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", 0x1000}, {&(0x7f00000015c0)="ab47adb45c6b562c965f0cf894a5b8d2a52773e2bf7f5758562cacd6fcd4e81ce6345f05c228f41b9eddeceb0ee6cf33724c17078ea9e89676df8e5b6e0b2f7ecc17136aaecf430dc1c80070668410787cd744c1b6a38590a1ff7bd159cabca8698d270a8939be9c726bc0a3b85c1026eac98293a34575273a5a23e12f8d44e19202d0ccec2ebbdc1f1845b09bcd691d864890e0491b310eb7bad038a89336b8534570cf9ba5fc22f1fce3da21c90ecaa6b88c975aee00ad54b09dfba4afd28334e67dc7bcc3b4ecfbe9c3dfcb605f2b88569c2898a37398b468c0a42e8f9feacc207abd7333619084996cc1bdf196b3e295a71328bcc1e3346494778760f064a6ed36f4ed92b7aee1d0218462ef59132d3c35107ed33887413a15285b93ac41c2e3a592d35fb7dca5e55ac06391368dbfc7e2a0e7464eae75a6387b538b45ded8a059dc8512127b720bae7fd2d3d8e000078654e9a11ad7a019c97f145b53769ad9fa26e57debdee3e6dc8151070cbbd976d03520ab3dc7b9d7607e0663b9728565845b0a52f7a141b867e8068bb11d60fe3602636268b01e5c00d0f57f15138d2bc3c4ee712234b1d4cb40d78ec01b1eed5408fdf69a206ab6f72a8713cde4f27b3eb703a012493eafb32b30f4bfa0b4f4e23775cb356b31f97595d38803287fe30304fadca8a930008abb3b88d9eadab4fd661b15f6ae356f6feff523a9cfd8258c87553a2988036069b0379db1bf3c3953504c1c74222b7a6ca0141978abf27f0ceed8d39a22085df4c84e81bd57ba70b465402dab169c1c909b2d7041b37e251cfc3281d3dce740bde46aa96345fa58bc25bc6cda3bad8aff0f9231ff8327aebbe2bf40cdb136ad115d25cc2ef99d0ebbbaa63cd6410a8fbdd8563a24f3f0387b925e15c7dca5a5c36e65d5972bbf9c6d1204f3e96d81cf14d5f435097d357468e4d2a7702a791ecd665505f891ebd2ed7a677301c4332da6250b933629a946f8de42bc930c8b2a5aaf87973ab8ad740ee1fd78c74da36191e3b874d552a385c1cf6630a7548376a911623ca5897010c34c1f2cea60630138334f71412d2f4b83980c1837e8aa194a90b804ee508865bde67555e77d39a15b0e5f0920e6a6b9010f140109700bee5a3800744500018ea7a5914c6c4e8bc8012358ee6c8a78352d2899a2be30af09de4e8cc3242348263944b8f36408407cb745455a0d0a33314ca9b8731bbb0bcf0e62ffeb452cc05dbe3ab6f8c70feb4bd56cf0d20ef0dc42a08f195d197c26655020698dc7e3bad3d962d9acc43c82dd2116faabb470cc1878f324176e5c79304fe7a9cc160a84bbc85185ed7e1143429de1c2a97c926be6f8d2f85251e5aa10aff82c174f109f7a7b188a7f834ce3eba861124109bf1e31cf1934f51909050b4a976f6a923651da872431cfe1c5b183479e90774f32b534d4b1be42609c352f4110c10f8d5f1a8454818fa638a19fa144d1a386e8e0cbc61cc087879f262deccc8c021faad4da89f176da4a6c3a6981832dc0049dc5e40593a28139f59c4e15843dab32d8463e759c493d8f50f3a01ff8d3713693fd49d5ad8e7ee27c6868aa2deee2f71a4943868199c52d964636786f237c779637abcd4c970d511bcf6ce01424eead29c96190a8e1bdc574b698b7007d91ab404609d6cf0be4ad88ab7c40c18bbf5df0aec8893e3560fe521ce6793fe119a9503eb8409e8891539eb5be55a0c3adf0a219a027a09e0fce945c7567e90532510b3f481b0cd92e515b29f2a75a0e36aa6dc95b8b44d40c1e639bd91ae03ecd78e8c7abb9be59cba2f95ae37eea9da489093b05a2ae3c25bf0794cadb544da3f73837a51363963d22b2c4ccfa50cb69dd3f9655d9a81a384fd54288bed08500d8724e599b5857a6829ff0b11393e569668d0ed5a752b3ce6c9a599e8748d3afed5f0892c20ea8617577fb0ceaafb1d860861b6206bc22e36660b509c4b88cf702ddc1024495969acf9ea23490b06f98c17898c65372dde3799fa6986e036d125a37a2fe8fb841837bf524bf76068c41b6ce896c421a88ff48b5c927338506e6cd6823df1532f7a87bb95eebf5db3ecd5ed5109b767a558058638a0194c19095bce07f5c41b7b9fc284abbc1c5885293f935c513217ee686f28dde0613bd54b9ea1a39e2d47f68eb7b7addcb28018a0be3836d83730b44474ab33d9c815fac46201b7421fd74a68e77a5b1a479d48165f307d8b1212ced16c16e96af755b630c739d5dc824f2dc0f5258da4dd2563ff0920fc328e1c08a2687485074f8b2245db9994242aa5910f62f09cf88e0980ae23c4c7a8ce6439d4f9916179c51bc5338c04152e27fc643aa838c8da2d650bbaca2d7b74af3bb70e007090724b7be717335865c9d5af6f317d816eebc1cabae9feba176179ad8f6d1d46f9543b84a78c2d4b3185e1ad0996a7bb01d73542267fe0016aba961aef8253fc1f0d65a1957b6639681dee80e88a69b28cf6a16b8b03ebf8542100422747f70dee372c1431afed3403e9ce22d62930e9e0a1ec89e7db1a999e2c22009df663e9761560a0a1a335b213cae22fb9c97e50072923c450d9de93abc9bc29b837522d41a198e7f06d2703250f3befa5a3f72ea603d0983910d793cf9e90cf8fffb72ee31f42e1023b8d85aba7de63b8c2c20e22cce5f9657ad66f59ee5f0e67fcffdc3d3aadc2d3c021a73f18df07d81c0015de211ed1c25317757962c8a9aff927fc5144c725c50941ff03153a24b62f37ff7ba1bb79d28d701435c04ef0dc460b131b47505ef5a9bfff333382643396b49d07c80f36922d849f0161f1b3db4ffca31bae12ce11a6adbc119f03ff849c7c3e1f58187cab1192efc5dd450c5f1024542c03e6d83cb0a766183d1c946a6ef75949e59784e84d0cc5cac80b76a2cab48d7c53ea4cf844b19cd79f8f518b25a209d83563249d778096cbdb228777cf5fa70020654cddbc97e6996fe527b97acbfde95e0a2e012000736457272a4814dcc51f174fb5e3c7c27b31ece6875e47a7550b959f6b91b073b45de2e882b82d7e05e7eae2d0bdd78c9da169b599775f675af684c7e5e922f09f32513b9dd94422f980d586c502998cfd420ba1f67a952eb5a13e6a3b24ce3a4e31813132d72ea3bcf6cb3cedbfae1704485065eff04f36980ba950d0fd197e879801a7cc492d382606dcd3c47a1e3199bd295e65fe7378b58d39132e78ebc42920c0dacb0d950d1cb05ad3ff83ee69f8b9ab7ca44ddca1933ffdde91c23b6aced791eaac0177b5e0bd756a4f0105884e5bbc65050d5a85c664b1a600bcd8461c577daa7ed3df11c1173de6f8a003b0f8a4aa5c1b11d181ecada18bf050c9b4ec07a9b21c7fb088ba2515723bcdfe64045d2289fd4388febd76fb9127910e5150a763fd748dc2211d7a6c46410ec772877f3002a25c368d752f0bbf43aa9c6b28575d837dd0c98ca8fc9f6cc853102625ae7e30e141c062c90d617dbfe5ea3d4c8bd2cb31e621c401c4f42f7c76a253e5e60ff4ea05a92cc689ecb4a258960d60f2976eddecf01b73c2b97c24911ec0bda077098fd84933065715ae96178193aafc85d2fe6f167fda0a546ee827caeac74e6ae580ea359488be7bd4b67d04029fb9089c58fa58efccda904cc44b823a9e0259f61e32b604bdb8bcac0c6c95a499a04d7030550a0d9164877fc7a76a8467bb6b6d3f0b500d31292fba821a32f376c5f9b6ab2b3625bdf08489c8a0f83fdd29243e1c7b6709c29fcc9a5a78cab43edc68a93cc808167b115138896c429b38e026b578aa3fcbf952ed90e3b89f6e3e52a1c77a61abed8da594589cf0427304983c854cf8acb76606f6bd7df863939a8cd59878f61e9571e04d175177a8556f39626a29798d86cf97645fb13cea66b1c8ce82ad1773af04b17ccd7279d523bedab830d62d544b11f89aaf555791bdf30edc14d2c3fb42c3ebddeab13fa47ed5a6ae7c4d938dcc2108748f83a662091c587fadccbf8df29b53fb59946494184af02ef89c9830e0fb662b7149edca09c29faa164f3b7adc0b8a8c71162aae3f61b30eb36eb3cdcf8ada87a5f8b37b83b52886267ac4186ccd9c0d2f4e70742bad12429e0487ccc965abcf265c041bc7076f03c03f943157b7480a1bab6001191ffb416da6874dce7b3cc761f561b26ef2a69a959957cbf0e33739e630e7698802e8bebce94bf3988b3f2184a956a52e7aae5a48f50d7156ec7b89227b6c5c67e0cd06c2ec01f4dc1c7d7174b85fd8f90cd326e6e7ebaaaaf13beda56e88bf61e5f1cb60eed394f8de1060b0780ee50d7b0c6e2611afba0d47a1656302657db76c713fbd56a326c44025698dc09b6ce10ab871e0527f678f912527f0f635fa57ff1c5d69a365dc448c7808adb22a72050ae26f0cd59cb3a4b3b4d2501258ae87ba39a929fe887e812321392298a7be493be7960d127533a7c9df396fddb39e42c2101e1700a058a12b3960b3ac427313e4b5be9b985d6799a405e88371de3ea9c951651202f598ff0063e4068841049ab96d6b81c2b084ef3302bc9f095fe62a1a6e03d9a0e964fd1a02e1cbf063dad05dfc9f69e81f71a1891fc8fa35a1967257aeec76c46c0733f6b915d3ab46209b345966439ae4186fed6db60ad0fafb01e92388af8127b7a3fddedcc15dfde6edc497b935d29ab1229e62790da0ba81e995b791bb1ebe6710044e6ee35b660918343209b8a37548a8a49d4cbaf568f0dc1a6d229b69e0063726f584e92dd09cac10bdaefa711714e0f5f9358b17874e20dfb313352a29e7d5ad5e5437a7a416a186864e8bfde9db326cf11bfa523d2693ffda53e3a0904164a03e5ecd164fccaa9b41cdeac68ea2e3f52682f518306abe1403ae5b33c94e62ffdf7732613be801497377a45d7dc1a4899ce50a312670665db810ca3590701fb9baa8a54284e3ab52a0848e9dc95622891732203c649f87f2909a93e1b4e8d74d4836150e41789de15b6f1c0b05c3ce7c00c4c133ac5f408685c71cdad8a2939ca4cfbb7c9359fda873c921f74d189aeb27c51da8b785e9c673549281c6234c61cff7126455e8fc87f", 0xe0f}], 0x3}}], 0x1, 0x0) 12:39:22 executing program 1: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000600)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "bb2cc86e0a1d3db49e247443d1319c6ce1c58887bcee0eddab27695ec740cbd4ac6c8ad8ba5a9177b2c8e0bf363fb4ba69f44ddf4fbb8a4b4c6b22de8afcfb"}, 0x60) 12:39:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:22 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @broadcast, 'ip6_vti0\x00'}}, 0x1e) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x39, 0x0}, 0x0) 12:39:22 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002e80)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:39:22 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, 0x0, 0x0) 12:39:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@ipv4_deladdr={0x10, 0x15, 0x1}, 0x18}}, 0x0) 12:39:22 executing program 1: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000000)='(^&)!.\x00', 0x7) 12:39:22 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) 12:39:22 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0xd, 0x0, 0x0) 12:39:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x8) 12:39:22 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, &(0x7f0000000100)="4a7f0e29f3efd5433207e8a377d0cfea173e670cd81976c063358f560cb3dc911384e46157d4ef0f1a65bdb9444d5ebf859a8317f0a549adc80bbedc41c2ddcc18447057dee2988e5310a5cdf4993450ca11278d036114fb7ee840f8e7b415dc1c98410300930639dc62c8c0abe0c5a0d8d1cb54d0a9e0f0b8d62469dad016e06f28bb", 0x83, 0x4044040, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x7) 12:39:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8993, &(0x7f0000000180)={'gre0\x00', 0x0}) 12:39:22 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:22 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000380)="2184d5e8e791125638a88ff21bb5a1fb46c4c5483f58241580609df65dc754cd51415ea5b274d9749aed551c308f58d3996c7a26ac4c34d3a9ef90837f30bc5d15f4ff81ef9d08c23182767cd3b32ab0527e27881a533055c6a8a9f10f231e453d9a3a1b723218f0ff2793a9fee2d4df57802eb41f2e84171f662918da46e50dc3fe3460e9e325c8a3c497848884071183ee489947a43b94198518b8a8de7eac2a2bf3b80c1ff7f779eefe4d3a1bf498b54cb913be0536895219fab95d3ff5160218c4b9601fe91c7533f6b0b863c92cece945a54394dbd90defdf24e9c170572c40ca4b346d17184879c197b8e6272db2495d540b87", 0xf6}, {&(0x7f0000000480)="b7afa0842a02236bcb9cbb4d984e89e756327a81f546fae78ea1b25526037f106c94dc1f314fa96fa0d86169ca03168acc3b3dbc296565515425883eabd7ab6ba75ea388624427f7186b0ed4a1fc8e6bce2c268eb3eb0ce88edb8e1a27136819bea0e1d789047432d192d20a608f66cc96d30d7cb7c174f6b60f1358b694bb3f0e1a90fda94f8b60c9e0ba51d015222a737cb1f90ec47a064c9cd9525e8a6b2fcf3cc2e6da7acdc341c3f1f640", 0xad}, {&(0x7f0000000580)="488b2a49de9492d28372c695188e2e207bf4f40c554b33f8999976f2a0585c0feb12d005ff9dd2a6173974f2c0e4438fcad3959e5d7aedd44a4faa352a2c35db393deb699b77103f69ec74d56c3d8701a0548432b951f82f1c7e036ae5fa99c9752b3faabecccc684459538f041c7215ec", 0x71}, {&(0x7f0000000600)="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", 0xcae}], 0x4}, 0x41) 12:39:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x541b, 0x0) 12:39:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xe5c}}}]}, 0x3c}}, 0x0) 12:39:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8943, &(0x7f0000000180)={'gre0\x00', 0x0}) 12:39:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00'], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:22 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) 12:39:22 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8922, &(0x7f0000000180)={'gre0\x00', 0x0}) 12:39:22 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:23 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x73}]}}, &(0x7f0000000800)=""/154, 0x2a, 0x9a, 0x1}, 0x20) 12:39:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000440)=@framed={{}, [@alu={0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, 0x0}, 0x80) 12:39:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) 12:39:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:23 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8971, &(0x7f00000001c0)={'wpan4\x00'}) 12:39:23 executing program 4: pselect6(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x1]}, 0x8}) 12:39:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x6000}, 0x0) 12:39:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:23 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 12:39:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x894a, &(0x7f0000000180)={'gre0\x00', 0x0}) 12:39:23 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') poll(&(0x7f0000000040)=[{r0, 0x5004}], 0x1, 0x0) 12:39:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}, 0x1, 0x0, 0x9effffff}, 0x0) 12:39:23 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:23 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x5451, 0x0) 12:39:23 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x22, &(0x7f0000001940)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:39:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x2000153c}}, 0x0) 12:39:23 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 12:39:23 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f00000000c0)) 12:39:23 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x263e, 0x4) 12:39:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:23 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000280)={0x1d, r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000280)={0x1d, r3}, 0x10) 12:39:23 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:23 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000002e40)={0x77359400}) 12:39:23 executing program 1: pselect6(0x1e, &(0x7f0000000000)={0x5}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) 12:39:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8941, &(0x7f00000001c0)={'wpan4\x00'}) 12:39:23 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) 12:39:23 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000800)=""/154, 0x1a, 0x9a, 0x1}, 0x20) 12:39:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xf}}, 0x0) 12:39:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x14, 0x0, 0x0) 12:39:23 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$pppoe(r0, 0x0, 0x0) 12:39:23 executing program 3: poll(&(0x7f0000000040)=[{}], 0x31, 0x0) 12:39:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:23 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)) 12:39:23 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:23 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001740)=@framed, &(0x7f00000017c0)='syzkaller\x00', 0xff, 0xea, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:39:24 executing program 0: socketpair(0x2, 0x3, 0x77, &(0x7f0000000000)) 12:39:24 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1c, &(0x7f0000001940)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:39:24 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 12:39:24 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x3f, 0x4) 12:39:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x8e, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 12:39:24 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, 0x0, 0x0) 12:39:24 executing program 4: pipe(&(0x7f0000003300)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(r0, 0x0, 0x0) 12:39:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:24 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:24 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8906, 0x0) [ 1173.071737][T24390] netlink: 'syz-executor.0': attribute type 142 has an invalid length. 12:39:24 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000026c0)={&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 12:39:24 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f00000000c0)=""/192, &(0x7f0000000000)=0xc0) 12:39:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) 12:39:24 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) write$bt_hci(r0, 0x0, 0x0) 12:39:24 executing program 4: socketpair(0xa, 0x2, 0x0, &(0x7f0000000500)) 12:39:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', 0x0}) 12:39:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe, 0x300}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) 12:39:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r2, 0x89f9d801d9c6b061, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x4}]}, 0x2c}}, 0x0) 12:39:24 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000240)={'dummy0'}, 0x9) 12:39:24 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:24 executing program 0: r0 = epoll_create(0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) 12:39:24 executing program 3: socket$inet6_sctp(0xa, 0xf649d50783496212, 0x84) 12:39:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r0) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 12:39:24 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r0, 0x5450, 0x0) [ 1173.599411][T24431] __nla_validate_parse: 20 callbacks suppressed [ 1173.599429][T24431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:24 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 12:39:24 executing program 0: socketpair(0x2b, 0x0, 0x1, &(0x7f0000000100)) [ 1173.647894][T24439] nbd: must specify at least one socket 12:39:25 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x85, 0x0, 0x0) 12:39:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8912, &(0x7f00000001c0)={'wpan4\x00'}) 12:39:25 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) 12:39:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="00000000000000002800120009000100766574"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:25 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:25 executing program 1: set_robust_list(0xfffffffffffffffd, 0x0) 12:39:25 executing program 4: r0 = socket(0x2, 0x3, 0x1) sendmsg(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002400)=ANY=[@ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x2200}, 0x0) 12:39:25 executing program 0: r0 = shmget(0x2, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x0) shmdt(r1) 12:39:25 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1173.837183][T24454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0) 12:39:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0) 12:39:25 executing program 3: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000003e0000000800010070"], 0xffffffffffffffd8}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) mmap(&(0x7f000027a000/0x13000)=nil, 0x13000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801fdb59cce59ba2700100e90005"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) [ 1173.924312][T24460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:25 executing program 4: r0 = msgget(0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000180)=""/232) 12:39:25 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001140), 0x40002, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x940, 0x0) sendfile(r0, r1, 0x0, 0x0) [ 1174.014229][T24463] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:25 executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg(r0, &(0x7f0000001800)={&(0x7f00000012c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101}, 0x80, 0x0}, 0x0) [ 1174.087205][ T26] audit: type=1804 audit(1644151165.373:49): pid=24470 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir524457278/syzkaller.jLWqmG/3108/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0 [ 1174.143564][T24475] device bond114 entered promiscuous mode [ 1174.169540][T24475] device bond114 left promiscuous mode 12:39:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:25 executing program 4: setresuid(0xffffffffffffffff, 0xee00, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/class/power_supply', 0x8240, 0x0) 12:39:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)=[{0xfffffffffffffffd, 0xffffffffffffff4c}, {&(0x7f0000000040)="6ab306f0010a8e0f0a87c9bcbbc3a840207a5498ba31262e1dfbb7a8610d102c38156c65ea6bbf2a8175b9a6bdf632f104f7a342ae0c87c8bbb4bce2b8cf804fadd52455e33d9a2078ad12efc93c94f2bf5d2fff11cbc9773db060a702721e20b7f375f96acc6de4dc9ce4de2e07aa"}, {&(0x7f0000000800)="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"}], 0x1}, 0x0) 12:39:25 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:25 executing program 0: shmget(0x2, 0x1000, 0xa1ea8f84f2a78799, &(0x7f0000ffe000/0x1000)=nil) 12:39:25 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 12:39:25 executing program 1: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000080)='cubic\x00', 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='dctcp\x00', 0x6) 12:39:25 executing program 0: ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/80) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x440400) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/251) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x179a80) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000280)={0x84c6, 0x0, 0x7fff, 0x1f, 0x1, 0x2}) syz_open_dev$evdev(&(0x7f00000002c0), 0x3ff, 0x400000) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000340)=0x8) syz_open_dev$evdev(&(0x7f0000000380), 0x4, 0x400400) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000004c0)=""/179) r2 = syz_open_dev$evdev(&(0x7f0000000580), 0x6, 0x302) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000005c0)=""/46) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfb, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x1f, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xe7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3df, 0x5, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x0, 0x81, 0x74, 0x8, 0x8c}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x9, [{0x19, &(0x7f00000006c0)=@string={0x19, 0x3, "d648a6a47dce255eced42df2ec91b4001fbd3e7ad22487"}}, {0xc9, &(0x7f0000000700)=@string={0xc9, 0x3, "c1200f1b41c54de85338f59a2d514fd8ac475ae524424117572bdd6e8f9bb305d2f224b82ba8d622acb7618d1069c94c3d1175d08267c29070d40152496a48fa1e49260d57eb7822dea2ab4515ac82ad6e3958b4d89c29085dcefd1f7e9c0781531923786428f9e00146f1933bfcf365078190375573fe71dd0089c1bf36d77f4a74043f84497436d63a4303d9070fab7efece33515188aec9887a01912a35d0d5419e00312f070e0a569cc6498ae03880265e57fd6d1992e0785e0942f6b7906057de95a374a4"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x455}}, {0xe1, &(0x7f0000000880)=@string={0xe1, 0x3, "8ac28c0da94c8029b010eabe9b5f5e2d476746061df54c19a1e5b0341b842fb900b2371a559b880fa345be6b6f24f2d8235e7863dcc1a144902d792ddfebba0aaa4c34e131be7d0048808e6051799ecd111e7c5df00e3b8ca51e1425468e75de11682d00f4211adada95c551e0363cb77a775cd0707eddd9b6a8ebde32032e97903829c34a3d96d80786692f5dc395e40ff8140ffa9c4fd1b593adde87db6f9e9494dcc73bb7f5dbce8aa4a7ec8b860a3d306e43a487cd05b66b52992cd536986ab410bc1fd0a2fd794f96807723cc1c729872aaeb975b25b0cf67285200af"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc01}}, {0xd4, &(0x7f00000009c0)=@string={0xd4, 0x3, "d90ddadb98cc919f01e2356854868b7219fa8ecfbc3e2e259b9960e01cf9f0ad60020d6bffc57b21308e36e9c139e5fa2a3ab678df08e64d2b65141b375e65e8fddc9eef75fecf25a6c1d03f8b2ca8167ccac55cc03534788f0e2f5190ec44751b19a6893589c052825f5288ded139859c4b1178188cf342b9272d339848eb6eec32f2ac37c6fbd42113076b8e96e40e1fb10edb01c0328d6fed9ff9c6c42ca480ec82cf85d2571599164320616c8d719edaed0fec66a4abaea222c3d94bd9875dfe1b55f522ec30040332ed445b260eaf1b"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x407}}, {0xa7, &(0x7f0000000b00)=@string={0xa7, 0x3, "79aa85a4f8143b16f92569a27d1136d1046f1ca12b29eb70b8f047f218af3fd347cc514be0b12a01c5d17ae797316987798683c34aeadb645a8cc777802da96c930bd4e650d1c912c017353547185eaf504b41350ecb96e60157a55701637887c26a140138440d14a551702d63e63b798e5bd3018fbc174d7f40c5dd3621281d20d01cbb84ba407e58b49397ed0a72132b26531828a4691642330cd2ac0f63729d6d98e3c9"}}]}) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000c80)=""/19) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000d00)=""/247) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000e00)=""/125) [ 1174.347598][T24492] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1174.391414][T24493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1174.630245][T24499] device bond115 entered promiscuous mode [ 1174.650906][T24499] device bond115 left promiscuous mode 12:39:26 executing program 3: ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/80) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x440400) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/251) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x179a80) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/104) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000280)={0x84c6, 0x0, 0x7fff, 0x1f, 0x1, 0x2}) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x3ff, 0x400000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000300)=0x5) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000340)=0x8) r3 = syz_open_dev$evdev(&(0x7f0000000380), 0x4, 0x400400) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000003c0)=""/234) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000004c0)=""/179) r4 = syz_open_dev$evdev(&(0x7f0000000580), 0x6, 0x302) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f00000005c0)=""/46) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfb, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x1f, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xe7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3df, 0x5, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x0, 0x81, 0x74, 0x8, 0x8c}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x9, [{0x19, &(0x7f00000006c0)=@string={0x19, 0x3, "d648a6a47dce255eced42df2ec91b4001fbd3e7ad22487"}}, {0xc9, &(0x7f0000000700)=@string={0xc9, 0x3, "c1200f1b41c54de85338f59a2d514fd8ac475ae524424117572bdd6e8f9bb305d2f224b82ba8d622acb7618d1069c94c3d1175d08267c29070d40152496a48fa1e49260d57eb7822dea2ab4515ac82ad6e3958b4d89c29085dcefd1f7e9c0781531923786428f9e00146f1933bfcf365078190375573fe71dd0089c1bf36d77f4a74043f84497436d63a4303d9070fab7efece33515188aec9887a01912a35d0d5419e00312f070e0a569cc6498ae03880265e57fd6d1992e0785e0942f6b7906057de95a374a4"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x455}}, {0xe1, &(0x7f0000000880)=@string={0xe1, 0x3, "8ac28c0da94c8029b010eabe9b5f5e2d476746061df54c19a1e5b0341b842fb900b2371a559b880fa345be6b6f24f2d8235e7863dcc1a144902d792ddfebba0aaa4c34e131be7d0048808e6051799ecd111e7c5df00e3b8ca51e1425468e75de11682d00f4211adada95c551e0363cb77a775cd0707eddd9b6a8ebde32032e97903829c34a3d96d80786692f5dc395e40ff8140ffa9c4fd1b593adde87db6f9e9494dcc73bb7f5dbce8aa4a7ec8b860a3d306e43a487cd05b66b52992cd536986ab410bc1fd0a2fd794f96807723cc1c729872aaeb975b25b0cf67285200af"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc01}}, {0xd4, &(0x7f00000009c0)=@string={0xd4, 0x3, "d90ddadb98cc919f01e2356854868b7219fa8ecfbc3e2e259b9960e01cf9f0ad60020d6bffc57b21308e36e9c139e5fa2a3ab678df08e64d2b65141b375e65e8fddc9eef75fecf25a6c1d03f8b2ca8167ccac55cc03534788f0e2f5190ec44751b19a6893589c052825f5288ded139859c4b1178188cf342b9272d339848eb6eec32f2ac37c6fbd42113076b8e96e40e1fb10edb01c0328d6fed9ff9c6c42ca480ec82cf85d2571599164320616c8d719edaed0fec66a4abaea222c3d94bd9875dfe1b55f522ec30040332ed445b260eaf1b"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x407}}, {0xa7, &(0x7f0000000b00)=@string={0xa7, 0x3, "79aa85a4f8143b16f92569a27d1136d1046f1ca12b29eb70b8f047f218af3fd347cc514be0b12a01c5d17ae797316987798683c34aeadb645a8cc777802da96c930bd4e650d1c912c017353547185eaf504b41350ecb96e60157a55701637887c26a140138440d14a551702d63e63b798e5bd3018fbc174d7f40c5dd3621281d20d01cbb84ba407e58b49397ed0a72132b26531828a4691642330cd2ac0f63729d6d98e3c9"}}]}) ioctl$EVIOCGPROP(r4, 0x80404509, &(0x7f0000000c80)=""/19) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000cc0)=0x6) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000d00)=""/247) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000e00)=""/125) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000e80)=""/4096) 12:39:26 executing program 1: ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/80) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x440400) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/251) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x179a80) ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/104) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000280)={0x84c6, 0x0, 0x7fff, 0x1f, 0x1, 0x2}) r2 = syz_open_dev$evdev(&(0x7f00000002c0), 0x3ff, 0x400000) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000300)=0x5) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000340)=0x8) r3 = syz_open_dev$evdev(&(0x7f0000000380), 0x4, 0x400400) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000003c0)=""/234) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000004c0)=""/179) r4 = syz_open_dev$evdev(&(0x7f0000000580), 0x6, 0x302) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f00000005c0)=""/46) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfb, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x1f, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xe7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3df, 0x5, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x0, 0x81, 0x74, 0x8, 0x8c}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x9, [{0x19, &(0x7f00000006c0)=@string={0x19, 0x3, "d648a6a47dce255eced42df2ec91b4001fbd3e7ad22487"}}, {0xc9, &(0x7f0000000700)=@string={0xc9, 0x3, "c1200f1b41c54de85338f59a2d514fd8ac475ae524424117572bdd6e8f9bb305d2f224b82ba8d622acb7618d1069c94c3d1175d08267c29070d40152496a48fa1e49260d57eb7822dea2ab4515ac82ad6e3958b4d89c29085dcefd1f7e9c0781531923786428f9e00146f1933bfcf365078190375573fe71dd0089c1bf36d77f4a74043f84497436d63a4303d9070fab7efece33515188aec9887a01912a35d0d5419e00312f070e0a569cc6498ae03880265e57fd6d1992e0785e0942f6b7906057de95a374a4"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x455}}, {0xe1, &(0x7f0000000880)=@string={0xe1, 0x3, "8ac28c0da94c8029b010eabe9b5f5e2d476746061df54c19a1e5b0341b842fb900b2371a559b880fa345be6b6f24f2d8235e7863dcc1a144902d792ddfebba0aaa4c34e131be7d0048808e6051799ecd111e7c5df00e3b8ca51e1425468e75de11682d00f4211adada95c551e0363cb77a775cd0707eddd9b6a8ebde32032e97903829c34a3d96d80786692f5dc395e40ff8140ffa9c4fd1b593adde87db6f9e9494dcc73bb7f5dbce8aa4a7ec8b860a3d306e43a487cd05b66b52992cd536986ab410bc1fd0a2fd794f96807723cc1c729872aaeb975b25b0cf67285200af"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc01}}, {0xd4, &(0x7f00000009c0)=@string={0xd4, 0x3, "d90ddadb98cc919f01e2356854868b7219fa8ecfbc3e2e259b9960e01cf9f0ad60020d6bffc57b21308e36e9c139e5fa2a3ab678df08e64d2b65141b375e65e8fddc9eef75fecf25a6c1d03f8b2ca8167ccac55cc03534788f0e2f5190ec44751b19a6893589c052825f5288ded139859c4b1178188cf342b9272d339848eb6eec32f2ac37c6fbd42113076b8e96e40e1fb10edb01c0328d6fed9ff9c6c42ca480ec82cf85d2571599164320616c8d719edaed0fec66a4abaea222c3d94bd9875dfe1b55f522ec30040332ed445b260eaf1b"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x407}}, {0xa7, &(0x7f0000000b00)=@string={0xa7, 0x3, "79aa85a4f8143b16f92569a27d1136d1046f1ca12b29eb70b8f047f218af3fd347cc514be0b12a01c5d17ae797316987798683c34aeadb645a8cc777802da96c930bd4e650d1c912c017353547185eaf504b41350ecb96e60157a55701637887c26a140138440d14a551702d63e63b798e5bd3018fbc174d7f40c5dd3621281d20d01cbb84ba407e58b49397ed0a72132b26531828a4691642330cd2ac0f63729d6d98e3c9"}}]}) ioctl$EVIOCRMFF(r4, 0x40044581, &(0x7f0000000cc0)=0x6) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000d00)=""/247) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000e00)=""/125) 12:39:26 executing program 4: syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x2, 0x1, 0x80, 0x0, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "ccb2d4"}, {0x5, 0x24, 0x0, 0x2503}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x3, 0x1903}, {0x6, 0x24, 0x1a, 0x1000, 0x7}, [@country_functional={0x12, 0x24, 0x7, 0x6, 0xa2, [0xfffe, 0xf6a9, 0x5, 0x5, 0x8ec, 0x0]}, @network_terminal={0x7, 0x24, 0xa, 0x3f, 0x9, 0x8, 0x66}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xff, 0x4}, @acm={0x4, 0x24, 0x2, 0x1}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x40, 0x6, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x6, 0x81, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x80, 0x1, 0x4}}}}}}}]}}, &(0x7f0000001540)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x201, 0x0, 0x81, 0x2, 0x40, 0x3}, 0xf, &(0x7f0000001240)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x59, 0xe4}]}, 0x5, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0xc1a}}, {0xee, &(0x7f00000012c0)=@string={0xee, 0x3, "87b66f474778d5b73feee7e77028d7cce3bd82a7c9ffdf9262490d0b2f39841d828e50cfa52c00ab20f0a06762a7a752d253b475ec1c9c4487661d56eeec7ed030f73dcf8479a7496e042a09626fbe592f8c11a7e955ef3f940854a9b8daa01115a82a57bc15d497fea09226a8fbc2d4f9f0bcbf6a05e5e0e00dbcc985efb60e9a3fb009b202f1c9dc749b0994e7cac18bfd9e3d88e8e0388a8f6d9c170381b979712fc05381dd6df5c541d5429f371b3abc9be8e5fcc0286aea86552d91a35573cc7fc6601240a1d7a0a6c7e96f7b3a59ce975f04a808b7727d9294004ff7b0ab90b9013e8553b74b04d85d"}}, {0x42, &(0x7f00000013c0)=@string={0x42, 0x3, "b38c1bb8f3f236e7217566925d56ba9bfb0d94ce7f48b9c594db41ab15c3ce83b1cbb65f7647f961d0f4fadd9ad9e9f0999591ab4d8a99f3c364f9d70e54305b"}}, {0x88, &(0x7f0000001440)=@string={0x88, 0x3, "a3abf5b1669dce3ce9f0410d792df97a60073ff9335644e1e776615248099c05fee4c04862a0da8ce965ef53619e9d09dd8720b4e6f7f8fda171880db05fa200d2fa3febf82ae47e27285ed1f2f1fdbf16e800b2c1cdc6038b0cecd3def0bf6dd8bf9c82ff3f68d1f987762174e66cfa3270ef11ab6349d16bf57148d95ac9986bb8ac5ffee1"}}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x812}}]}) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000001e40)={{0x12, 0x1, 0x3d8, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x78, 0x2, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x0, 0xfb}}]}}}]}}]}}, &(0x7f0000002000)={0xa, &(0x7f0000001e80)={0xa, 0x6, 0x300, 0x20, 0x0, 0x25, 0x40, 0x3}, 0x3a, &(0x7f0000001ec0)={0x5, 0xf, 0x3a, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e4b5e8cd56da344bb1b5e2649cdbc550"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "cd909c9dc239ad326a19a142180a367f"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x1, 0x0, 0x7ff}]}, 0x1, [{0xe3, &(0x7f0000001f00)=@string={0xe3, 0x3, "2b2481209749b10218864d0ff7b141d55d796d4274f25a8f58fb7cd76d779d98bf4a35980bc184497d6a8affe093361bc0936181ea04cdb34b4275825005eda410d24ce6d2ebb328bd1fd791f144c6bb1ac191c02a3e1ece8256d62d9c26bde6198cfb8ff3b92abd3fedf515e39d6e1000ad60efdf0cd9a255ac2a2e4ca981e8d46eb09937e5289072a9d76c0466783f842da8fc5dbeddeeb77710f63ea7eab1d119447afcb6fff2809058f41a4d6b759b581c7b7df060cefa0a395546e0fe9ea33ccd364bf186087edf79e977112c5565096d7e4efd9953d642a4f9ac1f5f015e"}}]}) syz_usb_connect$cdc_ecm(0x1, 0x8d, &(0x7f0000002c00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xf94bae63b8735069, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x81, 0x0, 0xff, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "460e61bfd6c7"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x9, 0x3ff, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0x3ff, 0x7fff, 0x4, 0x2, 0x6, 0x3f}, @mbim={0xc, 0x24, 0x1b, 0x400, 0x200, 0xa7, 0x10, 0x1, 0x5}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x9, [0x0]}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x3f, 0x5}, @obex={0x5, 0x24, 0x15, 0x5}, @acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x69, 0xec, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x7f, 0x9, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xfe, 0x0, 0x5}}}}}]}}]}}, &(0x7f00000030c0)={0xa, &(0x7f0000002cc0)={0xa, 0x6, 0x200, 0x4, 0x7e, 0x81, 0xff}, 0x87, &(0x7f0000002d00)={0x5, 0xf, 0x87, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc6970704fb88858b, 0x7f, 0x3f, 0x1ff}, @ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x8, 0x0, 0x1, [0xffff30, 0x0, 0xffc000]}, @ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x6, 0xf00, 0x6, [0xc00f, 0xff3f3f, 0xa000]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "b3d65152641a28ca5b5869364baa6e9f"}, @generic={0x34, 0x10, 0x6, "6b191174ca39c6bfeea20943bf814deda3ce7ac5434321d2cfe6ec64df50958ee8cf1f0f73ee8900e861d84f8ee4feef58"}]}, 0x7, [{0x4, &(0x7f0000002dc0)=@lang_id={0x4, 0x3, 0x411}}, {0xd2, &(0x7f0000002e00)=@string={0xd2, 0x3, "f654841977e5091fc1e6f53368ec259d4ae5f422c3c22634885de16cd3ec484b0492a2a597a8d1b4b562d28f311a82556739c91da9f42d1244c33049df75e539d9fe01558f6c5cb93e0aa4694e70d9e1a7ea72d5999c3d42245ccd70d7b06d561b5204ee208e94cc63d05e269424aff549a9f687c7a608177d2863a7e8fdf003659c1cab21bc94459cdefdbf11374d159024467f80d6342265abd5ee32c4e2260f0820ac4d6dd90a690d618e0e9a9d0f6a1f7b6da7b08224163d515fcc73a01a58d0060aa095e7a342c12dd005115aca"}}, {0x4, &(0x7f0000002f00)=@lang_id={0x4, 0x3, 0x440a}}, {0x23, &(0x7f0000002f40)=@string={0x23, 0x3, "862c4dc6eca453b9fc2af7f65b37760c230bbc2da1fec2cceee8d813b4ca06751a"}}, {0x8a, &(0x7f0000002f80)=@string={0x8a, 0x3, "2f954ba9ea3407b442dbc9deac18361374ec80d320fa6ccf6a8105aec0a1f13f0b6387963a25ac114c5fca7fc8271b2ac1768b188fa55bc409d924b9fa8d099a9a02025c780e1fbf1c2eefc121f19df8e03d467ccb19401a5c35369da4b86e48b29e0d7df616b3191ba71c7c8a4acdc850297e27b152f1a68b64522001521d5e539eec4eec662c87"}}, {0x4, &(0x7f0000003040)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000003080)=@lang_id={0x4, 0x3, 0x360c}}]}) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000004f40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x1410, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xc0, 0x1, 0x3, 0x1, 0x3, 0x3f, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xbd5}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0xff, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x88, 0xb8}}]}}}]}}]}}, &(0x7f0000005400)={0xa, &(0x7f0000004f80)={0xa, 0x6, 0x200, 0x8, 0x2, 0x8, 0x8, 0x6}, 0x1a8, &(0x7f0000004fc0)={0x5, 0xf, 0x1a8, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x0, 0x0, 0x6}, @ssp_cap={0x1c, 0x10, 0xa, 0x7f, 0x4, 0x7fffffe, 0xf000, 0x1f, [0x3f00, 0xf, 0xff3f00, 0xc00f]}, @generic={0x8f, 0x10, 0x3, "a567ad1d3758146524b85953249fa6dd42a4907887f1c5393ff766f8f20e27c184c2d59f5f3b31826324f83a4093b6bd707ddb20e7bd73946521e84fdfe354bc8fd64f9fde2d462b70f4cbea0513dc5d160052dd782e632818866ab4d4765fbf192aa54832cd785684e5e7120b6d96c071c3efffaf2662400de7d1479dcc42539d06eeeb9a159fdeb341b276"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x4, 0x40, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "322458853a2be9bf247ee2b3e6578380"}, @generic={0xd0, 0x10, 0x2, "c0ea36efaf3cd7e9d0c25047283f3f880d3c3b58c40b870f8f73c75426adeae0a65b963f1883c05eebe80df752dc238a0fa17b1679b9f772feb20026bd28cf165d0cb7240c67560aa1fd9001fac44cd6c1cbb1ba5700ae521cec9445d1678ef470ed436df72a2a00874a364edf88d18df11e3bf0273dcbf4008347ba3673ca1c4650e43b8f92ca99157d5cfb24db82aad983c788a3c57f7651169437504a7f735e9815339e2159df5adafd4c4ab106ed58c5faae85ba8f4a112198260b6ffd6c097e709afeeefeac81712a259d"}]}, 0x6, [{0xf5, &(0x7f0000005180)=@string={0xf5, 0x3, "5b8e21db3dd90cd8141772c3653fc344e6c80f20d6e385b5a365a5d624d82a9c3c44b2f44cbc6eb7d0b5d88892c33c66c032c915a85baa49a96bd0e2148fcc564212b66bfda19d0a314933178dd19f719d07e5a0dba03d8af89390a6c354b9400bd33e30b0ef9786386bcc77bf878cc703040936a27032a9056f54f4d7f27a4e71c604a4cdca447c7ff9844a6f18f13b666c4bf7e2f639792fbbd392c66e2130a5cf23d107c6c295415b9286e13a34945b4440d8b0af52be422a698111dd53dca43e8f9f6fa683bbe40a185b339710fe3b21dbc765265493ba25b0d83c45ac9d907c2c912f81a0de9dd2eba9ec376fbbe9f3e8"}}, {0x4, &(0x7f0000005280)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f00000052c0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000005300)=@lang_id={0x4, 0x3, 0x426}}, {0x4d, &(0x7f0000005340)=@string={0x4d, 0x3, "6910487ac47cd05d84bd12277926ee193623d967f4ebf2c868dbca517de39636a39edf48add7a49d2eae812357be61e37cdf7ac0b488aef5034a4e917966e1eaae485097576bf8b36d8098"}}, {0x3c, &(0x7f00000053c0)=@string={0x3c, 0x3, "0c8e55016ed07d078f31629c65e49b6b023984500a8c8eee6f034526ae7d6dcde214ef0b7296b637e3056e7bea5c8cb7d384a5aaeb588a2e98dc"}}]}) 12:39:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:26 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1174.781305][T24510] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1174.812621][T19358] usb 1-1: new high-speed USB device number 120 using dummy_hcd 12:39:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1174.917648][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:26 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1174.971514][T24516] device bond116 entered promiscuous mode [ 1174.979713][T24516] device bond116 left promiscuous mode [ 1174.992540][T24520] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1175.064578][T24522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1175.066046][T19358] usb 1-1: Using ep0 maxpacket: 32 [ 1175.106004][T24522] device bond117 entered promiscuous mode [ 1175.106053][T13528] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1175.126218][ T3682] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1175.134218][T24522] device bond117 left promiscuous mode 12:39:26 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1175.242162][T24528] device bond118 entered promiscuous mode [ 1175.252747][T24528] device bond118 left promiscuous mode 12:39:26 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1175.285918][T19360] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1175.316647][T19358] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1175.376303][T13528] usb 5-1: Using ep0 maxpacket: 32 [ 1175.405885][ T3682] usb 2-1: Using ep0 maxpacket: 32 [ 1175.442996][T24534] device bond119 entered promiscuous mode [ 1175.452101][T24534] device bond119 left promiscuous mode [ 1175.486035][T19358] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 1175.495377][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.505160][T19358] usb 1-1: Product: ࠾ [ 1175.509870][T19358] usb 1-1: Manufacturer: ⃁ᬏ앁㡓髵儭䞬䈤ᝁ⭗滝鮏ֳ려꠫⋖랬赡椐䳉ᄽ큵枂郂푰刁橉煮䤞ദ≸ꋞ䖫강궂㥮둘鳘ࠩ칝´鱾脇ᥓ砣⡤䘁鏱ﰻ旳脇㞐獕燾Ý솉㚿翗瑊㼄䦄㙴㫖̓ߙ꬏ﹾ㏎兑꺈裉ź⪑퀵䇕ž⼱ง嘊욜詉㣠⚀坞淽鈙磠फ़邷坠闞璣 [ 1175.548195][T19358] usb 1-1: SerialNumber: ѕ [ 1175.576068][T19360] usb 4-1: Using ep0 maxpacket: 32 [ 1175.606163][T13528] usb 5-1: config 1 interface 0 altsetting 120 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1175.617179][T13528] usb 5-1: config 1 interface 0 altsetting 120 bulk endpoint 0x82 has invalid maxpacket 8 [ 1175.627340][T13528] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1175.636290][ T3682] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1175.776008][T19360] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1175.786198][T13528] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1175.801164][T13528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.810086][T13528] usb 5-1: Product: syz [ 1175.817391][T13528] usb 5-1: Manufacturer: syz [ 1175.822742][T13528] usb 5-1: SerialNumber: syz [ 1175.836623][ T3682] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 1175.846136][ T3682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.854305][ T3682] usb 2-1: Product: ࠾ [ 1175.856762][T24511] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1175.859204][ T3682] usb 2-1: Manufacturer: ⃁ᬏ앁㡓髵儭䞬䈤ᝁ⭗滝鮏ֳ려꠫⋖랬赡椐䳉ᄽ큵枂郂푰刁橉煮䤞ദ≸ꋞ䖫강궂㥮둘鳘ࠩ칝´鱾脇ᥓ砣⡤䘁鏱ﰻ旳脇㞐獕燾Ý솉㚿翗瑊㼄䦄㙴㫖̓ߙ꬏ﹾ㏎兑꺈裉ź⪑퀵䇕ž⼱ง嘊욜詉㣠⚀坞淽鈙磠फ़邷坠闞璣 [ 1175.865722][T24511] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1175.895667][ T3682] usb 2-1: SerialNumber: ѕ [ 1175.909598][T19358] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input82 [ 1175.946281][ T2948] bcm5974 1-1:1.0: could not read from device [ 1175.963093][T19360] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 1175.976160][ T2948] bcm5974 1-1:1.0: could not read from device [ 1175.977228][T19358] usb 1-1: USB disconnect, device number 120 [ 1175.996232][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.020952][T19360] usb 4-1: Product: ࠾ [ 1176.025150][T19360] usb 4-1: Manufacturer: ⃁ᬏ앁㡓髵儭䞬䈤ᝁ⭗滝鮏ֳ려꠫⋖랬赡椐䳉ᄽ큵枂郂푰刁橉煮䤞ദ≸ꋞ䖫강궂㥮둘鳘ࠩ칝´鱾脇ᥓ砣⡤䘁鏱ﰻ旳脇㞐獕燾Ý솉㚿翗瑊㼄䦄㙴㫖̓ߙ꬏ﹾ㏎兑꺈裉ź⪑퀵䇕ž⼱ง嘊욜詉㣠⚀坞淽鈙磠फ़邷坠闞璣 [ 1176.056314][T19360] usb 4-1: SerialNumber: ѕ [ 1176.122580][T24511] UDC core: couldn't find an available UDC or it's busy: -16 [ 1176.130804][T24511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1176.140557][T24511] UDC core: couldn't find an available UDC or it's busy: -16 [ 1176.148131][T24511] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1176.216355][T13528] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 120 proto 3 vid 0x0525 pid 0xA4A8 [ 1176.233606][T13528] usb 5-1: USB disconnect, device number 22 [ 1176.242457][ T3986] udevd[3986]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory [ 1176.244613][T13528] usblp0: removed [ 1176.257504][ T3682] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input83 12:39:27 executing program 0: ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000000)=""/80) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x440400) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/251) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x179a80) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000280)={0x84c6, 0x0, 0x7fff, 0x1f, 0x1, 0x2}) syz_open_dev$evdev(&(0x7f00000002c0), 0x3ff, 0x400000) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000340)=0x8) syz_open_dev$evdev(&(0x7f0000000380), 0x4, 0x400400) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000004c0)=""/179) r2 = syz_open_dev$evdev(&(0x7f0000000580), 0x6, 0x302) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000005c0)=""/46) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x240, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfb, 0x90, 0x4, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x1f, {0x9, 0x21, 0x2, 0x1, 0x1, {0x22, 0xe7f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x9, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3df, 0x5, 0x0, 0x3}}]}}}]}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x0, 0x81, 0x74, 0x8, 0x8c}, 0x5, &(0x7f0000000680)={0x5, 0xf, 0x5}, 0x9, [{0x19, &(0x7f00000006c0)=@string={0x19, 0x3, "d648a6a47dce255eced42df2ec91b4001fbd3e7ad22487"}}, {0xc9, &(0x7f0000000700)=@string={0xc9, 0x3, "c1200f1b41c54de85338f59a2d514fd8ac475ae524424117572bdd6e8f9bb305d2f224b82ba8d622acb7618d1069c94c3d1175d08267c29070d40152496a48fa1e49260d57eb7822dea2ab4515ac82ad6e3958b4d89c29085dcefd1f7e9c0781531923786428f9e00146f1933bfcf365078190375573fe71dd0089c1bf36d77f4a74043f84497436d63a4303d9070fab7efece33515188aec9887a01912a35d0d5419e00312f070e0a569cc6498ae03880265e57fd6d1992e0785e0942f6b7906057de95a374a4"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x455}}, {0xe1, &(0x7f0000000880)=@string={0xe1, 0x3, "8ac28c0da94c8029b010eabe9b5f5e2d476746061df54c19a1e5b0341b842fb900b2371a559b880fa345be6b6f24f2d8235e7863dcc1a144902d792ddfebba0aaa4c34e131be7d0048808e6051799ecd111e7c5df00e3b8ca51e1425468e75de11682d00f4211adada95c551e0363cb77a775cd0707eddd9b6a8ebde32032e97903829c34a3d96d80786692f5dc395e40ff8140ffa9c4fd1b593adde87db6f9e9494dcc73bb7f5dbce8aa4a7ec8b860a3d306e43a487cd05b66b52992cd536986ab410bc1fd0a2fd794f96807723cc1c729872aaeb975b25b0cf67285200af"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0xc01}}, {0xd4, &(0x7f00000009c0)=@string={0xd4, 0x3, "d90ddadb98cc919f01e2356854868b7219fa8ecfbc3e2e259b9960e01cf9f0ad60020d6bffc57b21308e36e9c139e5fa2a3ab678df08e64d2b65141b375e65e8fddc9eef75fecf25a6c1d03f8b2ca8167ccac55cc03534788f0e2f5190ec44751b19a6893589c052825f5288ded139859c4b1178188cf342b9272d339848eb6eec32f2ac37c6fbd42113076b8e96e40e1fb10edb01c0328d6fed9ff9c6c42ca480ec82cf85d2571599164320616c8d719edaed0fec66a4abaea222c3d94bd9875dfe1b55f522ec30040332ed445b260eaf1b"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x407}}, {0xa7, &(0x7f0000000b00)=@string={0xa7, 0x3, "79aa85a4f8143b16f92569a27d1136d1046f1ca12b29eb70b8f047f218af3fd347cc514be0b12a01c5d17ae797316987798683c34aeadb645a8cc777802da96c930bd4e650d1c912c017353547185eaf504b41350ecb96e60157a55701637887c26a140138440d14a551702d63e63b798e5bd3018fbc174d7f40c5dd3621281d20d01cbb84ba407e58b49397ed0a72132b26531828a4691642330cd2ac0f63729d6d98e3c9"}}]}) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000c80)=""/19) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000d00)=""/247) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000e00)=""/125) [ 1176.272661][ T3986] udevd[3986]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory [ 1176.286175][ T2948] bcm5974 2-1:1.0: could not read from device [ 1176.298985][ T3682] usb 2-1: USB disconnect, device number 36 [ 1176.305973][ T2948] bcm5974 2-1:1.0: could not read from device [ 1176.388735][T19360] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input84 [ 1176.425996][ T2948] bcm5974 4-1:1.0: could not read from device [ 1176.439018][T19360] usb 4-1: USB disconnect, device number 21 [ 1176.695898][ T3684] usb 1-1: new high-speed USB device number 121 using dummy_hcd 12:39:28 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c}, 0x1c) 12:39:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:28 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:28 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x22, &(0x7f0000000140), 0xc) 12:39:28 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000001c0)={0x0, @in, 0xeaf0}, 0x98) 12:39:28 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000280)={0x1c, 0x1c, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0x1c, 0x1c, 0x1}, 0x1c) 12:39:28 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f00000026c0)=@in={0x10, 0x2}, 0x10) 12:39:28 executing program 3: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f00000000c0)='cubic\x00', 0x4) close(r0) [ 1176.986364][ T3684] usb 1-1: Using ep0 maxpacket: 32 12:39:28 executing program 1: openat$pidfd(0xffffffffffffff9c, &(0x7f0000002200), 0x42180, 0x0) [ 1177.037049][T24550] device bond120 entered promiscuous mode [ 1177.073255][T24550] device bond120 left promiscuous mode 12:39:28 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 12:39:28 executing program 3: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0/file0\x00', 0x0) [ 1177.202175][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.208582][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.226353][ T3684] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1177.408379][ T3684] usb 1-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 1177.417536][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.425671][ T3684] usb 1-1: Product: ࠾ [ 1177.430199][ T3684] usb 1-1: Manufacturer: ⃁ᬏ앁㡓髵儭䞬䈤ᝁ⭗滝鮏ֳ려꠫⋖랬赡椐䳉ᄽ큵枂郂푰刁橉煮䤞ദ≸ꋞ䖫강궂㥮둘鳘ࠩ칝´鱾脇ᥓ砣⡤䘁鏱ﰻ旳脇㞐獕燾Ý솉㚿翗瑊㼄䦄㙴㫖̓ߙ꬏ﹾ㏎兑꺈裉ź⪑퀵䇕ž⼱ง嘊욜詉㣠⚀坞淽鈙磠फ़邷坠闞璣 [ 1177.460815][ T3684] usb 1-1: SerialNumber: ѕ [ 1177.809324][ T3684] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input85 [ 1177.836172][ T2948] bcm5974 1-1:1.0: could not read from device [ 1177.866079][ T2948] bcm5974 1-1:1.0: could not read from device [ 1177.872524][ T3684] usb 1-1: USB disconnect, device number 121 [ 1177.880351][ T4098] bcm5974 1-1:1.0: could not read from device 12:39:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40) 12:39:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:29 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 12:39:29 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000900)) 12:39:29 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000002200), 0x0, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) 12:39:29 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:29 executing program 3: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) 12:39:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f00000056c0), &(0x7f0000005700)=0x4) 12:39:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:29 executing program 4: r0 = creat(&(0x7f0000001740)='./file0\x00', 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) 12:39:29 executing program 1: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 12:39:29 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/86, 0x56}], 0x1}, 0x0) 12:39:29 executing program 0: mq_open(&(0x7f0000000340)='\xfa\xd7+\xd3\xf3\xfe\x15\xa0\x00\xcb)\xcd\x02\xa2\\\x91\xefy\xf8\x86\xff{$\x19\r\x1aU\x00\xee2\x94\xed\xbc\r4\xc9, .\xa9\t\x00\x00\x00\x00\x00\x00\x00\xab\xa7\x80\xf99B\xfeM\xd9X\x16Z\xfb\x9b\x8dM\x1c{m\xcc\xc9\x89m\x12\xad\x17yO\xf7\xa5O\x00`\xe5\xd3c\xcb \xebb\x1f8)\xc0\xa5\xce\xd8\'\xe4\xa5\xf3+;g\xac\xbb\xd2f\x81p6\xb1\xc7R\x95\x8a\x8a\x05\xcc\x1f\xe6\x81)\xd9\x12Xr\xc8\xcf\x92\xe2\xea\xe7u\xe3\x04\x91\xc1A\x1bPt\xd8G\xeb\a\x00\x00\x00\x00\x00\x00\xfe\xdc\x00;(\xb4V\xdc/}h1\xbbP\xcf\a\xbe\x01\xcexE \xdc\x8c\xf9\xfb\xe2lU\x16Y<)\xe0>\xda\x947\x9f\xf8\xac\xe5\x1b\xf5\xd0\xcc7\xff\x8d\f(\xae\x10\xc6\xbc\xc7|\xaa\xf4\x96\t\xf3\xae\x85S@\x83]\xc8\x17\x9d\xaa\xd9\xaey\xa7\xba mBN\x18\xaaq\xd7D\xea\x81$\xb3m~\x03y\x05\xa9(\xc2\tE\x85$o0\'\xfc\xa8J\xb0h\xd5\xc4\x16\xa7V\x1c!\xcc\xa13\xee`\x01\x92,\x1d\xf2\x10o\xeb\xc8\xb2\x0eF\xa0\x9d9\xfd\n1r\x93\x1e_\xeey\x7f\xec\xcd\v\xc5\xe5Q\xbe5\x8e\xc4t\xf9\xa2\xf7]iMt\xd2\x8e\xcc\x93\xcaQ\xd1\xae\x80!.\xfb@\x15\xeb\xba\xadH?_+m\x02qF\xaa%E\x83\x12\xe7\xd7/+N\x00x\xd1\x7f\x17\x12\xd3\xe7\xbe\x12$\xc5\xe9%m>3SZ\x13(\xbfn\\\xfamu\xbdB\x9f,\xbf\xd6\xa1&\xa8k\xe0\\\x13\xefLN\xcf\'iRz-[\b\xfc\xb1', 0x1, 0x6, 0x0) [ 1178.377111][T24583] device bond121 entered promiscuous mode 12:39:29 executing program 0: mq_open(&(0x7f0000000000)='!\'--\\\x00', 0x80, 0x40, 0x0) 12:39:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:29 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 12:39:29 executing program 3: r0 = socket(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) [ 1178.468774][T24583] device bond121 left promiscuous mode 12:39:29 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:29 executing program 3: r0 = socket(0x2, 0x3, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) 12:39:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 12:39:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) 12:39:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @initdev}, &(0x7f0000000100)=0xc) [ 1178.713558][T24611] __nla_validate_parse: 7 callbacks suppressed [ 1178.713577][T24611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1178.842315][T24617] device bond122 entered promiscuous mode [ 1178.869477][T24617] device bond122 left promiscuous mode 12:39:30 executing program 1: mq_open(&(0x7f00000002c0)='!\'--\\\x00', 0x40, 0x166, &(0x7f0000000300)) 12:39:30 executing program 4: mq_open(&(0x7f0000000000)='!\'--\\\x00', 0x80, 0x0, 0x0) 12:39:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:30 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/power_supply', 0xa00, 0x0) 12:39:30 executing program 3: r0 = mq_open(&(0x7f0000000340)='\xfa\xd7+\xd3\xf3\xfe\x15\xa0\x00\xcb)\xcd\x02\xa2\\\x91\xefy\xf8\x86\xff{$\x19\r\x1aU\x00\xee2\x94\xed\xbc\r4\xc9, .\xa9\t\x00\x00\x00\x00\x00\x00\x00\xab\xa7\x80\xf99B\xfeM\xd9X\x16Z\xfb\x9b\x8dM\x1c{m\xcc\xc9\x89m\x12\xad\x17yO\xf7\xa5O\x00`\xe5\xd3c\xcb \xebb\x1f8)\xc0\xa5\xce\xd8\'\xe4\xa5\xf3+;g\xac\xbb\xd2f\x81p6\xb1\xc7R\x95\x8a\x8a\x05\xcc\x1f\xe6\x81)\xd9\x12Xr\xc8\xcf\x92\xe2\xea\xe7u\xe3\x04\x91\xc1A\x1bPt\xd8G\xeb\a\x00\x00\x00\x00\x00\x00\xfe\xdc\x00;(\xb4V\xdc/}h1\xbbP\xcf\a\xbe\x01\xcexE \xdc\x8c\xf9\xfb\xe2lU\x16Y<)\xe0>\xda\x947\x9f\xf8\xac\xe5\x1b\xf5\xd0\xcc7\xff\x8d\f(\xae\x10\xc6\xbc\xc7|\xaa\xf4\x96\t\xf3\xae\x85S@\x83]\xc8\x17\x9d\xaa\xd9\xaey\xa7\xba mBN\x18\xaaq\xd7Dm~\x03y\x05\xa9(\xc2\tE\x85$o0\'\xfc\xa8J\xb0h\xd5\xc4\x16\xa7V\x1c!\xcc\xa13\xee`\x01\x92,\x1d\xf2\x10o\xeb\xc8\xb2\x0eF\xa0\x9d9\xfd\n1r\x93\x1e_\xeey\x7f\xec\xcd\v\xc5\xe5Q\xbe5\x8e\xc4t\xf9\xa2\xf7]iMt\xd2\x8e\xcc\x93\xcaQ\xd1\xae\x80!.\xfb@\x15\xeb\xba\xadH?_+m\x02qF\xaa%E\x83\x12\xe7\xd7/+N\x00x\xd1\x7f\x17\x12\xd3\xe7\xbe\x12$\xc5\xe9%m>3SZ\x13(\xbfn\\\xfamu\xbdB\x9f,\xbf\xd6\xa1&\xa8k\xe0\\\x13\xefLN\xcf\'iRz-[\b\xfc\xb1\x00\x00\x00\x00', 0x1, 0x0, 0x0) fstat(r0, &(0x7f0000000000)) 12:39:30 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:30 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_WRITE(r0, 0x0, 0x0) 12:39:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1179.371438][T24629] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:30 executing program 4: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) 12:39:30 executing program 0: process_vm_writev(0x0, &(0x7f0000001300)=[{&(0x7f0000000040)=""/101, 0xfffffffffffffde1}], 0x1, &(0x7f00000018c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 12:39:30 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xa283f1f9d0097098) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) 12:39:30 executing program 3: msgrcv(0x0, &(0x7f0000000080)={0x0, ""/49}, 0xffffffffffffff91, 0x0, 0x0) 12:39:30 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f00000004c0)) 12:39:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:30 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xfffff57e, 0x1, 0x1}) 12:39:30 executing program 1: msgsnd(0xffffffffffffffff, &(0x7f0000000100), 0x8, 0x0) [ 1179.548542][T24634] device bond123 entered promiscuous mode [ 1179.584206][T24634] device bond123 left promiscuous mode 12:39:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x62, 0x0, 0x0, 0x0, 0x0, "5c8cc637a2a6328f"}) [ 1179.648116][T24649] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:31 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:31 executing program 4: r0 = shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x5000) shmdt(r0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 12:39:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4000, 0x3ac, 0x20000, 0x0, 0x1}, 0x48) 12:39:31 executing program 1: shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0xe000) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x4000) 12:39:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x7, 0x3, 0xae}, 0x48) 12:39:31 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000580), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000600)={0x0, 0x0, 0x0}) 12:39:31 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) [ 1179.812041][T24664] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1179.835648][T24666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:31 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) shmat(0x0, &(0x7f0000fec000/0x14000)=nil, 0x4000) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) 12:39:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0xfffffffffffffddf, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x60}}, 0x0) 12:39:31 executing program 4: r0 = getpid() process_vm_writev(r0, &(0x7f00000001c0)=[{0x0, 0x34}, {&(0x7f0000000180)=""/44, 0x2c}], 0x2, &(0x7f0000000200)=[{&(0x7f0000001640)=""/4109, 0x100d}], 0x1, 0x0) 12:39:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x7, 0x3, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) [ 1180.022756][T24670] device bond124 entered promiscuous mode [ 1180.074034][T24670] device bond124 left promiscuous mode 12:39:31 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1180.224609][T24683] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1180.258360][T24685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1180.431492][T24687] device bond125 entered promiscuous mode [ 1180.458127][T24687] device bond125 left promiscuous mode 12:39:33 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000002a80)='ns/uts\x00') 12:39:33 executing program 3: pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0xffffffffffffffff) 12:39:33 executing program 1: write$ppp(0xffffffffffffffff, &(0x7f0000000000)="14", 0x1) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) 12:39:33 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000100)) 12:39:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec74", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:33 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETAW(r0, 0x5407, 0x0) 12:39:33 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) read$FUSE(r0, 0x0, 0x0) 12:39:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=@base={0x1d}, 0x48) [ 1181.920598][T24694] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1181.958111][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[], 0xfd13}}, 0x0) 12:39:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x1, 0x2, 0x801, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}]}]}, 0x44}}, 0x0) 12:39:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec74", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:33 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0xa283f1f9d0094098) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 12:39:33 executing program 4: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000001280)=""/106) [ 1182.108698][T24700] device bond126 entered promiscuous mode 12:39:33 executing program 1: process_vm_writev(0x0, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/129, 0x81}, {&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000001240)=""/68, 0x44}, {&(0x7f00000012c0)=""/51, 0x33}], 0x6, &(0x7f0000001980)=[{&(0x7f00000013c0)=""/192, 0xc0}, {&(0x7f0000001480)=""/95, 0x5f}, {&(0x7f0000001500)=""/248, 0xf8}, {&(0x7f0000001600)=""/155, 0x9b}, {&(0x7f0000001a00)=""/138, 0x8a}, {&(0x7f0000001780)=""/121, 0x79}, {&(0x7f0000001800)=""/99, 0x63}], 0x100000000000011f, 0x0) [ 1182.179477][T24700] device bond126 left promiscuous mode 12:39:33 executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180), 0xffffffffffffff86) 12:39:33 executing program 4: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) [ 1182.236269][T24712] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:33 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4a) 12:39:33 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 12:39:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec74", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:33 executing program 1: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) r0 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0xa283f1f9d0097098) shmdt(r0) 12:39:33 executing program 4: syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x24001) 12:39:33 executing program 3: socketpair(0x10, 0x3, 0x400, &(0x7f0000000200)) 12:39:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)) 12:39:33 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000200)={&(0x7f0000000080), 0x48, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0xfffffdb5}}, 0x0) 12:39:33 executing program 1: r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000021c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:39:33 executing program 4: socketpair(0xa, 0x1, 0x1, &(0x7f00000000c0)) [ 1182.585670][T24746] device bond127 entered promiscuous mode [ 1182.659967][T24746] device bond127 left promiscuous mode 12:39:34 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:34 executing program 0: madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17) 12:39:34 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000004980)=@base={0x6}, 0x48) 12:39:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:34 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x7, 0x3, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) read$alg(0xffffffffffffffff, 0x0, 0x0) 12:39:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 12:39:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:34 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x39fc, 0x4, 0x3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000100)={r2}) 12:39:34 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x480001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x7, 0x3, 0x20, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x48) read$alg(0xffffffffffffffff, &(0x7f0000000500)=""/228, 0xe4) 12:39:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x3, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) [ 1182.971938][T24765] device bond128 entered promiscuous mode [ 1182.997918][T24765] device bond128 left promiscuous mode 12:39:34 executing program 3: shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x6000) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 12:39:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x3, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) 12:39:34 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:34 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x39fc, 0x4}) 12:39:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:34 executing program 3: r0 = socket(0x1, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={0x0}}, 0x0) 12:39:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0x0, 0x0, 0x0, 0x0, 0x85}, 0x48) 12:39:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x0, 0x4}) 12:39:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x101}, 0x14}}, 0x0) 12:39:34 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0) 12:39:34 executing program 3: r0 = getpid() process_vm_writev(r0, &(0x7f0000001740)=[{&(0x7f00000002c0)=""/182, 0xb6}], 0x1, &(0x7f00000018c0)=[{&(0x7f0000001800)=""/167, 0xa7}], 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) 12:39:34 executing program 0: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xa283f1f9d0097098) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) 12:39:34 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:34 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x7, 0x3, 0x20}, 0x48) 12:39:34 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) 12:39:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) 12:39:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c00", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:34 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 12:39:34 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:35 executing program 1: pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOPEN(r0, &(0x7f0000000100)={0x18}, 0x18) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7}, 0x7) 12:39:35 executing program 0: socketpair(0x1, 0x0, 0x3d, &(0x7f0000000240)) [ 1183.746552][T24816] __nla_validate_parse: 10 callbacks suppressed [ 1183.746572][T24816] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:35 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, 0x0) 12:39:35 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x7, 0x1003, 0x20}, 0x79) [ 1183.816063][T24819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x77, 0x0, 0x0) 12:39:35 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:35 executing program 0: io_setup(0xfff, &(0x7f0000000080)=0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x200040, 0x0) io_submit(r0, 0x1, &(0x7f0000001380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 12:39:35 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x7, &(0x7f00000004c0), 0x4) 12:39:35 executing program 4: io_setup(0xfff, &(0x7f0000000080)=0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x200040, 0x0) io_submit(r0, 0x3, &(0x7f0000001380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0, 0x0]) 12:39:35 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0xfff, 0x8}, 0x10) [ 1184.017919][T24836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:35 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x8, &(0x7f00000004c0), 0x4) 12:39:35 executing program 1: syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nodots,nodots']) 12:39:35 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0xbfb6, 0x6}, 0x10) [ 1184.125266][T24839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:35 executing program 0: io_setup(0xfff, &(0x7f0000000080)) 12:39:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x19, 0x0, 0x0) 12:39:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1184.189645][T24850] FAT-fs (loop1): bogus number of reserved sectors 12:39:35 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:35 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0) [ 1184.276454][T24850] FAT-fs (loop1): Can't find a valid FAT filesystem 12:39:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 12:39:35 executing program 3: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0xfff, &(0x7f0000000080)) [ 1184.344666][T24858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:35 executing program 0: socket(0x39, 0x0, 0x0) 12:39:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2, &(0x7f0000000180)=@raw=[@initr0], &(0x7f00000001c0)='GPL\x00', 0x9, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:39:35 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x76, 0x0, 0x0) 12:39:35 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), 0xffffffffffffffff) [ 1184.468952][T24862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:35 executing program 1: utimes(0x0, &(0x7f0000000240)) 12:39:35 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f00000001c0)={0x8000000, 0x0, 0x0, {0x0, @sliced}}) 12:39:35 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x0) read$usbfs(r0, &(0x7f00000001c0)=""/104, 0x68) 12:39:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:36 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x85, 0x0, 0x0) 12:39:36 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x20000994) 12:39:36 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x64, &(0x7f00000004c0), 0x4) 12:39:36 executing program 4: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4240, 0x0) [ 1184.725358][T24885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:39:36 executing program 0: sync() syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 12:39:36 executing program 4: pipe2$9p(&(0x7f00000017c0), 0x80800) 12:39:36 executing program 1: syz_open_dev$sg(&(0x7f0000000680), 0x0, 0x0) [ 1184.952196][T24897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:36 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x541b, 0x0) 12:39:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:36 executing program 1: pipe2$9p(&(0x7f00000017c0), 0x0) 12:39:36 executing program 4: io_uring_setup(0x731c, &(0x7f0000000180)={0x0, 0x6651, 0x0, 0x0, 0x35f}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x0, 0x60e) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) 12:39:36 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/9, 0x9}}, 0x120) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000001640)=""/220, 0xdc}], 0x1) 12:39:36 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1185.139315][T24914] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:36 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x20802) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) [ 1185.199155][T24920] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1185.212244][ T3684] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1185.235849][ T3682] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1185.485877][ T3682] usb 4-1: Using ep0 maxpacket: 16 [ 1185.766077][ T3682] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1185.775129][ T3682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.788522][ T3682] usb 4-1: Product: syz [ 1185.792711][ T3682] usb 4-1: Manufacturer: syz [ 1185.799875][ T3682] usb 4-1: SerialNumber: syz [ 1185.812453][ T3682] usb 4-1: config 0 descriptor?? [ 1189.426222][ T3682] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -22 [ 1189.437768][ T3682] usb 4-1: USB disconnect, device number 22 12:39:41 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:39:41 executing program 4: epoll_create(0xe61) 12:39:41 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6}, {0x6}]}) 12:39:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:41 executing program 1: syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x8000d00b) 12:39:41 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:41 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0205647, &(0x7f00000001c0)={0xff000000, 0x0, 0x0, {0x0, @sliced}}) 12:39:41 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x0, 0x0, 0x2, "d5d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1189.893416][T24931] __nla_validate_parse: 1 callbacks suppressed [ 1189.893435][T24931] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1189.953039][ T26] audit: type=1326 audit(1644151181.233:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24928 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d84ac2059 code=0x0 12:39:41 executing program 4: openat2$dir(0xffffffffffffff9c, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x208c0}, 0x18) lremovexattr(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)=@known='trusted.overlay.opaque\x00') 12:39:41 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000018c0)={0x208c0}, 0x18) 12:39:41 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x4d}, {0x6}]}) [ 1190.052497][T24936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:41 executing program 0: io_uring_setup(0x731c, &(0x7f0000000180)={0x0, 0x6651, 0x1, 0x3}) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) [ 1190.195246][ T26] audit: type=1326 audit(1644151181.473:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24950 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85fa70b059 code=0x0 [ 1190.246135][ T3682] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1190.345932][T13528] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1190.525885][ T3682] usb 4-1: Using ep0 maxpacket: 16 [ 1190.585866][T13528] usb 2-1: Using ep0 maxpacket: 16 [ 1190.846196][ T3682] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1190.856242][ T3682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.864300][ T3682] usb 4-1: Product: syz [ 1190.866184][T13528] usb 2-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1190.869421][ T3682] usb 4-1: Manufacturer: syz [ 1190.882778][ T3682] usb 4-1: SerialNumber: syz [ 1190.886989][T13528] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.899482][ T3682] usb 4-1: config 0 descriptor?? [ 1190.904651][T13528] usb 2-1: Product: syz [ 1190.909076][T13528] usb 2-1: Manufacturer: syz [ 1190.913772][T13528] usb 2-1: SerialNumber: syz [ 1190.922458][T13528] usb 2-1: config 0 descriptor?? [ 1194.346276][T13528] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -22 [ 1194.358179][T13528] usb 2-1: USB disconnect, device number 37 [ 1194.516147][ T3682] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -22 [ 1194.528101][ T3682] usb 4-1: USB disconnect, device number 23 12:39:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:39:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:46 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:46 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 12:39:46 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x25e3}, {0x6}]}) 12:39:46 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x208c0}, 0x18) lsetxattr$security_capability(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00), 0x0, 0x0, 0x0) [ 1194.932367][ T26] audit: type=1326 audit(1644151186.213:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24957 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85fa70b059 code=0x0 [ 1194.959829][T24958] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:46 executing program 1: mount$fuseblk(&(0x7f0000001380), 0x0, 0x0, 0x0, &(0x7f0000001480)) 12:39:46 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001440)={0x0, 0x989680}) 12:39:46 executing program 0: lsetxattr$system_posix_acl(&(0x7f0000000f80)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 1195.021189][ T26] audit: type=1326 audit(1644151186.263:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24956 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d84ac2059 code=0x0 [ 1195.044091][T24962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:46 executing program 1: openat(0xffffffffffffffff, 0x0, 0x450500, 0x0) 12:39:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1195.122202][ T26] audit: type=1326 audit(1644151186.273:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24956 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=3 compat=0 ip=0x7f7d84a74c9b code=0x0 12:39:46 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1195.248452][T24978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1195.265949][ T5] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1195.286733][T24978] device bond138 entered promiscuous mode [ 1195.294891][T24978] device bond138 left promiscuous mode [ 1195.321240][T24979] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1195.556037][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 1195.846056][ T5] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1195.856098][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.864191][ T5] usb 4-1: Product: syz [ 1195.868646][ T5] usb 4-1: Manufacturer: syz [ 1195.874530][ T5] usb 4-1: SerialNumber: syz [ 1195.882721][ T5] usb 4-1: config 0 descriptor?? [ 1199.526485][ T5] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -22 [ 1199.546198][ T5] usb 4-1: USB disconnect, device number 24 12:39:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:39:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') 12:39:51 executing program 1: io_uring_setup(0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff) 12:39:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:51 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:51 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x35}, {0x6}]}) 12:39:51 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xff88, 0x2842) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, 0x0) 12:39:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x15, &(0x7f0000001700)={r1}, 0x8) [ 1199.964620][ T26] audit: type=1326 audit(1644151191.243:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24986 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85fa70b059 code=0x0 [ 1199.993822][T24987] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:51 executing program 4: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x31, &(0x7f00000003c0)={0x0, 0x0, '\x00', [@jumbo]}, 0x10) [ 1200.106235][T24989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1200.145158][T24995] device bond139 entered promiscuous mode 12:39:51 executing program 1: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffc3e) 12:39:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) [ 1200.169741][T24995] device bond139 left promiscuous mode [ 1200.306150][T25008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1200.346002][ T3680] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1200.616543][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1200.926064][ T3680] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1200.935144][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.943694][ T3680] usb 4-1: Product: syz [ 1200.948276][ T3680] usb 4-1: Manufacturer: syz [ 1200.952890][ T3680] usb 4-1: SerialNumber: syz [ 1200.960842][ T3680] usb 4-1: config 0 descriptor?? [ 1204.586055][ T3680] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -22 [ 1204.606216][ T3680] usb 4-1: USB disconnect, device number 25 12:39:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:39:56 executing program 0: ppoll(&(0x7f0000000040)=[{}, {0xffffffffffffff9c}, {}], 0x3, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0), 0x10) 12:39:56 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:39:56 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup2(r1, r0) r3 = accept$packet(r2, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x5450, 0x0) 12:39:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:56 executing program 4: socket$inet_sctp(0x2, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) socket$inet6_sctp(0x1c, 0x0, 0x84) 12:39:56 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xfffffff2}, 0x10) [ 1205.040082][T25021] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:39:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xee}, 0x10) 12:39:56 executing program 0: select(0x40, &(0x7f0000000280), &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x0, 0x105a}) [ 1205.146885][T25019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:39:56 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) accept4$inet6(r0, 0x0, 0x0, 0x0) 12:39:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:39:56 executing program 1: socket(0x17, 0x0, 0x4) [ 1205.318205][T25028] device bond140 entered promiscuous mode [ 1205.336342][T25028] device bond140 left promiscuous mode [ 1205.386028][T19360] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1205.394981][T25042] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1205.705918][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1205.996147][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1206.005305][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.015020][T19360] usb 4-1: Product: syz [ 1206.019669][T19360] usb 4-1: Manufacturer: syz [ 1206.024277][T19360] usb 4-1: SerialNumber: syz [ 1206.031786][T19360] usb 4-1: config 0 descriptor?? [ 1209.426019][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -22 [ 1209.437639][T19360] usb 4-1: USB disconnect, device number 26 12:40:01 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:40:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x10) 12:40:01 executing program 0: clock_settime(0xe, &(0x7f0000000080)) 12:40:01 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:01 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) 12:40:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x48, &(0x7f0000000000)={@remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, 0xc) [ 1209.861311][T25053] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:01 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmsg(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/112, 0x70}, 0x41) 12:40:01 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1c, 0x1c, 0x1}, 0x1c) [ 1209.941435][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:40:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080), 0x0) 12:40:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x24e9}, 0x8) [ 1210.131534][T25070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1210.176160][T19360] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1210.435902][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1210.716132][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1210.725516][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.735137][T19360] usb 4-1: Product: syz [ 1210.739642][T19360] usb 4-1: Manufacturer: syz [ 1210.744232][T19360] usb 4-1: SerialNumber: syz [ 1210.759317][T19360] usb 4-1: config 0 descriptor?? [ 1214.157241][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -22 [ 1214.169666][T19360] usb 4-1: USB disconnect, device number 27 12:40:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:40:05 executing program 1: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00') 12:40:05 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:05 executing program 4: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) 12:40:05 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 12:40:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:05 executing program 0: r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) symlinkat(&(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00') 12:40:05 executing program 1: mknodat(0xffffffffffffffff, 0x0, 0xe158, 0x0) 12:40:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x54, 0x0, 0x0) [ 