000, 0x8, r7, 0x0, &(0x7f0000000100)={0x9909e1, 0x101, [], @ptr}}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0xf31, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 18:21:37 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_UNBIND(r4, 0x40106437, &(0x7f0000000080)={r5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x2, 0x0, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_usb_connect$uac1(0x0, 0xb6, &(0x7f00000003c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x5, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61a9"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f3d000603100b071002087c03000b10010c2100fc0103005a03100b1410043f70c257582a814e00c420147eca037afa0c100a0560000000040f0900f4def50a2628a552beb800c18c7beaab19eed220ec8948a994f935c427692f016c0f56237d2cac2466e0608c6bb66fbddc0c5933e8ccb5558d6197ae3e8a6ec95671d36ff6374047ba0165309b49107c81d29f8df18e3b2cfa03c08f181640e6d74798222af63f"], 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setns(r7, 0x40000000) r8 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x2) [ 2440.178351][ T6058] usb 3-1: 0:2 : does not exist [ 2440.191756][ T27] audit: type=1804 audit(5885547697.448:2016): pid=400 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3788/bus" dev="sda1" ino=16193 res=1 [ 2440.200410][ T6058] usb 3-1: USB disconnect, device number 82 18:21:37 executing program 3: syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x907, 0x0, &(0x7f00000000c0), 0x202420, &(0x7f0000000100)='W{\x1b\x00') socket(0x1e, 0x5, 0x0) r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000140)={0x2, 'veth1_macvtap\x00', {0x80000000}, 0xffff}) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x13, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040c1}, 0x24080810) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000180)=@req={0x3fc}, 0x10) 18:21:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6018230000000000) 18:21:37 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) [ 2440.395358][ T431] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2440.484747][ T438] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:21:37 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x515200, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x204200, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x3, 0x4) 18:21:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6400000000000000) 18:21:37 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r3, 0x5}, &(0x7f0000000040)=0x8) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000002400ff9c831133bdfa7c61017a8a3bffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x38d4}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}]}}]}, 0x4c}}, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@can={{0x1, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x0, 0x0, "543eb59bb5a76cc7"}, 0x10}}, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) fanotify_init(0x0, 0x1) [ 2440.708319][ T6058] usb 3-1: new high-speed USB device number 83 using dummy_hcd 18:21:38 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1004) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2440.808373][ T6058] usb 3-1: Using ep0 maxpacket: 8 [ 2440.821242][ T461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:21:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6500000000000000) [ 2441.008275][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2441.045324][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:38 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f0000}, 0x0, 0x0) [ 2441.258917][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2441.280640][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2441.331386][ T6058] usb 3-1: Product: syz [ 2441.346871][ T6058] usb 3-1: Manufacturer: syz [ 2441.369565][ T6058] usb 3-1: SerialNumber: syz 18:21:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6600000000000000) 18:21:38 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1008) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2441.510522][ T461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2441.531949][ T495] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2441.712453][ T6058] usb 3-1: 0:2 : does not exist [ 2441.744151][ T6058] usb 3-1: USB disconnect, device number 83 18:21:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6700000000000000) 18:21:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000) 18:21:39 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xffff}]}}]}, 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xffff}]}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001e40)={0x0, @l2tp={0x2, 0x0, @loopback, 0x1}, @xdp={0x2c, 0x1, r3, 0x2a}, @can={0x1d, r6}, 0x7, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)='vlan1\x00', 0x58, 0x5, 0x5}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002100)={&(0x7f0000001ec0)={0x23c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x800}, 0x24048040) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:39 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d010000}, 0x0, 0x0) [ 2442.254522][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:21:39 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb7, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x6, 0x2, [0xe, 0x1], 0x6}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r5, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000003c0)={0x2, 0x9, 0x4, 0x20000000, 0x8001, {r3, r4/1000+10000}, {0x3, 0x8, 0x4, 0xfa, 0x6, 0x0, "edc65a59"}, 0x8, 0x1, @fd, 0x4, 0x0, r5}) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000004c0)={0x9c0000, 0xfffffffe, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x990af5, 0x8, [], @p_u16=&(0x7f0000000440)=0x134}}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r7, &(0x7f0000000500)="be5614ce612650362df86d03225b7cfe7c1ea572ca6a00b16325c17c3831f47700cbc72f0d2cf3a5b347949b0f4c7169e87c9a84994527d80ba9db2d0a6476af9e3084430a28066300e158687416246b8de97b3767ac2eb2c30c6c0e481fda01e2f1caf1378524a9f86516958aecb71296ca407d6f12a87f87affca5359b4582a7447d410f28970a2a544489f342e2cc66aa14bc", &(0x7f00000005c0)=""/108}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f0000000340)={0x3, 0x0, [0x0, 0x0, 0x0]}) r8 = socket(0x1000000010, 0x80002, 0x0) write$tun(r0, &(0x7f0000000680)={@val={0x0, 0x88f8}, @val={0x3, 0x3, 0x0, 0xfffa, 0x3ff, 0x200}, @ipx={0xffff, 0x112, 0x20, 0x4, {@current, @current, 0x1}, {@random=0x4, @broadcast, 0x7}, "6dbd16bab6db40e8398ceb9ee96ece6c0777f5bb897b51f58352a40e449b503bbc76f0a74f3ab737474ef7c1515eb1b5c967b096058fefa8f2646a609d445678dbdf2996c13322cf65d129d1356972378b1b145886d940350e9c55f985d14423fb2a3ff1e77b368ad01647d036dafa26983678a368b24eb80c681ae37100b9269c6d3b193eb35676e4223a220f82b8da0216c18abceaa6db78a4d651d4a9497730c66b4a43c1cb95f542a4c47530a0499eb9e5a3b49b92343c1f6c26abbb628f7f24c2a963d5b8e155d107fb1f4102b4611aabaceb44c086bcdb2fe450b4306c6ff92624cccb9e33d63e95188fac222f139e8263"}}, 0x120) sendmmsg$alg(r8, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r9, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x5fc}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4810}, 0x10) [ 2442.398530][ T547] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2442.486872][ T540] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2442.508434][ T572] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:21:39 executing