1214.639640][T25084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:06 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000180), &(0x7f0000000100)=0xb0) 12:40:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0) 12:40:06 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80326, 0x0) [ 1214.734932][T25081] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1214.915918][T19360] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1215.165975][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1215.446886][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1215.456162][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.464137][T19360] usb 4-1: Product: syz [ 1215.468386][T19360] usb 4-1: Manufacturer: syz [ 1215.472997][T19360] usb 4-1: SerialNumber: syz [ 1215.485048][T19360] usb 4-1: config 0 descriptor?? [ 1218.906078][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -22 [ 1218.921050][T19360] usb 4-1: USB disconnect, device number 28 12:40:10 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind(r0, &(0x7f0000002740)=@un=@file={0xa}, 0xa) 12:40:10 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:10 executing program 4: socket$inet(0x2, 0x0, 0x8) 12:40:10 executing program 1: open(0x0, 0x3f, 0x0) 12:40:10 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0xb) [ 1219.359072][T25115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:10 executing program 0: socket(0x2, 0x10000001, 0x84) 12:40:10 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x24, &(0x7f0000000080)="5405e742", 0x4) 12:40:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1219.464579][T25116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:40:10 executing program 4: madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6) 12:40:10 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000280)='./file0/../file0\x00', 0x10281, 0x0) [ 1219.608912][T25130] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1219.696095][T19360] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1219.955883][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1220.235943][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1220.245685][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.253924][T19360] usb 4-1: Product: syz [ 1220.258269][T19360] usb 4-1: Manufacturer: syz [ 1220.262987][T19360] usb 4-1: SerialNumber: syz [ 1220.275197][T19360] usb 4-1: config 0 descriptor?? [ 1223.386159][T19360] usb 4-1: Cannot set autoneg [ 1223.391796][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1223.404513][T19360] usb 4-1: USB disconnect, device number 29 12:40:15 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:15 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:15 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/246) 12:40:15 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000000)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f0000000040)='cubic\x00', 0x8) 12:40:15 executing program 0: setitimer(0x0, &(0x7f0000000100)={{}, {0x0, 0x7}}, 0x0) 12:40:15 executing program 0: fchmodat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 12:40:15 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[{0x10}, {0xa0, 0x0, 0x0, "dfbd1ce091dcd5b5a0ca3e1c5aa0ff9509116bd1c3d6b51de4c40640a02d8d02a65ae00f2c6c9861586c155a0b27eaa6435c5e83ada46854697cae5d4cc68b6c7b11e63e163f5275c7cad1d4af5f0d83d388de2aa1c3cfeba8f40494fe9ea3981ce86f145105db28ce03472e9ae2df90ba42987c311bec1ec91822f40b26f0656f085e65d02045cd06"}], 0xb0}, 0x0) [ 1223.938560][T25141] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:15 executing program 4: pipe(0x0) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) 12:40:15 executing program 0: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000), 0x10) connect$inet(r0, &(0x7f00000000c0), 0x10) connect$inet(r0, &(0x7f0000000040), 0x10) 12:40:15 executing program 1: open(&(0x7f0000002140)='./file0\x00', 0x0, 0x0) [ 1224.033152][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:40:15 executing program 4: syz_usb_connect$printer(0x4, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x5) pipe(0x0) [ 1224.285946][ T5] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1224.545871][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 1224.866092][ T5] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1224.875619][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.886034][ T5] usb 4-1: Product: syz [ 1224.890220][ T5] usb 4-1: Manufacturer: syz [ 1224.894812][ T5] usb 4-1: SerialNumber: syz [ 1224.910145][ T5] usb 4-1: config 0 descriptor?? [ 1227.996058][ T5] usb 4-1: Cannot set autoneg [ 1228.000872][ T5] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1228.025148][ T5] usb 4-1: USB disconnect, device number 30 12:40:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:19 executing program 1: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2100, 0x1) 12:40:19 executing program 0: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x8e50427aa282fff1, 0x0) openat(r0, &(0x7f0000000400)='./file1\x00', 0x400a00, 0x0) 12:40:19 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x89a1, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @dev}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}}) 12:40:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "de6d6447b4914cd5"}) [ 1228.529683][T25171] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @loopback}}) 12:40:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1228.576641][T25174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:40:19 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x8940, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @dev}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}}) [ 1228.672255][T25182] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:20 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1228.800949][T25190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1228.835078][T19769] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1228.871837][T25192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1229.095935][T19769] usb 4-1: Using ep0 maxpacket: 16 [ 1229.376166][T19769] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1229.385218][T19769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.393730][T19769] usb 4-1: Product: syz [ 1229.398210][T19769] usb 4-1: Manufacturer: syz [ 1229.402818][T19769] usb 4-1: SerialNumber: syz [ 1229.410001][T19769] usb 4-1: config 0 descriptor?? [ 1232.485999][T19769] usb 4-1: Cannot set autoneg [ 1232.490900][T19769] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1232.502041][T19769] usb 4-1: USB disconnect, device number 31 12:40:24 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @loopback}}) 12:40:24 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000000)={@loopback, @multicast2}, 0x8) 12:40:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000130000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x1e3fdc83199bcf27, 0x0, 0x0, {0x26}}, 0x14}}, 0x0) 12:40:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:24 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @loopback}}) 12:40:24 executing program 4: add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 12:40:24 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002540)='/sys/devices/msr', 0x0, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) [ 1233.057056][T25203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1233.131365][T25204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:40:24 executing program 4: bpf$MAP_CREATE(0x23, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 12:40:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @multicast1}, {0x0, @link_local}, 0x0, {0x2, 0x0, @loopback}}) 12:40:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1233.233453][T25213] device bond147 entered promiscuous mode [ 1233.270774][T25217] Restarting kernel threads ... [ 1233.273629][T25213] device bond147 left promiscuous mode [ 1233.274139][T25217] done. [ 1233.312902][T25223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1233.405993][ T5] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1233.656478][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 1233.936521][ T5] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1233.950466][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.959157][ T5] usb 4-1: Product: syz [ 1233.964414][ T5] usb 4-1: Manufacturer: syz [ 1233.969900][ T5] usb 4-1: SerialNumber: syz [ 1233.978858][ T5] usb 4-1: config 0 descriptor?? [ 1237.086028][ T5] usb 4-1: Cannot set autoneg [ 1237.091058][ T5] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1237.116105][ T5] usb 4-1: USB disconnect, device number 32 12:40:28 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:28 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0xc0189436, 0x0) 12:40:28 executing program 0: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000240)) 12:40:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x0, 0x9}, 0x10) 12:40:28 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:28 executing program 4: add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x0, 0x34, 0x5a, 0x36, 0x33, 0x30, 0x35, 0x66, 0x62, 0x57, 0x64, 0x63, 0x38, 0x64, 0x32, 0x63]}, &(0x7f0000000180)={0x0, "bb89b413e137c9834563cac8038d505000a08cd1a84fafeea4aeaf0276328e9188c2f9d689ac68366cdd31d626286cd74a7c9ef05b4e141187e407e5a2322af6"}, 0x48, 0xfffffffffffffffe) [ 1237.636528][T25231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:28 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000580), 0x10200, 0x0) 12:40:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14}, 0x14}}, 0x0) [ 1237.743763][T25233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1237.763252][T25228] can: request_module (can-proto-0) failed. 12:40:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:29 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x2, &(0x7f0000000100)=@raw=[@map_fd], &(0x7f0000000180)='GPL\x00', 0x7, 0xed, &(0x7f00000001c0)=""/237, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:40:29 executing program 0: ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) socket(0x0, 0x0, 0x0) [ 1237.917997][T25237] device bond148 entered promiscuous mode [ 1237.971966][T25237] device bond148 left promiscuous mode [ 1237.998928][ T3680] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1238.045413][T25248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1238.245909][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1238.526025][ T3680] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1238.535166][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.543759][ T3680] usb 4-1: Product: syz [ 1238.548355][ T3680] usb 4-1: Manufacturer: syz [ 1238.552965][ T3680] usb 4-1: SerialNumber: syz [ 1238.560478][ T3680] usb 4-1: config 0 descriptor?? [ 1238.638538][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.644859][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.685938][ T3680] usb 4-1: Cannot set autoneg [ 1241.690812][ T3680] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1241.707898][ T3680] usb 4-1: USB disconnect, device number 33 12:40:33 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:33 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x48) 12:40:33 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}]}) 12:40:33 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') 12:40:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:33 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x2}, 0x0) 12:40:33 executing program 4: syz_io_uring_setup(0x6070, &(0x7f0000000100), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x4fd1, &(0x7f0000000200), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) [ 1242.215423][T25261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getown(r0, 0x9) 12:40:33 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) [ 1242.318469][T25260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:40:33 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:33 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1242.420250][T25270] device bond149 entered promiscuous mode [ 1242.434742][T25270] device bond149 left promiscuous mode [ 1242.536162][T19358] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1242.555598][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1242.582166][T25281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1242.686178][ T5] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1242.785994][T19358] usb 4-1: Using ep0 maxpacket: 16 [ 1242.955893][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 1243.066124][T19358] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1243.075178][T19358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.084851][T19358] usb 4-1: Product: syz [ 1243.089108][T19358] usb 4-1: Manufacturer: syz [ 1243.093976][T19358] usb 4-1: SerialNumber: syz [ 1243.101552][T19358] usb 4-1: config 0 descriptor?? [ 1243.276162][ T5] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1243.286622][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.294905][ T5] usb 1-1: Product: syz [ 1243.301122][ T5] usb 1-1: Manufacturer: syz [ 1243.305950][ T5] usb 1-1: SerialNumber: syz [ 1243.316163][ T5] usb 1-1: config 0 descriptor?? [ 1246.211207][T19358] usb 4-1: Cannot set autoneg [ 1246.216105][T19358] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1246.226749][T19358] usb 4-1: USB disconnect, device number 34 12:40:38 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:38 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:38 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085460000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:38 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1246.698362][ T5] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -22 [ 1246.747768][T25291] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1246.753482][ T5] usb 1-1: USB disconnect, device number 122 [ 1246.821426][T25295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1246.852276][T25294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1246.869044][T25294] bond2 (uninitialized): Released all slaves [ 1246.889052][T25296] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 12:40:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1246.924885][T25301] device bond150 entered promiscuous mode [ 1246.958209][T25301] device bond150 left promiscuous mode [ 1247.023345][T25306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1247.055900][T19769] usb 4-1: new high-speed USB device number 35 using dummy_hcd 12:40:38 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1247.086755][T25310] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 12:40:38 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:40:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1247.177410][T25314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1247.273583][T25319] device bond151 entered promiscuous mode [ 1247.290487][T25319] device bond151 left promiscuous mode [ 1247.305870][T19769] usb 4-1: Using ep0 maxpacket: 16 [ 1247.321654][T25322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1247.496147][T19360] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1247.585935][T19769] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1247.595169][T19769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.604028][T19769] usb 4-1: Product: syz [ 1247.611776][T19769] usb 4-1: Manufacturer: syz [ 1247.616662][T19769] usb 4-1: SerialNumber: syz [ 1247.623004][T19769] usb 4-1: config 0 descriptor?? [ 1247.735859][T19360] usb 1-1: Using ep0 maxpacket: 16 [ 1248.046921][T19360] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1248.056196][T19360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.064200][T19360] usb 1-1: Product: syz [ 1248.068742][T19360] usb 1-1: Manufacturer: syz [ 1248.073375][T19360] usb 1-1: SerialNumber: syz [ 1248.086648][T19360] usb 1-1: config 0 descriptor?? [ 1250.735951][T19769] usb 4-1: Cannot set autoneg [ 1250.740949][T19769] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1250.753301][T19769] usb 4-1: USB disconnect, device number 35 12:40:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:42 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:42 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:42 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:40:42 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1251.264062][T25332] blktrace: Concurrent blktraces are not allowed on sg0 [ 1251.275262][T25329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1251.339989][T25331] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:40:42 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1251.391993][T25337] device bond152 entered promiscuous mode 12:40:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1251.434348][T25337] device bond152 left promiscuous mode [ 1251.461768][T25342] blktrace: Concurrent blktraces are not allowed on sg0 12:40:42 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1251.496275][T19360] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -22 [ 1251.553826][T19360] usb 1-1: USB disconnect, device number 123 [ 1251.577832][T13528] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1251.855818][T13528] usb 4-1: Using ep0 maxpacket: 16 12:40:43 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:40:43 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:43 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0) [ 1251.983129][T25351] __nla_validate_parse: 1 callbacks suppressed [ 1251.983147][T25351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1252.042594][T25351] device bond153 entered promiscuous mode [ 1252.062861][T25351] device bond153 left promiscuous mode [ 1252.175984][T13528] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1252.185087][T13528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.213193][T13528] usb 4-1: Product: syz [ 1252.217650][T13528] usb 4-1: Manufacturer: syz [ 1252.222426][T13528] usb 4-1: SerialNumber: syz [ 1252.234707][T13528] usb 4-1: config 0 descriptor?? [ 1252.286010][T19358] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1252.536078][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1252.866141][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1252.875666][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.884362][T19358] usb 1-1: Product: syz [ 1252.889011][T19358] usb 1-1: Manufacturer: syz [ 1252.893720][T19358] usb 1-1: SerialNumber: syz [ 1252.902259][T19358] usb 1-1: config 0 descriptor?? [ 1255.366631][T13528] usb 4-1: Cannot set autoneg [ 1255.371557][T13528] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1255.390389][T13528] usb 4-1: USB disconnect, device number 36 12:40:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:47 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:47 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:47 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0) [ 1255.894689][T25361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1255.950314][T25364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1255.952968][T25360] blktrace: Concurrent blktraces are not allowed on sg0 12:40:47 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:47 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1256.055396][T25368] device bond154 entered promiscuous mode [ 1256.078756][T25368] device bond154 left promiscuous mode 12:40:47 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1256.110464][T25375] blktrace: Concurrent blktraces are not allowed on sg0 [ 1256.170505][T25370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1256.205894][T25377] blktrace: Concurrent blktraces are not allowed on sg0 [ 1256.236024][T19769] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1256.356085][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -22 [ 1256.369946][T19358] usb 1-1: USB disconnect, device number 124 [ 1256.495906][T19769] usb 4-1: Using ep0 maxpacket: 16 12:40:48 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12:40:48 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:40:48 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x0) [ 1256.776417][T19769] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1256.780660][T25381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1256.786198][T19769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.807197][T19769] usb 4-1: Product: syz [ 1256.811806][T19769] usb 4-1: Manufacturer: syz [ 1256.823001][T19769] usb 4-1: SerialNumber: syz [ 1256.861532][T19769] usb 4-1: config 0 descriptor?? [ 1256.862585][T25386] device bond155 entered promiscuous mode [ 1256.877866][T25386] device bond155 left promiscuous mode [ 1257.075979][T19358] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1257.365858][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1257.666079][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1257.675400][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.691224][T19358] usb 1-1: Product: syz [ 1257.695671][T19358] usb 1-1: Manufacturer: syz [ 1257.700518][T19358] usb 1-1: SerialNumber: syz [ 1257.711621][T19358] usb 1-1: config 0 descriptor?? [ 1259.946038][T19769] usb 4-1: Cannot set autoneg [ 1259.951318][T19769] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1259.967670][T19769] usb 4-1: USB disconnect, device number 37 12:40:51 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:51 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:51 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:40:51 executing program 5: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:40:51 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1260.489029][T25391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:51 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:40:51 executing program 5: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:40:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1260.684898][T25405] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1260.785944][T19360] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1260.836327][T19358] usb 1-1: Cannot set autoneg [ 1260.844905][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1260.865167][T19358] usb 1-1: USB disconnect, device number 125 [ 1261.036076][T19360] usb 4-1: Using ep0 maxpacket: 16 12:40:52 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12:40:52 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:52 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1261.340985][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1261.361192][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.379507][T19360] usb 4-1: Product: syz [ 1261.384692][T19360] usb 4-1: Manufacturer: syz [ 1261.401069][T19360] usb 4-1: SerialNumber: syz [ 1261.415612][T19360] usb 4-1: config 0 descriptor?? [ 1261.676230][T13528] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1261.916119][T13528] usb 1-1: Using ep0 maxpacket: 16 [ 1262.196868][T13528] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1262.210481][T13528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.218546][T13528] usb 1-1: Product: syz [ 1262.222713][T13528] usb 1-1: Manufacturer: syz [ 1262.228554][T13528] usb 1-1: SerialNumber: syz [ 1262.241601][T13528] usb 1-1: config 0 descriptor?? [ 1263.885932][T19360] usb 4-1: Cannot set autoneg [ 1263.891028][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:40:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:40:56 executing program 5: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:40:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:40:56 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) 12:40:56 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1264.883574][T19769] usb 4-1: USB disconnect, device number 38 [ 1264.907933][T25418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:40:56 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) 12:40:56 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:56 executing program 5: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) 12:40:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1265.161057][T25434] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1265.356024][T19769] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1265.366010][T13528] usb 1-1: Cannot set autoneg [ 1265.370946][T13528] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1265.388348][T13528] usb 1-1: USB disconnect, device number 126 [ 1265.615945][T19769] usb 4-1: Using ep0 maxpacket: 16 12:40:57 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 12:40:57 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:40:57 executing program 5: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1265.946101][T19769] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1265.955357][T19769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.965689][T19769] usb 4-1: Product: syz [ 1265.970078][T19769] usb 4-1: Manufacturer: syz [ 1265.974827][T19769] usb 4-1: SerialNumber: syz [ 1265.983863][T19769] usb 4-1: config 0 descriptor?? [ 1266.165693][T19358] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1266.405832][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1266.686422][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1266.695473][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.704213][T19358] usb 1-1: Product: syz [ 1266.708800][T19358] usb 1-1: Manufacturer: syz [ 1266.713465][T19358] usb 1-1: SerialNumber: syz [ 1266.729550][T19358] usb 1-1: config 0 descriptor?? [ 1268.397702][T19769] usb 4-1: Cannot set autoneg [ 1268.403032][T19769] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:41:00 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:00 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:00 executing program 5: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:41:00 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) [ 1269.401507][ T5] usb 4-1: USB disconnect, device number 39 12:41:00 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:00 executing program 5: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 12:41:00 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) [ 1269.452802][T25450] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:00 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f00000000c0)=0x7, 0x5) [ 1269.846056][T19358] usb 1-1: Cannot set autoneg [ 1269.850900][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1269.867490][T19358] usb 1-1: USB disconnect, device number 127 [ 1269.946098][ T5] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1270.205851][ T5] usb 4-1: Using ep0 maxpacket: 16 12:41:01 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:01 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1270.376436][T25467] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1270.526020][ T5] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1270.535441][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.543797][ T5] usb 4-1: Product: syz [ 1270.548151][ T5] usb 4-1: Manufacturer: syz [ 1270.552987][ T5] usb 4-1: SerialNumber: syz [ 1270.560739][ T5] usb 4-1: config 0 descriptor?? [ 1270.665906][ T3684] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1270.915853][ T3684] usb 1-1: Using ep0 maxpacket: 16 [ 1271.235951][ T3684] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1271.246878][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.255155][ T3684] usb 1-1: Product: syz [ 1271.259826][ T3684] usb 1-1: Manufacturer: syz [ 1271.264705][ T3684] usb 1-1: SerialNumber: syz [ 1271.271729][ T3684] usb 1-1: config 0 descriptor?? [ 1273.016023][ T5] usb 4-1: Cannot set autoneg [ 1273.020996][ T5] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:41:05 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:05 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:05 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) set_mempolicy(0x8000, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) 12:41:05 executing program 1: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1274.009924][ T5] usb 4-1: USB disconnect, device number 40 [ 1274.044893][T25476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:05 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) 12:41:05 executing program 1: set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1274.116733][T25478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1274.194569][T25483] device bond156 entered promiscuous mode 12:41:05 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1274.243905][T25483] device bond156 left promiscuous mode [ 1274.283022][T25490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1274.396406][ T3684] usb 1-1: Cannot set autoneg [ 1274.401246][ T3684] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1274.442527][ T3684] usb 1-1: USB disconnect, device number 2 [ 1274.476156][ T5] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1274.726046][ T5] usb 4-1: Using ep0 maxpacket: 16 12:41:06 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:06 executing program 1: set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1274.924901][T25496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1275.006408][ T5] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1275.016275][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.030625][ T5] usb 4-1: Product: syz [ 1275.034904][ T5] usb 4-1: Manufacturer: syz [ 1275.040471][ T5] usb 4-1: SerialNumber: syz [ 1275.047885][ T5] usb 4-1: config 0 descriptor?? [ 1275.206016][T19360] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1275.485877][T19360] usb 1-1: Using ep0 maxpacket: 16 [ 1275.806086][T19360] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1275.815575][T19360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.824375][T19360] usb 1-1: Product: syz [ 1275.828887][T19360] usb 1-1: Manufacturer: syz [ 1275.833535][T19360] usb 1-1: SerialNumber: syz [ 1275.850275][T19360] usb 1-1: config 0 descriptor?? [ 1277.506011][ T5] usb 4-1: Cannot set autoneg [ 1277.511260][ T5] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:41:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:09 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) 12:41:09 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:09 executing program 1: set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1278.498706][T19358] usb 4-1: USB disconnect, device number 41 12:41:09 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1278.553840][T25507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:09 executing program 1: set_mempolicy(0x0, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:09 executing program 4: set_mempolicy(0x2, &(0x7f0000000200)=0x9, 0x9) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1278.666950][T25509] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:41:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1278.715665][T25514] device bond157 entered promiscuous mode [ 1278.811912][T25514] device bond157 left promiscuous mode [ 1278.936104][T19360] usb 1-1: Cannot set autoneg [ 1278.945209][T19360] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1278.956981][T19360] usb 1-1: USB disconnect, device number 3 [ 1278.968739][T19358] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1279.225846][T19358] usb 4-1: Using ep0 maxpacket: 16 12:41:10 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) 12:41:10 executing program 1: set_mempolicy(0x0, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1279.465339][T25527] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1279.516353][T19358] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1279.529994][T19358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.540763][T19358] usb 4-1: Product: syz [ 1279.554213][T19358] usb 4-1: Manufacturer: syz [ 1279.559042][T19358] usb 4-1: SerialNumber: syz [ 1279.569093][T19358] usb 4-1: config 0 descriptor?? [ 1282.036035][T19358] usb 4-1: Cannot set autoneg [ 1282.041047][T19358] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:41:14 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:14 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:14 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:14 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) 12:41:14 executing program 1: set_mempolicy(0x0, &(0x7f0000000200)=0x9, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1283.029938][T19360] usb 4-1: USB disconnect, device number 42 12:41:14 executing program 4: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1283.088153][T25539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:14 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:14 executing program 4: syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1283.221071][T25541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:41:14 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:14 executing program 4: syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1283.309255][T25547] device bond158 entered promiscuous mode [ 1283.327085][T25547] device bond158 left promiscuous mode [ 1283.358353][ T3684] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1283.420582][T25557] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1283.473747][T25561] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1283.495891][T19360] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1283.665885][ T3684] usb 1-1: Using ep0 maxpacket: 16 [ 1283.745833][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1283.996018][ T3684] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1284.005658][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.014387][ T3684] usb 1-1: Product: syz [ 1284.018946][ T3684] usb 1-1: Manufacturer: syz [ 1284.023661][ T3684] usb 1-1: SerialNumber: syz [ 1284.026229][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1284.030707][ T3684] usb 1-1: config 0 descriptor?? [ 1284.048156][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.059972][T19360] usb 4-1: Product: syz [ 1284.064144][T19360] usb 4-1: Manufacturer: syz [ 1284.070725][T19360] usb 4-1: SerialNumber: syz [ 1284.088840][T19360] usb 4-1: config 0 descriptor?? [ 1286.546040][T19360] usb 4-1: Cannot set autoneg [ 1286.550845][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1287.096069][ T3684] usb 1-1: Cannot set autoneg [ 1287.100863][ T3684] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1287.126371][ T3684] usb 1-1: USB disconnect, device number 4 12:41:18 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:18 executing program 4: syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x1, 0x200) [ 1287.542493][ T3684] usb 4-1: USB disconnect, device number 43 12:41:18 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:18 executing program 1: set_mempolicy(0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:18 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, &(0x7f0000000000)=0x1, 0x200) [ 1287.649658][T25573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:19 executing program 1: set_mempolicy(0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, 0x0, 0x200) [ 1287.701631][T25572] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:41:19 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, 0x0, 0x200) 12:41:19 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1287.799407][T25573] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:19 executing program 1: set_mempolicy(0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1287.903367][T25588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1287.945940][ T3682] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1287.967280][ T3684] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1288.225935][ T3682] usb 1-1: Using ep0 maxpacket: 16 [ 1288.231138][ T3684] usb 4-1: Using ep0 maxpacket: 16 [ 1288.526064][ T3682] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1288.535543][ T3684] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1288.545897][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.553945][ T3682] usb 1-1: Product: syz [ 1288.558795][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.567190][ T3682] usb 1-1: Manufacturer: syz [ 1288.571795][ T3682] usb 1-1: SerialNumber: syz [ 1288.576892][ T3684] usb 4-1: Product: syz [ 1288.581072][ T3684] usb 4-1: Manufacturer: syz [ 1288.585671][ T3684] usb 4-1: SerialNumber: syz [ 1288.592653][ T3682] usb 1-1: config 0 descriptor?? [ 1288.600852][ T3684] usb 4-1: config 0 descriptor?? [ 1291.036474][ T3684] usb 4-1: Cannot set autoneg [ 1291.041267][ T3684] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1291.695935][ T3682] usb 1-1: Cannot set autoneg [ 1291.700872][ T3682] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1291.712042][ T3682] usb 1-1: USB disconnect, device number 5 12:41:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1292.028558][ T3680] usb 4-1: USB disconnect, device number 44 [ 1292.060297][T25596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1292.097863][T25596] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:23 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:41:23 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:23 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x0, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1292.223463][T25606] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1292.256704][T25604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:41:23 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x0, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:23 executing program 4: set_mempolicy(0x0, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1292.288088][T25606] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:23 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1292.446271][T25615] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1292.486172][ T3680] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1292.536560][T19360] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1292.546182][T25621] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1292.554519][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1292.581815][T25620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1292.602298][T25624] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1292.755820][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1292.796089][T19360] usb 1-1: Using ep0 maxpacket: 16 [ 1293.056320][ T3680] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1293.068748][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.077651][ T3680] usb 4-1: Product: syz [ 1293.081915][ T3680] usb 4-1: Manufacturer: syz [ 1293.086671][ T3680] usb 4-1: SerialNumber: syz [ 1293.103416][ T3680] usb 4-1: config 0 descriptor?? [ 1293.108805][T19360] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1293.118300][T19360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.126586][T19360] usb 1-1: Product: syz [ 1293.130766][T19360] usb 1-1: Manufacturer: syz [ 1293.135373][T19360] usb 1-1: SerialNumber: syz [ 1293.149378][T19360] usb 1-1: config 0 descriptor?? [ 1295.556027][ T3680] usb 4-1: Cannot set autoneg [ 1295.561210][ T3680] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1296.236150][T19360] usb 1-1: Cannot set autoneg [ 1296.241198][T19360] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1296.258727][T19360] usb 1-1: USB disconnect, device number 6 12:41:27 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:27 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x0, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1296.548519][ T3682] usb 4-1: USB disconnect, device number 45 12:41:28 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:28 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:28 executing program 4: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, &(0x7f0000000140), 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:28 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:28 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:28 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:28 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:28 executing program 4: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1296.975867][ T3682] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1297.085912][T19360] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1297.133327][T25654] __nla_validate_parse: 5 callbacks suppressed [ 1297.133345][T25654] netlink: 4960 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1297.225939][ T3682] usb 4-1: Using ep0 maxpacket: 16 [ 1297.335950][T19360] usb 1-1: Using ep0 maxpacket: 16 [ 1297.546097][ T3682] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1297.555633][ T3682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.569738][ T3682] usb 4-1: Product: syz [ 1297.573936][ T3682] usb 4-1: Manufacturer: syz [ 1297.579592][ T3682] usb 4-1: SerialNumber: syz [ 1297.591052][ T3682] usb 4-1: config 0 descriptor?? [ 1297.616023][T19360] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1297.625412][T19360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.634042][T19360] usb 1-1: Product: syz [ 1297.638939][T19360] usb 1-1: Manufacturer: syz [ 1297.643798][T19360] usb 