program 1: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0xfffffdfe) 18:21:39 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1009) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000000000) [ 2442.578204][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 2442.578225][ T27] audit: type=1804 audit(5885547699.828:2028): pid=506 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3789/bus" dev="sda1" ino=16081 res=1 18:21:39 executing program 3: r0 = socket(0x1e, 0x5, 0x0) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x100) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2442.717481][ T27] audit: type=1800 audit(5885547699.828:2029): pid=506 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16081 res=0 [ 2442.763127][ T27] audit: type=1804 audit(5885547699.828:2030): pid=509 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3789/bus" dev="sda1" ino=16081 res=1 18:21:40 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={&(0x7f00000000c0)="66794cd5ae915226212040fbdadc28b5302eeb025ea98cdc0f4d5b5da35ea47e733c23e533bda4f5e39fffc8facfc77e686cf465698f2267ab8cd5698535d1cbc272f0a92a9f711b6e16274dccdc29a0925fc22a0c73a0442db74b2c8d4878bdb66fbecacc", &(0x7f0000000140)=""/170, &(0x7f00000003c0)="14e68359c83b2bd2b1c342ac6308b9c0589f42c891cb65a12a4c74aea896e5a763c14fb04422db11d0046b5d8b451a95d29fdb8da10097fed1ea96e75bf2262e1e93388b585a6dc1685caee91aae7c8f04c7e0077358f0ea293c16af98d87ce5001de96205dd8074c726abe4c3d6cc02ee0dae4b0caac1b18a08e6978cd4819fc4f4035bd5a494f2f6fd54ced864a13cb096363159ee78368d02fe859a1aa967c79d2aa0f5c4f441cc68d3f1803c749e3e6aacc944fb44672756d76aa7e227004d012e8bbe5472f0a36e1b19c1297b7f9d91", &(0x7f00000004c0)="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", 0x400, r2}, 0x38) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f00000014c0)={0x6, @sliced={0x0, [0x80, 0x3ff, 0x0, 0x7, 0x7, 0x6, 0x2, 0xf71, 0x200, 0x81, 0x8000, 0x8001, 0x8, 0xfff, 0x2, 0x3, 0x2, 0x4, 0x1, 0x9, 0x5, 0x1ff, 0x1000, 0x3f, 0x5, 0x5a2, 0x3, 0x69, 0xd2b, 0xf01, 0x0, 0x1, 0x3, 0x8, 0x8de, 0x49, 0x7, 0x6, 0x1, 0x100, 0x9, 0x3, 0xa1, 0x4, 0x7fff, 0xa833, 0x9, 0x7], 0x5c44}}) [ 2442.819166][ T6058] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 2442.839677][ T27] audit: type=1804 audit(5885547699.928:2031): pid=582 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3790/bus" dev="sda1" ino=16081 res=1 [ 2442.898054][ T27] audit: type=1800 audit(5885547699.928:2032): pid=582 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16081 res=0 18:21:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa900000000000000) 18:21:40 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x5e322c85, 0xcc21, 0x2, 0x48000, 0x101, 0x8, 0xfffffc36}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000040)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000080)=0x28) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) [ 2442.943865][ T27] audit: type=1804 audit(5885547699.928:2033): pid=582 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3790/bus" dev="sda1" ino=16081 res=1 [ 2442.979115][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:21:40 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0xa, "1c7044"}, 0x5, 0x0) 18:21:40 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c150000}, 0x0, 0x0) [ 2443.098879][ T6058] usb 3-1: descriptor type invalid, skip [ 2443.179121][ T6058] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 2443.197930][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) [ 2443.379046][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2443.389452][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2443.397788][ T6058] usb 3-1: Product: syz [ 2443.403812][ T6058] usb 3-1: Manufacturer: syz [ 2443.409898][ T6058] usb 3-1: SerialNumber: syz 18:21:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf0ffffff00000000) [ 2443.818173][ T6058] usb 3-1: 0:2 : does not exist [ 2443.838523][ T6058] usb 3-1: USB disconnect, device number 84 [ 2443.874940][ T27] audit: type=1804 audit(5885547701.128:2034): pid=585 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3790/bus" dev="sda1" ino=16081 res=1 [ 2443.948143][ T27] audit: type=1800 audit(5885547701.128:2035): pid=585 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16081 res=0 [ 2444.035015][ T27] audit: type=1804 audit(5885547701.128:2036): pid=590 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3790/bus" dev="sda1" ino=16081 res=1 18:21:41 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:41 executing program 1: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1008) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf2ffffff00000000) 18:21:41 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x100a) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:41 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a020000}, 0x0, 0x0) [ 2444.354889][ T27] audit: type=1804 audit(5885547701.608:2037): pid=671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir883404243/syzkaller.Rg2tfw/3199/bus" dev="sda1" ino=16257 res=1 18:21:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf3ffffff00000000) [ 2444.740582][ T6058] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 2444.841399][ T6058] usb 3-1: Using ep0 maxpacket: 8 18:21:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xff00000000000000) [ 2445.041477][ T6058] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2445.066832][ T6058] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:42 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x0, 0x0) [ 2445.268828][ T6058] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2445.296744][ T6058] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 18:21:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xffff000000000000) 18:21:42 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000240)=0x1, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000580)={0x24, &(0x7f0000000300)={0x0, 0x1, 0x11, {0x11, 0x22, "0b178e4c124dcc7d5c26bc42c3f804"}}, &(0x7f0000000800)={0x0, 0x3, 0x6e, @string={0x6e, 0x3, "768f7d61869ea98b91f9d1454091dfc68fa301e918439f767ee507e05a39d999e7e024115971167f2aed5a62c36cf2fe3f76d79cc924d87c905008fadf3645488300d790329fc46ce299809a91eda25ac4c378b4d004a3965bee51beee013bab35a9745b48cd730a5583668d"}}, &(0x7f0000000500)=ANY=[@ANYBLOB="002212000000a737014ac334c2d1ad1bef0ec2af858d85d6"], &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x842d}}}}, &(0x7f0000000780)={0x2c, &(0x7f00000005c0)={0x40, 0x14, 0x6f, "28a023b75f3b4538b4be33944f104cc7e63d1040bd740d47cd0e6da7033e58dc838f3a6b4124363136f322e295cb6fe321d99444341fb7710697a6a0b42f621f6bcb4474a162f573e937a6808e1dfe26c7b47a746c976cdd371e7287ad2a0de584ebf0e3c6356c6c18c603c8996605"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x40}, &(0x7f00000006c0)={0x20, 0x1, 0x6b, "ab4f2a0bacd2b056a954563db46f86fdc1e1d6edf73443b952ddf6d57bd9db80ed37b55e7fe10850440d3b297b8482fc1bfc7121282054cb6c494be7d147c419aa4a2e1b28b9faef7b86200730cb95cc32f0bb7fca3a05ab67e4403fd113fe23bc2fb0d002f944219abdeb"}, &(0x7f0000000740)={0x20, 0x3, 0x1, 0xfc}}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) open(&(0x7f00000007c0)='./file0\x00', 0x2, 0x20) r5 = getuid() ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r5) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@remote, @in=@remote, 0x4e24, 0xffff, 0x4e22, 0x9, 0x2, 0xa0, 0xa0, 0x2b, r4, r5}, {0x7f, 0x6, 0x5, 0x1ff, 0x7, 0x7fffffff, 0xffff, 0x800}, {0x2, 0x9, 0x10001, 0xff}, 0xcb6, 0x6e6bb3, 0x2, 0x1, 0x0, 0x3}, {{@in=@empty, 0x4d2, 0x3c}, 0x2, @in=@loopback, 0x34ff, 0x0, 0x1, 0x4, 0x6d, 0x2, 0x8}}, 0xe8) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040)=0x6, 0x4) [ 2445.362184][ T6058] usb 3-1: Product: syz [ 2445.381055][ T6058] usb 3-1: Manufacturer: syz [ 2445.404909][ T6058] usb 3-1: SerialNumber: syz 18:21:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xffffc90016457c50) [ 2445.758065][ T6058] usb 3-1: 0:2 : does not exist [ 2445.803065][ T6058] usb 3-1: USB disconnect, device number 85 18:21:43 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x100b) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:43 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0) 18:21:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 18:21:43 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d1b, &(0x7f0000000000)=0xa) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="050f3d00261a100b0710020806c1a7547c030010010c2100fc0103005a03100b1410043f70c257582a814e30c40a8ea926c25351587f13e090dfde7217238781d0fce281b147c9d2be5f1520147eca037afa0c100a010000800000"], 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 18:21:43 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffff) [ 2446.678032][T14691] usb 3-1: new high-speed USB device number 86 using dummy_hcd 18:21:44 executing program 1: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x3000000) [ 2446.778755][T14691] usb 3-1: Using ep0 maxpacket: 8 [ 2446.898844][T14691] usb 3-1: descriptor type invalid, skip [ 2446.904937][T14691] usb 3-1: descriptor type invalid, skip [ 2446.935584][T14691] usb 3-1: descriptor type invalid, skip 18:21:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x10, 0x80803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'vlan1\x00', 0x2}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4000000000400200) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$NBD_SET_FLAGS(r6, 0xab0a, 0xbe) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self\x00', 0x1, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2446.977988][T14691] usb 3-1: descriptor type invalid, skip [ 2446.984041][T14691] usb 3-1: descriptor type invalid, skip [ 2447.018023][T14691] usb 3-1: descriptor type invalid, skip [ 2447.023791][T14691] usb 3-1: descriptor type invalid, skip [ 2447.050385][T14691] usb 3-1: descriptor type invalid, skip [ 2447.056113][T14691] usb 3-1: descriptor type invalid, skip [ 2447.107982][T14691] usb 3-1: descriptor type invalid, skip [ 2447.113823][T14691] usb 3-1: descriptor type invalid, skip [ 2447.131992][T14691] usb 3-1: descriptor type invalid, skip [ 2447.158841][T14691] usb 3-1: descriptor type invalid, skip [ 2447.164512][T14691] usb 3-1: descriptor type invalid, skip [ 2447.197998][T14691] usb 3-1: descriptor type invalid, skip 18:21:44 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x100c) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:44 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0) [ 2447.227974][T14691] usb 3-1: descriptor type invalid, skip [ 2447.233741][T14691] usb 3-1: descriptor type invalid, skip [ 2447.257492][T14691] usb 3-1: descriptor type invalid, skip [ 2447.284037][T14691] usb 3-1: descriptor type invalid, skip [ 2447.296194][T14691] usb 3-1: descriptor type invalid, skip [ 2447.309637][T14691] usb 3-1: descriptor type invalid, skip [ 2447.321653][T14691] usb 3-1: descriptor type invalid, skip [ 2447.338007][T14691] usb 3-1: descriptor type invalid, skip [ 2447.343797][T14691] usb 3-1: descriptor type invalid, skip [ 2447.356865][T14691] usb 3-1: descriptor type invalid, skip [ 2447.364299][T14691] usb 3-1: descriptor type invalid, skip [ 2447.371702][T14691] usb 3-1: descriptor type invalid, skip [ 2447.380597][T14691] usb 3-1: descriptor type invalid, skip [ 2447.386282][T14691] usb 3-1: descriptor type invalid, skip [ 2447.392939][T14691] usb 3-1: descriptor type invalid, skip [ 2447.400024][T14691] usb 3-1: descriptor type invalid, skip [ 2447.406353][T14691] usb 3-1: descriptor type invalid, skip [ 2447.413072][T14691] usb 3-1: descriptor type invalid, skip [ 2447.419452][T14691] usb 3-1: descriptor type invalid, skip [ 2447.426085][T14691] usb 3-1: descriptor type invalid, skip [ 2447.432927][T14691] usb 3-1: descriptor type invalid, skip [ 2447.439307][T14691] usb 3-1: descriptor type invalid, skip 18:21:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = accept4(r5, &(0x7f0000000080)=@can, &(0x7f0000000000)=0x80, 0x80800) sendmmsg(r6, &(0x7f0000001500)=[{{&(0x7f0000000100)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="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", 0xff}, {&(0x7f0000000300)="78beeac02f7faf616f4c51b8809bef2e8594237dfc6ef5fc563cedfccc8c25eb7c44e00aa7bf094941ea83e7347246cf191c0095d4641d0fe1d7f2a9416c0932d95ca855f233c30a1dc91dbd32d6", 0x4e}], 0x2, &(0x7f0000000440)=[{0xe0, 0x3a, 0x3, "ef56797a2d351028d1da633745d4c09419f979dd7e99205553dc03eb8999c604fcdb88d76f70303aeab2fec2ce3829f569025b1538536992f0eb5fcaae174947cf92f5d4aea046e80e6234512fe6ab3e404142eca73741491bfb64fc8e414e36d9f744eb14bd20556bc6371d80d160015918ba3513b8d1ba46a73266a3ab70105296d963c51eea6066fd993b3d169515ed648be6cfaacd5ebd3a1c2614ebb468a73fae07aefadcf560d0a5ec6a45b500a73bf3d243b7662c465004188393036cf53457123c5bb92cb8"}], 0xe0}}, {{&(0x7f0000000380)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000540)="a278bcadb7d32db2067c1a6c06bf1623d7070575502aca129f5cb9e94a64344ce153545f9cf16af3774179bd6063b379a3ede8e50657ef04f828602afada25cd538952b2f399ff2f00f5d05e43d7ee06881e05fc447fe9d4e0050e4c5d455e207265ed7edec3bc2c54262fc73e60eae62680509889e6a73678e39fd5906d3240b06b78ce3bd91c08d621513f5d6c03ad937af8c7818b8b50e60282abc2858504ea1a59e639a392048d9ef6cb6f69def38c", 0xb1}, {&(0x7f0000000600)="f1846faf3d6ce0b5576a9a5d594a26b09e6ab81e2ce2f5111b08c9a2", 0x1c}, {&(0x7f0000000640)="f003d688432b1f6af009d2bf8c2331a520a08198d0ffaccd7907739297e53f70cae64191236f8b6f26252e05a5471b3c2136d8277973db57bbbf110ca53d10e1142934466989840758bf6c78f3b6b16be108d038e35101325ca698dcf337a183d40ffd60b64530c115ac8ee9489c21ea56db03ad2bf1f4f4ed50e65669ae5d3011bb3cdaeab2e72a43a512f10a061df269195360c0c68a467b56901fbbc8c7582141e8e0854a125806e072113ea0db1d39cc", 0xb2}, {&(0x7f0000000700)="ff673a1950bda243688245dc0681aedd9def1bca1cdc052403e757fcb30b255254e2de0a8331f6b53fd5cc57a908dcbcfaf7a052e1a7bd47857ce89ae7a09cb9f60cfed58905", 0x46}, {&(0x7f0000000780)="68ac5b01ce50645d6c2438fdc23f0aec0d5716ed9117d67a0416afdb1d90dfe28ff7dc3e2053f9d259c588af1a2b63512ce6a33189ec0234c2214989eb4def06ae19d65d73ef", 0x46}, {&(0x7f0000000800)="40e2a28ebbda03fa4afd3a3e1ffbd231c4b5606d6655e8178210ce7315ede4f93c262fea50431f7ef188ec929164223a651928e8eaa27455d2fd23f6b6fa3c446bcf925998f9e26b0ae7e5e9eee166cd543002bb36c8110c934294e466001c8073", 0x61}, {&(0x7f0000000880)="dd000f1d27f412abdc58c7c3cfb96994ebb52c88c12490bb928c6e5f9135f3758bf5ccba34387505b1aed26d4e5ea10ae38d4208e39b7b9cdf0557632f3b50e251681b2c53aa1b653530e22abedeb3cc8ee4c7d61571808ed6149c96e28e42bc46bb4cbf36e8351ed72786aeac81a40170d385e5d4d8a278e1fed9fcb0d93461227bf93b76307fd025e1", 0x8a}, {&(0x7f0000000940)="35f18d0db7608c48d828a0382a6e147779b32448a73a2c5eb84016921b9f84735beb6b31", 0x24}], 0x8, &(0x7f0000000a00)=[{0xe0, 0x104, 