1-1: SerialNumber: syz [ 1297.652432][T19360] usb 1-1: config 0 descriptor?? [ 1300.046003][ T3682] usb 4-1: Cannot set autoneg [ 1300.050922][ T3682] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1300.077999][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.084361][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.775989][T19360] usb 1-1: Cannot set autoneg [ 1300.781209][T19360] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 1300.806740][T19360] usb 1-1: USB disconnect, device number 7 12:41:32 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:32 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1301.042437][T19360] usb 4-1: USB disconnect, device number 46 12:41:32 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:32 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:32 executing program 4: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:32 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1301.293467][T25669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1301.325377][T25668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:41:32 executing program 4: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1301.350642][T25670] blktrace: Concurrent blktraces are not allowed on sg0 [ 1301.370604][T25669] netlink: 4960 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1301.384506][T25675] device bond165 entered promiscuous mode 12:41:32 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1301.398859][T25675] device bond165 left promiscuous mode 12:41:32 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1301.486233][T19360] usb 4-1: new high-speed USB device number 47 using dummy_hcd 12:41:32 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1301.560853][T25682] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1301.616286][ T3680] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1301.641449][T25685] netlink: 4960 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1301.661115][T25684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1301.761157][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1301.896129][ T3680] usb 1-1: Using ep0 maxpacket: 16 [ 1302.116110][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1302.125251][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.133433][T19360] usb 4-1: Product: syz [ 1302.138144][T19360] usb 4-1: Manufacturer: syz [ 1302.142849][T19360] usb 4-1: SerialNumber: syz [ 1302.149444][T19360] usb 4-1: config 0 descriptor?? [ 1302.226124][ T3680] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1302.235175][ T3680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.249089][ T3680] usb 1-1: Product: syz [ 1302.253256][ T3680] usb 1-1: Manufacturer: syz [ 1302.258988][ T3680] usb 1-1: SerialNumber: syz [ 1302.266900][ T3680] usb 1-1: config 0 descriptor?? [ 1303.916101][T19360] usb 4-1: Cannot set autoneg [ 1303.921147][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1304.666026][ T3680] usb 1-1: Cannot set autoneg [ 1304.671121][ T3680] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 12:41:36 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:36 executing program 4: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1304.906323][ T3680] usb 4-1: USB disconnect, device number 47 [ 1305.345897][ T3680] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1305.585860][ T3680] usb 4-1: Using ep0 maxpacket: 16 12:41:36 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:36 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:36 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff00000000000001000000070001006677000060130200"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:36 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x378) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1305.654107][T13528] usb 1-1: USB disconnect, device number 8 12:41:37 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1305.704455][T25704] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1305.735911][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:41:37 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:37 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1305.832035][T25705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1305.841595][T25715] blktrace: Concurrent blktraces are not allowed on sg0 12:41:37 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1305.904301][T25717] blktrace: Concurrent blktraces are not allowed on sg0 [ 1305.912014][ T3680] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 12:41:37 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1305.947770][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.970700][ T3680] usb 4-1: Product: syz [ 1305.983392][ T3680] usb 4-1: Manufacturer: syz [ 1305.997284][ T3680] usb 4-1: SerialNumber: syz [ 1306.020058][T25709] device bond2 entered promiscuous mode [ 1306.033394][ T3680] usb 4-1: config 0 descriptor?? [ 1306.048166][T25709] device team0 entered promiscuous mode [ 1306.048208][T25722] blktrace: Concurrent blktraces are not allowed on sg0 [ 1306.055672][T25709] device team_slave_0 entered promiscuous mode [ 1306.073428][T25709] device team_slave_1 entered promiscuous mode [ 1306.082835][T25709] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1306.097669][T25709] Cannot create hsr debugfs directory [ 1306.116594][T25709] bond2: (slave hsr1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1306.133424][T25709] bond2: (slave hsr1): The slave device specified does not support setting the MAC address [ 1306.145486][T25709] hsr1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1306.159962][T25709] bond2: (slave hsr1): Error -22 calling dev_set_mtu [ 1306.167403][T13528] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1306.176183][T25709] device bond2 left promiscuous mode [ 1306.183236][T25709] device team0 left promiscuous mode [ 1306.189354][T25709] device team_slave_0 left promiscuous mode [ 1306.195626][T25709] device team_slave_1 left promiscuous mode [ 1306.208413][T25708] netlink: 4956 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1306.222219][T25720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1306.410918][T13528] usb 1-1: Using ep0 maxpacket: 16 [ 1306.726247][T13528] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1306.737789][T13528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.750725][T13528] usb 1-1: Product: syz [ 1306.754945][T13528] usb 1-1: Manufacturer: syz [ 1306.760179][T13528] usb 1-1: SerialNumber: syz [ 1306.767800][T13528] usb 1-1: config 0 descriptor?? [ 1307.854759][ T3680] usb 4-1: Cannot set autoneg [ 1307.859785][ T3680] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:41:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff00000000000001000000070001006677000060130200"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1308.827626][ T3680] usb 4-1: USB disconnect, device number 48 [ 1308.869073][T25728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1308.910498][T25728] netlink: 4956 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1309.235991][T13528] usb 1-1: Cannot set autoneg [ 1309.240934][T13528] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1309.286038][ T3680] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1309.546036][ T3680] usb 4-1: Using ep0 maxpacket: 16 [ 1309.846456][ T3680] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1309.855891][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.863900][ T3680] usb 4-1: Product: syz [ 1309.869208][ T3680] usb 4-1: Manufacturer: syz [ 1309.873811][ T3680] usb 4-1: SerialNumber: syz [ 1309.883586][ T3680] usb 4-1: config 0 descriptor?? 12:41:41 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:41 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:41 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x378) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:41 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff00000000000001000000070001006677000060130200"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1310.241740][T13528] usb 1-1: USB disconnect, device number 9 [ 1310.277747][T25736] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:41 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1310.312843][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:41:41 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:41 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 12:41:41 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:41 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) [ 1310.452840][T25744] device bond3 entered promiscuous mode [ 1310.497661][T25744] device team0 entered promiscuous mode [ 1310.507894][T25744] device team_slave_0 entered promiscuous mode [ 1310.517429][T25744] device team_slave_1 entered promiscuous mode [ 1310.536712][T25744] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1310.544433][T25744] Cannot create hsr debugfs directory [ 1310.550309][T25744] bond3: (slave hsr1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1310.564705][T25744] bond3: (slave hsr1): The slave device specified does not support setting the MAC address [ 1310.577803][T25744] hsr1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1310.591471][T25744] bond3: (slave hsr1): Error -22 calling dev_set_mtu [ 1310.598494][T25744] device bond3 left promiscuous mode [ 1310.604857][T25744] device team0 left promiscuous mode [ 1310.610346][T25744] device team_slave_0 left promiscuous mode [ 1310.619136][T25744] device team_slave_1 left promiscuous mode [ 1310.633318][T25736] netlink: 4956 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1310.746040][T13528] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1311.005982][T13528] usb 1-1: Using ep0 maxpacket: 16 [ 1311.326008][T13528] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1311.335428][T13528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.344050][T13528] usb 1-1: Product: syz [ 1311.348765][T13528] usb 1-1: Manufacturer: syz [ 1311.353467][T13528] usb 1-1: SerialNumber: syz [ 1311.366745][T13528] usb 1-1: config 0 descriptor?? [ 1311.706009][ T3680] usb 4-1: Cannot set autoneg [ 1311.711032][ T3680] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:41:44 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 12:41:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1312.707447][ T3682] usb 4-1: USB disconnect, device number 49 [ 1312.747273][T25758] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1312.798954][T25758] netlink: 4952 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1313.776034][T13528] usb 1-1: Cannot set autoneg [ 1313.781235][T13528] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 12:41:46 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:41:46 executing program 4: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:46 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:46 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x0, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:46 executing program 4: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1314.770806][ T3682] usb 1-1: USB disconnect, device number 10 [ 1314.804440][T25767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:46 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x0, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:46 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:46 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x0, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) [ 1314.913660][T25773] netlink: 4952 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:46 executing program 4: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1315.025199][T25780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1315.074530][T25780] bond169 (uninitialized): Released all slaves [ 1315.081231][T13530] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1315.119494][T25787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1315.207516][T25788] netlink: 4952 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1315.256041][ T3682] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1315.335829][T13530] usb 4-1: Using ep0 maxpacket: 16 [ 1315.515992][ T3682] usb 1-1: Using ep0 maxpacket: 16 [ 1315.616028][T13530] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1315.625345][T13530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.633711][T13530] usb 4-1: Product: syz [ 1315.638263][T13530] usb 4-1: Manufacturer: syz [ 1315.642850][T13530] usb 4-1: SerialNumber: syz [ 1315.661361][T13530] usb 4-1: config 0 descriptor?? [ 1315.836025][ T3682] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1315.845494][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.854247][ T3682] usb 1-1: Product: syz [ 1315.859046][ T3682] usb 1-1: Manufacturer: syz [ 1315.863901][ T3682] usb 1-1: SerialNumber: syz [ 1315.871145][ T3682] usb 1-1: config 0 descriptor?? [ 1317.456208][T13530] usb 4-1: Cannot set autoneg [ 1317.461182][T13530] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1318.325948][ T3682] usb 1-1: Cannot set autoneg [ 1318.331034][ T3682] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1318.448280][T13528] usb 4-1: USB disconnect, device number 50 12:41:50 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:50 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x0, 0x0, 0x287e, 0xffffffffffffffff}) 12:41:50 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:50 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff00000000000001000000070001006677000060130200040004000800"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1319.316752][ T3682] usb 1-1: USB disconnect, device number 11 12:41:50 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x0, 0x0, 0x287e, 0xffffffffffffffff}) [ 1319.357974][T25797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1319.398805][T25797] bond169 (uninitialized): Released all slaves [ 1319.407476][T25798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:50 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x0, 0x0, 0x287e, 0xffffffffffffffff}) [ 1319.452166][T25801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 12:41:50 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1319.503334][T25807] netlink: 4944 bytes leftover after parsing attributes in process `syz-executor.2'. 12:41:50 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:50 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 12:41:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff00000000000001000000070001006677000060130200040004000800"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1319.585041][T25813] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1319.646220][T13528] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1319.705421][T25813] bond5 (uninitialized): Released all slaves [ 1319.725944][T25815] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1319.740534][T25815] bond169 (uninitialized): Released all slaves [ 1319.759521][T25822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1319.833638][T25824] netlink: 4944 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1319.843592][ T3682] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1319.886022][T13528] usb 4-1: Using ep0 maxpacket: 16 [ 1320.085877][ T3682] usb 1-1: Using ep0 maxpacket: 16 [ 1320.165956][T13528] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1320.179917][T13528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.188711][T13528] usb 4-1: Product: syz [ 1320.192889][T13528] usb 4-1: Manufacturer: syz [ 1320.197682][T13528] usb 4-1: SerialNumber: syz [ 1320.212521][T13528] usb 4-1: config 0 descriptor?? [ 1320.386137][ T3682] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1320.396091][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.404348][ T3682] usb 1-1: Product: syz [ 1320.409410][ T3682] usb 1-1: Manufacturer: syz [ 1320.414039][ T3682] usb 1-1: SerialNumber: syz [ 1320.420747][ T3682] usb 1-1: config 0 descriptor?? [ 1322.015980][T13528] usb 4-1: Cannot set autoneg [ 1322.020776][T13528] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1322.875991][ T3682] usb 1-1: Cannot set autoneg [ 1322.881163][ T3682] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1323.008233][ T3682] usb 4-1: USB disconnect, device number 51 12:41:55 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:55 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 12:41:55 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x378) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff00000000000001000000070001006677000060130200040004000800"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:55 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1323.873631][ T3682] usb 1-1: USB disconnect, device number 12 12:41:55 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x0, 0xffffffffffffffff}) [ 1323.919982][T25836] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1323.968059][T25835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:41:55 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x0, 0xffffffffffffffff}) 12:41:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:55 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1324.099475][T25843] device bond5 entered promiscuous mode [ 1324.128506][T25843] device team0 entered promiscuous mode [ 1324.139507][T25843] device team_slave_0 entered promiscuous mode [ 1324.147168][T25843] device team_slave_1 entered promiscuous mode [ 1324.155260][T25843] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1324.164171][T25843] Cannot create hsr debugfs directory [ 1324.170780][T25843] bond5: (slave hsr1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1324.185612][T25843] bond5: (slave hsr1): The slave device specified does not support setting the MAC address [ 1324.195983][T13530] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1324.198103][T25843] hsr1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1324.216694][T25843] bond5: (slave hsr1): Error -22 calling dev_set_mtu [ 1324.223798][T25843] device bond5 left promiscuous mode [ 1324.234699][T25843] device team0 left promiscuous mode [ 1324.240761][T25843] device team_slave_0 left promiscuous mode 12:41:55 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x0, 0xffffffffffffffff}) [ 1324.249597][T25843] device team_slave_1 left promiscuous mode [ 1324.316393][ T3682] usb 1-1: new high-speed USB device number 13 using dummy_hcd 12:41:55 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1324.455064][T25861] __nla_validate_parse: 5 callbacks suppressed [ 1324.464221][T25861] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1324.495791][T13530] usb 4-1: Using ep0 maxpacket: 16 [ 1324.520013][T25863] device bond6 entered promiscuous mode [ 1324.527146][T25863] device team0 entered promiscuous mode [ 1324.532941][T25863] device team_slave_0 entered promiscuous mode [ 1324.540005][T25863] device team_slave_1 entered promiscuous mode [ 1324.547267][T25863] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1324.555038][T25863] Cannot create hsr debugfs directory [ 1324.556223][ T3682] usb 1-1: Using ep0 maxpacket: 16 [ 1324.561688][T25863] bond6: (slave hsr1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1324.578655][T25863] bond6: (slave hsr1): The slave device specified does not support setting the MAC address [ 1324.591275][T25863] hsr1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1324.607502][T25863] bond6: (slave hsr1): Error -22 calling dev_set_mtu [ 1324.614628][T25863] device bond6 left promiscuous mode [ 1324.621234][T25863] device team0 left promiscuous mode [ 1324.626957][T25863] device team_slave_0 left promiscuous mode [ 1324.633124][T25863] device team_slave_1 left promiscuous mode [ 1324.786093][T13530] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1324.796158][T13530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.804428][T13530] usb 4-1: Product: syz [ 1324.809158][T13530] usb 4-1: Manufacturer: syz [ 1324.814011][T13530] usb 4-1: SerialNumber: syz [ 1324.823004][T13530] usb 4-1: config 0 descriptor?? [ 1324.856010][ T3682] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1324.865198][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.873635][ T3682] usb 1-1: Product: syz [ 1324.878873][ T3682] usb 1-1: Manufacturer: syz [ 1324.883632][ T3682] usb 1-1: SerialNumber: syz [ 1324.891064][ T3682] usb 1-1: config 0 descriptor?? [ 1326.616858][T13530] usb 4-1: Cannot set autoneg [ 1326.621683][T13530] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1327.356008][ T3682] usb 1-1: Cannot set autoneg [ 1327.360886][ T3682] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1327.625931][ T3682] usb 4-1: USB disconnect, device number 52 12:41:59 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:41:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:41:59 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:59 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:59 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:41:59 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1328.345019][T19770] usb 1-1: USB disconnect, device number 13 [ 1328.401218][T25873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1328.435066][T25874] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1328.460560][T25876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1328.487118][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1328.514272][T25873] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1328.531205][T25880] device bond7 entered promiscuous mode [ 1328.538594][T25880] device team0 entered promiscuous mode [ 1328.544238][T25880] device team_slave_0 entered promiscuous mode [ 1328.553491][T25880] device team_slave_1 entered promiscuous mode 12:41:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1328.560649][T25880] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1328.569681][T25880] Cannot create hsr debugfs directory [ 1328.575272][T25880] bond7: (slave hsr1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1328.588766][T25880] bond7: (slave hsr1): The slave device specified does not support setting the MAC address [ 1328.600691][T25880] hsr1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1328.613653][T25880] bond7: (slave hsr1): Error -22 calling dev_set_mtu [ 1328.629850][T25880] device bond7 left promiscuous mode [ 1328.637219][T25880] device team0 left promiscuous mode [ 1328.653665][T25880] device team_slave_0 left promiscuous mode [ 1328.662383][T25880] device team_slave_1 left promiscuous mode [ 1328.679044][T25874] device bond5 entered promiscuous mode [ 1328.686280][T13528] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1328.697445][T25874] device team0 entered promiscuous mode [ 1328.703120][T25874] device team_slave_0 entered promiscuous mode [ 1328.714974][T25874] device team_slave_1 entered promiscuous mode [ 1328.725229][T25874] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1328.742076][T25874] Cannot create hsr debugfs directory [ 1328.749162][T25874] bond5: (slave hsr1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1328.768273][T25874] bond5: (slave hsr1): The slave device specified does not support setting the MAC address [ 1328.783636][T25874] hsr1: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1328.797115][T19770] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1328.807628][T25874] bond5: (slave hsr1): Error -22 calling dev_set_mtu 12:42:00 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1328.814676][T25874] device bond5 left promiscuous mode [ 1328.821194][T25874] device team0 left promiscuous mode [ 1328.828498][T25874] device team_slave_0 left promiscuous mode [ 1328.834681][T25874] device team_slave_1 left promiscuous mode [ 1328.847744][T25886] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1328.891331][T25887] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:00 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1328.934032][T25889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1328.943935][T13528] usb 4-1: Using ep0 maxpacket: 16 [ 1328.961679][T25889] bond172 (uninitialized): Released all slaves 12:42:00 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:00 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1329.024600][T25893] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1329.046172][T19770] usb 1-1: Using ep0 maxpacket: 16 [ 1329.152651][T25900] bond172 (uninitialized): Released all slaves [ 1329.211891][T25903] device bond8 entered promiscuous mode [ 1329.221822][T25903] device team0 entered promiscuous mode [ 1329.231108][T25903] device team_slave_0 entered promiscuous mode [ 1329.237929][T25903] device team_slave_1 entered promiscuous mode [ 1329.245047][T25903] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1329.259589][T25903] Cannot create hsr debugfs directory [ 1329.268993][T25902] device bond6 entered promiscuous mode [ 1329.277707][T13528] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1329.287319][T13528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.295341][T13528] usb 4-1: Product: syz [ 1329.301406][T13528] usb 4-1: Manufacturer: syz [ 1329.306394][T13528] usb 4-1: SerialNumber: syz [ 1329.314826][T25902] device team0 entered promiscuous mode [ 1329.326126][T19770] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1329.327141][T13528] usb 4-1: config 0 descriptor?? [ 1329.340037][T19770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.349189][T19770] usb 1-1: Product: syz [ 1329.353956][T19770] usb 1-1: Manufacturer: syz [ 1329.359117][T25902] device team_slave_0 entered promiscuous mode [ 1329.359232][T19770] usb 1-1: SerialNumber: syz [ 1329.365419][T25902] device team_slave_1 entered promiscuous mode [ 1329.381557][T19770] usb 1-1: config 0 descriptor?? [ 1329.404785][T25902] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1329.413543][T25902] Cannot create hsr debugfs directory [ 1331.166080][T13528] usb 4-1: Cannot set autoneg [ 1331.171590][T13528] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1331.846169][T19770] usb 1-1: Cannot set autoneg [ 1331.851142][T19770] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1332.166579][ T917] usb 4-1: USB disconnect, device number 53 12:42:04 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:04 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r4, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r7}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:04 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchmod(r0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x800c0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_HASH={0x8}, @TCA_TCINDEX_SHIFT={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdrlabel={0x58, 0x49, 0x20, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, r7, 0xbbf}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x58}}, 0x40000) r8 = accept4(r1, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80, 0x40000) ioctl$sock_bt_hci(r8, 0x400448de, &(0x7f0000000100)="b60f13a693eb5ee529d4a846b36aa05504357292379f41960477562166e8f139714e350402bb6ce20ca6ddbfc2e1032b53f3e740ba33fd1aaba9977705a7d848031eeb21c01af7c644ed706310148e5db451ac38239e42f429327b252a724ba2d7f5502a69025b93d1724717797d3ede3a8ff6eaf983de9f4d4ee25aea679ed34dd31cd70b8657b9f84a04df36dd7f1f376f301ce07ad98823c9aa633dfa7b183a6d6be11ba4390703ed9ae50c9c9e5a39dcc95f174d6d7e3267933e9791a09d09a7f4224c1490885c1b12ed6bbcc32c1c3377c075a9034b4d8a25617ee676fe2fa81f6d22400ef7d2984c2d03dea0414746d21411") 12:42:04 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:04 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1332.834553][ T3682] usb 1-1: USB disconnect, device number 14 [ 1332.898625][T25918] __nla_validate_parse: 3 callbacks suppressed [ 1332.898642][T25918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1332.927656][T25918] bond172 (uninitialized): Released all slaves [ 1332.936113][T25915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1332.960376][T25917] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1332.993308][T25916] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:04 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1333.025211][T25915] device bond9 entered promiscuous mode [ 1333.052300][T25915] device bond9 left promiscuous mode [ 1333.082053][T25924] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 12:42:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r1, &(0x7f0000000ac0)=[{&(0x7f00000001c0)=""/39, 0x27}], 0x1, 0x72, 0x0) r2 = signalfd4(r0, &(0x7f0000000340)={[0x5]}, 0x8, 0x400) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x81}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xfffffeff}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xfffffffc}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x81}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x36c98e23b0f95fca}, 0x100) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f00000000c0)={0xfffffffc, [[0xdc, 0x40, 0x1, 0x8, 0x1, 0x1, 0x4d], [0x6, 0x4, 0x7f, 0x3, 0xfffff801, 0x3, 0x5], [0x5, 0xa1f5, 0x1dea, 0x81, 0x9, 0x3ff, 0xffff, 0x3f]], '\x00', [{0x7, 0x7fff, 0x1, 0x0, 0x1}, {0x9, 0xf6e, 0x0, 0x1}, {0x7, 0xffff7fff, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x322}, {0x6, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x10000, 0x80, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x8, 0xffff40a8, 0x0, 0x1}, {0x7, 0x1, 0x0, 0x1}, {0x7ff, 0x0, 0x0, 0x0, 0x1, 0x1}], '\x00', 0x40}) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) 12:42:04 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:04 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchmod(r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)) ioctl$PPPIOCSMRU1(r1, 0x40047440, 0x0) dup3(r0, r1, 0x0) [ 1333.167336][ T917] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1333.220181][T25930] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:04 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x378) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1333.295794][ T3682] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1333.426010][ T917] usb 4-1: Using ep0 maxpacket: 16 [ 1333.545928][ T3682] usb 1-1: Using ep0 maxpacket: 16 [ 1333.746136][ T917] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1333.755210][ T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.763508][ T917] usb 4-1: Product: syz [ 1333.768162][ T917] usb 4-1: Manufacturer: syz [ 1333.772774][ T917] usb 4-1: SerialNumber: syz [ 1333.780677][ T917] usb 4-1: config 0 descriptor?? [ 1333.825992][ T3682] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1333.835405][ T3682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.844016][ T3682] usb 1-1: Product: syz [ 1333.848806][ T3682] usb 1-1: Manufacturer: syz [ 1333.854216][ T3682] usb 1-1: SerialNumber: syz [ 1333.861670][ T3682] usb 1-1: config 0 descriptor?? [ 1335.565974][ T917] usb 4-1: Cannot set autoneg [ 1335.571029][ T917] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1336.325970][ T3682] usb 1-1: Cannot set autoneg [ 1336.330844][ T3682] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1336.575102][ T3682] usb 4-1: USB disconnect, device number 54 12:42:08 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:08 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) syz_open_pts(r0, 0x674701) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0xfffd, 0x2e, 0x1, 'queue0\x00', 0x1f}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000040)) 12:42:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:08 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchmod(r0, 0x10000000) 12:42:08 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:08 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1337.315960][T13528] usb 1-1: USB disconnect, device number 15 12:42:08 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) syz_open_pts(r0, 0x674701) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0xfffd, 0x2e, 0x1, 'queue0\x00', 0x1f}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000040)) 12:42:08 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000640), 0x3f, 0x220080) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000040)=0x80000001) syz_open_dev$sndmidi(&(0x7f0000000480), 0x1f, 0x1e203) io_setup(0x3, &(0x7f0000000580)=0x0) io_cancel(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)) ioctl$PPPIOCSMRU1(r3, 0x40047440, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x80010, r4, 0x2ee04000) fcntl$getflags(r0, 0x401) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x12100, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) preadv(r7, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/161, 0xa1}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/61, 0x3d}, {&(0x7f00000016c0)=""/254, 0xfe}, {&(0x7f00000004c0)=""/128, 0x80}, {&(0x7f0000000540)=""/45, 0x2d}], 0x6, 0x1, 0x4) io_submit(r2, 0x2, &(0x7f0000000340)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x5, r0, &(0x7f00000000c0)="334f06e58326f35636137cc5fb0d762084a60bf9a91dd126e5ab0608289fb45d39a497181cc01c52e9ebb4d16a2d00f272431bb33b1b719390a083761c0a83a3628e038000910aa534abb65ec2e4509d32ec3f8d28f285033f04100d050fb452e3001011a17161a3cd0c01b1a63e391bd4d75da23885209ba3f0817e54f8dffe3fdb8b32f30afaaf5e8ccc78d1bba770f10e9b785bf7150d797c1804ef2a0df41d960cf9bc2a084e10634a9b0d", 0xad, 0x7f, 0x0, 0x2, r3}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x7f, r5, &(0x7f00000001c0)="1f64b73c4fb1ccb572b6bb9dc0b5023e5975d7d2223027940ec99cd9cf329f65edeefa49d29e5d83c7803c7427cc4fe85d4a35c203d963ff3847c82c865c8b96d2ec7d6a8d3e218ea172f3ed01691e4d62dcdd7ea435760321a0225bde341bedbaef646884d3597d3d7a5351226e21f9a7637f21dcc29ca37a8962f3f8a91d5839b492b96a3be8734cb68094dbc360b781147be339518df4221806d113cd09c251587489e21023c9859ecb659d1c0be9cb67130439d0acdc81d83b0da624f97331d2ca70518c8efdbfd7325e87da82c147256882cbaca110422c07d0f596a6e9206ff267d20b5d", 0xe7, 0x44, 0x0, 0x1, r6}]) [ 1337.364582][T25948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1337.410529][T25950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:08 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) syz_open_pts(r0, 0x674701) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0xfffd, 0x2e, 0x1, 'queue0\x00', 0x1f}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000040)) 12:42:08 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) syz_open_pts(r0, 0x674701) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0xfffd, 0x2e, 0x1, 'queue0\x00', 0x1f}) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1) [ 1337.455187][T25948] device bond172 entered promiscuous mode [ 1337.484374][T25948] device bond172 left promiscuous mode 12:42:08 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) syz_open_pts(r0, 0x674701) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000001c0)={0xfffd, 0x2e, 0x1, 'queue0\x00', 0x1f}) 12:42:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1337.635986][ T3682] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1337.646375][T25969] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1337.885911][ T3682] usb 4-1: Using ep0 maxpacket: 16 [ 1337.905878][T13528] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1338.165967][ T3682] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1338.175281][ T3682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.175845][T13528] usb 1-1: Using ep0 maxpacket: 16 [ 1338.183736][ T3682] usb 4-1: Product: syz [ 1338.193046][ T3682] usb 4-1: Manufacturer: syz [ 1338.197835][ T3682] usb 4-1: SerialNumber: syz [ 1338.204957][ T3682] usb 4-1: config 0 descriptor?? [ 1338.495944][T13528] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1338.505418][T13528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.514603][T13528] usb 1-1: Product: syz [ 1338.519410][T13528] usb 1-1: Manufacturer: syz [ 1338.524268][T13528] usb 1-1: SerialNumber: syz [ 1338.532567][T13528] usb 1-1: config 0 descriptor?? [ 1340.015950][ T3682] usb 4-1: Cannot set autoneg [ 1340.020730][ T3682] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1340.976004][T13528] usb 1-1: Cannot set autoneg [ 1340.980841][T13528] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1341.012223][ T3682] usb 4-1: USB disconnect, device number 55 12:42:13 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) syz_open_pts(r0, 0x674701) 12:42:13 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:13 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fchmod(r0, 0x8) 12:42:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:13 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:42:13 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) [ 1341.978774][T19770] usb 1-1: USB disconnect, device number 16 12:42:13 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) 12:42:13 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x40044104, 0x0) [ 1342.029816][T25976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:13 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) [ 1342.087776][T25981] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:42:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:13 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 1) [ 1342.174784][T25988] device bond173 entered promiscuous mode [ 1342.212008][T25988] device bond173 left promiscuous mode [ 1342.219982][T25994] FAULT_INJECTION: forcing a failure. [ 1342.219982][T25994] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.233843][T25994] CPU: 0 PID: 25994 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1342.244378][T25994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.254453][T25994] Call Trace: [ 1342.257744][T25994] [ 1342.260685][T25994] dump_stack_lvl+0x201/0x2d8 [ 1342.265389][T25994] ? show_regs_print_info+0x12/0x12 12:42:13 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) [ 1342.270612][T25994] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1342.276360][T25994] ? __might_sleep+0xe0/0xe0 [ 1342.280973][T25994] ? rcu_read_lock_sched_held+0x89/0x130 [ 1342.286636][T25994] should_fail+0x384/0x4b0 [ 1342.291077][T25994] ? tomoyo_realpath_from_path+0xd8/0x610 [ 1342.296817][T25994] should_failslab+0x5/0x20 [ 1342.301343][T25994] __kmalloc+0x94/0x380 [ 1342.305523][T25994] ? kfree+0x2f/0x2e0 [ 1342.305964][T13528] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1342.309531][T25994] tomoyo_realpath_from_path+0xd8/0x610 [ 1342.309576][T25994] tomoyo_path_number_perm+0x219/0x7c0 [ 1342.309610][T25994] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1342.309690][T25994] security_file_ioctl+0x55/0xb0 [ 1342.338534][T25994] __se_sys_ioctl+0x48/0x170 [ 1342.343135][T25994] do_syscall_64+0x44/0xd0 [ 1342.347553][T25994] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1342.353448][T25994] RIP: 0033:0x7fc9fdb8f059 [ 1342.357861][T25994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1342.377459][T25994] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.385871][T25994] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1342.393839][T25994] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1342.401801][T25994] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.409764][T25994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.417733][T25994] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1342.425718][T25994] [ 1342.435309][T25994] ERROR: Out of memory at tomoyo_realpath_from_path. 12:42:13 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x3, 0x5, 0xfffffff9, 0x519, 0x6, "d2836d91e08ce2b126a9b1782623022862b46f"}) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) [ 1342.467376][T25997] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:13 executing program 5: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) 12:42:13 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 2) [ 1342.653212][T26006] FAULT_INJECTION: forcing a failure. [ 1342.653212][T26006] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.665822][T13528] usb 4-1: Using ep0 maxpacket: 16 [ 1342.673231][T26008] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1342.681436][T26006] CPU: 0 PID: 26006 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1342.693030][T26006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.703106][T26006] Call Trace: [ 1342.706410][T26006] [ 1342.709351][T26006] dump_stack_lvl+0x201/0x2d8 [ 1342.714056][T26006] ? show_regs_print_info+0x12/0x12 [ 1342.719276][T26006] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1342.725022][T26006] ? __might_sleep+0xe0/0xe0 [ 1342.729617][T26006] should_fail+0x384/0x4b0 [ 1342.734025][T26006] ? tomoyo_encode2+0x25a/0x560 [ 1342.738861][T26006] should_failslab+0x5/0x20 [ 1342.743356][T26006] __kmalloc+0x94/0x380 [ 1342.747503][T26006] ? prepend_path+0xb70/0xb70 [ 1342.752172][T26006] tomoyo_encode2+0x25a/0x560 [ 1342.756857][T26006] tomoyo_realpath_from_path+0x5c3/0x610 [ 1342.762508][T26006] tomoyo_path_number_perm+0x219/0x7c0 [ 1342.767964][T26006] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1342.773445][T26006] security_file_ioctl+0x55/0xb0 [ 1342.778371][T26006] __se_sys_ioctl+0x48/0x170 [ 1342.782961][T26006] do_syscall_64+0x44/0xd0 [ 1342.787380][T26006] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1342.793266][T26006] RIP: 0033:0x7fc9fdb8f059 [ 1342.797669][T26006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1342.817267][T26006] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1342.825677][T26006] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1342.833651][T26006] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1342.841619][T26006] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1342.849588][T26006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.857570][T26006] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1342.865544][T26006] [ 1342.873759][T19770] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1342.883017][T26006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1342.888269][T26008] device bond174 entered promiscuous mode [ 1342.901114][T26008] device bond174 left promiscuous mode [ 1342.946080][T13528] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1342.955225][T13528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.963703][T13528] usb 4-1: Product: syz [ 1342.968555][T13528] usb 4-1: Manufacturer: syz [ 1342.973173][T13528] usb 4-1: SerialNumber: syz [ 1342.988348][T13528] usb 4-1: config 0 descriptor?? [ 1343.135864][T19770] usb 1-1: Using ep0 maxpacket: 16 [ 1343.446088][T19770] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1343.455370][T19770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.464759][T19770] usb 1-1: Product: syz [ 1343.469787][T19770] usb 1-1: Manufacturer: syz [ 1343.474580][T19770] usb 1-1: SerialNumber: syz [ 1343.483630][T19770] usb 1-1: config 0 descriptor?? [ 1344.145946][T13528] usb 4-1: Cannot set autoneg [ 1344.150833][T13528] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:42:16 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1345.137002][T13530] usb 4-1: USB disconnect, device number 56 [ 1345.275921][T19770] usb 1-1: Cannot set autoneg [ 1345.280764][T19770] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1345.575852][T13530] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1345.835929][T13530] usb 4-1: Using ep0 maxpacket: 16 [ 1346.165984][T13530] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1346.175115][T13530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.188252][T13530] usb 4-1: Product: syz [ 1346.192414][T13530] usb 4-1: Manufacturer: syz [ 1346.197951][T13530] usb 4-1: SerialNumber: syz [ 1346.211241][T13530] usb 4-1: config 0 descriptor?? 