0x8, "881ff989868e3722926644159ab2734399c18135838f48d7c97eb501ef92608a482d8d31beb17708d64b702ad594ff2ae09ffed50ac37f341c2c5378656d26139c7bafec7a7cee9c12ccc8b8014fdc1a2abc7d14a292f237f27362218988d97b4753dc87d617df9c273ee78481634ce11b4adf3953fccbf0754fef6396fcb1f3709214eaab3472fdefdc5ca68f9ede85cc709d1a30734d9593fceb7f423a309e50c40b2ebfe510e20015d5d67bd7af324ce4ffae3e929b3c6ae3fb7416a179c85eaa2573badce288e3c7ca36e0"}, {0x10, 0x1c5, 0x5}, {0xd0, 0x113, 0x200, "711d2b751dbb8dccd8dfeb99fc4f31ecfdeb19fedc197d6a7643e55f166e603a225ec524d3616a337961b681e9c311dbea75951d94dfd887d47cc508ff8c1577a1b99c7902d055c1b9723c2725aa2923868102d09703fd8dbc1028baadb13d760b047a009c92931bdfc984d7855ceea2016331f551dda9150393de3824c8ec32df3bb344c2a45de4b1d964315631eb2db4aea65b26f63f7706e155dc79260330be0fa971ad38576860416f54b24312f39a323c7a37b78109a09e93a2"}, {0xe0, 0x108, 0x7fffffff, "10421b92cee265001ad24137677c9d785d24c3cd22990ff357165c93328ea46fae856e8c6f4a9616ced26b939c6949baa7bf4fd8f6c519fb2cbdc57a514e46cfbc7e5eb7029e344461728dfefa0390666f50c0e973f8000a215f0d94f8178faee94668c6f7df92962caf6c7c845faa435b1a99e0f0fe3b8a8e0ebe3c58c03d90c7eb0ee1a783ff71620cea4aafb8bba3957cf4874262cbf7aba57b8c57263b1f1f23543d555f248110cc86b0832cda6be45e7f85c617bd79ea2ff163b40254b1ec4f03080eb8c817137e"}, {0xf0, 0x119, 0x8, "96c357ffc92f5d93d5a3e4db8ad3aa0edec9031d5a7b8cbd133f2a8e5bd3a391dd3a1c8d3bed0fc4504f971e31df851723a782ee27ee87102dc735624060327f29cb945871ade72be39cee9b673a81695dc17895bfc7b477c3a6dc3903aa70edcfaa7a356693dd9a5381792cbabc942554cd754c4711bc74b8e3e9823aa07ad3cea417fca20b9801b9d6e5184a361bf7ca2bff34154c766fe5beaaaee745d3889e2ffb9973db84ffb0cc86dabc2074c9175de83d094d144d4b3f489d185867fd696a40708f8d8208063d8593828116f1d6744fc9e3c5a457a5d590b163"}, {0x28, 0x101, 0x80000001, "ed5f54cc9adf6949d8f2a7ef7f4c85428c"}, {0x80, 0x112, 0x0, "d0aff73c59a347dd043c045287c0e7dd80cc00f597d230a1ebb28d57bf1c3f0e21d57b2950a75b0958dfab28edcbdc1df16de360a1f9649bb10f18aae010da612adb3249b48bace63ca49288b014f8480617090d212213f57cbd17fb9060f136a4693861af1b0f3c7a"}, {0x68, 0x113, 0x1, "d48b1aca4d5ed95b61da19f41eec88dd2aaefac5553349b533a432cfe443007d564f423d0d043e90da1e564a71dfa9fd892e583356d142d23545ca6bde6e2068fa862d9a0bf96b8f305914fbcfc7659c92"}], 0x4a0}}, {{&(0x7f0000000ec0)=@llc={0x1a, 0x100, 0x25, 0x6, 0xb0, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000f40)="4cc6f64c5275b9bc30bb6e667bd067846281b6adbca546801d52153c93ff8793959276bbf9a7f51446dd59f9c347b553b89283fc59571bd2f24fc43ff0e3", 0x3e}], 0x1, &(0x7f0000000fc0)=[{0x50, 0x110, 0x16af, "aa45c74ce3d09863f5ab50eab5172762a827ede0646481cfd81eacc36981294c0714c27763abdfb006fe9dc827cbf5c4937e4cb131274ba1daa96b101e03dc5d"}, {0x110, 0x110, 0x6a, "50658280de5001087b2f1a50128dee5bf7d45c144a8c15e0b60f269c6cf1b67dbe776100086fde1effe9a34fd9c23102a444a0ec4d6aac5d4978c1a2e12741ea2e314d39057da126b8437f49861449a59749df0db49952ad7c1e4553f0afee2bff3a35b5e90c94bc9f603e5b18e36cbfcc546aa945d7bfa27b4b03423f97ecdbe330922e50c26ccecafb08e48f1e35aa7c39fc6ac7042420f9c3ffe47aa7c85e6fea9abb041c9b582853ff2dab84565448aa9c9a512b7e26cc0197ecb67fdfda4741ae4a3252344699691324ed1ed90242b8ac4b9212f89dd7a1bd2417b523e9c7bb08e933e5948e785942b2e1a8ea50567e8b1204a2a0212c"}, {0x108, 0x11, 0x0, "a83a6a6047e6d80858c884a4cc12fb45925b407bdd3ac5e4a5fcf8ca93ed8085710d92922deac43149b0616e7494b908c2f13f1348566099be5f163da300c674828a63d24e6b5eca962efcf28e49078daf131e71bf124020aaf781da9fd9e0ff13b1e76936f07c9b9ca233ecfc2f3dca0fd44057069b485ec8897117c2910e279fef0f439e109cb3fec96d31f8d54ebfc38765bd3b9630989af4943aacbbe5d6991969e841ac76ce96886e8a0ccaf9d4723a74458db1c5c234b1267c211fc3f4dae61822ca7842ba531c71ee455617a932adb408e2033eaf93423f331595413f40e02489b3967f96d26bf40f1cad0f705b"}, {0x48, 0xff, 0x7, "6d2a4139366fb0547d48a72bb1a2053b4cdaaf2d879bed01b643187e3cfd04196e59e4395dedba4920df42bc94bcc4a9bb"}, {0xe8, 0x115, 0x2, "c97438484e29953f8a7d9b403ef0456fa2017468ca265ba7dc23c1f164664ab5cac3b388ebf543f3cb886b001526edef2c903338e6dcd27435f5499fc7c71f451619088e59b0aa73913ed37fb25e56f03f98388abb73bb0632fb740a9b6d8c16d23e95250b57602a2387c441288b757f15791eaf3e3ad2f59af28a336c16645ff2c9bf4577998a46ffaebe7ecf30e4edf021db181de64875896d39b2a6bb9d157c85faeb094dd176e945f9f51983d3de0b233eb277eab04f91ab0745054482779664117934537e0748ca75783e1e90e4e7fd2099fb85b5d4"}, {0x78, 0x0, 0x8c7, "22e416941b5d77baed21484fac2ca3291cdd1bb0129084f000b2e6f88000e1ac72e79383ee1d00ff721a5e82501b7b56e0329e7f14cb9c823de15f1da0e695fd586a15e1a298855d2b52ac4c23bd228b372cb8073e395de4ab7bf261b3d3d28c2b0279ca52f9a7"}, {0x110, 0x110, 0xfffffff9, "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"}], 0x520}}], 0x3, 0x40000) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2447.518725][T14691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2447.538762][T14691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:45 executing program 1 (fault-call:4 fault-nth:0): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2447.728810][T14691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2447.741289][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2447.759442][T14691] usb 3-1: Product: syz [ 2447.777224][T14691] usb 3-1: Manufacturer: syz [ 2447.793472][T14691] usb 3-1: SerialNumber: syz 18:21:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x4930}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xffff}]}}]}, 0x4c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190000012cbd7000fddbdf251d010700150004000000006002020000f7b5825b9e795ea00700000005000d003f00000008000900", @ANYRES32=r7, @ANYBLOB='\b\x00\t\x00', @ANYRES32=0x0, @ANYBLOB="b1db4c6af1f280d093a57da884a54752f4383370758a6751603a6bb52870fd44b8d2285701ef98c81ed370ebf6f3c10800694a9db0d8e6ae083eef9bb830ba06394e7b488d0670dc4c"], 0x44}, 0x1, 0x0, 0x0, 0x4004081}, 0x40) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:21:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9b8196ffff8e602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2448.123374][ T828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2448.132897][T14691] usb 3-1: 0:2 : does not exist [ 2448.169100][T14691] usb 3-1: USB disconnect, device number 86 [ 2448.307416][ T833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2448.328874][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 2448.328895][ T27] audit: type=1804 audit(5885547705.578:2055): pid=804 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3793/bus" dev="sda1" ino=15956 res=1 [ 2448.445496][ T27] audit: type=1800 audit(5885547705.588:2056): pid=804 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15956 res=0 [ 2448.477464][ T27] audit: type=1804 audit(5885547705.628:2057): pid=805 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3793/bus" dev="sda1" ino=15956 res=1 18:21:45 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb6, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "a35e992000559e4b19"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x49, &(0x7f00000000c0)={0x5, 0xf, 0x49, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x3, 0xf00, 0x9, [0xc0c0, 0x3ff0, 0xc0ff]}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:45 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528a1e95fd}, 0x0, 0x0) 18:21:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f9b96ffff8e602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:45 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x100d) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x1e002, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000080)={0x0, {0x7, 0xfffffff8}}) r5 = dup2(0xffffffffffffffff, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="9bce123eeaa64bcde330916997ae50cd704383ff98e7125074c2a6c48356d8d456a57d3f864f48a7fd1a5d2751fbe802306095d320268366691eae6e7114df22f33fb177aceec6a5cefbba60bbb6c719e08a72dd3faa938fe061cbe69ecfdc13d50cd6cea0fc196b42ab32cfc14155a112b0e05abe0f3449d7b6aee03297523f4c0348bc0395931869be2e15bb4b4dbe1c8ada47efe17f80d0c2ac97", 0x9c}, {&(0x7f00000002c0)="d359b3bbcd1aea5ed9f39d31597b013cfd05a806c45061a8d3e2575f362b84a3940c00e08a427692752fdaaa00558efac47658e73632d82ace3ee64577699637292b5d98fb4d6acb967388160c29a55e1331e6440807", 0x56}, {&(0x7f0000000440)="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", 0x1000}], 0x3, 0x0, 0x0, 0x5}, {0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001740)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0xa, "af1cf7fdd2c274e80b4c"}, @assoc={0x18, 0x117, 0x4, 0x3e9}], 0x50, 0x400c040}, {0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)="a14836c43f7df808461159e171873101092c88044210f33518f0654abccef038ecc211d57762fe8640e5b40094cfd5779fae1d74ae9d656a1241e2610799ee050ac57dcb2c503e77bb4ac141f07380185920f96d39370b509aa1591dccebdf959f504183d7", 0x65}, {&(0x7f00000003c0)="1396e178398d0bd926d26761860bb1fd000d626f2e497453c0a2d5866a756df7dea66b809bb61616b2", 0x29}, {&(0x7f0000001840)="24bf9fe65b7145706e8cf6c71a0809912850deebdf30bc861cf06f3a7e789edd43494734ba5059f730f7f4632b493fcf8b478121d4789754f10974cb87ec426d6d0bf3a672e8380c1f8ddf0d59", 0x4d}, {&(0x7f00000018c0)="8370f2bce94f09a9fd42e55b2c9c2309d3c189bdb4f13d384c5f82962c94fa1f45879780671bdd937d30080b42c43475a9de66a50147044b861a4aa2f6e2da63272a663827dab837cd66056bb0ae7afd4c1d049c4a5ff27f99e6b0ac790ef1f405c6cb38cd01d5ca46fad2097c4a88feb28b54c74b4dc31c4cd2ce18d5a534", 0x7f}, {&(0x7f0000001940)="ab67d60516155e2bc51c79511a66a27f7d834e28552728", 0x17}, {&(0x7f0000001980)="deba0b0aee9fbe9e6fd30dccd7421e8c06f75558e2c33f1817afdc6e7806d3d2ffc076", 0x23}], 0x6, 0x0, 0x0, 0x20000052}, {0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001a40)="86663529ebbba593c64bee717895d5293a296dbd7b62c3468f4eb0722c53ba267b6335093dca2d07fa91324e5526a384f4b98f442a055f31597cfb50869b4437fd1cdbf74eaa52cabd6258b7307c705bd18228445190efba70169f800bc56340cba125cac2850d2f0389db62f60e59253cbbf8386bdae0bfd2749b56c3e6ea5e033d7222630899958b674608084d36762fd2edb76db09648c6de4f86d06057607451b30ec87baa949bd9a52e34a47dd4d7445da97604da4cc3583c50d2e34f63b1df8b2692c8a005bd", 0xc9}, {&(0x7f0000000180)="e9f6fd226fd1fb2eb9a8540ad0df52341566c547295284c281a9203afb63d8f0cde2f91f2df3f92db0", 0x29}, {&(0x7f0000001b80)="25e099743abae33f1970eeb14425e706a073c1e9f1ad0db5f059ce97aff66da293d4ae5da0c20928e9dcfff428f1d0bb2535b9310ee36ad1d87d92832dfd6a13636bd6a3bde11d6a9ffdc2216c7ae44a108938816d760a7fb676bab83a98f286840dbc4fe82771d3861ac1f8cf9912108fe9adf372153a2ec8b7e49237ce79b4a2ecc2e78283ed677fa43577bcdccd9da9227d445405cc468aa0617cf62592574a7da57f5568cfcda3c4cc0cfcf44816afe2bbe304016862a3388528b8a7e15095e3def1b54fee20caba1fc1d1a06b13749e11741e39e9ba135f5a8873afcd3d501d5b82c2cfa6a99b7ec3f034", 0xed}, {&(0x7f0000001c80)="d7d2b41d7b0f39cfc473da82750dfde8864826f53ca0b012f4d227ed14c72731c42bf7afd36580ffb96a8a5553c4a36a54c8c8e9119c7d3093aa64d8854fb50b1267e27b34e2e0962fe03158d6eb30e8d2d41227aa14b73dd199f4d641cb88a953bbdaa6a7675b3d17cd6a1e794807c02a81415982494091e6eb9fa674e02bb9d2727f35e4bd51abfdf3d83d", 0x8c}, {&(0x7f0000001d40)="a15e3f5cda462c3bb592fdc0215d64d67345d53b170e2507e2200ee85f7c1b0d2619a47304df993dca626597af2748ef4fb9a235d5fbc5c3a14fcb081e9decaeb92d4f63c7a867413304c80348aec6d7e5da7146d4ff0f742adbc2f28a9cb2603d870ff5d45a0897ecf88682bd910c4559a5972564d0f945d67c893530a0cac8396b2659857dd26fad217782a3fd20a199c12b765b99ba748757527c9ef1ef14ea89007bca9322c931df44911d1df4ca60d358f1b1df0ebfed018fd81e80d95986ea649bf7e1fa290ae8b3a3b301f6262b4babc5e009a333e430cac7a4530bb8", 0xe0}, {&(0x7f0000001e40)="3014618ba674ad057faf44604ea734ec6a320790fe30ebb4824f9ce283bf8d80d01ff7eee63b87fce7002e2a4e05d718716abdb0fe14332581ee1ec8783adf1c79f8f92c90a6dfe32f55da60661eaf5226e07bea18f3401c1ed24719cf735c76f21dfd6c984abb11c3d8b7affc3ea3db42d5dce2960aebe95b3b16277a79d19c59c857ed76f3cf1039ae666a4f095f055349da274e228c590378e323638fd64a167bcc9fc6e99a48953224e9e1781c27095d86e63512e6a79f3b4ade70377c9f1d2bab87db3f4176144d3e5c0288899a7499037cdddc9139cd04cdeb311b7e2edbb38086b85b6cc47f0c9ef365", 0xed}, {&(0x7f0000001f40)="8116071ac9ed7dc33518c0ffdfad7372a00280b9b628b757b7db6c7a3c7dd9819c037ae18b60de385ad374e7caa370fcd67bcf85c092da4f8c079f52ed952670fc0501d884161cb955bdec5f1320dae93f1b7f74edcfae27fbc2b9a772ccf5b9c2205f5469a8734a02a89ee121919ff0aba82abb7cfedee0c293b273d2a1e6dcabd6db4e17963d944e1e6b98505b7effb6890218982807ac0bb8a0ed9bbf4f", 0x9f}, {&(0x7f0000002000)="ee5ecf9702b870b6ca749068add20933e217f1b08824082ac1d2721d320b201240904015b4a367331ed3a30ec77fefb1c5c81a3adbeaef4e0121c44aa8c2741c3a1fb2b6013400b0ff9e9a8a977e6fcfa29b68d56313f75e101344d7b2a392abadc65c34e4a2f5", 0x67}, {&(0x7f0000002080)="2dd157b225ffe877c8eb64006633386198a1d8eace3abcf5410d7a33f5a9cb8065c67d544b2f2643126aa4705678c73e489dfc61aeb58a8e73c222b36d0de1f9d9d8fac168deff2be26dc9bf6c56b4138b5ecc9fc949bfb3591d9975cc4fce7255fcb926cd24", 0x66}, {&(0x7f0000002100)="17aef3fa4709ed88557e0923b23829ec67b261305f7535326022b7fba3c5c28a9f9325947d48b99d2773ef6a733a002dcb4d889a2a8118277adcc805ac947f05af7b320d4a16309240bad3b3841efb0b32cda6f650449046cf9324291d7ed9dafc27787c1fe21b1146e90a54cb945bd20523362506757b9b95e7018bcb0ab11381c73be3671a4fa8f98febc849f6f0bdf52e668cda8174a31b21c91f5f4a73aff77d7ad5190ab8df49f86010ace51e8aaf92043bb011a9981440f61579c2973483838e813405cd08ee", 0xc9}], 0xa, &(0x7f00000022c0)=[@iv={0x18, 0x117, 0x2, 0x3, "20a3a3"}], 0x18, 0x1}], 0x4, 0x0) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000140)={0x87, @empty, 0x4e27, 0x4, 'lblcr\x00', 0xa, 0x1, 0x60}, 0x2c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2448.674416][ T27] audit: type=1804 audit(5885547705.928:2058): pid=870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3794/bus" dev="sda1" ino=15851 res=1 18:21:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f819bffff8e602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2448.756803][ T27] audit: type=1800 audit(5885547705.958:2059): pid=870 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15851 res=0 [ 2448.851265][ T27] audit: type=1804 audit(5885547705.958:2060): pid=870 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3794/bus" dev="sda1" ino=15851 res=1 18:21:46 executing program 5: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="421b00007ea18fa772d8ef8d07a67c8b2bb459aee275600e7c7c5599a5946e9d48bdac87d6df1725068e35a44b27d4daa3bed9009f91f2926b6bae3a7b1d013976505620f6bcc5bba734cfb930da8f1701d0ae80a26398e3f41fa1bc131a45722983664ecd74b36cdb99b50e5b340879756b9cab0465caa556c5ee2df38174463cf602f6844adb60b52a5170f08e1092417e0c5afc3b000000000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250200000005001400020000000500050001000000080011000100000006001c00c5ff00000600020001000000"], 0x3c}}, 0x24040089) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x101002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x200c800) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nfc_llcp(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x27, 0x1, 0x1, 0x1, 0xff, 0x1e, "1de620fff643bec9d4965059e6d26a946b9709e2abc15425d8afcd3c7034ef510d1b1ffa591dfb1f3f98a27f92a1ffe4bc858eccc3529f2818e14558fbaee8", 0x1a}, 0x60, &(0x7f0000000140)=[{&(0x7f0000000300)="c76001359034cdffda79d3c0aaf358d49d96bfb93942f6d01e7ce0d29421b6368fa4b4cba0571a39ce81f6f916aedbc1ce66384a8ad285c4e45b3baf3d52ae08780e0246af8229f6e475b5632679d87de933c47c864311b7a4f54ab71bca133074c7c40abe9f04836a5e1a1ca332188e144d4dc2ed0ca69a05aeaa27ea91df2bd93872a60d6082ccfc68be5894e2ddd315b2210b4bd5ad87545461111c05e476db7586c1d73d0f0cbed47b38d9dae8343f7e36b5f0f326d78bd7b35dfd6644392e1b277219ec0a04970b6a925152", 0xce}, {&(0x7f0000000440)="bd491b0786eef213f5bc6ea89f8d5d83d4783e87adc4c13ab25050dcee9140f45430125316b59f9e2cae9b2bc35c82e1aed329a51c1546493afc5e29ec3e016b385cb07961d0757a837981", 0x4b}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="70000000000000000d010000070000008935506c31fde13965941427df45cf3416260f094407416445bf097300dc52d5bf1d4fb288d94d12952497abe568f0572908783d5646f16d603972b25850bcbbe564c5a197be418acf47d469f73240b0887ecaa19215d6004b64b3c400000000"], 0x70, 0x841}, 0x2000c044) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000)=0xfff, 0x4) 18:21:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f819601ff8e602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2449.037910][T14691] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2449.138775][T14691] usb 3-1: Using ep0 maxpacket: 8 18:21:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f81969bff8e602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r8, 0x40044104, &(0x7f0000000000)=0x5) 18:21:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ff9b8e602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2449.338765][T14691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2449.363546][T14691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:46 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0x0) [ 2449.558565][T14691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2449.567994][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2449.589688][T14691] usb 3-1: Product: syz [ 2449.602984][T14691] usb 3-1: Manufacturer: syz [ 2449.622258][T14691] usb 3-1: SerialNumber: syz [ 2449.780562][ T27] audit: type=1804 audit(5885547707.038:2061): pid=878 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3794/bus" dev="sda1" ino=15851 res=1 [ 2449.826124][ T27] audit: type=1800 audit(5885547707.038:2062): pid=878 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=15851 res=0 [ 2449.848827][ T27] audit: type=1804 audit(5885547707.068:2063): pid=884 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3794/bus" dev="sda1" ino=15851 res=1 [ 2449.947928][T14691] usb 3-1: 0:2 : does not exist [ 2449.964340][T14691] usb 3-1: USB disconnect, device number 87 18:21:47 executing program 2: setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff9b602f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:47 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:21:47 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1012) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:47 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0x0) [ 2450.570254][ T27] audit: type=1804 audit(5885547707.828:2064): pid=952 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3795/bus" dev="sda1" ino=16372 res=1 18:21:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e082f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2450.797799][T14691] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2450.888566][T14691] usb 3-1: Using ep0 maxpacket: 8 18:21:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e092f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x6480c0, 0x0) syz_kvm_setup_cpu$x86(r5, r4, &(0x7f0000014000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(0xffffffffffffffff, r6) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x9352, 0x0, 0x89c3, 0xffffffff, 0x3f}, &(0x7f0000000140)=0x98) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffea7) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'icmp\x00'}, &(0x7f0000000200)=0x1e) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:21:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e0a2f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2451.088665][T14691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2451.114998][T14691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 18:21:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e0d2f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:48 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe4c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2451.318547][T14691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2451.338119][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2451.370744][T14691] usb 3-1: Product: syz [ 2451.388560][T14691] usb 3-1: Manufacturer: syz [ 2451.404852][T14691] usb 3-1: SerialNumber: syz 18:21:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e9b2f096d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2451.737782][T14691] usb 3-1: 0:2 : does not exist [ 2451.768734][T14691] usb 3-1: USB disconnect, device number 88 [ 2452.437750][T14691] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2452.528280][T14691] usb 3-1: Using ep0 maxpacket: 8 [ 2452.727778][T14691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2452.739781][T14691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2452.907766][T14691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2452.916987][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.927270][T14691] usb 3-1: Product: syz [ 2452.931671][T14691] usb 3-1: Manufacturer: syz [ 2452.936274][T14691] usb 3-1: SerialNumber: syz 18:21:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r2, 0x0) close(r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:50 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0) 18:21:50 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000000)={0x0, 0x6, 0x8001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000040)={r5}) 18:21:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000065180a6e8063d015596000", @ANYRES64=r0, @ANYBLOB="01000000000000008000090000002c00048014000780080005000000000008000300c20000001300010062726f6164636173742d6c696e6b0015067ce5fb548c390169621f94ef367915620369598a5405305d0b8af39eaebc39a890f974d3794116955a58072ff64423c1"], 0x40}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="3002000064ee75965d8a5f9d1f944fe33c8bed1b581f1636350ab755073a86666faafd194d8ab8cecd8b3c52cf59e3103d954ca1c6eff0759d5d164a81085fe2ece011a71cffc7dfe99a1b6ab6b258987014e2b08611afd8c6536998d6c2825bcae76c5235d4dbb73f8e58be5579d084a6b7208f7feac7b766ef68afce525dbecfd7a72c7203b0d9ebe11d81b41f9177387f09501bc4027ad4dd16cc5cc2c9c570b502feb549b6ed399aca3cc0bca89d39c136d28717e0da4efad7e932eee5225146d577488001babc84", @ANYRES16=r3, @ANYBLOB="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"], 0x230}}, 0x20008841) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCFLSH(r8, 0x540b, 0x0) 18:21:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e6008096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:50 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x1023) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) [ 2453.262342][T14691] usb 3-1: 0:2 : does not exist [ 2453.275655][T14691] usb 3-1: USB disconnect, device number 89 18:21:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e6009096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:50 