12:42:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) 12:42:17 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 3) 12:42:17 executing program 5: openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1346.265646][ T917] usb 1-1: USB disconnect, device number 17 [ 1346.298636][T26021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:42:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) [ 1346.362237][T26019] FAULT_INJECTION: forcing a failure. [ 1346.362237][T26019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.373794][T26022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1346.376487][T26019] CPU: 1 PID: 26019 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1346.395216][T26019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.405286][T26019] Call Trace: [ 1346.408576][T26019] [ 1346.411522][T26019] dump_stack_lvl+0x201/0x2d8 [ 1346.416230][T26019] ? show_regs_print_info+0x12/0x12 [ 1346.421447][T26019] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1346.427185][T26019] ? __might_fault+0xb6/0x110 [ 1346.431900][T26019] should_fail+0x384/0x4b0 [ 1346.436343][T26019] _copy_from_user+0x2d/0x170 [ 1346.441039][T26019] blk_trace_setup+0xc6/0x1b0 [ 1346.445806][T26019] ? __blk_trace_remove+0x1e0/0x1e0 [ 1346.451027][T26019] ? smk_access+0x470/0x4a0 [ 1346.455560][T26019] sg_ioctl+0x1440/0x2d80 [ 1346.459984][T26019] ? sg_poll+0x3f0/0x3f0 [ 1346.464268][T26019] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1346.469217][T26019] ? security_file_ioctl+0x9d/0xb0 [ 1346.474330][T26019] ? sg_poll+0x3f0/0x3f0 [ 1346.478569][T26019] __se_sys_ioctl+0xfb/0x170 [ 1346.483161][T26019] do_syscall_64+0x44/0xd0 [ 1346.487573][T26019] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1346.493466][T26019] RIP: 0033:0x7fc9fdb8f059 [ 1346.497876][T26019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1346.517479][T26019] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.525888][T26019] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1346.533851][T26019] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1346.541813][T26019] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.549777][T26019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 12:42:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) [ 1346.557761][T26019] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1346.565744][T26019] 12:42:17 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) 12:42:17 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 4) [ 1346.612419][T26021] device bond175 entered promiscuous mode 12:42:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1346.667059][T26021] device bond175 left promiscuous mode [ 1346.723801][T26037] FAULT_INJECTION: forcing a failure. [ 1346.723801][T26037] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.737957][T26037] CPU: 1 PID: 26037 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1346.748484][T26037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1346.757567][T26038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1346.758546][T26037] Call Trace: [ 1346.758556][T26037] [ 1346.774031][T26037] dump_stack_lvl+0x201/0x2d8 [ 1346.778734][T26037] ? show_regs_print_info+0x12/0x12 [ 1346.783953][T26037] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1346.789697][T26037] ? __might_sleep+0xe0/0xe0 [ 1346.794314][T26037] should_fail+0x384/0x4b0 [ 1346.798742][T26037] ? do_blk_trace_setup+0x1c0/0xa00 [ 1346.803949][T26037] should_failslab+0x5/0x20 [ 1346.808450][T26037] kmem_cache_alloc_trace+0x71/0x330 [ 1346.813851][T26037] do_blk_trace_setup+0x1c0/0xa00 [ 1346.818891][T26037] ? __might_fault+0xb2/0x110 [ 1346.823567][T26037] blk_trace_setup+0xfd/0x1b0 [ 1346.828276][T26037] ? __blk_trace_remove+0x1e0/0x1e0 [ 1346.833498][T26037] ? smk_access+0x470/0x4a0 [ 1346.838038][T26037] sg_ioctl+0x1440/0x2d80 [ 1346.842420][T26037] ? sg_poll+0x3f0/0x3f0 [ 1346.846680][T26037] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1346.851627][T26037] ? security_file_ioctl+0x9d/0xb0 [ 1346.856736][T26037] ? sg_poll+0x3f0/0x3f0 [ 1346.860989][T26037] __se_sys_ioctl+0xfb/0x170 [ 1346.865588][T26037] do_syscall_64+0x44/0xd0 [ 1346.870030][T26037] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1346.875945][T26037] RIP: 0033:0x7fc9fdb8f059 [ 1346.880377][T26037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1346.899976][T26037] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1346.908411][T26037] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1346.916400][T26037] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 12:42:18 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) [ 1346.924384][T26037] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1346.932350][T26037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.940314][T26037] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1346.948309][T26037] [ 1347.035956][ T917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1347.305973][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 1347.586111][T13530] usb 4-1: Cannot set autoneg [ 1347.591141][ T917] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1347.600681][T13530] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1347.609008][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.619397][ T917] usb 1-1: Product: syz [ 1347.623597][ T917] usb 1-1: Manufacturer: syz [ 1347.631151][ T917] usb 1-1: SerialNumber: syz [ 1347.640734][ T917] usb 1-1: config 0 descriptor?? 12:42:19 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1348.574313][T19360] usb 4-1: USB disconnect, device number 57 [ 1349.065946][T19360] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1349.345973][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1349.426113][ T917] usb 1-1: Cannot set autoneg [ 1349.431441][ T917] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1349.696861][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1349.706069][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.714168][T19360] usb 4-1: Product: syz [ 1349.718474][T19360] usb 4-1: Manufacturer: syz [ 1349.723234][T19360] usb 4-1: SerialNumber: syz [ 1349.729831][T19360] usb 4-1: config 0 descriptor?? 12:42:21 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d0000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:21 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/227, 0xe3}], 0x2, 0x2, 0x8) 12:42:21 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 5) [ 1350.414157][ T917] usb 1-1: USB disconnect, device number 18 [ 1350.450540][T26052] FAULT_INJECTION: forcing a failure. [ 1350.450540][T26052] name failslab, interval 1, probability 0, space 0, times 0 12:42:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, 0x0, 0x0, 0x2, 0x8) [ 1350.461066][T26055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1350.495370][T26052] CPU: 0 PID: 26052 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 12:42:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, 0x0, 0x0, 0x2, 0x8) [ 1350.505920][T26052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1350.515994][T26052] Call Trace: [ 1350.519286][T26052] [ 1350.522237][T26052] dump_stack_lvl+0x201/0x2d8 [ 1350.526943][T26052] ? show_regs_print_info+0x12/0x12 [ 1350.532157][T26052] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1350.537914][T26052] should_fail+0x384/0x4b0 [ 1350.542363][T26052] ? __d_alloc+0x2a/0x700 [ 1350.546715][T26052] should_failslab+0x5/0x20 [ 1350.551249][T26052] kmem_cache_alloc+0x72/0x310 [ 1350.556049][T26052] __d_alloc+0x2a/0x700 12:42:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, 0x0, 0x0, 0x2, 0x8) [ 1350.560238][T26052] ? rcu_read_lock_sched_held+0x89/0x130 [ 1350.565900][T26052] d_alloc_parallel+0xd3/0x15c0 [ 1350.570776][T26052] ? memset+0x1f/0x40 [ 1350.574781][T26052] ? lockdep_init_map_type+0x9f/0x9b0 [ 1350.580184][T26052] ? lockdep_softirqs_off+0x420/0x420 [ 1350.585595][T26052] ? d_hash_and_lookup+0x1c0/0x1c0 [ 1350.591004][T26052] ? __init_waitqueue_head+0x68/0xd0 [ 1350.596326][T26052] __lookup_slow+0x110/0x3d0 [ 1350.600950][T26052] ? lookup_one_len+0x2c0/0x2c0 [ 1350.605850][T26052] lookup_one_len+0x186/0x2c0 12:42:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x8) [ 1350.610552][T26052] ? lookup_one_common+0x4b0/0x4b0 [ 1350.615685][T26052] ? mntput+0x63/0xb0 [ 1350.619700][T26052] start_creating+0x184/0x330 [ 1350.624475][T26052] debugfs_create_dir+0x24/0x4e0 [ 1350.629433][T26052] ? do_blk_trace_setup+0x1c0/0xa00 [ 1350.634664][T26052] do_blk_trace_setup+0x38e/0xa00 [ 1350.639735][T26052] blk_trace_setup+0xfd/0x1b0 [ 1350.644440][T26052] ? __blk_trace_remove+0x1e0/0x1e0 [ 1350.649677][T26052] ? smk_access+0x470/0x4a0 [ 1350.654222][T26052] sg_ioctl+0x1440/0x2d80 [ 1350.658588][T26052] ? sg_poll+0x3f0/0x3f0 [ 1350.662872][T26052] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1350.667821][T26052] ? security_file_ioctl+0x9d/0xb0 [ 1350.672962][T26052] ? sg_poll+0x3f0/0x3f0 [ 1350.677225][T26052] __se_sys_ioctl+0xfb/0x170 [ 1350.681847][T26052] do_syscall_64+0x44/0xd0 [ 1350.685533][T26069] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1350.686288][T26052] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1350.701693][T26052] RIP: 0033:0x7fc9fdb8f059 12:42:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0), 0x0, 0x2, 0x8) [ 1350.706125][T26052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1350.725747][T26052] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1350.734181][T26052] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1350.742179][T26052] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1350.750165][T26052] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 12:42:22 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0), 0x0, 0x2, 0x8) [ 1350.758162][T26052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.766149][T26052] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1350.774158][T26052] [ 1350.784511][T26054] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1350.789768][T26052] blktrace: debugfs_dir not present for sg0 so skipping [ 1351.016084][T19360] usb 4-1: Cannot set autoneg [ 1351.020894][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1351.175850][ T917] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1351.416228][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 1351.726091][ T917] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1351.735271][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.743939][ T917] usb 1-1: Product: syz [ 1351.748660][ T917] usb 1-1: Manufacturer: syz [ 1351.753275][ T917] usb 1-1: SerialNumber: syz [ 1351.767212][ T917] usb 1-1: config 0 descriptor?? 12:42:23 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1352.018011][T19769] usb 4-1: USB disconnect, device number 58 [ 1352.435930][T19769] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1352.685828][T19769] usb 4-1: Using ep0 maxpacket: 16 [ 1352.965991][T19769] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1352.979609][T19769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.988749][T19769] usb 4-1: Product: syz [ 1352.993108][T19769] usb 4-1: Manufacturer: syz [ 1352.998747][T19769] usb 4-1: SerialNumber: syz [ 1353.010369][T19769] usb 4-1: config 0 descriptor?? [ 1353.546055][ T917] usb 1-1: Cannot set autoneg [ 1353.551012][ T917] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1354.145949][T19769] usb 4-1: Cannot set autoneg [ 1354.150741][T19769] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:42:25 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0), 0x0, 0x2, 0x8) 12:42:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d0000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:25 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 6) [ 1354.543832][T19360] usb 1-1: USB disconnect, device number 19 [ 1354.582326][T26087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1354.604073][T26088] FAULT_INJECTION: forcing a failure. [ 1354.604073][T26088] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.624022][T26088] CPU: 0 PID: 26088 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1354.634574][T26088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1354.644647][T26088] Call Trace: [ 1354.647947][T26088] 12:42:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x2, 0x8) 12:42:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x2, 0x8) [ 1354.650899][T26088] dump_stack_lvl+0x201/0x2d8 [ 1354.655609][T26088] ? show_regs_print_info+0x12/0x12 [ 1354.660838][T26088] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1354.666600][T26088] should_fail+0x384/0x4b0 [ 1354.671062][T26088] ? new_inode_pseudo+0x79/0x220 [ 1354.676024][T26088] should_failslab+0x5/0x20 [ 1354.680543][T26088] kmem_cache_alloc+0x72/0x310 [ 1354.685325][T26088] ? lookup_one_common+0x4b0/0x4b0 [ 1354.690465][T26088] new_inode_pseudo+0x79/0x220 [ 1354.695251][T26088] new_inode+0x25/0x1d0 [ 1354.699430][T26088] ? start_creating+0x21f/0x330 12:42:26 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x2, 0x8) [ 1354.704308][T26088] debugfs_create_dir+0xf3/0x4e0 [ 1354.709257][T26088] ? do_blk_trace_setup+0x1c0/0xa00 [ 1354.714488][T26088] do_blk_trace_setup+0x38e/0xa00 [ 1354.719548][T26088] blk_trace_setup+0xfd/0x1b0 [ 1354.724247][T26088] ? __blk_trace_remove+0x1e0/0x1e0 [ 1354.729472][T26088] ? smk_access+0x470/0x4a0 [ 1354.734008][T26088] sg_ioctl+0x1440/0x2d80 [ 1354.738367][T26088] ? sg_poll+0x3f0/0x3f0 [ 1354.742644][T26088] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1354.747604][T26088] ? security_file_ioctl+0x9d/0xb0 [ 1354.752736][T26088] ? sg_poll+0x3f0/0x3f0 [ 1354.756991][T26088] __se_sys_ioctl+0xfb/0x170 [ 1354.761598][T26088] do_syscall_64+0x44/0xd0 [ 1354.766037][T26088] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1354.771947][T26088] RIP: 0033:0x7fc9fdb8f059 [ 1354.776377][T26088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1354.796122][T26088] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:42:26 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x0, 0x8) [ 1354.804562][T26088] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1354.812562][T26088] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1354.820558][T26088] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1354.828555][T26088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1354.836544][T26088] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1354.844559][T26088] [ 1354.853253][T26089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1354.866259][T26088] debugfs: out of free dentries, can not create directory 'sg0' [ 1354.886323][T26088] blktrace: debugfs_dir not present for sg0 so skipping [ 1354.898830][T26102] device bond177 entered promiscuous mode 12:42:26 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x0, 0x8) 12:42:26 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 7) [ 1354.911060][T26102] device bond177 left promiscuous mode [ 1354.925959][T26087] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1355.004721][T26107] FAULT_INJECTION: forcing a failure. [ 1355.004721][T26107] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.018681][T26107] CPU: 0 PID: 26107 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1355.029216][T26107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1355.039283][T26107] Call Trace: [ 1355.042572][T26107] [ 1355.045517][T26107] dump_stack_lvl+0x201/0x2d8 [ 1355.050218][T26107] ? show_regs_print_info+0x12/0x12 [ 1355.055440][T26107] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1355.061188][T26107] ? __might_sleep+0xe0/0xe0 [ 1355.065810][T26107] should_fail+0x384/0x4b0 [ 1355.070262][T26107] ? security_inode_alloc+0x32/0x1d0 [ 1355.075571][T26107] should_failslab+0x5/0x20 [ 1355.080098][T26107] kmem_cache_alloc+0x72/0x310 [ 1355.084899][T26107] security_inode_alloc+0x32/0x1d0 [ 1355.090043][T26107] inode_init_always+0x3e2/0xa60 [ 1355.095016][T26107] new_inode_pseudo+0x90/0x220 [ 1355.099807][T26107] new_inode+0x25/0x1d0 [ 1355.103980][T26107] ? start_creating+0x21f/0x330 [ 1355.108832][T26107] debugfs_create_dir+0xf3/0x4e0 [ 1355.113776][T26107] ? do_blk_trace_setup+0x1c0/0xa00 [ 1355.118969][T26107] do_blk_trace_setup+0x38e/0xa00 [ 1355.123997][T26107] blk_trace_setup+0xfd/0x1b0 [ 1355.128673][T26107] ? __blk_trace_remove+0x1e0/0x1e0 [ 1355.133862][T26107] ? smk_access+0x470/0x4a0 [ 1355.138358][T26107] sg_ioctl+0x1440/0x2d80 [ 1355.142692][T26107] ? sg_poll+0x3f0/0x3f0 [ 1355.146960][T26107] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1355.152016][T26107] ? security_file_ioctl+0x9d/0xb0 [ 1355.157120][T26107] ? sg_poll+0x3f0/0x3f0 [ 1355.161351][T26107] __se_sys_ioctl+0xfb/0x170 [ 1355.165933][T26107] do_syscall_64+0x44/0xd0 [ 1355.170346][T26107] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1355.176241][T26107] RIP: 0033:0x7fc9fdb8f059 [ 1355.180647][T26107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1355.200251][T26107] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.208666][T26107] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1355.216633][T26107] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1355.224597][T26107] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1355.232559][T26107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.240524][T26107] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1355.248508][T26107] 12:42:26 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1355.270871][T19770] usb 4-1: USB disconnect, device number 59 [ 1355.277689][T26107] debugfs: out of free dentries, can not create directory 'sg0' [ 1355.286221][T26107] blktrace: debugfs_dir not present for sg0 so skipping [ 1355.476020][T19360] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1355.696274][T19770] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1355.745843][T19360] usb 1-1: Using ep0 maxpacket: 16 [ 1355.935831][T19770] usb 4-1: Using ep0 maxpacket: 16 [ 1356.067740][T19360] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1356.077197][T19360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.085248][T19360] usb 1-1: Product: syz [ 1356.089978][T19360] usb 1-1: Manufacturer: syz [ 1356.094637][T19360] usb 1-1: SerialNumber: syz [ 1356.101090][T19360] usb 1-1: config 0 descriptor?? [ 1356.216027][T19770] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1356.225193][T19770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.234169][T19770] usb 4-1: Product: syz [ 1356.238653][T19770] usb 4-1: Manufacturer: syz [ 1356.243327][T19770] usb 4-1: SerialNumber: syz [ 1356.251753][T19770] usb 4-1: config 0 descriptor?? [ 1357.395957][T19770] usb 4-1: Cannot set autoneg [ 1357.400908][T19770] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1357.895940][T19360] usb 1-1: Cannot set autoneg [ 1357.901235][T19360] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1358.391127][T19769] usb 4-1: USB disconnect, device number 60 12:42:30 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d0000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:30 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x0, 0x8) [ 1358.889013][ T917] usb 1-1: USB disconnect, device number 20 12:42:30 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 8) 12:42:30 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1358.982015][T26125] FAULT_INJECTION: forcing a failure. [ 1358.982015][T26125] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.997761][T26121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1359.010986][T26125] CPU: 1 PID: 26125 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1359.021538][T26125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.031610][T26125] Call Trace: [ 1359.034911][T26125] [ 1359.037857][T26125] dump_stack_lvl+0x201/0x2d8 [ 1359.042562][T26125] ? show_regs_print_info+0x12/0x12 [ 1359.047795][T26125] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1359.053586][T26125] should_fail+0x384/0x4b0 [ 1359.058034][T26125] ? __d_alloc+0x2a/0x700 [ 1359.062388][T26125] should_failslab+0x5/0x20 [ 1359.066920][T26125] kmem_cache_alloc+0x72/0x310 [ 1359.071706][T26125] __d_alloc+0x2a/0x700 [ 1359.075887][T26125] ? rcu_read_lock_sched_held+0x89/0x130 [ 1359.081556][T26125] d_alloc_parallel+0xd3/0x15c0 [ 1359.086438][T26125] ? memset+0x1f/0x40 [ 1359.090457][T26125] ? lockdep_init_map_type+0x9f/0x9b0 [ 1359.095863][T26125] ? lockdep_softirqs_off+0x420/0x420 [ 1359.101267][T26125] ? d_hash_and_lookup+0x1c0/0x1c0 [ 1359.106389][T26125] ? __init_waitqueue_head+0x68/0xd0 [ 1359.111684][T26125] __lookup_slow+0x110/0x3d0 [ 1359.116282][T26125] ? lookup_one_len+0x2c0/0x2c0 [ 1359.121148][T26125] lookup_one_len+0x186/0x2c0 [ 1359.125828][T26125] ? lookup_one_common+0x4b0/0x4b0 [ 1359.130943][T26125] ? mntput+0x63/0xb0 [ 1359.134927][T26125] start_creating+0x184/0x330 [ 1359.139605][T26125] __debugfs_create_file+0x74/0x550 [ 1359.144799][T26125] ? debugfs_create_dir+0x3dc/0x4e0 [ 1359.149998][T26125] do_blk_trace_setup+0x4b7/0xa00 [ 1359.155032][T26125] blk_trace_setup+0xfd/0x1b0 [ 1359.159708][T26125] ? __blk_trace_remove+0x1e0/0x1e0 [ 1359.164909][T26125] ? smk_access+0x470/0x4a0 [ 1359.169419][T26125] sg_ioctl+0x1440/0x2d80 [ 1359.173760][T26125] ? sg_poll+0x3f0/0x3f0 [ 1359.178016][T26125] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1359.182969][T26125] ? security_file_ioctl+0x9d/0xb0 [ 1359.188082][T26125] ? sg_poll+0x3f0/0x3f0 [ 1359.192321][T26125] __se_sys_ioctl+0xfb/0x170 [ 1359.196910][T26125] do_syscall_64+0x44/0xd0 [ 1359.201329][T26125] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1359.207223][T26125] RIP: 0033:0x7fc9fdb8f059 [ 1359.211635][T26125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:42:30 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) [ 1359.231235][T26125] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.239650][T26125] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1359.247620][T26125] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1359.255595][T26125] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.263575][T26125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1359.271546][T26125] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1359.279539][T26125] 12:42:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1359.309545][T26128] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:42:30 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 9) [ 1359.358402][T26128] bond178 (uninitialized): Released all slaves 12:42:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1359.399895][T26130] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffff", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1359.446887][T19360] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1359.474005][T26135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1359.519153][T26138] FAULT_INJECTION: forcing a failure. [ 1359.519153][T26138] name failslab, interval 1, probability 0, space 0, times 0 [ 1359.554651][T26138] CPU: 1 PID: 26138 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1359.565206][T26138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.575277][T26138] Call Trace: [ 1359.578574][T26138] [ 1359.581516][T26138] dump_stack_lvl+0x201/0x2d8 [ 1359.586203][T26138] ? show_regs_print_info+0x12/0x12 [ 1359.591430][T26138] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1359.597177][T26138] ? __might_sleep+0xe0/0xe0 [ 1359.601807][T26138] should_fail+0x384/0x4b0 [ 1359.606258][T26138] ? new_inode_pseudo+0x79/0x220 [ 1359.611223][T26138] should_failslab+0x5/0x20 [ 1359.615749][T26138] kmem_cache_alloc+0x72/0x310 [ 1359.620539][T26138] new_inode_pseudo+0x79/0x220 [ 1359.625325][T26138] new_inode+0x25/0x1d0 [ 1359.629489][T26138] ? start_creating+0x21f/0x330 [ 1359.634362][T26138] __debugfs_create_file+0x146/0x550 [ 1359.639647][T26138] ? debugfs_create_dir+0x3dc/0x4e0 [ 1359.644962][T26138] do_blk_trace_setup+0x4b7/0xa00 [ 1359.650009][T26138] blk_trace_setup+0xfd/0x1b0 [ 1359.654722][T26138] ? __blk_trace_remove+0x1e0/0x1e0 [ 1359.659941][T26138] ? smk_access+0x470/0x4a0 [ 1359.664449][T26138] sg_ioctl+0x1440/0x2d80 [ 1359.668792][T26138] ? sg_poll+0x3f0/0x3f0 [ 1359.673081][T26138] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1359.678039][T26138] ? security_file_ioctl+0x9d/0xb0 [ 1359.683164][T26138] ? sg_poll+0x3f0/0x3f0 [ 1359.687404][T26138] __se_sys_ioctl+0xfb/0x170 [ 1359.692013][T26138] do_syscall_64+0x44/0xd0 [ 1359.696453][T26138] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1359.702365][T26138] RIP: 0033:0x7fc9fdb8f059 [ 1359.706779][T26138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1359.726405][T26138] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1359.734841][T26138] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1359.742840][T26138] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1359.750826][T26138] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1359.758813][T26138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 12:42:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) (fail_nth: 1) [ 1359.766800][T26138] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1359.774815][T26138] [ 1359.789982][ T917] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1359.802541][T26142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1359.803992][T26138] debugfs: out of free dentries, can not create file 'dropped' [ 1359.873818][T26144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1359.903919][T26144] bond178 (uninitialized): Released all slaves [ 1359.904130][T26148] FAULT_INJECTION: forcing a failure. [ 1359.904130][T26148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.920654][T26146] netlink: 4848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1359.934669][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1359.940422][T26148] CPU: 1 PID: 26148 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1359.950945][T26148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1359.961016][T26148] Call Trace: [ 1359.964310][T26148] [ 1359.967251][T26148] dump_stack_lvl+0x201/0x2d8 [ 1359.971952][T26148] ? show_regs_print_info+0x12/0x12 [ 1359.977171][T26148] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1359.982917][T26148] ? __might_fault+0xb6/0x110 [ 1359.987609][T26148] ? __lock_acquire+0x2b00/0x2b00 [ 1359.992658][T26148] should_fail+0x384/0x4b0 [ 1359.997098][T26148] _copy_from_user+0x2d/0x170 [ 1360.001798][T26148] iovec_from_user+0x13f/0x390 [ 1360.006829][T26148] ? rcu_lock_release+0x9/0x20 [ 1360.011601][T26148] __import_iovec+0xc6/0x530 [ 1360.016193][T26148] ? iovec_from_user+0x390/0x390 [ 1360.021163][T26148] import_iovec+0xe6/0x120 [ 1360.025598][T26148] do_preadv+0x1d6/0x350 [ 1360.029835][T26148] ? do_writev+0x470/0x470 [ 1360.034249][T26148] ? __context_tracking_exit+0x7a/0xd0 [ 1360.039802][T26148] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1360.045804][T26148] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1360.051814][T26148] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1360.057809][T26148] ? lockdep_hardirqs_on+0x95/0x140 [ 1360.062999][T26148] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1360.068979][T26148] do_syscall_64+0x44/0xd0 [ 1360.073417][T26148] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1360.079308][T26148] RIP: 0033:0x7f85fa70b059 [ 1360.083736][T26148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1360.103351][T26148] RSP: 002b:00007f85f9080168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1360.111765][T26148] RAX: ffffffffffffffda RBX: 00007f85fa81df60 RCX: 00007f85fa70b059 [ 1360.119756][T26148] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1360.127739][T26148] RBP: 00007f85f90801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1360.135725][T26148] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1360.143700][T26148] R13: 00007ffc085fb48f R14: 00007f85f9080300 R15: 0000000000022000 [ 1360.151676][T26148] [ 1360.285997][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 1360.446090][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1360.455149][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.463779][T19360] usb 4-1: Product: syz [ 1360.468380][T19360] usb 4-1: Manufacturer: syz [ 1360.473163][T19360] usb 4-1: SerialNumber: syz [ 1360.480435][T19360] usb 4-1: config 0 descriptor?? [ 1360.595990][ T917] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1360.605403][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.614142][ T917] usb 1-1: Product: syz [ 1360.618697][ T917] usb 1-1: Manufacturer: syz [ 1360.623310][ T917] usb 1-1: SerialNumber: syz [ 1360.633250][ T917] usb 1-1: config 0 descriptor?? [ 1361.517936][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.524309][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.610606][T19360] usb 4-1: Cannot set autoneg [ 1361.615435][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1362.456090][ T917] usb 1-1: Cannot set autoneg [ 1362.460981][ T917] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1362.606117][T19770] usb 4-1: USB disconnect, device number 61 12:42:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:34 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 10) 12:42:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffff", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:34 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) (fail_nth: 2) 12:42:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1363.448311][ T917] usb 1-1: USB disconnect, device number 21 [ 1363.494754][T26160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1363.509597][T26163] FAULT_INJECTION: forcing a failure. [ 1363.509597][T26163] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.530566][T26159] FAULT_INJECTION: forcing a failure. [ 1363.530566][T26159] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.547385][T26163] CPU: 1 PID: 26163 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1363.557934][T26163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.568010][T26163] Call Trace: [ 1363.571304][T26163] [ 1363.574251][T26163] dump_stack_lvl+0x201/0x2d8 [ 1363.578957][T26163] ? show_regs_print_info+0x12/0x12 [ 1363.584173][T26163] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1363.589917][T26163] ? __might_sleep+0xe0/0xe0 [ 1363.594524][T26163] should_fail+0x384/0x4b0 [ 1363.598948][T26163] ? kvmalloc_node+0x6e/0xe0 [ 1363.603540][T26163] should_failslab+0x5/0x20 [ 1363.608052][T26163] __kmalloc_node+0x97/0x420 [ 1363.612645][T26163] ? seq_read_iter+0xb6/0xdc0 [ 1363.617331][T26163] kvmalloc_node+0x6e/0xe0 [ 1363.621760][T26163] traverse+0xdb/0x530 [ 1363.625834][T26163] ? rcu_read_lock_sched_held+0x89/0x130 [ 1363.631472][T26163] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1363.637468][T26163] seq_read_iter+0xce1/0xdc0 [ 1363.642068][T26163] ? iov_iter_init+0x10b/0x220 [ 1363.646842][T26163] ? fault_in_iov_iter_writeable+0x1d0/0x1d0 [ 1363.652839][T26163] ? __might_fault+0xb6/0x110 [ 1363.657539][T26163] seq_read+0x473/0x5e0 [ 1363.661710][T26163] ? seq_open+0x140/0x140 [ 1363.666042][T26163] ? _copy_from_user+0x10c/0x170 [ 1363.670992][T26163] ? __import_iovec+0x37b/0x530 [ 1363.675855][T26163] ? seq_open+0x140/0x140 [ 1363.680192][T26163] proc_reg_read+0x1d2/0x2c0 [ 1363.684787][T26163] do_iter_read+0x4fe/0x780 [ 1363.689305][T26163] do_preadv+0x210/0x350 [ 1363.693554][T26163] ? do_writev+0x470/0x470 [ 1363.697970][T26163] ? __context_tracking_exit+0x7a/0xd0 [ 1363.703446][T26163] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1363.709438][T26163] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1363.715433][T26163] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1363.721415][T26163] ? lockdep_hardirqs_on+0x95/0x140 [ 1363.726617][T26163] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1363.732604][T26163] do_syscall_64+0x44/0xd0 [ 1363.737036][T26163] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1363.742929][T26163] RIP: 0033:0x7f85fa70b059 [ 1363.747340][T26163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1363.766948][T26163] RSP: 002b:00007f85f9080168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1363.775370][T26163] RAX: ffffffffffffffda RBX: 00007f85fa81df60 RCX: 00007f85fa70b059 [ 1363.783350][T26163] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1363.791336][T26163] RBP: 00007f85f90801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.799314][T26163] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1363.807294][T26163] R13: 00007ffc085fb48f R14: 00007f85f9080300 R15: 0000000000022000 [ 1363.815299][T26163] [ 1363.818352][T26159] CPU: 0 PID: 26159 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1363.828874][T26159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1363.838943][T26159] Call Trace: [ 1363.842232][T26159] [ 1363.845173][T26159] dump_stack_lvl+0x201/0x2d8 [ 1363.849879][T26159] ? show_regs_print_info+0x12/0x12 [ 1363.855096][T26159] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1363.860824][T26159] ? __might_sleep+0xe0/0xe0 [ 1363.865441][T26159] should_fail+0x384/0x4b0 [ 1363.869861][T26159] ? security_inode_alloc+0x32/0x1d0 [ 1363.875146][T26159] should_failslab+0x5/0x20 [ 1363.879649][T26159] kmem_cache_alloc+0x72/0x310 [ 1363.884413][T26159] ? from_kuid_munged+0x3b0/0x3b0 [ 1363.889526][T26159] security_inode_alloc+0x32/0x1d0 [ 1363.894638][T26159] inode_init_always+0x3e2/0xa60 [ 1363.899578][T26159] new_inode_pseudo+0x90/0x220 [ 1363.904344][T26159] new_inode+0x25/0x1d0 [ 1363.908502][T26159] ? start_creating+0x21f/0x330 [ 1363.913360][T26159] __debugfs_create_file+0x146/0x550 [ 1363.918643][T26159] ? debugfs_create_dir+0x3dc/0x4e0 [ 1363.923847][T26159] do_blk_trace_setup+0x4b7/0xa00 [ 1363.928881][T26159] blk_trace_setup+0xfd/0x1b0 [ 1363.933555][T26159] ? __blk_trace_remove+0x1e0/0x1e0 [ 1363.938775][T26159] ? smk_access+0x470/0x4a0 [ 1363.943299][T26159] sg_ioctl+0x1440/0x2d80 [ 1363.947655][T26159] ? sg_poll+0x3f0/0x3f0 [ 1363.951915][T26159] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1363.956844][T26159] ? security_file_ioctl+0x9d/0xb0 [ 1363.961951][T26159] ? sg_poll+0x3f0/0x3f0 [ 1363.966187][T26159] __se_sys_ioctl+0xfb/0x170 [ 1363.970773][T26159] do_syscall_64+0x44/0xd0 [ 1363.975186][T26159] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1363.981070][T26159] RIP: 0033:0x7fc9fdb8f059 [ 1363.985472][T26159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1364.005076][T26159] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1364.013491][T26159] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1364.021464][T26159] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1364.029441][T26159] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.037412][T26159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:42:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) (fail_nth: 3) [ 1364.045382][T26159] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1364.053371][T26159] [ 1364.068002][T26161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1364.076417][T26159] debugfs: out of free dentries, can not create file 'dropped' [ 1364.088362][T26161] bond178 (uninitialized): Released all slaves 12:42:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffff", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1364.113844][T26168] netlink: 4848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1364.145502][T26172] FAULT_INJECTION: forcing a failure. [ 1364.145502][T26172] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:42:35 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 11) [ 1364.205677][T26172] CPU: 0 PID: 26172 Comm: syz-executor.4 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1364.216237][T26172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.226308][T26172] Call Trace: [ 1364.229598][T26172] [ 1364.232542][T26172] dump_stack_lvl+0x201/0x2d8 [ 1364.237241][T26172] ? show_regs_print_info+0x12/0x12 [ 1364.242459][T26172] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1364.248207][T26172] ? __might_fault+0xb6/0x110 [ 1364.252910][T26172] ? __lock_acquire+0x2b00/0x2b00 [ 1364.257974][T26172] should_fail+0x384/0x4b0 [ 1364.258129][T26175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1364.262415][T26172] _copy_to_iter+0x26c/0x15a0 [ 1364.262497][T26172] ? iov_iter_init+0x220/0x220 [ 1364.273978][T26175] bond178 (uninitialized): Released all slaves [ 1364.276429][T26172] ? traverse+0x4ff/0x530 [ 1364.276463][T26172] ? __virt_addr_valid+0x21b/0x2d0 [ 1364.276526][T26172] ? __check_object_size+0x262/0x340 12:42:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1364.276549][T26172] seq_read_iter+0x2fe/0xdc0 [ 1364.276578][T26172] ? fault_in_iov_iter_writeable+0x1d0/0x1d0 [ 1364.276612][T26172] seq_read+0x473/0x5e0 [ 1364.276640][T26172] ? seq_open+0x140/0x140 [ 1364.276662][T26172] ? _copy_from_user+0x10c/0x170 [ 1364.276692][T26172] ? __import_iovec+0x37b/0x530 [ 1364.276720][T26172] ? seq_open+0x140/0x140 [ 1364.276737][T26172] proc_reg_read+0x1d2/0x2c0 [ 1364.339988][T26172] do_iter_read+0x4fe/0x780 [ 1364.344527][T26172] do_preadv+0x210/0x350 [ 1364.348797][T26172] ? do_writev+0x470/0x470 [ 1364.353232][T26172] ? __context_tracking_exit+0x7a/0xd0 [ 1364.358733][T26172] ? lockdep_hardirqs_on_prepare+0x412/0x780 [ 1364.364735][T26172] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 1364.370742][T26172] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1364.376755][T26172] ? lockdep_hardirqs_on+0x95/0x140 [ 1364.381948][T26172] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1364.387924][T26172] do_syscall_64+0x44/0xd0 [ 1364.392352][T26172] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1364.398241][T26172] RIP: 0033:0x7f85fa70b059 [ 1364.402671][T26172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1364.422280][T26172] RSP: 002b:00007f85f9080168 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1364.430702][T26172] RAX: ffffffffffffffda RBX: 00007f85fa81df60 RCX: 00007f85fa70b059 [ 1364.438665][T26172] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1364.446623][T26172] RBP: 00007f85f90801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.454587][T26172] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1364.462544][T26172] R13: 00007ffc085fb48f R14: 00007f85f9080300 R15: 0000000000022000 [ 1364.470517][T26172] [ 1364.481115][T26183] netlink: 4848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1364.485837][ T3684] usb 4-1: new high-speed USB device number 62 using dummy_hcd 12:42:35 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) (fail_nth: 4) [ 1364.502085][T26184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1364.538821][T26181] FAULT_INJECTION: forcing a failure. [ 1364.538821][T26181] name failslab, interval 1, probability 0, space 0, times 0 [ 1364.546858][T26184] bond178 (uninitialized): Released all slaves [ 1364.552260][ T917] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1364.595557][T26181] CPU: 0 PID: 26181 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1364.606102][T26181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1364.616178][T26181] Call Trace: [ 1364.619468][T26181] [ 1364.622397][T26181] dump_stack_lvl+0x201/0x2d8 [ 1364.627070][T26181] ? show_regs_print_info+0x12/0x12 [ 1364.632262][T26181] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1364.637986][T26181] should_fail+0x384/0x4b0 [ 1364.642399][T26181] ? __d_alloc+0x2a/0x700 [ 1364.646717][T26181] should_failslab+0x5/0x20 [ 1364.651231][T26181] kmem_cache_alloc+0x72/0x310 [ 1364.656000][T26181] __d_alloc+0x2a/0x700 [ 1364.660164][T26181] ? rcu_read_lock_sched_held+0x89/0x130 [ 1364.665808][T26181] d_alloc_parallel+0xd3/0x15c0 [ 1364.670670][T26181] ? memset+0x1f/0x40 [ 1364.674658][T26181] ? lockdep_init_map_type+0x9f/0x9b0 [ 1364.680028][T26181] ? lockdep_softirqs_off+0x420/0x420 [ 1364.685429][T26181] ? d_hash_and_lookup+0x1c0/0x1c0 [ 1364.690566][T26181] ? __init_waitqueue_head+0x68/0xd0 [ 1364.695870][T26181] __lookup_slow+0x110/0x3d0 [ 1364.700495][T26181] ? lookup_one_len+0x2c0/0x2c0 [ 1364.705348][T26181] lookup_one_len+0x186/0x2c0 [ 1364.710031][T26181] ? lookup_one_common+0x4b0/0x4b0 [ 1364.715129][T26181] ? mntput+0x63/0xb0 [ 1364.719112][T26181] start_creating+0x184/0x330 [ 1364.723839][T26181] __debugfs_create_file+0x74/0x550 [ 1364.729031][T26181] do_blk_trace_setup+0x4d5/0xa00 [ 1364.734051][T26181] blk_trace_setup+0xfd/0x1b0 [ 1364.738724][T26181] ? __blk_trace_remove+0x1e0/0x1e0 [ 1364.743931][T26181] ? smk_access+0x470/0x4a0 [ 1364.748432][T26181] sg_ioctl+0x1440/0x2d80 [ 1364.752765][T26181] ? sg_poll+0x3f0/0x3f0 [ 1364.757024][T26181] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1364.761951][T26181] ? security_file_ioctl+0x9d/0xb0 [ 1364.767053][T26181] ? sg_poll+0x3f0/0x3f0 [ 1364.771284][T26181] __se_sys_ioctl+0xfb/0x170 [ 1364.775874][T26181] do_syscall_64+0x44/0xd0 [ 1364.780309][T26181] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1364.786217][T26181] RIP: 0033:0x7fc9fdb8f059 [ 1364.790646][T26181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1364.810351][T26181] RSP: 002b:00007fc9fc4c2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1364.818783][T26181] RAX: ffffffffffffffda RBX: 00007fc9fdca2100 RCX: 00007fc9fdb8f059 [ 1364.826771][T26181] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1364.834756][T26181] RBP: 00007fc9fc4c21d0 R08: 0000000000000000 R09: 0000000000000000 [ 1364.835838][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 1364.842803][T26181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1364.842821][T26181] R13: 00007ffd32f103ff R14: 00007fc9fc4c2300 R15: 0000000000022000 [ 1364.842856][T26181] [ 1364.985878][ T3684] usb 4-1: Using ep0 maxpacket: 16 [ 1365.156012][ T917] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1365.165235][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.178272][ T917] usb 1-1: Product: syz [ 1365.182606][ T917] usb 1-1: Manufacturer: syz [ 1365.189245][ T917] usb 1-1: SerialNumber: syz [ 1365.206806][ T917] usb 1-1: config 0 descriptor?? [ 1365.326153][ T3684] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1365.335458][ T3684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.344641][ T3684] usb 4-1: Product: syz [ 1365.349002][ T3684] usb 4-1: Manufacturer: syz [ 1365.353925][ T3684] usb 4-1: SerialNumber: syz [ 1365.361036][ T3684] usb 4-1: config 0 descriptor?? [ 1366.505997][ T3684] usb 4-1: Cannot set autoneg [ 1366.510872][ T3684] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1367.011282][ T917] usb 1-1: Cannot set autoneg [ 1367.016163][ T917] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1367.485482][T19358] usb 4-1: USB disconnect, device number 62 12:42:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) 12:42:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff0000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:39 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 12) 12:42:39 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:42:39 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) [ 1367.996108][T19358] usb 1-1: USB disconnect, device number 22 12:42:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0x3e}], 0x1, 0x2, 0x0) [ 1368.067437][T26203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1368.069860][T26196] FAULT_INJECTION: forcing a failure. [ 1368.069860][T26196] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.079578][T26203] bond178 (uninitialized): Released all slaves [ 1368.107432][T26196] CPU: 1 PID: 26196 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1368.117976][T26196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.128049][T26196] Call Trace: [ 1368.131346][T26196] [ 1368.134287][T26196] dump_stack_lvl+0x201/0x2d8 [ 1368.138999][T26196] ? show_regs_print_info+0x12/0x12 [ 1368.144217][T26196] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1368.149972][T26196] should_fail+0x384/0x4b0 [ 1368.154413][T26196] ? __d_alloc+0x2a/0x700 [ 1368.158756][T26196] should_failslab+0x5/0x20 [ 1368.163285][T26196] kmem_cache_alloc+0x72/0x310 [ 1368.168088][T26196] __d_alloc+0x2a/0x700 [ 1368.172261][T26196] ? rcu_read_lock_sched_held+0x89/0x130 [ 1368.177916][T26196] d_alloc_parallel+0xd3/0x15c0 [ 1368.182784][T26196] ? memset+0x1f/0x40 [ 1368.186777][T26196] ? lockdep_init_map_type+0x9f/0x9b0 [ 1368.192166][T26196] ? lockdep_softirqs_off+0x420/0x420 [ 1368.197561][T26196] ? d_hash_and_lookup+0x1c0/0x1c0 [ 1368.202688][T26196] ? __init_waitqueue_head+0x68/0xd0 [ 1368.207988][T26196] __lookup_slow+0x110/0x3d0 [ 1368.212596][T26196] ? lookup_one_len+0x2c0/0x2c0 [ 1368.217481][T26196] lookup_one_len+0x186/0x2c0 [ 1368.222183][T26196] ? lookup_one_common+0x4b0/0x4b0 [ 1368.227329][T26196] ? mntput+0x63/0xb0 [ 1368.231356][T26196] start_creating+0x184/0x330 [ 1368.236045][T26196] __debugfs_create_file+0x74/0x550 [ 1368.241263][T26196] do_blk_trace_setup+0x4d5/0xa00 [ 1368.246330][T26196] blk_trace_setup+0xfd/0x1b0 [ 1368.251026][T26196] ? __blk_trace_remove+0x1e0/0x1e0 [ 1368.256251][T26196] ? smk_access+0x470/0x4a0 [ 1368.260782][T26196] sg_ioctl+0x1440/0x2d80 [ 1368.265135][T26196] ? sg_poll+0x3f0/0x3f0 [ 1368.269418][T26196] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1368.274369][T26196] ? security_file_ioctl+0x9d/0xb0 [ 1368.279502][T26196] ? sg_poll+0x3f0/0x3f0 [ 1368.283758][T26196] __se_sys_ioctl+0xfb/0x170 [ 1368.288452][T26196] do_syscall_64+0x44/0xd0 [ 1368.292891][T26196] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1368.298802][T26196] RIP: 0033:0x7fc9fdb8f059 12:42:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0x2000035c}], 0x1, 0x2, 0x0) 12:42:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0x7ffff000}], 0x1, 0x2, 0x0) 12:42:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xffffffffffffffff}], 0x1, 0x2, 0x0) [ 1368.303226][T26196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1368.322848][T26196] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.331284][T26196] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1368.339279][T26196] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1368.347272][T26196] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1368.355263][T26196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:42:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x2, 0x2, 0x0) [ 1368.363256][T26196] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1368.371267][T26196] [ 1368.376242][T26202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:39 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 13) 12:42:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1368.432554][T26215] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff0000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x3, 0x2, 0x0) [ 1368.545958][T19360] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1368.554107][T26219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:42:39 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x4, 0x2, 0x0) [ 1368.630313][T26223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1368.644045][T26225] FAULT_INJECTION: forcing a failure. [ 1368.644045][T26225] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.664256][T26225] CPU: 0 PID: 26225 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1368.674794][T26225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1368.684861][T26225] Call Trace: [ 1368.688148][T26225] [ 1368.691085][T26225] dump_stack_lvl+0x201/0x2d8 [ 1368.695790][T26225] ? show_regs_print_info+0x12/0x12 [ 1368.701005][T26225] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1368.706831][T26225] ? __might_sleep+0xe0/0xe0 [ 1368.711445][T26225] should_fail+0x384/0x4b0 [ 1368.715877][T26225] ? security_inode_alloc+0x32/0x1d0 [ 1368.721169][T26225] should_failslab+0x5/0x20 [ 1368.725684][T26225] kmem_cache_alloc+0x72/0x310 [ 1368.730460][T26225] ? from_kuid_munged+0x3b0/0x3b0 [ 1368.735507][T26225] security_inode_alloc+0x32/0x1d0 [ 1368.740638][T26225] inode_init_always+0x3e2/0xa60 [ 1368.745593][T26225] new_inode_pseudo+0x90/0x220 [ 1368.746070][T19358] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1368.750370][T26225] new_inode+0x25/0x1d0 [ 1368.750399][T26225] ? start_creating+0x21f/0x330 [ 1368.750424][T26225] __debugfs_create_file+0x146/0x550 [ 1368.750452][T26225] do_blk_trace_setup+0x4d5/0xa00 [ 1368.777339][T26225] blk_trace_setup+0xfd/0x1b0 [ 1368.782040][T26225] ? __blk_trace_remove+0x1e0/0x1e0 [ 1368.787268][T26225] ? smk_access+0x470/0x4a0 [ 1368.791092][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1368.791801][T26225] sg_ioctl+0x1440/0x2d80 [ 1368.801220][T26225] ? sg_poll+0x3f0/0x3f0 [ 1368.805515][T26225] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1368.810471][T26225] ? security_file_ioctl+0x9d/0xb0 [ 1368.815606][T26225] ? sg_poll+0x3f0/0x3f0 [ 1368.819862][T26225] __se_sys_ioctl+0xfb/0x170 [ 1368.824472][T26225] do_syscall_64+0x44/0xd0 [ 1368.828908][T26225] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1368.834810][T26225] RIP: 0033:0x7fc9fdb8f059 [ 1368.839251][T26225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1368.858873][T26225] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1368.867314][T26225] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1368.875305][T26225] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1368.883291][T26225] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1368.891274][T26225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1368.899244][T26225] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1368.907249][T26225] [ 1368.914312][T26225] debugfs: out of free dentries, can not create file 'msg' [ 1369.016043][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1369.085959][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1369.095156][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.103924][T19360] usb 4-1: Product: syz [ 1369.108545][T19360] usb 4-1: Manufacturer: syz [ 1369.113246][T19360] usb 4-1: SerialNumber: syz [ 1369.129939][T19360] usb 4-1: config 0 descriptor?? [ 1369.295996][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1369.305172][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.313383][T19358] usb 1-1: Product: syz [ 1369.317707][T19358] usb 1-1: Manufacturer: syz [ 1369.322379][T19358] usb 1-1: SerialNumber: syz [ 1369.337597][T19358] usb 1-1: config 0 descriptor?? [ 1370.275943][T19360] usb 4-1: Cannot set autoneg [ 1370.280757][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1371.136044][T19358] usb 1-1: Cannot set autoneg [ 1371.140895][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 12:42:42 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1371.270636][T19770] usb 4-1: USB disconnect, device number 63 [ 1371.725847][T19770] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1372.005888][T19770] usb 4-1: Using ep0 maxpacket: 16 12:42:43 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x5, 0x2, 0x0) 12:42:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff0000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:43 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 14) [ 1372.126484][ T5] usb 1-1: USB disconnect, device number 23 [ 1372.164825][T26245] __nla_validate_parse: 1 callbacks suppressed [ 1372.164844][T26245] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:42:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x6, 0x2, 0x0) [ 1372.204885][T26243] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1372.221606][T26246] FAULT_INJECTION: forcing a failure. [ 1372.221606][T26246] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.280368][T26250] netlink: 4968 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1372.285970][T26246] CPU: 1 PID: 26246 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1372.300330][T26246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.310396][T26246] Call Trace: [ 1372.313691][T26246] [ 1372.316632][T26246] dump_stack_lvl+0x201/0x2d8 [ 1372.321329][T26246] ? show_regs_print_info+0x12/0x12 [ 1372.326559][T26246] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1372.332329][T26246] ? __might_sleep+0xe0/0xe0 [ 1372.336951][T26246] should_fail+0x384/0x4b0 [ 1372.341388][T26246] ? relay_open+0x110/0x990 [ 1372.345970][T26246] should_failslab+0x5/0x20 [ 1372.350489][T26246] kmem_cache_alloc_trace+0x71/0x330 [ 1372.355813][T26246] relay_open+0x110/0x990 [ 1372.360174][T26246] do_blk_trace_setup+0x51c/0xa00 [ 1372.365290][T26246] blk_trace_setup+0xfd/0x1b0 [ 1372.370009][T26246] ? __blk_trace_remove+0x1e0/0x1e0 [ 1372.375245][T26246] ? smk_access+0x470/0x4a0 [ 1372.379777][T26246] sg_ioctl+0x1440/0x2d80 [ 1372.384136][T26246] ? sg_poll+0x3f0/0x3f0 [ 1372.388416][T26246] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1372.393370][T26246] ? security_file_ioctl+0x9d/0xb0 [ 1372.398500][T26246] ? sg_poll+0x3f0/0x3f0 [ 1372.402765][T26246] __se_sys_ioctl+0xfb/0x170 [ 1372.407375][T26246] do_syscall_64+0x44/0xd0 [ 1372.411815][T26246] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1372.417721][T26246] RIP: 0033:0x7fc9fdb8f059 12:42:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x7, 0x2, 0x0) 12:42:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1372.422138][T26246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1372.424531][T26257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1372.441754][T26246] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.441785][T26246] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1372.441799][T26246] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 12:42:43 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 15) 12:42:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x8, 0x2, 0x0) [ 1372.441813][T26246] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1372.441825][T26246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1372.441837][T26246] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1372.441870][T26246] [ 1372.503651][T19770] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1372.545772][T19770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.550623][T26260] FAULT_INJECTION: forcing a failure. [ 1372.550623][T26260] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.553792][T19770] usb 4-1: Product: syz [ 1372.553813][T19770] usb 4-1: Manufacturer: syz [ 1372.553829][T19770] usb 4-1: SerialNumber: syz [ 1372.572861][T19770] usb 4-1: config 0 descriptor?? [ 1372.580932][T26260] CPU: 1 PID: 26260 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1372.596596][T26260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1372.606674][T26260] Call Trace: [ 1372.609965][T26260] [ 1372.612908][T26260] dump_stack_lvl+0x201/0x2d8 [ 1372.617613][T26260] ? show_regs_print_info+0x12/0x12 [ 1372.622837][T26260] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1372.628591][T26260] ? __might_sleep+0xe0/0xe0 [ 1372.633376][T26260] ? __mutex_lock_common+0x437/0x2490 [ 1372.637459][T26262] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1372.638766][T26260] should_fail+0x384/0x4b0 [ 1372.652449][T26260] ? relay_open_buf+0x14a/0xe80 [ 1372.657324][T26260] should_failslab+0x5/0x20 [ 1372.661837][T26260] kmem_cache_alloc_trace+0x71/0x330 [ 1372.667116][T26260] ? mutex_lock_io_nested+0x60/0x60 [ 1372.672320][T26260] relay_open_buf+0x14a/0xe80 [ 1372.676980][T26260] ? strlcpy+0x75/0xb0 [ 1372.681035][T26260] ? memcpy+0x3c/0x60 [ 1372.685105][T26260] relay_open+0x3cb/0x990 [ 1372.689435][T26260] do_blk_trace_setup+0x51c/0xa00 [ 1372.694455][T26260] blk_trace_setup+0xfd/0x1b0 [ 1372.699129][T26260] ? __blk_trace_remove+0x1e0/0x1e0 [ 1372.704327][T26260] ? smk_access+0x470/0x4a0 [ 1372.708827][T26260] sg_ioctl+0x1440/0x2d80 [ 1372.713154][T26260] ? sg_poll+0x3f0/0x3f0 [ 1372.717411][T26260] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1372.722336][T26260] ? security_file_ioctl+0x9d/0xb0 [ 1372.727432][T26260] ? sg_poll+0x3f0/0x3f0 [ 1372.731675][T26260] __se_sys_ioctl+0xfb/0x170 [ 1372.736256][T26260] do_syscall_64+0x44/0xd0 [ 1372.740673][T26260] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1372.746553][T26260] RIP: 0033:0x7fc9fdb8f059 [ 1372.750956][T26260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1372.770547][T26260] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1372.779023][T26260] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1372.786991][T26260] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1372.794951][T26260] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1372.802914][T26260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1372.810958][T26260] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1372.818929][T26260] [ 1372.851343][T26262] netlink: 4712 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1373.045838][ T5] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1373.305860][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 1373.635988][ T5] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1373.645943][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.654290][ T5] usb 1-1: Product: syz [ 1373.659032][ T5] usb 1-1: Manufacturer: syz [ 1373.663819][ T5] usb 1-1: SerialNumber: syz [ 1373.671510][ T5] usb 1-1: config 0 descriptor?? [ 1373.926042][T19770] usb 4-1: Cannot set autoneg [ 1373.932580][T19770] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:42:46 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1374.917986][T19770] usb 4-1: USB disconnect, device number 64 [ 1375.335885][T19770] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1375.475896][ T5] usb 1-1: Cannot set autoneg [ 1375.481631][ T5] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1375.575943][T19770] usb 4-1: Using ep0 maxpacket: 16 [ 1375.856010][T19770] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1375.865088][T19770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.873400][T19770] usb 4-1: Product: syz [ 1375.877786][T19770] usb 4-1: Manufacturer: syz [ 1375.882458][T19770] usb 4-1: SerialNumber: syz [ 1375.897752][T19770] usb 4-1: config 0 descriptor?? 12:42:47 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x9, 0x2, 0x0) 12:42:47 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 16) 12:42:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1376.464448][ T917] usb 1-1: USB disconnect, device number 24 12:42:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0xa, 0x2, 0x0) [ 1376.507183][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1376.521323][T26282] FAULT_INJECTION: forcing a failure. [ 1376.521323][T26282] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.542322][T26282] CPU: 0 PID: 26282 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1376.552864][T26282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.563020][T26282] Call Trace: [ 1376.566313][T26282] [ 1376.569263][T26282] dump_stack_lvl+0x201/0x2d8 [ 1376.573975][T26282] ? show_regs_print_info+0x12/0x12 [ 1376.579278][T26282] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1376.585020][T26282] ? __might_sleep+0xe0/0xe0 [ 1376.589642][T26282] should_fail+0x384/0x4b0 [ 1376.594109][T26282] ? relay_open_buf+0x18e/0xe80 [ 1376.599063][T26282] should_failslab+0x5/0x20 [ 1376.603608][T26282] __kmalloc+0x94/0x380 12:42:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0xb, 0x2, 0x0) [ 1376.607785][T26282] ? kmem_cache_alloc_trace+0x9d/0x330 [ 1376.613265][T26282] ? relay_open_buf+0x14a/0xe80 [ 1376.618140][T26282] relay_open_buf+0x18e/0xe80 [ 1376.622846][T26282] ? memcpy+0x3c/0x60 [ 1376.626940][T26282] relay_open+0x3cb/0x990 [ 1376.631292][T26282] do_blk_trace_setup+0x51c/0xa00 [ 1376.636331][T26282] blk_trace_setup+0xfd/0x1b0 [ 1376.641010][T26282] ? __blk_trace_remove+0x1e0/0x1e0 [ 1376.646207][T26282] ? smk_access+0x470/0x4a0 [ 1376.650710][T26282] sg_ioctl+0x1440/0x2d80 [ 1376.655040][T26282] ? sg_poll+0x3f0/0x3f0 [ 1376.659291][T26282] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1376.664217][T26282] ? security_file_ioctl+0x9d/0xb0 [ 1376.669318][T26282] ? sg_poll+0x3f0/0x3f0 [ 1376.673548][T26282] __se_sys_ioctl+0xfb/0x170 [ 1376.678131][T26282] do_syscall_64+0x44/0xd0 [ 1376.682545][T26282] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1376.688426][T26282] RIP: 0033:0x7fc9fdb8f059 [ 1376.692830][T26282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1376.712422][T26282] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1376.720832][T26282] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1376.728793][T26282] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1376.736756][T26282] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1376.744715][T26282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:42:48 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 17) [ 1376.752674][T26282] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1376.760737][T26282] 12:42:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0xc, 0x2, 0x0) [ 1376.817453][T26281] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1376.894893][T26294] FAULT_INJECTION: forcing a failure. [ 1376.894893][T26294] name failslab, interval 1, probability 0, space 0, times 0 [ 1376.898962][T26289] netlink: 4712 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1376.908536][T26294] CPU: 1 PID: 26294 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1376.927576][T26294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1376.937641][T26294] Call Trace: [ 1376.940913][T26294] [ 1376.943853][T26294] dump_stack_lvl+0x201/0x2d8 [ 1376.948554][T26294] ? show_regs_print_info+0x12/0x12 [ 1376.953766][T26294] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1376.959479][T26294] ? __might_sleep+0xe0/0xe0 [ 1376.964065][T26294] should_fail+0x384/0x4b0 [ 1376.968930][T26294] ? relay_open_buf+0x18e/0xe80 [ 1376.973789][T26294] should_failslab+0x5/0x20 [ 1376.978301][T26294] __kmalloc+0x94/0x380 [ 1376.982473][T26294] ? kmem_cache_alloc_trace+0x9d/0x330 [ 1376.987946][T26294] ? relay_open_buf+0x14a/0xe80 [ 1376.992903][T26294] relay_open_buf+0x18e/0xe80 [ 1376.997641][T26294] ? memcpy+0x3c/0x60 [ 1377.001643][T26294] relay_open+0x3cb/0x990 [ 1377.005992][T26294] do_blk_trace_setup+0x51c/0xa00 [ 1377.011060][T26294] blk_trace_setup+0xfd/0x1b0 [ 1377.015755][T26294] ? __blk_trace_remove+0x1e0/0x1e0 [ 1377.020975][T26294] ? smk_access+0x470/0x4a0 [ 1377.025512][T26294] sg_ioctl+0x1440/0x2d80 [ 1377.029869][T26294] ? sg_poll+0x3f0/0x3f0 [ 1377.034152][T26294] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1377.039096][T26294] ? security_file_ioctl+0x9d/0xb0 12:42:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0xd, 0x2, 0x0) 12:42:48 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0xe, 0x2, 0x0) [ 1377.044219][T26294] ? sg_poll+0x3f0/0x3f0 [ 1377.048467][T26294] __se_sys_ioctl+0xfb/0x170 [ 1377.053164][T26294] do_syscall_64+0x44/0xd0 [ 1377.057601][T26294] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1377.063517][T26294] RIP: 0033:0x7fc9fdb8f059 [ 1377.067948][T26294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1377.087580][T26294] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.096040][T26294] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1377.104029][T26294] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1377.112015][T26294] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1377.119999][T26294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1377.127957][T26294] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1377.135930][T26294] [ 1377.385959][T19770] usb 4-1: Cannot set autoneg [ 1377.391057][T19770] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1377.401749][ T917] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1377.645849][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 1377.925939][ T917] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1377.935273][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.944120][ T917] usb 1-1: Product: syz [ 1377.948722][ T917] usb 1-1: Manufacturer: syz [ 1377.953695][ T917] usb 1-1: SerialNumber: syz [ 1377.961860][ T917] usb 1-1: config 0 descriptor?? 12:42:49 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1378.387648][T19360] usb 4-1: USB disconnect, device number 65 [ 1378.796015][T19360] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1379.050379][T19360] usb 4-1: Using ep0 maxpacket: 16 [ 1379.335971][T19360] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1379.345312][T19360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.353957][T19360] usb 4-1: Product: syz [ 1379.358883][T19360] usb 4-1: Manufacturer: syz [ 1379.363675][T19360] usb 4-1: SerialNumber: syz [ 1379.378748][T19360] usb 4-1: config 0 descriptor?? [ 1379.765991][ T917] usb 1-1: Cannot set autoneg [ 1379.771040][ T917] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1380.515987][T19360] usb 4-1: Cannot set autoneg [ 1380.520825][T19360] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:42:52 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x10, 0x2, 0x0) 12:42:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12:42:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:52 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 18) [ 1380.759404][ T5] usb 1-1: USB disconnect, device number 25 12:42:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x11, 0x2, 0x0) [ 1380.802939][T26311] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1380.828669][T26314] FAULT_INJECTION: forcing a failure. [ 1380.828669][T26314] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1380.883020][T26314] CPU: 1 PID: 26314 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1380.893568][T26314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1380.903639][T26314] Call Trace: [ 1380.906928][T26314] [ 1380.909870][T26314] dump_stack_lvl+0x201/0x2d8 [ 1380.914575][T26314] ? show_regs_print_info+0x12/0x12 [ 1380.919797][T26314] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1380.925542][T26314] ? blk_trace_setup+0xfd/0x1b0 [ 1380.930412][T26314] ? __se_sys_ioctl+0xfb/0x170 [ 1380.935194][T26314] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1380.941301][T26314] should_fail+0x384/0x4b0 [ 1380.945739][T26314] prepare_alloc_pages+0x1db/0x5a0 [ 1380.950872][T26314] __alloc_pages+0x161/0x580 [ 1380.955490][T26314] ? __rmqueue_pcplist+0x2090/0x2090 [ 1380.960806][T26314] ? alloc_pages+0x3e7/0x640 [ 1380.965427][T26314] relay_open_buf+0x2fc/0xe80 [ 1380.970138][T26314] relay_open+0x3cb/0x990 [ 1380.974501][T26314] do_blk_trace_setup+0x51c/0xa00 [ 1380.979556][T26314] blk_trace_setup+0xfd/0x1b0 [ 1380.984260][T26314] ? __blk_trace_remove+0x1e0/0x1e0 [ 1380.989496][T26314] ? smk_access+0x470/0x4a0 [ 1380.994030][T26314] sg_ioctl+0x1440/0x2d80 [ 1380.998387][T26314] ? sg_poll+0x3f0/0x3f0 [ 1381.002670][T26314] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1381.007623][T26314] ? security_file_ioctl+0x9d/0xb0 [ 1381.012753][T26314] ? sg_poll+0x3f0/0x3f0 [ 1381.017016][T26314] __se_sys_ioctl+0xfb/0x170 [ 1381.021625][T26314] do_syscall_64+0x44/0xd0 [ 1381.026247][T26314] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1381.032158][T26314] RIP: 0033:0x7fc9fdb8f059 [ 1381.036588][T26314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1381.056212][T26314] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1381.064647][T26314] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1381.072645][T26314] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 12:42:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x12, 0x2, 0x0) 12:42:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x300, 0x2, 0x0) 12:42:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0xffffff1f, 0x2, 0x0) 12:42:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x11, 0x0) 12:42:52 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0xffffffff, 0x0) [ 1381.080630][T26314] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1381.088615][T26314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1381.096682][T26314] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1381.104685][T26314] [ 1381.124286][T26312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1381.179951][T26320] netlink: 4712 bytes leftover after parsing attributes in process `syz-executor.2'. 12:42:52 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1381.485963][ T5] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1381.505557][T13528] usb 4-1: USB disconnect, device number 66 [ 1381.765920][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 1381.915832][T13528] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1382.076054][ T5] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1382.085270][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.093636][ T5] usb 1-1: Product: syz [ 1382.098080][ T5] usb 1-1: Manufacturer: syz [ 1382.102826][ T5] usb 1-1: SerialNumber: syz [ 1382.113089][ T5] usb 1-1: config 0 descriptor?? [ 1382.156728][T13528] usb 4-1: Using ep0 maxpacket: 16 [ 1382.435970][T13528] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1382.445693][T13528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.454277][T13528] usb 4-1: Product: syz [ 1382.458742][T13528] usb 4-1: Manufacturer: syz [ 1382.463473][T13528] usb 4-1: SerialNumber: syz [ 1382.471229][T13528] usb 4-1: config 0 descriptor?? [ 1383.255993][ T5] usb 1-1: Cannot set autoneg [ 1383.261064][ T5] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1383.616021][T13528] usb 4-1: Cannot set autoneg [ 1383.620839][T13528] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:42:55 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) 12:42:55 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 19) 12:42:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1384.243835][T13528] usb 1-1: USB disconnect, device number 26 [ 1384.280791][T26344] FAULT_INJECTION: forcing a failure. [ 1384.280791][T26344] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:42:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x2) [ 1384.285570][T26343] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1384.333005][T26344] CPU: 0 PID: 26344 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1384.343544][T26344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.353641][T26344] Call Trace: [ 1384.356933][T26344] [ 1384.359877][T26344] dump_stack_lvl+0x201/0x2d8 [ 1384.364586][T26344] ? show_regs_print_info+0x12/0x12 [ 1384.369813][T26344] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1384.375560][T26344] should_fail+0x384/0x4b0 [ 1384.379978][T26344] prepare_alloc_pages+0x1db/0x5a0 [ 1384.385104][T26344] __alloc_pages+0x161/0x580 [ 1384.389691][T26344] ? __rmqueue_pcplist+0x2090/0x2090 [ 1384.394976][T26344] ? alloc_pages+0x3e7/0x640 [ 1384.399558][T26344] relay_open_buf+0x2fc/0xe80 [ 1384.404237][T26344] relay_open+0x3cb/0x990 [ 1384.408563][T26344] do_blk_trace_setup+0x51c/0xa00 [ 1384.413602][T26344] blk_trace_setup+0xfd/0x1b0 [ 1384.418281][T26344] ? __blk_trace_remove+0x1e0/0x1e0 [ 1384.423494][T26344] ? smk_access+0x470/0x4a0 [ 1384.427992][T26344] sg_ioctl+0x1440/0x2d80 [ 1384.432322][T26344] ? sg_poll+0x3f0/0x3f0 [ 1384.436580][T26344] ? bpf_lsm_file_ioctl+0x5/0x10 12:42:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x3) [ 1384.441527][T26344] ? security_file_ioctl+0x9d/0xb0 [ 1384.446649][T26344] ? sg_poll+0x3f0/0x3f0 [ 1384.450877][T26344] __se_sys_ioctl+0xfb/0x170 [ 1384.455456][T26344] do_syscall_64+0x44/0xd0 [ 1384.459867][T26344] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1384.465772][T26344] RIP: 0033:0x7fc9fdb8f059 [ 1384.470202][T26344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:42:55 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x4) [ 1384.489831][T26344] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.498268][T26344] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1384.506254][T26344] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1384.514242][T26344] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1384.522232][T26344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1384.530739][T26344] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1384.538738][T26344] 12:42:55 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 20) [ 1384.549731][T26346] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:42:55 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:42:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1384.630610][T19770] usb 4-1: USB disconnect, device number 67 [ 1384.663527][T26359] FAULT_INJECTION: forcing a failure. [ 1384.663527][T26359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1384.691917][T26361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1384.705932][T13528] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1384.724163][T26359] CPU: 0 PID: 26359 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 12:42:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x5) [ 1384.734725][T26359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1384.744789][T26359] Call Trace: [ 1384.748087][T26359] [ 1384.751109][T26359] dump_stack_lvl+0x201/0x2d8 [ 1384.755814][T26359] ? show_regs_print_info+0x12/0x12 [ 1384.761026][T26359] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1384.766765][T26359] should_fail+0x384/0x4b0 [ 1384.771187][T26359] prepare_alloc_pages+0x1db/0x5a0 [ 1384.776298][T26359] __alloc_pages+0x161/0x580 [ 1384.780915][T26359] ? __rmqueue_pcplist+0x2090/0x2090 [ 1384.786294][T26359] ? alloc_pages+0x3e7/0x640 [ 1384.790881][T26359] relay_open_buf+0x2fc/0xe80 [ 1384.795567][T26359] relay_open+0x3cb/0x990 [ 1384.799895][T26359] do_blk_trace_setup+0x51c/0xa00 [ 1384.804934][T26359] blk_trace_setup+0xfd/0x1b0 [ 1384.809623][T26359] ? __blk_trace_remove+0x1e0/0x1e0 [ 1384.814843][T26359] ? smk_access+0x470/0x4a0 [ 1384.819358][T26359] sg_ioctl+0x1440/0x2d80 [ 1384.823699][T26359] ? sg_poll+0x3f0/0x3f0 [ 1384.827950][T26359] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1384.832880][T26359] ? security_file_ioctl+0x9d/0xb0 [ 1384.837993][T26359] ? sg_poll+0x3f0/0x3f0 [ 1384.842231][T26359] __se_sys_ioctl+0xfb/0x170 [ 1384.846820][T26359] do_syscall_64+0x44/0xd0 [ 1384.851236][T26359] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1384.857120][T26359] RIP: 0033:0x7fc9fdb8f059 [ 1384.861534][T26359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1384.881142][T26359] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.889553][T26359] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1384.897516][T26359] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1384.905481][T26359] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1384.913447][T26359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1384.921409][T26359] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1384.929522][T26359] [ 1385.135897][T13528] usb 1-1: Using ep0 maxpacket: 16 [ 1385.355938][T19770] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1385.416043][T13528] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1385.425337][T13528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.433703][T13528] usb 1-1: Product: syz [ 1385.438348][T13528] usb 1-1: Manufacturer: syz [ 1385.442992][T13528] usb 1-1: SerialNumber: syz [ 1385.453779][T13528] usb 1-1: config 0 descriptor?? [ 1385.635890][T19770] usb 4-1: Using ep0 maxpacket: 16 [ 1385.935991][T19770] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1385.945069][T19770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.954180][T19770] usb 4-1: Product: syz [ 1385.958954][T19770] usb 4-1: Manufacturer: syz [ 1385.963566][T19770] usb 4-1: SerialNumber: syz [ 1385.970425][T19770] usb 4-1: config 0 descriptor?? [ 1386.595918][T13528] usb 1-1: Cannot set autoneg [ 1386.601016][T13528] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1386.616075][T19770] usb 4-1: Cannot read MAC address [ 1386.621351][T19770] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 12:42:58 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:42:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:58 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 21) 12:42:58 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x6) 12:42:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 1387.589220][T19770] usb 1-1: USB disconnect, device number 27 [ 1387.626811][T26376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1387.635324][T26377] FAULT_INJECTION: forcing a failure. [ 1387.635324][T26377] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1387.672041][T26377] CPU: 1 PID: 26377 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1387.682578][T26377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1387.692636][T26377] Call Trace: [ 1387.695908][T26377] [ 1387.698833][T26377] dump_stack_lvl+0x201/0x2d8 [ 1387.703517][T26377] ? show_regs_print_info+0x12/0x12 [ 1387.708708][T26377] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1387.714435][T26377] should_fail+0x384/0x4b0 [ 1387.718931][T26377] prepare_alloc_pages+0x1db/0x5a0 [ 1387.724042][T26377] __alloc_pages+0x161/0x580 [ 1387.728625][T26377] ? __rmqueue_pcplist+0x2090/0x2090 [ 1387.733910][T26377] ? alloc_pages+0x3e7/0x640 [ 1387.738493][T26377] relay_open_buf+0x2fc/0xe80 [ 1387.743175][T26377] relay_open+0x3cb/0x990 [ 1387.747497][T26377] do_blk_trace_setup+0x51c/0xa00 [ 1387.752531][T26377] blk_trace_setup+0xfd/0x1b0 [ 1387.757201][T26377] ? __blk_trace_remove+0x1e0/0x1e0 [ 1387.762399][T26377] ? smk_access+0x470/0x4a0 [ 1387.766902][T26377] sg_ioctl+0x1440/0x2d80 [ 1387.771235][T26377] ? sg_poll+0x3f0/0x3f0 [ 1387.775490][T26377] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1387.780424][T26377] ? security_file_ioctl+0x9d/0xb0 [ 1387.785534][T26377] ? sg_poll+0x3f0/0x3f0 [ 1387.789767][T26377] __se_sys_ioctl+0xfb/0x170 [ 1387.794356][T26377] do_syscall_64+0x44/0xd0 [ 1387.798771][T26377] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1387.804831][T26377] RIP: 0033:0x7fc9fdb8f059 [ 1387.809378][T26377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1387.829011][T26377] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:42:59 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x7) [ 1387.837495][T26377] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1387.845463][T26377] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1387.853423][T26377] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1387.861387][T26377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1387.869366][T26377] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1387.877468][T26377] 12:42:59 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 22) 12:42:59 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:42:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) [ 1387.926279][T26378] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1387.947895][T13530] usb 4-1: USB disconnect, device number 68 12:42:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:42:59 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x8) 12:42:59 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x9) [ 1388.069505][T26394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1388.092135][T26392] FAULT_INJECTION: forcing a failure. [ 1388.092135][T26392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1388.142933][T26392] CPU: 0 PID: 26392 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1388.153475][T26392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1388.163544][T26392] Call Trace: [ 1388.166836][T26392] [ 1388.169779][T26392] dump_stack_lvl+0x201/0x2d8 [ 1388.174483][T26392] ? show_regs_print_info+0x12/0x12 [ 1388.179687][T26392] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1388.185443][T26392] should_fail+0x384/0x4b0 [ 1388.189893][T26392] prepare_alloc_pages+0x1db/0x5a0 [ 1388.195021][T26392] __alloc_pages+0x161/0x580 [ 1388.199598][T26392] ? __rmqueue_pcplist+0x2090/0x2090 [ 1388.204879][T26392] ? alloc_pages+0x3e7/0x640 [ 1388.209472][T26392] relay_open_buf+0x2fc/0xe80 [ 1388.214175][T26392] relay_open+0x3cb/0x990 [ 1388.218526][T26392] do_blk_trace_setup+0x51c/0xa00 [ 1388.223580][T26392] blk_trace_setup+0xfd/0x1b0 [ 1388.228278][T26392] ? __blk_trace_remove+0x1e0/0x1e0 [ 1388.233500][T26392] ? smk_access+0x470/0x4a0 [ 