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x101}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$KVM_REGISTER_COALESCED_MMIO(r8, 0x4010ae67, &(0x7f00000001c0)={0x1, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x222000) ioctl$TUNSETPERSIST(r9, 0x400454cb, 0x1) 18:21:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e600a096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:50 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000040)={&(0x7f0000000000), &(0x7f00000000c0)=""/245, 0xf5}) 18:21:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e600d096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:51 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000, 0xffffffe0, 0x9, 0x102, 0xed, 0x29, 0x1f}, 0x1c) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1, 0x9, 0x8, 0xc30b963e, 0xda27, 0x7f, 0x4], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0xcccccccc}) 18:21:51 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0) 18:21:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:21:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e609b096d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:51 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)='4', 0x1}], 0x42) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x64, r6, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000090}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:sysfs_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40280f0}, 0x8804) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)={0x5, 0xf, 0x3d, 0x6, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xc, 0x7, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x21, 0xfc, 0x1, 0x3, 0x5a}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3f, "70c257582a814e30c420147eca037afa"}, @ssp_cap={0xc, 0x10, 0xa, 0x5, 0x0, 0x3, 0xf00, 0x9}]}, 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) [ 2454.180214][ T1108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2454.238102][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 2454.238129][ T27] audit: type=1804 audit(5885547711.498:2073): pid=1060 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3796/bus" dev="sda1" ino=16336 res=1 18:21:51 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x103d) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:51 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_hsr\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="47000000030000008fe500000900000002b091c70600000002000000b81f000000ff03000005000000000000"]}) 18:21:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f086d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2454.353748][ T27] audit: type=1800 audit(5885547711.498:2074): pid=1060 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16336 res=0 [ 2454.397716][ T27] audit: type=1804 audit(5885547711.498:2075): pid=1062 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3796/bus" dev="sda1" ino=16336 res=1 18:21:51 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000000)=[{r0, 0x2418}], 0x1, 0x3) 18:21:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f0a6d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101840, 0x0) accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2454.487632][T14691] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2454.493018][ T27] audit: type=1804 audit(5885547711.698:2076): pid=1130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3797/bus" dev="sda1" ino=16342 res=1 [ 2454.588658][T14691] usb 3-1: Using ep0 maxpacket: 8 [ 2454.600518][ T27] audit: type=1800 audit(5885547711.698:2077): pid=1130 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16342 res=0 [ 2454.600551][ T27] audit: type=1804 audit(5885547711.698:2078): pid=1130 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3797/bus" dev="sda1" ino=16342 res=1 18:21:51 executing program 3: r0 = socket(0x1, 0x80000, 0xe48) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f0000000180)=0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, &(0x7f0000000040)=0x84) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x300, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000200)={0x6, 0xdb}) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) 18:21:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f0d6d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2454.798508][T14691] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.818960][T14691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2455.009516][T14691] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2455.025364][T14691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2455.068791][T14691] usb 3-1: Product: syz [ 2455.081717][T14691] usb 3-1: Manufacturer: syz [ 2455.105520][T14691] usb 3-1: SerialNumber: syz 18:21:52 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}, 0x0, 0x0) 18:21:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x44002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x201) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:21:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f0e6d07ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2455.384532][ T27] audit: type=1804 audit(5885547712.638:2079): pid=1133 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3797/bus" dev="sda1" ino=16342 res=1 [ 2455.436492][ T27] audit: type=1800 audit(5885547712.638:2080): pid=1133 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16342 res=0 [ 2455.468065][ T27] audit: type=1804 audit(5885547712.668:2081): pid=1137 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3797/bus" dev="sda1" ino=16342 res=1 [ 2455.487596][T14691] usb 3-1: 0:2 : does not exist [ 2455.513872][T14691] usb 3-1: USB disconnect, device number 90 18:21:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x204) syz_usb_connect$uac1(0x0, 0xb5, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@output_terminal={0x9}, @processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x0, "55953c71d6"}, @input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x7, 0x8, 0x1, "0b1d24c95db4cd61"}, @as_header={0x7, 0x24, 0x1, 0x2f, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0xfa, 0x96, {0x7, 0x25, 0x1, 0x1, 0x7, 0xffc1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0x9, 0x7, "9f92", '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x3, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5a, 0x4}}}}}}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x81, 0x6, 0xd9, 0x20, 0x3f}, 0x3d, &(0x7f00000003c0)=ANY=[@ANYBLOB="050f3d000603100b071002087c03000b10010c2100fc0103005a03100b1410043f70c257582a814e30c420147eca037afa2c108f8726400000000f0900"], 0x1, [{0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xf8ff}}]}) 18:21:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f126d07ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$tun(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xdb) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:21:53 executing program 0: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6500, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) read$FUSE(r0, &(0x7f0000000a00), 0x10a2) socket(0x1000000010, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getdents64(r0, 0x0, 0x0) 18:21:53 executing program 3: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r1, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x3, 0x1000, 0x18, &(0x7f0000000000)="7c0553041c7bcab5efd49e2b6d96dd0b72ea1d0148ea2510", 0xfa, 0x0, &(0x7f00000000c0)="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"}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000280)) 18:21:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x20, 0xb, 0x3, "7206e34ee62ff9aa568813d23eb1f5824cfaa23c0585d57dd9c772d02c886181", 0x2036315a}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2456.040605][ T27] audit: type=1804 audit(5885547713.298:2082): pid=1205 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir616181442/syzkaller.MnC9Za/3798/bus" dev="sda1" ino=16325 res=1 18:21:53 executing program 3: r0 = socket(0x4, 0x0, 0x80) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f090807ff00cd6600001083297f99b4", 0x17}], 0x1) 18:21:53 executing program 4: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0x0) [ 2456.297552][T12334] usb 3-1: new high-speed USB device number 91 using dummy_hcd 18:21:53 executing program 3: r0 = socket(0x1e, 0x5, 0x0) socket(0x36, 0x800, 0x7fff) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={r3, @in6={{0xa, 0x4e23, 0x7fff, @dev={0xfe, 0x80, [], 0x13}, 0x2}}, 0x200, 0x6, 0xfffffffd, 0x3f, 0x8}, &(0x7f0000000000)=0x98) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="000000000000000028001200090001007665746800000000180402001400010000000000", @ANYRES32=0x0, @ANYBLOB="004942488c23492893efde8b98bd459e7e3a445a9d1887"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f00000001c0)={0x400, 0x9, 0x2, 0x3}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x0) 18:21:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)="9f8196ffff8e602f090907ff00cd6600001083297f99b4", 0x17}], 0x1) [ 2456.431772][T12334] usb 3-1: Using ep0 maxpacket: 8 [ 2456.476981][ T1240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 18:21:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000005, 0x11, r5, 0x0) r6 = pidfd_getfd(r4, r5, 0x0) write$9p(r4, &(0x7f0000000200)="41b8e33701f8b9327607199158fe9aa0a64e7062350ca8d04fe3d8fbeb4000ae0db9d03090512a6a03810b00ed30d58eb7520cfc1d31f4e81ea4786f91d01502ba0cef1f14ce3fb4f1a395d8c105da786a9c396c87fb3a4c0d923a6036d463a36cf31c9ce491ff75b39fbb80074f8c3598d3b606bc2b5967c577e5d5017d299bbde68cfced6b4648736e50ba08578a47a4eb2384349f72c684272691f35f55e8a95ab20d3708", 0xa6) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x100000}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2456.638332][T12334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2456.654765][T12334] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2456.838410][T12334] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2456.848655][T12334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2456.869518][T12334] usb 3-1: Product: syz [ 2456.882899][T12334] usb 3-1: Manufacturer: syz [ 2456.893229][T12334] usb 3-1: SerialNumber: syz [ 2457.109415][ T1260] ================================================================== [ 2457.117568][ T1260] BUG: KCSAN: data-race in __put_unused_fd / do_select [ 2457.124493][ T1260] [ 2457.126853][ T1260] write to 0xffff88806f8b4f00 of 8 bytes by task 1227 on cpu 1: [ 2457.134481][ T1260] __put_unused_fd+0x78/0x120 [ 2457.139162][ T1260] __close_fd+0xd5/0x140 [ 2457.143395][ T1260] __x64_sys_close+0x46/0xb0 [ 2457.148010][ T1260] do_syscall_64+0xc7/0x3b0 [ 2457.152507][ T1260] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2457.158379][ T1260] [ 2457.160711][ T1260] read to 0xffff88806f8b4f00 of 8 bytes by task 1260 on cpu 0: [ 2457.168245][ T1260] do_select+0x315/0x1020 [ 2457.172570][ T1260] core_sys_select+0x2c7/0x5f0 [ 2457.177321][ T1260] do_pselect.constprop.0+0x125/0x160 [ 2457.182682][ T1260] __x64_sys_pselect6+0x12a/0x160 [ 2457.187702][ T1260] do_syscall_64+0xc7/0x3b0 [ 2457.192202][ T1260] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2457.198070][ T1260] [ 2457.200382][ T1260] Reported by Kernel Concurrency Sanitizer on: [ 2457.207046][ T1260] CPU: 0 PID: 1260 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 2457.215609][ T1260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.225647][ T1260] ================================================================== [ 2457.234038][ T1260] Kernel panic - not syncing: panic_on_warn set ... [ 2457.240616][ T1260] CPU: 0 PID: 1260 Comm: syz-executor.4 Not tainted 5.7.0-rc1-syzkaller #0 [ 2457.249182][ T1260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.259220][ T1260] Call Trace: [ 2457.262507][ T1260] dump_stack+0x11d/0x187 [ 2457.266889][ T1260] panic+0x210/0x640 [ 2457.270787][ T1260] ? vprintk_func+0x89/0x13a [ 2457.275370][ T1260] kcsan_report.cold+0xc/0x1a [ 2457.280047][ T1260] kcsan_setup_watchpoint+0x3fb/0x440 [ 2457.285407][ T1260] do_select+0x315/0x1020 [ 2457.289733][ T1260] ? find_busiest_group+0x3c/0x2f0 [ 2457.294848][ T1260] ? _find_next_bit.constprop.0+0x126/0x160 [ 2457.300745][ T1260] ? kvm_clock_read+0x14/0x30 [ 2457.305410][ T1260] ? kvm_sched_clock_read+0x5/0x10 [ 2457.310507][ T1260] ? sched_clock+0xf/0x20 [ 2457.314837][ T1260] ? _raw_spin_unlock+0x38/0x60 [ 2457.319678][ T1260] ? cgroup_rstat_updated+0xbb/0x1f0 [ 2457.324963][ T1260] ? __update_load_avg_cfs_rq+0x283/0x300 [ 2457.330677][ T1260] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2457.336561][ T1260] ? __this_cpu_preempt_check+0x3c/0x130 [ 2457.342188][ T1260] ? __perf_event_task_sched_in+0x150/0x3a0 [ 2457.348077][ T1260] ? __perf_event_task_sched_out+0x158/0xaa0 [ 2457.354047][ T1260] ? _raw_spin_unlock_irq+0x55/0x80 [ 2457.359237][ T1260] ? finish_task_switch+0x7b/0x260 [ 2457.364334][ T1260] ? __switch_to+0x13a/0x470 [ 2457.368921][ T1260] ? __schedule+0x30f/0x6b0 [ 2457.373428][ T1260] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2457.379315][ T1260] ? __read_once_size+0x45/0xd0 [ 2457.384155][ T1260] ? futex_wait_queue_me+0x202/0x290 [ 2457.389443][ T1260] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2457.395326][ T1260] ? __read_once_size+0x2f/0xd0 [ 2457.400166][ T1260] ? check_stack_object+0x76/0x90 [ 2457.405185][ T1260] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2457.411083][ T1260] ? __check_object_size+0x5d/0x337 [ 2457.416271][ T1260] core_sys_select+0x2c7/0x5f0 [ 2457.421030][ T1260] ? do_futex+0xef/0x15b0 [ 2457.425351][ T1260] ? __read_once_size.constprop.0+0xd/0x20 [ 2457.431147][ T1260] ? errseq_sample+0x6c/0x90 [ 2457.435737][ T1260] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 2457.441621][ T1260] ? __read_once_size+0x45/0xd0 [ 2457.446501][ T1260] do_pselect.constprop.0+0x125/0x160 [ 2457.451864][ T1260] ? _copy_to_user+0x9c/0xb0 [ 2457.456452][ T1260] __x64_sys_pselect6+0x12a/0x160 [ 2457.461473][ T1260] do_syscall_64+0xc7/0x3b0 [ 2457.465973][ T1260] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2457.471937][ T1260] RIP: 0033:0x45ca29 [ 2457.475845][ T1260] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2457.495438][ T1260] RSP: 002b:00007fca0590bc78 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2457.503836][ T1260] RAX: ffffffffffffffda RBX: 00000000004fa7c0 RCX: 000000000045ca29 [ 2457.511794][ T1260] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000040 [ 2457.519765][ T1260] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.527731][ T1260] R10: 0000000020000340 R11: 0000000000000246 R12: 00000000ffffffff [ 2457.535704][ T1260] R13: 0000000000000866 R14: 00000000004cb470 R15: 00007fca0590c6d4 [ 2457.545710][ T1260] Kernel Offset: disabled [ 2457.550027][ T1260] Rebooting in 86400 seconds..