1388.238034][T26392] sg_ioctl+0x1440/0x2d80 [ 1388.242395][T26392] ? sg_poll+0x3f0/0x3f0 [ 1388.246689][T26392] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1388.251639][T26392] ? security_file_ioctl+0x9d/0xb0 [ 1388.256766][T26392] ? sg_poll+0x3f0/0x3f0 [ 1388.261019][T26392] __se_sys_ioctl+0xfb/0x170 [ 1388.265620][T26392] do_syscall_64+0x44/0xd0 [ 1388.270047][T26392] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1388.275936][T26392] RIP: 0033:0x7fc9fdb8f059 [ 1388.280347][T26392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1388.299949][T26392] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1388.308378][T26392] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1388.316510][T26392] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1388.324475][T26392] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1388.332448][T26392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1388.340415][T26392] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1388.348415][T26392] [ 1388.370117][T26397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1388.436062][T19770] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1388.495993][T13530] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1388.675830][T19770] usb 1-1: Using ep0 maxpacket: 16 [ 1388.735806][T13530] usb 4-1: Using ep0 maxpacket: 16 [ 1389.015967][T13530] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1389.016067][T19770] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1389.025038][T13530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.025067][T13530] usb 4-1: Product: syz [ 1389.025082][T13530] usb 4-1: Manufacturer: syz [ 1389.025098][T13530] usb 4-1: SerialNumber: syz [ 1389.027693][T13530] usb 4-1: config 0 descriptor?? [ 1389.064441][T19770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.072764][T19770] usb 1-1: Product: syz [ 1389.077563][T19770] usb 1-1: Manufacturer: syz [ 1389.082258][T19770] usb 1-1: SerialNumber: syz [ 1389.095205][T19770] usb 1-1: config 0 descriptor?? [ 1389.655935][T13530] usb 4-1: Cannot read MAC address [ 1389.661380][T13530] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1390.226202][T19770] usb 1-1: Cannot set autoneg [ 1390.231033][T19770] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1391.003262][ T5] usb 4-1: USB disconnect, device number 69 12:43:02 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:02 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xa) 12:43:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 12:43:02 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 23) 12:43:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:02 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1391.225593][ T3684] usb 1-1: USB disconnect, device number 28 12:43:02 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xb) [ 1391.273310][T26417] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1391.290212][T26419] FAULT_INJECTION: forcing a failure. [ 1391.290212][T26419] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.311873][T26419] CPU: 0 PID: 26419 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1391.322412][T26419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.332478][T26419] Call Trace: [ 1391.335760][T26419] [ 1391.338691][T26419] dump_stack_lvl+0x201/0x2d8 [ 1391.343374][T26419] ? show_regs_print_info+0x12/0x12 [ 1391.348567][T26419] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1391.354286][T26419] ? __might_sleep+0xe0/0xe0 [ 1391.358879][T26419] should_fail+0x384/0x4b0 [ 1391.363296][T26419] ? __get_vm_area_node+0x13a/0x2f0 [ 1391.368487][T26419] should_failslab+0x5/0x20 [ 1391.372984][T26419] kmem_cache_alloc_node_trace+0x74/0x370 [ 1391.378696][T26419] ? __might_sleep+0xe0/0xe0 [ 1391.383284][T26419] __get_vm_area_node+0x13a/0x2f0 [ 1391.388311][T26419] vmap+0xf4/0x2d0 [ 1391.392042][T26419] ? relay_open_buf+0x436/0xe80 [ 1391.396889][T26419] relay_open_buf+0x436/0xe80 [ 1391.401574][T26419] relay_open+0x3cb/0x990 [ 1391.405900][T26419] do_blk_trace_setup+0x51c/0xa00 [ 1391.410926][T26419] blk_trace_setup+0xfd/0x1b0 [ 1391.415594][T26419] ? __blk_trace_remove+0x1e0/0x1e0 [ 1391.420789][T26419] ? smk_access+0x470/0x4a0 [ 1391.425292][T26419] sg_ioctl+0x1440/0x2d80 [ 1391.429622][T26419] ? sg_poll+0x3f0/0x3f0 [ 1391.433871][T26419] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1391.438798][T26419] ? security_file_ioctl+0x9d/0xb0 [ 1391.443901][T26419] ? sg_poll+0x3f0/0x3f0 [ 1391.448135][T26419] __se_sys_ioctl+0xfb/0x170 [ 1391.452718][T26419] do_syscall_64+0x44/0xd0 [ 1391.457130][T26419] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1391.463025][T26419] RIP: 0033:0x7fc9fdb8f059 [ 1391.467433][T26419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1391.487034][T26419] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1391.495448][T26419] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1391.503410][T26419] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1391.511376][T26419] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1391.519339][T26419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1391.527298][T26419] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1391.535275][T26419] 12:43:02 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xc) [ 1391.591487][T26418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:43:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@deltfilter={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000004e75ec7492112c0000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/161, 0xa1}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002000)=ANY=[@ANYBLOB="8c1300002c00270d00000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="ffff0000000000000100000007000100667700006013020004000400080001"], 0x138c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, 0x0, 0x0, 0x0) 12:43:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:02 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 24) 12:43:03 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xd) [ 1391.704904][T26430] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1391.753663][T26432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1391.788093][T26432] bond187 (uninitialized): Released all slaves [ 1391.791317][T26434] FAULT_INJECTION: forcing a failure. [ 1391.791317][T26434] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.810114][T26434] CPU: 0 PID: 26434 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1391.820643][T26434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1391.830706][T26434] Call Trace: [ 1391.833997][T26434] [ 1391.836939][T26434] dump_stack_lvl+0x201/0x2d8 [ 1391.841646][T26434] ? show_regs_print_info+0x12/0x12 [ 1391.846873][T26434] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1391.852622][T26434] ? __might_sleep+0xe0/0xe0 [ 1391.857219][T26434] ? vmap+0xf4/0x2d0 [ 1391.861135][T26434] ? relay_open+0x3cb/0x990 [ 1391.865630][T26434] should_fail+0x384/0x4b0 [ 1391.870063][T26434] ? alloc_vmap_area+0x1b4/0x1a20 [ 1391.875100][T26434] should_failslab+0x5/0x20 [ 1391.879611][T26434] kmem_cache_alloc_node+0x75/0x370 [ 1391.884828][T26434] alloc_vmap_area+0x1b4/0x1a20 [ 1391.889706][T26434] ? vm_map_ram+0xb20/0xb20 [ 1391.894230][T26434] ? __get_vm_area_node+0x13a/0x2f0 [ 1391.899438][T26434] ? kmem_cache_alloc_node_trace+0x26f/0x370 [ 1391.905432][T26434] ? __get_vm_area_node+0x13a/0x2f0 [ 1391.910638][T26434] __get_vm_area_node+0x183/0x2f0 [ 1391.915683][T26434] vmap+0xf4/0x2d0 [ 1391.919410][T26434] ? relay_open_buf+0x436/0xe80 [ 1391.924284][T26434] relay_open_buf+0x436/0xe80 [ 1391.928989][T26434] relay_open+0x3cb/0x990 [ 1391.933339][T26434] do_blk_trace_setup+0x51c/0xa00 [ 1391.938476][T26434] blk_trace_setup+0xfd/0x1b0 [ 1391.943173][T26434] ? __blk_trace_remove+0x1e0/0x1e0 [ 1391.948392][T26434] ? smk_access+0x470/0x4a0 [ 1391.952924][T26434] sg_ioctl+0x1440/0x2d80 [ 1391.957287][T26434] ? sg_poll+0x3f0/0x3f0 [ 1391.961570][T26434] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1391.966516][T26434] ? security_file_ioctl+0x9d/0xb0 [ 1391.971644][T26434] ? sg_poll+0x3f0/0x3f0 [ 1391.975988][T26434] __se_sys_ioctl+0xfb/0x170 [ 1391.980603][T26434] do_syscall_64+0x44/0xd0 [ 1391.985045][T26434] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1391.990954][T26434] RIP: 0033:0x7fc9fdb8f059 [ 1391.995385][T26434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1392.015007][T26434] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.023439][T26434] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1392.031428][T26434] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1392.039416][T26434] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.047492][T26434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1392.055484][T26434] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1392.063487][T26434] [ 1392.156229][ T3684] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1392.163909][ T5] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1392.427635][ T3684] usb 1-1: Using ep0 maxpacket: 16 [ 1392.432917][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 1392.736150][ T3684] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1392.745194][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.753364][ T5] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1392.762505][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.770850][ T3684] usb 1-1: Product: syz [ 1392.775306][ T5] usb 4-1: Product: syz [ 1392.779665][ T3684] usb 1-1: Manufacturer: syz [ 1392.784271][ T3684] usb 1-1: SerialNumber: syz [ 1392.790708][ T5] usb 4-1: Manufacturer: syz [ 1392.795408][ T5] usb 4-1: SerialNumber: syz [ 1392.802461][ T3684] usb 1-1: config 0 descriptor?? [ 1392.810933][ T5] usb 4-1: config 0 descriptor?? [ 1393.415928][ T5] usb 4-1: Cannot read MAC address [ 1393.421198][ T5] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 1393.945981][ T3684] usb 1-1: Cannot set autoneg [ 1393.951023][ T3684] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1394.407629][T19770] usb 4-1: USB disconnect, device number 70 12:43:06 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xe) 12:43:06 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 25) 12:43:06 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1394.940140][T13528] usb 1-1: USB disconnect, device number 29 [ 1394.978549][T26450] FAULT_INJECTION: forcing a failure. [ 1394.978549][T26450] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.994901][T26449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1395.007737][T26449] bond187 (uninitialized): Released all slaves [ 1395.014441][T26450] CPU: 1 PID: 26450 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1395.024968][T26450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1395.035025][T26450] Call Trace: [ 1395.038300][T26450] [ 1395.041222][T26450] dump_stack_lvl+0x201/0x2d8 [ 1395.045909][T26450] ? show_regs_print_info+0x12/0x12 [ 1395.051116][T26450] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1395.056841][T26450] ? __might_sleep+0xe0/0xe0 [ 1395.061428][T26450] ? rcu_read_lock_sched_held+0x89/0x130 [ 1395.067057][T26450] should_fail+0x384/0x4b0 [ 1395.071472][T26450] ? alloc_vmap_area+0x6f7/0x1a20 [ 1395.076491][T26450] should_failslab+0x5/0x20 [ 1395.080986][T26450] kmem_cache_alloc_node+0x75/0x370 [ 1395.086178][T26450] ? alloc_vmap_area+0x1b4/0x1a20 [ 1395.091204][T26450] alloc_vmap_area+0x6f7/0x1a20 [ 1395.096067][T26450] ? vm_map_ram+0xb20/0xb20 [ 1395.100561][T26450] ? __get_vm_area_node+0x13a/0x2f0 [ 1395.105750][T26450] ? kmem_cache_alloc_node_trace+0x26f/0x370 [ 1395.111724][T26450] ? __get_vm_area_node+0x13a/0x2f0 [ 1395.116923][T26450] __get_vm_area_node+0x183/0x2f0 [ 1395.121948][T26450] vmap+0xf4/0x2d0 [ 1395.125667][T26450] ? relay_open_buf+0x436/0xe80 [ 1395.130544][T26450] relay_open_buf+0x436/0xe80 [ 1395.135224][T26450] relay_open+0x3cb/0x990 [ 1395.139567][T26450] do_blk_trace_setup+0x51c/0xa00 [ 1395.144592][T26450] blk_trace_setup+0xfd/0x1b0 [ 1395.149268][T26450] ? __blk_trace_remove+0x1e0/0x1e0 [ 1395.154471][T26450] ? smk_access+0x470/0x4a0 [ 1395.158975][T26450] sg_ioctl+0x1440/0x2d80 [ 1395.163309][T26450] ? sg_poll+0x3f0/0x3f0 [ 1395.167562][T26450] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1395.172490][T26450] ? security_file_ioctl+0x9d/0xb0 [ 1395.177597][T26450] ? sg_poll+0x3f0/0x3f0 [ 1395.181832][T26450] __se_sys_ioctl+0xfb/0x170 [ 1395.186419][T26450] do_syscall_64+0x44/0xd0 [ 1395.190837][T26450] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1395.196723][T26450] RIP: 0033:0x7fc9fdb8f059 [ 1395.201130][T26450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1395.220812][T26450] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1395.229217][T26450] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1395.237187][T26450] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1395.245168][T26450] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1395.253148][T26450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1395.261200][T26450] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1395.269180][T26450] 12:43:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x10) [ 1395.290604][T26452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 12:43:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x11) 12:43:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x12) 12:43:06 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 26) [ 1395.425891][T19770] usb 4-1: new high-speed USB device number 71 using dummy_hcd 12:43:06 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x25) [ 1395.511886][T26467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1395.553052][T26467] bond187 (uninitialized): Released all slaves [ 1395.596520][T26473] FAULT_INJECTION: forcing a failure. [ 1395.596520][T26473] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.626338][T26473] CPU: 0 PID: 26473 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1395.636875][T26473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1395.646928][T26473] Call Trace: [ 1395.650200][T26473] [ 1395.653122][T26473] dump_stack_lvl+0x201/0x2d8 [ 1395.657817][T26473] ? show_regs_print_info+0x12/0x12 [ 1395.663013][T26473] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1395.668731][T26473] ? __might_sleep+0xe0/0xe0 [ 1395.673326][T26473] should_fail+0x384/0x4b0 [ 1395.677734][T26473] ? relay_open_buf+0x5b4/0xe80 [ 1395.682577][T26473] should_failslab+0x5/0x20 [ 1395.687089][T26473] kmem_cache_alloc_trace+0x71/0x330 [ 1395.692383][T26473] ? vmap+0x18d/0x2d0 [ 1395.696383][T26473] relay_open_buf+0x5b4/0xe80 [ 1395.701068][T26473] relay_open+0x3cb/0x990 [ 1395.705419][T26473] do_blk_trace_setup+0x51c/0xa00 [ 1395.710549][T26473] blk_trace_setup+0xfd/0x1b0 [ 1395.715268][T26473] ? __blk_trace_remove+0x1e0/0x1e0 [ 1395.720486][T26473] ? smk_access+0x470/0x4a0 [ 1395.724998][T26473] sg_ioctl+0x1440/0x2d80 [ 1395.729342][T26473] ? sg_poll+0x3f0/0x3f0 [ 1395.733759][T26473] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1395.738705][T26473] ? security_file_ioctl+0x9d/0xb0 [ 1395.743831][T26473] ? sg_poll+0x3f0/0x3f0 [ 1395.748097][T26473] __se_sys_ioctl+0xfb/0x170 [ 1395.752715][T26473] do_syscall_64+0x44/0xd0 [ 1395.757148][T26473] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1395.763046][T26473] RIP: 0033:0x7fc9fdb8f059 [ 1395.767461][T26473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1395.787060][T26473] RSP: 002b:00007fc9fc4e3168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1395.795486][T26473] RAX: ffffffffffffffda RBX: 00007fc9fdca2030 RCX: 00007fc9fdb8f059 [ 1395.803470][T26473] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1395.811460][T26473] RBP: 00007fc9fc4e31d0 R08: 0000000000000000 R09: 0000000000000000 [ 1395.819440][T26473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1395.827405][T26473] R13: 00007ffd32f103ff R14: 00007fc9fc4e3300 R15: 0000000000022000 [ 1395.835389][T26473] [ 1395.865843][T19770] usb 4-1: Using ep0 maxpacket: 16 [ 1395.915913][T13528] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1396.145956][T19770] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1396.160316][T19770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.169741][T19770] usb 4-1: Product: syz [ 1396.173923][T19770] usb 4-1: Manufacturer: syz [ 1396.175809][T13528] usb 1-1: Using ep0 maxpacket: 16 [ 1396.178708][T19770] usb 4-1: SerialNumber: syz [ 1396.190385][T19770] usb 4-1: config 0 descriptor?? [ 1396.505984][T13528] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1396.515311][T13528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.523845][T13528] usb 1-1: Product: syz [ 1396.528403][T13528] usb 1-1: Manufacturer: syz [ 1396.533219][T13528] usb 1-1: SerialNumber: syz [ 1396.542992][T13528] usb 1-1: config 0 descriptor?? [ 1396.786013][T19770] usb 4-1: Cannot read MAC address [ 1396.791424][T19770] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61 [ 1397.655985][T13528] usb 1-1: Cannot set autoneg [ 1397.660845][T13528] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1397.995328][ T3684] usb 4-1: USB disconnect, device number 71 12:43:09 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x300) 12:43:09 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x3, 0x2, 0x0) 12:43:09 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:09 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 27) 12:43:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:09 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1398.645198][T19358] usb 1-1: USB disconnect, device number 30 12:43:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1398.698206][T26484] FAULT_INJECTION: forcing a failure. [ 1398.698206][T26484] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.699088][T26486] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1398.738035][T26484] CPU: 1 PID: 26484 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1398.748576][T26484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1398.755647][T26486] bond187 (uninitialized): Released all slaves [ 1398.758640][T26484] Call Trace: [ 1398.758737][T26484] [ 1398.758747][T26484] dump_stack_lvl+0x201/0x2d8 [ 1398.758781][T26484] ? show_regs_print_info+0x12/0x12 [ 1398.758808][T26484] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1398.786771][T26484] should_fail+0x384/0x4b0 [ 1398.791226][T26484] ? __d_alloc+0x2a/0x700 [ 1398.795575][T26484] should_failslab+0x5/0x20 [ 1398.800092][T26484] kmem_cache_alloc+0x72/0x310 [ 1398.804891][T26484] __d_alloc+0x2a/0x700 [ 1398.809065][T26484] ? rcu_read_lock_sched_held+0x89/0x130 [ 1398.814721][T26484] d_alloc_parallel+0xd3/0x15c0 [ 1398.819752][T26484] ? memset+0x1f/0x40 [ 1398.823757][T26484] ? lockdep_init_map_type+0x9f/0x9b0 [ 1398.829153][T26484] ? lockdep_softirqs_off+0x420/0x420 [ 1398.834561][T26484] ? d_hash_and_lookup+0x1c0/0x1c0 [ 1398.839702][T26484] ? __init_waitqueue_head+0x68/0xd0 [ 1398.845093][T26484] __lookup_slow+0x110/0x3d0 [ 1398.849702][T26484] ? lookup_one_len+0x2c0/0x2c0 [ 1398.854601][T26484] lookup_one_len+0x186/0x2c0 [ 1398.859303][T26484] ? lookup_one_common+0x4b0/0x4b0 [ 1398.864448][T26484] ? mntput+0x63/0xb0 [ 1398.868461][T26484] start_creating+0x184/0x330 [ 1398.873162][T26484] __debugfs_create_file+0x74/0x550 [ 1398.878402][T26484] ? relay_open_buf+0x5b4/0xe80 [ 1398.883275][T26484] ? blk_subbuf_start_callback+0x90/0x90 [ 1398.888933][T26484] relay_open_buf+0x670/0xe80 [ 1398.893644][T26484] relay_open+0x3cb/0x990 [ 1398.898005][T26484] do_blk_trace_setup+0x51c/0xa00 [ 1398.903065][T26484] blk_trace_setup+0xfd/0x1b0 [ 1398.907770][T26484] ? __blk_trace_remove+0x1e0/0x1e0 [ 1398.912997][T26484] ? smk_access+0x470/0x4a0 [ 1398.917535][T26484] sg_ioctl+0x1440/0x2d80 [ 1398.921902][T26484] ? sg_poll+0x3f0/0x3f0 [ 1398.926194][T26484] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1398.931148][T26484] ? security_file_ioctl+0x9d/0xb0 [ 1398.936284][T26484] ? sg_poll+0x3f0/0x3f0 [ 1398.940554][T26484] __se_sys_ioctl+0xfb/0x170 [ 1398.945164][T26484] do_syscall_64+0x44/0xd0 12:43:10 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x500) 12:43:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1398.945924][T19770] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1398.949600][T26484] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1398.949630][T26484] RIP: 0033:0x7fc9fdb8f059 [ 1398.949651][T26484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1398.949670][T26484] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1398.995505][T26484] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1399.003497][T26484] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1399.011493][T26484] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.016416][T26496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1399.019481][T26484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.019501][T26484] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1399.019537][T26484] 12:43:10 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x600) 12:43:10 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 28) [ 1399.132376][T26496] bond187 (uninitialized): Released all slaves [ 1399.139238][T26503] FAULT_INJECTION: forcing a failure. [ 1399.139238][T26503] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.139270][T26503] CPU: 1 PID: 26503 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1399.139292][T26503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1399.139305][T26503] Call Trace: [ 1399.139312][T26503] [ 1399.139321][T26503] dump_stack_lvl+0x201/0x2d8 [ 1399.139362][T26503] ? show_regs_print_info+0x12/0x12 [ 1399.139387][T26503] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1399.139417][T26503] ? __might_sleep+0xe0/0xe0 [ 1399.139449][T26503] should_fail+0x384/0x4b0 [ 1399.139474][T26503] ? security_inode_alloc+0x32/0x1d0 [ 1399.205934][T19770] usb 4-1: Using ep0 maxpacket: 16 [ 1399.208610][T26503] should_failslab+0x5/0x20 [ 1399.208641][T26503] kmem_cache_alloc+0x72/0x310 [ 1399.223002][T26503] security_inode_alloc+0x32/0x1d0 12:43:10 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x700) [ 1399.228140][T26503] inode_init_always+0x3e2/0xa60 [ 1399.233101][T26503] new_inode_pseudo+0x90/0x220 [ 1399.237900][T26503] new_inode+0x25/0x1d0 [ 1399.242072][T26503] ? start_creating+0x21f/0x330 [ 1399.246940][T26503] __debugfs_create_file+0x146/0x550 [ 1399.252244][T26503] ? relay_open_buf+0x5b4/0xe80 [ 1399.257112][T26503] ? blk_subbuf_start_callback+0x90/0x90 [ 1399.262768][T26503] relay_open_buf+0x670/0xe80 [ 1399.263752][T26497] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1399.267470][T26503] relay_open+0x3cb/0x990 [ 1399.267505][T26503] do_blk_trace_setup+0x51c/0xa00 [ 1399.267540][T26503] blk_trace_setup+0xfd/0x1b0 [ 1399.267564][T26503] ? __blk_trace_remove+0x1e0/0x1e0 [ 1399.267592][T26503] ? smk_access+0x470/0x4a0 [ 1399.267625][T26503] sg_ioctl+0x1440/0x2d80 [ 1399.267660][T26503] ? sg_poll+0x3f0/0x3f0 [ 1399.267704][T26503] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1399.267723][T26503] ? security_file_ioctl+0x9d/0xb0 [ 1399.267747][T26503] ? sg_poll+0x3f0/0x3f0 [ 1399.267766][T26503] __se_sys_ioctl+0xfb/0x170 [ 1399.328078][T26503] do_syscall_64+0x44/0xd0 12:43:10 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x900) [ 1399.332477][T26497] bond2 (uninitialized): Released all slaves [ 1399.332517][T26503] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1399.344367][T26503] RIP: 0033:0x7fc9fdb8f059 [ 1399.348795][T26503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1399.368431][T26503] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1399.376871][T26503] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1399.384873][T26503] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1399.392864][T26503] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1399.400850][T26503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1399.408925][T26503] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1399.416938][T26503] [ 1399.432246][T26503] debugfs: out of free dentries, can not create file 'trace0' [ 1399.494564][T19770] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1399.508477][T19770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.518261][T19770] usb 4-1: Product: syz [ 1399.523380][T19770] usb 4-1: Manufacturer: syz [ 1399.528947][T19770] usb 4-1: SerialNumber: syz [ 1399.548085][T19770] usb 4-1: config 0 descriptor?? [ 1399.635968][T19358] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1399.915892][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1400.146093][T19770] usb 4-1: Cannot read MAC address [ 1400.151355][T19770] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61 [ 1400.246739][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1400.256248][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.266249][T19358] usb 1-1: Product: syz [ 1400.270413][T19358] usb 1-1: Manufacturer: syz [ 1400.275030][T19358] usb 1-1: SerialNumber: syz [ 1400.285507][T19358] usb 1-1: config 0 descriptor?? [ 1401.435968][T19358] usb 1-1: Cannot set autoneg [ 1401.440741][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1401.680825][T13528] usb 4-1: USB disconnect, device number 72 12:43:13 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:13 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x500) 12:43:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xa00) 12:43:13 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 29) 12:43:13 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1402.439819][T19358] usb 1-1: USB disconnect, device number 31 [ 1402.471089][T26523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1402.484224][T26522] FAULT_INJECTION: forcing a failure. 12:43:13 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) (fail_nth: 1) set_mempolicy(0x0, 0x0, 0x0) 12:43:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xb00) [ 1402.484224][T26522] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.504896][T26522] CPU: 1 PID: 26522 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1402.515430][T26522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.525500][T26522] Call Trace: [ 1402.528788][T26522] [ 1402.531733][T26522] dump_stack_lvl+0x201/0x2d8 [ 1402.536437][T26522] ? show_regs_print_info+0x12/0x12 [ 1402.541655][T26522] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1402.547409][T26522] should_fail+0x384/0x4b0 [ 1402.551855][T26522] ? new_inode_pseudo+0x79/0x220 [ 1402.556814][T26522] should_failslab+0x5/0x20 [ 1402.561341][T26522] kmem_cache_alloc+0x72/0x310 [ 1402.566129][T26522] ? lookup_one_common+0x4b0/0x4b0 [ 1402.571271][T26522] new_inode_pseudo+0x79/0x220 [ 1402.576151][T26522] new_inode+0x25/0x1d0 [ 1402.580331][T26522] ? start_creating+0x21f/0x330 [ 1402.585325][T26522] __debugfs_create_file+0x146/0x550 12:43:13 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xc00) [ 1402.590638][T26522] ? relay_open_buf+0x5b4/0xe80 [ 1402.595513][T26522] ? blk_subbuf_start_callback+0x90/0x90 [ 1402.601171][T26522] relay_open_buf+0x670/0xe80 [ 1402.602315][T26532] FAULT_INJECTION: forcing a failure. [ 1402.602315][T26532] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.605876][T26522] relay_open+0x3cb/0x990 [ 1402.605914][T26522] do_blk_trace_setup+0x51c/0xa00 [ 1402.605948][T26522] blk_trace_setup+0xfd/0x1b0 [ 1402.632544][T26522] ? __blk_trace_remove+0x1e0/0x1e0 [ 1402.637776][T26522] ? smk_access+0x470/0x4a0 [ 1402.642304][T26522] sg_ioctl+0x1440/0x2d80 [ 1402.646662][T26522] ? sg_poll+0x3f0/0x3f0 [ 1402.650956][T26522] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1402.655910][T26522] ? security_file_ioctl+0x9d/0xb0 [ 1402.661042][T26522] ? sg_poll+0x3f0/0x3f0 [ 1402.665302][T26522] __se_sys_ioctl+0xfb/0x170 [ 1402.669910][T26522] do_syscall_64+0x44/0xd0 [ 1402.674344][T26522] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1402.680249][T26522] RIP: 0033:0x7fc9fdb8f059 12:43:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xd00) [ 1402.684667][T26522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1402.704281][T26522] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1402.712714][T26522] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1402.720693][T26522] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1402.728675][T26522] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1402.736662][T26522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1402.744649][T26522] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1402.752659][T26522] [ 1402.760161][T26532] CPU: 0 PID: 26532 Comm: syz-executor.2 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1402.770696][T26532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1402.780748][T26532] Call Trace: [ 1402.784023][T26532] [ 1402.786943][T26532] dump_stack_lvl+0x201/0x2d8 [ 1402.791622][T26532] ? show_regs_print_info+0x12/0x12 [ 1402.796815][T26532] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1402.802544][T26532] ? __might_sleep+0xe0/0xe0 [ 1402.807132][T26532] ? rcu_read_lock_sched_held+0x89/0x130 [ 1402.812780][T26532] should_fail+0x384/0x4b0 [ 1402.817202][T26532] ? tomoyo_realpath_from_path+0xd8/0x610 [ 1402.822964][T26532] should_failslab+0x5/0x20 [ 1402.827463][T26532] __kmalloc+0x94/0x380 [ 1402.831611][T26532] ? kfree+0x2f/0x2e0 [ 1402.835592][T26532] tomoyo_realpath_from_path+0xd8/0x610 [ 1402.841140][T26532] tomoyo_path_number_perm+0x219/0x7c0 [ 1402.846601][T26532] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1402.852131][T26532] security_file_ioctl+0x55/0xb0 [ 1402.857083][T26532] __se_sys_ioctl+0x48/0x170 [ 1402.861683][T26532] do_syscall_64+0x44/0xd0 [ 1402.866100][T26532] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1402.871991][T26532] RIP: 0033:0x7fa3074a3059 [ 1402.876402][T26532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1402.895998][T26532] RSP: 002b:00007fa305e18168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1402.904407][T26532] RAX: ffffffffffffffda RBX: 00007fa3075b5f60 RCX: 00007fa3074a3059 [ 1402.912398][T26532] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 [ 1402.920376][T26532] RBP: 00007fa305e181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1402.928350][T26532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 12:43:14 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xe00) [ 1402.936318][T26532] R13: 00007ffc89357a1f R14: 00007fa305e18300 R15: 0000000000022000 [ 1402.944291][T26532] [ 1402.959104][T26522] debugfs: out of free dentries, can not create file 'trace0' [ 1402.974000][T26523] bond187 (uninitialized): Released all slaves [ 1402.984056][T26532] ERROR: Out of memory at tomoyo_realpath_from_path. 12:43:14 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) (fail_nth: 2) set_mempolicy(0x0, 0x0, 0x0) [ 1403.060163][T26540] FAULT_INJECTION: forcing a failure. [ 1403.060163][T26540] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.086058][T26540] CPU: 1 PID: 26540 Comm: syz-executor.2 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1403.096600][T26540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1403.106760][T26540] Call Trace: [ 1403.110055][T26540] [ 1403.113003][T26540] dump_stack_lvl+0x201/0x2d8 [ 1403.117717][T26540] ? show_regs_print_info+0x12/0x12 [ 1403.122938][T26540] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1403.128684][T26540] ? __might_sleep+0xe0/0xe0 [ 1403.133307][T26540] should_fail+0x384/0x4b0 [ 1403.137747][T26540] ? tomoyo_encode2+0x25a/0x560 [ 1403.142617][T26540] should_failslab+0x5/0x20 [ 1403.147125][T26540] __kmalloc+0x94/0x380 [ 1403.151295][T26540] ? prepend_path+0xb70/0xb70 [ 1403.155995][T26540] tomoyo_encode2+0x25a/0x560 [ 1403.160702][T26540] tomoyo_realpath_from_path+0x5c3/0x610 [ 1403.166370][T26540] tomoyo_path_number_perm+0x219/0x7c0 [ 1403.171863][T26540] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1403.177408][T26540] security_file_ioctl+0x55/0xb0 [ 1403.182373][T26540] __se_sys_ioctl+0x48/0x170 [ 1403.186983][T26540] do_syscall_64+0x44/0xd0 [ 1403.191421][T26540] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1403.197317][T26540] RIP: 0033:0x7fa3074a3059 [ 1403.201722][T26540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1403.221327][T26540] RSP: 002b:00007fa305e18168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1403.229746][T26540] RAX: ffffffffffffffda RBX: 00007fa3075b5f60 RCX: 00007fa3074a3059 [ 1403.237712][T26540] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003 [ 1403.245690][T26540] RBP: 00007fa305e181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1403.253666][T26540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1403.261625][T26540] R13: 00007ffc89357a1f R14: 00007fa305e18300 R15: 0000000000022000 [ 1403.269615][T26540] [ 1403.277757][T19770] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1403.287236][T26540] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1403.475902][T19358] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1403.565844][T19770] usb 4-1: Using ep0 maxpacket: 16 [ 1403.715912][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1403.866150][T19770] usb 4-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1403.875220][T19770] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.883591][T19770] usb 4-1: Product: syz [ 1403.888073][T19770] usb 4-1: Manufacturer: syz [ 1403.892677][T19770] usb 4-1: SerialNumber: syz [ 1403.904894][T19770] usb 4-1: config 0 descriptor?? [ 1404.005299][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1404.014809][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.023634][T19358] usb 1-1: Product: syz [ 1404.028033][T19358] usb 1-1: Manufacturer: syz [ 1404.032615][T19358] usb 1-1: SerialNumber: syz [ 1404.044062][T19358] usb 1-1: config 0 descriptor?? [ 1404.516084][T19770] usb 4-1: Cannot read MAC address [ 1404.521362][T19770] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61 [ 1405.185939][T19358] usb 1-1: Cannot set autoneg [ 1405.190707][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1405.726606][T19358] usb 4-1: USB disconnect, device number 73 12:43:17 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x1100) 12:43:17 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 30) 12:43:17 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) (fail_nth: 3) set_mempolicy(0x0, 0x0, 0x0) 12:43:17 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1406.194485][T13528] usb 1-1: USB disconnect, device number 32 [ 1406.221970][T26554] FAULT_INJECTION: forcing a failure. [ 1406.221970][T26554] name failslab, interval 1, probability 0, space 0, times 0 12:43:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x1200) 12:43:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x2500) [ 1406.236749][T26553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1406.261586][T26554] CPU: 1 PID: 26554 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1406.272127][T26554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.282199][T26554] Call Trace: [ 1406.285490][T26554] [ 1406.288430][T26554] dump_stack_lvl+0x201/0x2d8 12:43:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x100000) [ 1406.293132][T26554] ? show_regs_print_info+0x12/0x12 [ 1406.298343][T26554] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1406.304094][T26554] ? __might_sleep+0xe0/0xe0 [ 1406.308711][T26554] ? lockdep_init_map_type+0x9f/0x9b0 [ 1406.314121][T26554] should_fail+0x384/0x4b0 [ 1406.318561][T26554] ? relay_open_buf+0x14a/0xe80 [ 1406.323428][T26554] should_failslab+0x5/0x20 [ 1406.327945][T26554] kmem_cache_alloc_trace+0x71/0x330 [ 1406.333263][T26554] relay_open_buf+0x14a/0xe80 [ 1406.337972][T26554] relay_open+0x3cb/0x990 12:43:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x1000000) [ 1406.342327][T26554] do_blk_trace_setup+0x51c/0xa00 [ 1406.347383][T26554] blk_trace_setup+0xfd/0x1b0 [ 1406.352083][T26554] ? __blk_trace_remove+0x1e0/0x1e0 [ 1406.357312][T26554] ? smk_access+0x470/0x4a0 [ 1406.361843][T26554] sg_ioctl+0x1440/0x2d80 [ 1406.366202][T26554] ? sg_poll+0x3f0/0x3f0 [ 1406.370486][T26554] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1406.375435][T26554] ? security_file_ioctl+0x9d/0xb0 [ 1406.380567][T26554] ? sg_poll+0x3f0/0x3f0 [ 1406.384827][T26554] __se_sys_ioctl+0xfb/0x170 [ 1406.389432][T26554] do_syscall_64+0x44/0xd0 12:43:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x2000000) 12:43:17 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x3000000) [ 1406.393869][T26554] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1406.399772][T26554] RIP: 0033:0x7fc9fdb8f059 [ 1406.404185][T26554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1406.423804][T26554] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.432231][T26554] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1406.440216][T26554] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1406.448201][T26554] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.456190][T26554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1406.464173][T26554] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1406.472178][T26554] [ 1406.493194][T26557] FAULT_INJECTION: forcing a failure. [ 1406.493194][T26557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.497974][T26553] bond187 (uninitialized): Released all slaves [ 1406.553115][T26557] CPU: 1 PID: 26557 Comm: syz-executor.2 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1406.563655][T26557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1406.573877][T26557] Call Trace: [ 1406.577147][T26557] [ 1406.580094][T26557] dump_stack_lvl+0x201/0x2d8 [ 1406.584764][T26557] ? show_regs_print_info+0x12/0x12 [ 1406.589957][T26557] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1406.595682][T26557] ? __might_fault+0xb6/0x110 [ 1406.600358][T26557] ? snprintf+0xd6/0x120 [ 1406.604596][T26557] should_fail+0x384/0x4b0 [ 1406.609050][T26557] _copy_to_user+0x2d/0x130 [ 1406.613744][T26557] simple_read_from_buffer+0xd9/0x160 [ 1406.619113][T26557] proc_fail_nth_read+0x1af/0x220 [ 1406.624128][T26557] ? proc_fault_inject_write+0x3a0/0x3a0 [ 1406.629757][T26557] ? security_file_permission+0x46b/0x5d0 [ 1406.635470][T26557] ? proc_fault_inject_write+0x3a0/0x3a0 [ 1406.641116][T26557] vfs_read+0x324/0xe60 [ 1406.645282][T26557] ? kernel_read+0x200/0x200 [ 1406.649868][T26557] ? mutex_lock_nested+0x1a/0x20 [ 1406.654788][T26557] ? __fdget_pos+0x24e/0x2f0 [ 1406.659360][T26557] ? ksys_read+0x77/0x2c0 [ 1406.663674][T26557] ksys_read+0x18f/0x2c0 [ 1406.667900][T26557] ? print_irqtrace_events+0x220/0x220 [ 1406.673348][T26557] ? vfs_write+0xe90/0xe90 [ 1406.677745][T26557] ? lockdep_hardirqs_on+0x95/0x140 [ 1406.682928][T26557] ? syscall_enter_from_user_mode+0x2e/0x1b0 [ 1406.688889][T26557] do_syscall_64+0x44/0xd0 [ 1406.693293][T26557] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1406.699170][T26557] RIP: 0033:0x7fa307455c0c [ 1406.703572][T26557] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1406.723166][T26557] RSP: 002b:00007fa305e18160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1406.731602][T26557] RAX: ffffffffffffffda RBX: 00007fa3075b5f60 RCX: 00007fa307455c0c [ 1406.739591][T26557] RDX: 000000000000000f RSI: 00007fa305e181e0 RDI: 0000000000000004 [ 1406.747588][T26557] RBP: 00007fa305e181d0 R08: 0000000000000000 R09: 0000000000000000 [ 1406.755567][T26557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.763528][T26557] R13: 00007ffc89357a1f R14: 00007fa305e18300 R15: 0000000000022000 [ 1406.771522][T26557] [ 1407.035819][T13528] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1407.285826][T13528] usb 1-1: Using ep0 maxpacket: 16 [ 1407.597493][T13528] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1407.606969][T13528] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.615062][T13528] usb 1-1: Product: syz [ 1407.619643][T13528] usb 1-1: Manufacturer: syz [ 1407.624287][T13528] usb 1-1: SerialNumber: syz [ 1407.632546][T13528] usb 1-1: config 0 descriptor?? [ 1408.785965][T13528] usb 1-1: Cannot set autoneg [ 1408.790799][T13528] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 12:43:21 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x4000000) 12:43:21 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 31) 12:43:21 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 12:43:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1409.780174][T19358] usb 1-1: USB disconnect, device number 33 [ 1409.815046][T26584] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:43:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x5000000) [ 1409.860984][T26583] FAULT_INJECTION: forcing a failure. [ 1409.860984][T26583] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.862009][T26584] bond187 (uninitialized): Released all slaves [ 1409.908274][T26583] CPU: 1 PID: 26583 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1409.918816][T26583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1409.928880][T26583] Call Trace: [ 1409.932169][T26583] [ 1409.935122][T26583] dump_stack_lvl+0x201/0x2d8 [ 1409.939832][T26583] ? show_regs_print_info+0x12/0x12 [ 1409.945057][T26583] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1409.950803][T26583] ? __might_sleep+0xe0/0xe0 [ 1409.955428][T26583] should_fail+0x384/0x4b0 [ 1409.959865][T26583] ? relay_open_buf+0x18e/0xe80 [ 1409.964724][T26583] should_failslab+0x5/0x20 [ 1409.969243][T26583] __kmalloc+0x94/0x380 [ 1409.973410][T26583] ? kmem_cache_alloc_trace+0x9d/0x330 [ 1409.978884][T26583] ? relay_open_buf+0x14a/0xe80 [ 1409.983750][T26583] relay_open_buf+0x18e/0xe80 [ 1409.988453][T26583] relay_open+0x3cb/0x990 [ 1409.992890][T26583] do_blk_trace_setup+0x51c/0xa00 [ 1409.997930][T26583] blk_trace_setup+0xfd/0x1b0 [ 1410.002607][T26583] ? __blk_trace_remove+0x1e0/0x1e0 [ 1410.007798][T26583] ? smk_access+0x470/0x4a0 [ 1410.012290][T26583] sg_ioctl+0x1440/0x2d80 [ 1410.016615][T26583] ? sg_poll+0x3f0/0x3f0 [ 1410.020880][T26583] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1410.025829][T26583] ? security_file_ioctl+0x9d/0xb0 [ 1410.030931][T26583] ? sg_poll+0x3f0/0x3f0 [ 1410.035175][T26583] __se_sys_ioctl+0xfb/0x170 [ 1410.039754][T26583] do_syscall_64+0x44/0xd0 [ 1410.044198][T26583] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1410.050078][T26583] RIP: 0033:0x7fc9fdb8f059 [ 1410.054485][T26583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1410.074094][T26583] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.082505][T26583] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1410.090480][T26583] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1410.098459][T26583] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 12:43:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x10, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x125c, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1410.106421][T26583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1410.114379][T26583] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1410.122352][T26583] 12:43:21 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x6000000) 12:43:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1410.222892][T26600] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1410.299289][T26600] bond187 (uninitialized): Released all slaves [ 1410.455868][T19358] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1410.705985][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1411.025988][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1411.035146][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.043971][T19358] usb 1-1: Product: syz [ 1411.048581][T19358] usb 1-1: Manufacturer: syz [ 1411.053289][T19358] usb 1-1: SerialNumber: syz [ 1411.068866][T19358] usb 1-1: config 0 descriptor?? [ 1412.215892][T19358] usb 1-1: Cannot set autoneg [ 1412.220668][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 12:43:24 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:24 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 32) 12:43:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x7000000) 12:43:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1267, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:24 executing program 3: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) [ 1413.209011][T19358] usb 1-1: USB disconnect, device number 34 12:43:24 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1274, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1413.257801][T26616] FAULT_INJECTION: forcing a failure. [ 1413.257801][T26616] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.281668][T26616] CPU: 0 PID: 26616 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1413.292207][T26616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1413.302275][T26616] Call Trace: 12:43:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x8000000) 12:43:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1413.305567][T26616] [ 1413.308512][T26616] dump_stack_lvl+0x201/0x2d8 [ 1413.313211][T26616] ? show_regs_print_info+0x12/0x12 [ 1413.318436][T26616] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1413.324189][T26616] ? __might_sleep+0xe0/0xe0 [ 1413.328820][T26616] should_fail+0x384/0x4b0 [ 1413.333268][T26616] ? relay_open_buf+0x27a/0xe80 [ 1413.338137][T26616] should_failslab+0x5/0x20 [ 1413.342657][T26616] __kmalloc+0x94/0x380 [ 1413.346831][T26616] ? relay_open_buf+0x18e/0xe80 [ 1413.351696][T26616] ? relay_open_buf+0x14a/0xe80 [ 1413.356570][T26616] relay_open_buf+0x27a/0xe80 [ 1413.361283][T26616] relay_open+0x3cb/0x990 [ 1413.365642][T26616] do_blk_trace_setup+0x51c/0xa00 [ 1413.370706][T26616] blk_trace_setup+0xfd/0x1b0 [ 1413.375417][T26616] ? __blk_trace_remove+0x1e0/0x1e0 [ 1413.380640][T26616] ? smk_access+0x470/0x4a0 [ 1413.385174][T26616] sg_ioctl+0x1440/0x2d80 [ 1413.389530][T26616] ? sg_poll+0x3f0/0x3f0 [ 1413.393817][T26616] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1413.398773][T26616] ? security_file_ioctl+0x9d/0xb0 [ 1413.403905][T26616] ? sg_poll+0x3f0/0x3f0 12:43:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x9000000) [ 1413.408163][T26616] __se_sys_ioctl+0xfb/0x170 [ 1413.412771][T26616] do_syscall_64+0x44/0xd0 [ 1413.417203][T26616] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1413.423107][T26616] RIP: 0033:0x7fc9fdb8f059 [ 1413.427533][T26616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1413.447146][T26616] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 12:43:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xa000000) [ 1413.455611][T26616] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1413.463593][T26616] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1413.471576][T26616] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1413.479556][T26616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1413.487537][T26616] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1413.495536][T26616] 12:43:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xb000000) [ 1413.966016][T19358] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1414.216040][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1414.506042][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1414.515083][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.523138][T19358] usb 1-1: Product: syz [ 1414.527360][T19358] usb 1-1: Manufacturer: syz [ 1414.531966][T19358] usb 1-1: SerialNumber: syz [ 1414.540286][T19358] usb 1-1: config 0 descriptor?? [ 1415.636024][T19358] usb 1-1: Cannot set autoneg [ 1415.640834][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 12:43:27 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1275, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:27 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xc000000) 12:43:27 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:27 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 33) 12:43:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:27 executing program 3: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1416.638203][T19358] usb 1-1: USB disconnect, device number 35 12:43:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1416.694546][T26638] FAULT_INJECTION: forcing a failure. [ 1416.694546][T26638] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.716466][T26638] CPU: 1 PID: 26638 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1416.727001][T26638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1416.737072][T26638] Call Trace: [ 1416.740364][T26638] [ 1416.743310][T26638] dump_stack_lvl+0x201/0x2d8 [ 1416.748009][T26638] ? show_regs_print_info+0x12/0x12 [ 1416.753228][T26638] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1416.758972][T26638] ? __might_sleep+0xe0/0xe0 [ 1416.763584][T26638] should_fail+0x384/0x4b0 [ 1416.768018][T26638] ? relay_open_buf+0x18e/0xe80 [ 1416.772884][T26638] should_failslab+0x5/0x20 [ 1416.777401][T26638] __kmalloc+0x94/0x380 [ 1416.781567][T26638] ? kmem_cache_alloc_trace+0x9d/0x330 [ 1416.787042][T26638] ? relay_open_buf+0x14a/0xe80 [ 1416.791997][T26638] relay_open_buf+0x18e/0xe80 [ 1416.796706][T26638] relay_open+0x3cb/0x990 [ 1416.801152][T26638] do_blk_trace_setup+0x51c/0xa00 [ 1416.806208][T26638] blk_trace_setup+0xfd/0x1b0 [ 1416.810913][T26638] ? __blk_trace_remove+0x1e0/0x1e0 [ 1416.816136][T26638] ? smk_access+0x470/0x4a0 [ 1416.820671][T26638] sg_ioctl+0x1440/0x2d80 [ 1416.825030][T26638] ? sg_poll+0x3f0/0x3f0 [ 1416.829321][T26638] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1416.834272][T26638] ? security_file_ioctl+0x9d/0xb0 [ 1416.839403][T26638] ? sg_poll+0x3f0/0x3f0 12:43:28 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xd000000) 12:43:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2201, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2202, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:28 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xe000000) [ 1416.843663][T26638] __se_sys_ioctl+0xfb/0x170 [ 1416.848278][T26638] do_syscall_64+0x44/0xd0 [ 1416.852718][T26638] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1416.858635][T26638] RIP: 0033:0x7fc9fdb8f059 [ 1416.863080][T26638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1416.882702][T26638] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1416.891137][T26638] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1416.899126][T26638] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1416.907113][T26638] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.915098][T26638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.923080][T26638] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1416.931180][T26638] 12:43:28 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2203, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1417.355876][T19358] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1417.595905][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1417.876125][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1417.885213][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.893784][T19358] usb 1-1: Product: syz [ 1417.898269][T19358] usb 1-1: Manufacturer: syz [ 1417.902857][T19358] usb 1-1: SerialNumber: syz [ 1417.912710][T19358] usb 1-1: config 0 descriptor?? [ 1419.056006][T19358] usb 1-1: Cannot set autoneg [ 1419.061410][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 12:43:31 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x10000000) 12:43:31 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 34) 12:43:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2205, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:31 executing program 3: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1420.045543][T19358] usb 1-1: USB disconnect, device number 36 [ 1420.120303][T26668] FAULT_INJECTION: forcing a failure. [ 1420.120303][T26668] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1420.143203][T26668] CPU: 1 PID: 26668 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1420.153742][T26668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1420.163819][T26668] Call Trace: [ 1420.167112][T26668] [ 1420.170051][T26668] dump_stack_lvl+0x201/0x2d8 [ 1420.174757][T26668] ? show_regs_print_info+0x12/0x12 [ 1420.179977][T26668] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1420.185726][T26668] should_fail+0x384/0x4b0 [ 1420.190164][T26668] prepare_alloc_pages+0x1db/0x5a0 [ 1420.195307][T26668] __alloc_pages+0x161/0x580 [ 1420.199926][T26668] ? __rmqueue_pcplist+0x2090/0x2090 [ 1420.205260][T26668] ? alloc_pages+0x3e7/0x640 [ 1420.209868][T26668] relay_open_buf+0x2fc/0xe80 [ 1420.214589][T26668] relay_open+0x3cb/0x990 12:43:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2270, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x11000000) 12:43:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2271, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1420.218935][T26668] do_blk_trace_setup+0x51c/0xa00 [ 1420.223984][T26668] blk_trace_setup+0xfd/0x1b0 [ 1420.228679][T26668] ? __blk_trace_remove+0x1e0/0x1e0 [ 1420.233908][T26668] ? smk_access+0x470/0x4a0 [ 1420.238438][T26668] sg_ioctl+0x1440/0x2d80 [ 1420.242804][T26668] ? sg_poll+0x3f0/0x3f0 [ 1420.247087][T26668] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1420.252038][T26668] ? security_file_ioctl+0x9d/0xb0 [ 1420.257164][T26668] ? sg_poll+0x3f0/0x3f0 [ 1420.261422][T26668] __se_sys_ioctl+0xfb/0x170 [ 1420.266032][T26668] do_syscall_64+0x44/0xd0 12:43:31 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2272, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1420.270467][T26668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1420.276382][T26668] RIP: 0033:0x7fc9fdb8f059 [ 1420.280806][T26668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1420.300418][T26668] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1420.308851][T26668] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 12:43:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1420.316843][T26668] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1420.324831][T26668] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1420.332817][T26668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1420.340805][T26668] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1420.348820][T26668] 12:43:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x12000000) [ 1420.715905][T19358] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1420.955835][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1421.236004][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1421.245068][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.254420][T19358] usb 1-1: Product: syz [ 1421.258912][T19358] usb 1-1: Manufacturer: syz [ 1421.263519][T19358] usb 1-1: SerialNumber: syz [ 1421.273396][T19358] usb 1-1: config 0 descriptor?? [ 1422.416083][T19358] usb 1-1: Cannot set autoneg [ 1422.420917][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1422.967628][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.973957][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 12:43:34 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2275, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:34 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 35) 12:43:34 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x25000000) 12:43:34 executing program 3: r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1423.410378][T19358] usb 1-1: USB disconnect, device number 37 12:43:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2276, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:34 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xf5ffffff) 12:43:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1423.464494][T26698] FAULT_INJECTION: forcing a failure. [ 1423.464494][T26698] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1423.515217][T26698] CPU: 0 PID: 26698 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1423.525760][T26698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1423.535828][T26698] Call Trace: [ 1423.539121][T26698] [ 1423.542068][T26698] dump_stack_lvl+0x201/0x2d8 [ 1423.546807][T26698] ? show_regs_print_info+0x12/0x12 [ 1423.552037][T26698] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1423.557895][T26698] should_fail+0x384/0x4b0 [ 1423.562342][T26698] prepare_alloc_pages+0x1db/0x5a0 [ 1423.567495][T26698] __alloc_pages+0x161/0x580 [ 1423.572115][T26698] ? __rmqueue_pcplist+0x2090/0x2090 [ 1423.577443][T26698] ? alloc_pages+0x3e7/0x640 [ 1423.582065][T26698] relay_open_buf+0x2fc/0xe80 [ 1423.586776][T26698] relay_open+0x3cb/0x990 [ 1423.591140][T26698] do_blk_trace_setup+0x51c/0xa00 [ 1423.596202][T26698] blk_trace_setup+0xfd/0x1b0 [ 1423.600927][T26698] ? __blk_trace_remove+0x1e0/0x1e0 [ 1423.606327][T26698] ? smk_access+0x470/0x4a0 [ 1423.610869][T26698] sg_ioctl+0x1440/0x2d80 [ 1423.615233][T26698] ? sg_poll+0x3f0/0x3f0 [ 1423.619524][T26698] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1423.624488][T26698] ? security_file_ioctl+0x9d/0xb0 [ 1423.629623][T26698] ? sg_poll+0x3f0/0x3f0 [ 1423.633886][T26698] __se_sys_ioctl+0xfb/0x170 [ 1423.638511][T26698] do_syscall_64+0x44/0xd0 [ 1423.642955][T26698] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1423.648871][T26698] RIP: 0033:0x7fc9fdb8f059 [ 1423.653308][T26698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1423.673796][T26698] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1423.682231][T26698] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1423.690222][T26698] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1423.698226][T26698] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1423.706220][T26698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:43:34 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2279, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227a, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1423.714209][T26698] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1423.722216][T26698] [ 1423.866087][T19358] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1424.105855][T19358] usb 1-1: Using ep0 maxpacket: 16 [ 1424.386038][T19358] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1424.396151][T19358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.404363][T19358] usb 1-1: Product: syz [ 1424.409098][T19358] usb 1-1: Manufacturer: syz [ 1424.413824][T19358] usb 1-1: SerialNumber: syz [ 1424.421508][T19358] usb 1-1: config 0 descriptor?? [ 1425.026034][T19358] usb 1-1: Cannot read MAC address [ 1425.031338][T19358] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 12:43:37 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:37 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0xfffffff5) 12:43:37 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 36) 12:43:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227b, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:37 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1426.459581][T26493] usb 1-1: USB disconnect, device number 38 12:43:37 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227c, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:37 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000013c0)=[{}, {&(0x7f00000001c0)=""/4085, 0xff5}, {&(0x7f0000000040)=""/76, 0x4c}, {&(0x7f00000000c0)=""/159, 0x9f}, {&(0x7f0000001440)=""/169, 0xa9}, {&(0x7f0000001280)=""/114, 0x72}, {&(0x7f0000001300)=""/71, 0x47}, {&(0x7f0000001380)=""/8, 0x8}], 0x8, 0x2, 0x699) [ 1426.525617][T26725] FAULT_INJECTION: forcing a failure. [ 1426.525617][T26725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 12:43:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:37 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000013c0)=[{}, {&(0x7f00000001c0)=""/4085, 0xff5}, {&(0x7f0000000040)=""/76, 0x4c}, {&(0x7f00000000c0)=""/159, 0x9f}, {&(0x7f0000001440)=""/169, 0xa9}, {&(0x7f0000001280)=""/114, 0x72}, {&(0x7f0000001300)=""/71, 0x47}, {&(0x7f0000001380)=""/8, 0x8}], 0x8, 0x2, 0x699) [ 1426.629441][T26725] CPU: 0 PID: 26725 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1426.639987][T26725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1426.650059][T26725] Call Trace: [ 1426.653349][T26725] [ 1426.656296][T26725] dump_stack_lvl+0x201/0x2d8 [ 1426.661005][T26725] ? show_regs_print_info+0x12/0x12 [ 1426.666232][T26725] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1426.672001][T26725] should_fail+0x384/0x4b0 12:43:38 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227d, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1426.676448][T26725] prepare_alloc_pages+0x1db/0x5a0 [ 1426.681589][T26725] __alloc_pages+0x161/0x580 [ 1426.686193][T26725] ? __rmqueue_pcplist+0x2090/0x2090 [ 1426.691512][T26725] ? alloc_pages+0x3e7/0x640 [ 1426.696123][T26725] relay_open_buf+0x2fc/0xe80 [ 1426.700833][T26725] relay_open+0x3cb/0x990 [ 1426.705185][T26725] do_blk_trace_setup+0x51c/0xa00 [ 1426.710246][T26725] blk_trace_setup+0xfd/0x1b0 [ 1426.714958][T26725] ? __blk_trace_remove+0x1e0/0x1e0 [ 1426.720188][T26725] ? smk_access+0x470/0x4a0 [ 1426.724728][T26725] sg_ioctl+0x1440/0x2d80 12:43:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1426.729178][T26725] ? sg_poll+0x3f0/0x3f0 [ 1426.733482][T26725] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1426.738437][T26725] ? security_file_ioctl+0x9d/0xb0 [ 1426.743572][T26725] ? sg_poll+0x3f0/0x3f0 [ 1426.747836][T26725] __se_sys_ioctl+0xfb/0x170 [ 1426.752446][T26725] do_syscall_64+0x44/0xd0 [ 1426.756883][T26725] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1426.762893][T26725] RIP: 0033:0x7fc9fdb8f059 [ 1426.767320][T26725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1426.770242][T19360] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1426.786938][T26725] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1426.786971][T26725] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1426.786985][T26725] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1426.786997][T26725] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1426.787009][T26725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1426.787021][T26725] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1426.787051][T26725] [ 1426.846756][T26741] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1427.095823][T19360] usb 4-1: device descriptor read/64, error 18 [ 1427.105992][T26493] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1427.365931][T19360] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1427.366143][T26493] usb 1-1: Using ep0 maxpacket: 16 [ 1427.555845][T19360] usb 4-1: device descriptor read/64, error 18 [ 1427.676158][T26493] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1427.678755][T19360] usb usb4-port1: attempt power cycle [ 1427.685226][T26493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.685247][T26493] usb 1-1: Product: syz [ 1427.685261][T26493] usb 1-1: Manufacturer: syz [ 1427.685276][T26493] usb 1-1: SerialNumber: syz [ 1427.688197][T26493] usb 1-1: config 0 descriptor?? [ 1428.115887][T19360] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1428.286162][T19360] usb 4-1: device descriptor read/8, error -61 [ 1428.305983][T26493] usb 1-1: Cannot read MAC address [ 1428.311261][T26493] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1428.555940][T19360] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1428.726012][T19360] usb 4-1: device descriptor read/8, error -61 [ 1428.846045][T19360] usb usb4-port1: unable to enumerate USB device 12:43:40 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:40 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000013c0)=[{}, {&(0x7f00000001c0)=""/4085, 0xff5}, {&(0x7f0000000040)=""/76, 0x4c}, {&(0x7f00000000c0)=""/159, 0x9f}, {&(0x7f0000001440)=""/169, 0xa9}, {&(0x7f0000001280)=""/114, 0x72}, {&(0x7f0000001300)=""/71, 0x47}, {&(0x7f0000001380)=""/8, 0x8}], 0x8, 0x2, 0x699) 12:43:40 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 37) 12:43:40 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227e, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:40 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1429.533236][ T917] usb 1-1: USB disconnect, device number 39 12:43:40 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000000)=""/148, 0x94}, {&(0x7f00000001c0)=""/187, 0xbb}], 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x8, 0x4) [ 1429.582736][T26754] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1429.597227][T26749] FAULT_INJECTION: forcing a failure. [ 1429.597227][T26749] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1429.622454][T26749] CPU: 1 PID: 26749 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1429.632996][T26749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1429.643068][T26749] Call Trace: [ 1429.646363][T26749] [ 1429.649306][T26749] dump_stack_lvl+0x201/0x2d8 [ 1429.654012][T26749] ? show_regs_print_info+0x12/0x12 [ 1429.659256][T26749] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1429.665025][T26749] should_fail+0x384/0x4b0 [ 1429.669475][T26749] prepare_alloc_pages+0x1db/0x5a0 [ 1429.674622][T26749] __alloc_pages+0x161/0x580 [ 1429.679261][T26749] ? __rmqueue_pcplist+0x2090/0x2090 [ 1429.684583][T26749] ? alloc_pages+0x3e7/0x640 [ 1429.689203][T26749] relay_open_buf+0x2fc/0xe80 [ 1429.693922][T26749] relay_open+0x3cb/0x990 [ 1429.698290][T26749] do_blk_trace_setup+0x51c/0xa00 [ 1429.703353][T26749] blk_trace_setup+0xfd/0x1b0 [ 1429.708061][T26749] ? __blk_trace_remove+0x1e0/0x1e0 [ 1429.713279][T26749] ? smk_access+0x470/0x4a0 [ 1429.717795][T26749] sg_ioctl+0x1440/0x2d80 [ 1429.722127][T26749] ? sg_poll+0x3f0/0x3f0 [ 1429.726380][T26749] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1429.731314][T26749] ? security_file_ioctl+0x9d/0xb0 [ 1429.736422][T26749] ? sg_poll+0x3f0/0x3f0 [ 1429.740657][T26749] __se_sys_ioctl+0xfb/0x170 [ 1429.745242][T26749] do_syscall_64+0x44/0xd0 [ 1429.749653][T26749] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1429.755560][T26749] RIP: 0033:0x7fc9fdb8f059 [ 1429.759980][T26749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:43:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x227f, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1429.779579][T26749] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1429.787994][T26749] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1429.795958][T26749] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1429.803923][T26749] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1429.811919][T26749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.820063][T26749] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1429.828043][T26749] 12:43:41 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000000)=""/148, 0x94}, {&(0x7f00000001c0)=""/187, 0xbb}], 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x8, 0x4) 12:43:41 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 38) [ 1429.859885][T26759] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 12:43:41 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2282, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1429.981132][T26765] FAULT_INJECTION: forcing a failure. [ 1429.981132][T26765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1430.027586][T26765] CPU: 0 PID: 26765 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1430.038224][T26765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1430.048302][T26765] Call Trace: [ 1430.051638][T26765] [ 1430.054580][T26765] dump_stack_lvl+0x201/0x2d8 [ 1430.059298][T26765] ? show_regs_print_info+0x12/0x12 [ 1430.064522][T26765] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1430.070286][T26765] should_fail+0x384/0x4b0 [ 1430.074764][T26765] prepare_alloc_pages+0x1db/0x5a0 [ 1430.079907][T26765] __alloc_pages+0x161/0x580 [ 1430.084516][T26765] ? __rmqueue_pcplist+0x2090/0x2090 [ 1430.089802][T26765] ? alloc_pages+0x3e7/0x640 [ 1430.094391][T26765] relay_open_buf+0x2fc/0xe80 [ 1430.099077][T26765] relay_open+0x3cb/0x990 [ 1430.103415][T26765] do_blk_trace_setup+0x51c/0xa00 [ 1430.108461][T26765] blk_trace_setup+0xfd/0x1b0 [ 1430.113237][T26765] ? __blk_trace_remove+0x1e0/0x1e0 [ 1430.118435][T26765] ? smk_access+0x470/0x4a0 [ 1430.122946][T26765] sg_ioctl+0x1440/0x2d80 [ 1430.127278][T26765] ? sg_poll+0x3f0/0x3f0 [ 1430.131530][T26765] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1430.136457][T26765] ? security_file_ioctl+0x9d/0xb0 [ 1430.141585][T26765] ? sg_poll+0x3f0/0x3f0 [ 1430.145840][T26765] __se_sys_ioctl+0xfb/0x170 [ 1430.150426][T26765] do_syscall_64+0x44/0xd0 [ 1430.154831][T26765] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1430.160709][T26765] RIP: 0033:0x7fc9fdb8f059 [ 1430.165114][T26765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1430.184712][T26765] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.193116][T26765] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1430.201082][T26765] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1430.209048][T26765] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1430.217005][T26765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.224963][T26765] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1430.232933][T26765] [ 1430.326217][T19360] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1430.406111][ T917] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1430.526013][T19360] usb 4-1: device descriptor read/64, error 18 [ 1430.665895][ T917] usb 1-1: Using ep0 maxpacket: 16 [ 1430.806193][T19360] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1430.976055][ T917] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1430.985675][ T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.994565][ T917] usb 1-1: Product: syz [ 1430.999120][ T917] usb 1-1: Manufacturer: syz [ 1431.003716][ T917] usb 1-1: SerialNumber: syz [ 1431.008685][T19360] usb 4-1: device descriptor read/64, error 18 [ 1431.026723][ T917] usb 1-1: config 0 descriptor?? [ 1431.126266][T19360] usb usb4-port1: attempt power cycle [ 1431.535829][T19360] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1431.626025][ T917] usb 1-1: Cannot read MAC address [ 1431.631316][ T917] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 1431.715942][T19360] usb 4-1: device descriptor read/8, error -61 [ 1431.985829][T19360] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1432.156006][T19360] usb 4-1: device descriptor read/8, error -61 [ 1432.276959][T19360] usb usb4-port1: unable to enumerate USB device 12:43:43 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:43 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000000)=""/148, 0x94}, {&(0x7f00000001c0)=""/187, 0xbb}], 0x3, 0x0, 0x0) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (rerun: 64) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000140)=0x8, 0x4) 12:43:43 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2283, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:43 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 39) 12:43:43 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1432.614184][T19360] usb 1-1: USB disconnect, device number 40 [ 1432.664724][T26780] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1432.682942][T26778] FAULT_INJECTION: forcing a failure. [ 1432.682942][T26778] name failslab, interval 1, probability 0, space 0, times 0 [ 1432.707254][T26778] CPU: 0 PID: 26778 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1432.717792][T26778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1432.727849][T26778] Call Trace: [ 1432.731123][T26778] [ 1432.734047][T26778] dump_stack_lvl+0x201/0x2d8 [ 1432.738737][T26778] ? show_regs_print_info+0x12/0x12 [ 1432.743929][T26778] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1432.749653][T26778] ? __might_sleep+0xe0/0xe0 [ 1432.754233][T26778] ? vmap+0xf4/0x2d0 [ 1432.758119][T26778] ? relay_open+0x3cb/0x990 [ 1432.762636][T26778] should_fail+0x384/0x4b0 [ 1432.767048][T26778] ? alloc_vmap_area+0x1b4/0x1a20 [ 1432.772068][T26778] should_failslab+0x5/0x20 [ 1432.776586][T26778] kmem_cache_alloc_node+0x75/0x370 [ 1432.781796][T26778] alloc_vmap_area+0x1b4/0x1a20 [ 1432.786657][T26778] ? vm_map_ram+0xb20/0xb20 [ 1432.791169][T26778] ? __get_vm_area_node+0x13a/0x2f0 [ 1432.796360][T26778] ? kmem_cache_alloc_node_trace+0x26f/0x370 [ 1432.802347][T26778] ? __get_vm_area_node+0x13a/0x2f0 [ 1432.807545][T26778] __get_vm_area_node+0x183/0x2f0 [ 1432.812578][T26778] vmap+0xf4/0x2d0 [ 1432.816292][T26778] ? relay_open_buf+0x436/0xe80 [ 1432.821139][T26778] relay_open_buf+0x436/0xe80 [ 1432.825815][T26778] relay_open+0x3cb/0x990 [ 1432.830154][T26778] do_blk_trace_setup+0x51c/0xa00 [ 1432.835184][T26778] blk_trace_setup+0xfd/0x1b0 [ 1432.839856][T26778] ? __blk_trace_remove+0x1e0/0x1e0 [ 1432.845055][T26778] ? smk_access+0x470/0x4a0 [ 1432.849568][T26778] sg_ioctl+0x1440/0x2d80 [ 1432.853901][T26778] ? sg_poll+0x3f0/0x3f0 [ 1432.858156][T26778] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1432.863084][T26778] ? security_file_ioctl+0x9d/0xb0 [ 1432.868188][T26778] ? sg_poll+0x3f0/0x3f0 [ 1432.872451][T26778] __se_sys_ioctl+0xfb/0x170 [ 1432.877040][T26778] do_syscall_64+0x44/0xd0 [ 1432.881455][T26778] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1432.887339][T26778] RIP: 0033:0x7fc9fdb8f059 [ 1432.891750][T26778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 12:43:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2284, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1432.911346][T26778] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1432.919751][T26778] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1432.927713][T26778] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1432.935680][T26778] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1432.943644][T26778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1432.951618][T26778] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1432.959602][T26778] 12:43:44 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000ae40)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="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", 0xec1}], 0x2, &(0x7f0000003880)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38}}, {{&(0x7f00000038c0)=@abs, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000005500)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffe92}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000055c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/bnep\x00') write$binfmt_elf32(r4, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xc4, 0x20, 0x0, 0x92, 0x3, 0x3e, 0x10000, 0xb0, 0x38, 0x79, 0x0, 0x6, 0x20, 0x1, 0x9, 0x80, 0x8}, [{0x4, 0x8001, 0x81, 0x3, 0x1, 0x4, 0x4, 0x2}, {0x3, 0xffffffc0, 0x8, 0x0, 0xffffffff, 0x9, 0x10000, 0xfff}], "c57547f1d1d5eeb61d1c94650c29545f0efdf6a93a231493e0890911f9c68e99c073abb13b41d956cc9907669d968dae7bc37f935eacb68de96c60e31f4452f7ed82056c1b774d4050e46de8ce144555960b21687887f3a30d1236ef89c3f18fd57effe42fde91e3cd9fef48b5f4e3d25f2f0893b2d336abff3edf592d2d66c01d762e31e8b4620d5cc76109246edb7fde9e57e9592af129", ['\x00', '\x00', '\x00']}, 0x410) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) 12:43:44 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2285, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:44 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) fcntl$getown(0xffffffffffffffff, 0x9) (async) r0 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r1, &(0x7f000000ae40)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000600)="4ad448bb6e9e5cc4c0ceea9cf752f3c90a48a11f942c5d14576b8ff268793f3db9fc5460f317157fbea3e9e07f296045ee8d80c2e3582aac69578fd08bff7228a2028650dcab2ed8469af27ff17a21faae3561cb1628a45a64c4ab567c6f9c5b7835bc1eccb600e551de5a6925d713d00dcacccaf98a2158aa17e472c23df1d2a0205bdd78e04a23ac7d092609e94477c73ff6a233b57142ddbe4a7bdf622a5d1f874b0ce29eebd2ba27b7377970af035640f8cbb89d4e1bc8fa8315e591e9756c484d701b74378658c1fc92e6a01db9e22c5a30874d51ba971fa96196f117c866b1e28c39ead0f4daf8c8a9dc26b220c682d94ee1d084123fffca2410a1dd2119eaf2709ee63c75cf39eec122cd102db7d15f4093e13cbe09de1dc7c1f51a80b8fbb6d44443d32e3a4f0169b649fd6e61caf2b5157cf585e36d814418e6358aca0e56aecbfe38bebd412a2dd004918e4ac60027eba8917171e500150d830aabb8fda0e455097372bda3a973bd43bbddbd0fcbfe2d144b205f1899c46e7b14d24ce0f7c7f228bb9789f47166844dad882097c40e9d2f02be7d0fc89331c3f754831776a2fd4fb74b7e8f4fbe4c0387d3a329123a3edd4a88b211432b45f3f10760813084df1be4c1b0984449b2e277aeb45f4a2aa84ad7a2439fc35d2544177e1c641079bf08975be5b9f6822614c9f8b346f9d0578fe15281ba1d7a7fcef5394da80816c1dc866d016f72e30e4b9de0fbb29a489225631305152c3ffbb27ca80112d3a1da2911cb38e55a3e34e09ea5c6d5e0690bb6ad1da737dc354d64d3e1d85ed5ae1c289508c6890a424fd5aef7822843ad730a02af05523e24cac8b2db6392826fc6476c52405c81f767004d15f3591c3511b21ecbdd4c9612edfc8075d91270bf15439409c348f819eecfc1025fcda2db1f1cd424ee18c5fc65f676508ba6e8a1bacb084958708eb90d53bda689e5e28ccba1aa1c0f2ae5cb2de85f00086047def13fc29b670c7a680359c4ffd22c4c2a0e01738ed8940b0787a4b517cf103dc30af26e841f4cc6cc476abbdebd1206442f304a74192f34d5e55072e880ff53db6f43629b7a38f297eb2fd24c7a4574c0b40ff74e6885855874f8c009294923b5bcc9abbcd402a813df186c5ed55b435aee2ce4a9eae246f12f4ba90456a8611953dcaa871670e0b85cff859963b2acb67ea13ad50790ad1ae42cf6c8e27599e194b080d1e8f31461f2dbf569acc3d31551030676305e2343ed82800510aa2e6179e4e1581bdfb54c5bea6be23fccc7853b0ac97877458c10ff23598b11b67b6eda57db916518469501f785c1178cced34a4b3d792f59859c3d18fe75a32ac938963f1367bfb99ea30ee9c61c0fd45e75f33c5f21b300d0e9e4172c11dfcaf33e52ca98fd8249fb8f54352dd5af941fdbf30db1ec93e8e0f78f3ebe3ff533b50394e77cc80368ee80d86c241512923992b9b9cc14acbe64378add3632ceabc954db98d1a7e7accf383aeba775697473cc00936cef5b9760cd57f69789c2e6d502628587c962e1646d05f8445c4b5079b9a9352f2b4234eb60865238d2426bc86d93040f3c457a74bc65810df27b7cbd2b06f8c385e714320f146e84f67c8064ae3f63ce3f5b8a9c57248b2746dbf014391726028990f71402b02ecb4340147ae3add1138f018288dce6ae1bdcb45463ef79dc06e0e4a43d115db4d2e95499fb941bb79d7ed6b151ed9c8a2df1cfc060dbebb40af1b356cb8ba08f5ea02e7f9474b88746236aac19beb8a61a8bde82a6135b26ee871647466085cb85b87c9736d9a7fb56095c22a1ed4a4de44825d8c081a53e038bf2e9341c69376d2d765a712ad17b543320272767914fdc095e1ad5d8554f27a93cf2b356dcef037686a7387ebf6e178c3b2264a73713d5549cc92b0532acfaa1f996b64abd77e1c45b9f2ce8fd0bd1a96334cbd790599eb318b62b7c7d8a5377c1cad2e8b4268b373b9f3279f4b2b498888f27122880cc5a52bfda53da230cb921a27bcba3cd907eee3d0a6816c1ae18fa71af700135c82ff5edcbf985e8a61b20af9c6d09dc77fd524d36f89ff9adefd3f9062fec521e7fac27ae4c97222dceddf9f43e6f1d903e9cfd21d9bfcc0d25d069a227750b729e6cf605cf7f81ffbe69f7bd18e212322c425af0806a36b854a05ddd47570a8c9c444a6b8025e5758563e1bedf0649c38873ef1056c0b9a6c345908c43052f547c01d4cf6466309d0833f1100c7ebd60bcd3525927a2ee4ca9f33781088c09c5b20ba5822b8b705aab741b1af4e6f652cb8852ccc0ecaf75fd0ae7178fb7e28df3579431e5a1c91f7d68c76c56b4c68b6c5ee20b07144e323a2390030cd45c9bf4acaf6b330d61a11030e85d7f08bf0a8f4127c23dd962ed6e9a860f81c4e82adcce68f6b39d45edf04ce5d136c23a080b9bbd5a5ffe9424eb95946b02ee17cff27a0f793cf0637f940406081a9d71489a0010d6edaf66618859795119ca97636b2fb0373900c1569e1de56b5356414eb2b3e7d9b3a193100140f2d4a3c7feefe680a5496a5c71169df9dd6e3afc2af4e03640df8637c3634b36b5ce5a69333b9248d3cafb0bcbaa5919111c2dd264d083fc954988ecad5408b44cb0c8b299493f3e7965b44e917663f1399807d411c24149417f2a26e17ab7cd15096441cb3e77a448d371feef3b68e73e0381c7240f034ec8bf0261f6fc40a48f2efda591cfea8733ba61563cf76f2cd7e7e0fcd7d2219be42d2aa125eddc32948f9492de14a6586c2df5ead303e60551d0cdf9a6ad857bfa50f4be6eee502518bc628f61ed20c2c73ad7e9510be6b6687c20287a4e0b91ac896eefa4fb07242c18319b6acb9a5adb64b111bb20822ad545f5e65b1652a839184dfbaeda500fcc566d891f7144a07ee05f9b48ae31b0dd5fdd803efb4133b79ee9630a61ea96ff0d5a8c1aaaa008e48c77a9649240452bf43e78fa71d7906aad89c819f17bc2bc38923845023c790265c809ec6bbdff726593dae4c58b992ff9d0ea07e616c0ce81f01160ae068cb4c1a40f9c67de988bf50fae0453b166b49f942aa4b380f9748209b11ba111d81d2d2533fefe2f31b59badbb064da33ce05b5d4fa3e5eaa6aee073e9c189ddc71e0fb89bfcd061f84c88768ae5a99df8252d19a460d10ecd1ce087af8799041aade0f1bddeec5718916e71281acd4b02cdce4f261c8c2f77ba74507cc46efbbafddf97cf90b42cf081ab21f1a5fa0cc21d183d13fe2aba09395709dd1038e5ba9fedb693e89f2736e10318a7922a0c02fadedef3c03344c51cdf4ef44f317650acf48e4ce29f65f09f1aaacbd5b5aab1ded23cdd0aecebba9644bed6db65a088c7a3ad4b1fb70e602e108fd487f8b62353b5075b1aedacb0d3152c91c9ca4631e299564101a4dff42e097d1b0641e5466b3bf96773e79e9367e65e43e9969c8531b0ab5fd5fecc9115a1556e819e9da721a61ad38807b37be27d4d4704458c1ca294aaefc606d7243fb5b485ac03d21f4648369a15b39e7702b1ca41c95d4de6cb972b09dfc8b84dd19ea7abbe8be8cdd9af41e8b91e91e6478f1402f805557fbd2e258b1e8bb9075f9a71284fe60adfe72881bcbc6ce7c080163eff054b5279f012031017e42f0bd90651af8a96b4e00a93ac248239c43ff343927a95b2edd43cd2c730ffa7eaac423c08c8435ac322da1ae33348eac49109d1b61597700f85158fe3f8fe8d17c1ff8b2b1aec2e0edaa1159e5c2670c6dbb79b9aaf45cb983504b2514f0a4b9e890fb1956b8d0bfefdcfcbfc61a2eb3bdf01899697c5a649c9d3e3e45df9b32cc987a65e58b4c0260632bb79c45050c189caa7da9a71be18a00deaaf073e460725e17558320c8fdebc16727fb1d5ddc6a6a530c71534b28f87e0eb57d201f34c296c115fce957ac402855fc2d0bc60c22dcfdb4fc34ccf6406faffe340e7e8504681f54a1b509c4135da1a7ec871093267e7d38433b12dad28eea0c37e8d1e653349f6a123a9a34477a60ab763e125b24cec61b5d8498eb161c0fc508a11d95255ae646cad48e0b5baa28cf8e4bd2e1ea42193b9cc363e14c00271ea73e874da453d2ac25b10a3332d9e52a3e122b896501809693c53d1e8adc757a887fc4da6a7ded0432cd952cd9213e2a512834f11ba685da6e59c035babf25d18df0007dcdbfaac556b4c7058289c0fc1ef4ae56dc30e467d3abe5549eea9e006987b5fb1ef995a7b619227e26b551446caf5ebf6db3b0e0622fd53c0c1556cb38055b5d1f5b0224bcd561af9fbc3d952caba9f86b310cb54486531fff5b330bf97cf89f1d7ce2449d162ea7786ac15d26b479a6432c3cf3c4e60ddb8e3ca840a44cf482d711c9c593036844cf471253ad9312b9667e513376a81f789100ed213962b9a7384ea930c7463325b8a1101e409a9a2bf99e5c36765b29d6073e8c717166f76367d3f93bb09b3411dfce8842ea6e0cf355a5c7c2ac8a7621d233fa163bac651c4705769b9f3d207b2f341747c2bc0c08d99ea714ad8dfc6260a64da13a5b96efb53f77026ea3f602636c6d59060c9c599e5acb0c2ecdc5cf66db78007bf7d61a66d4e39616968cc30ea04473d2d09423a698b3309c12d2a5ce61da76450159374058cd079932dfb518f8c52cd556c9195d37e46ba11739fe3ccdea8374c7ee6690e5a6f2409098b3732b02df50fe89012bc7fa8bfba8f7a8b84705c1c11b14ec045a71c0249de3f99ce554936df2195efd3a1e4b18de3c60c2ddfc9f73ccc7d55037944e2cce545fa0e6fd1a3d0f7eec7425f3a575944c838568af442cbf2fae9418e2fdeb801f4d23a8e67908820a2de1d51c3c66c3660690c9dac02bbc546037f50fd9fd46bebdac32ef70445e0799eb0d10d420382836972f091ff8e0412163bfe571f92b99581c9965dbfd0d3d8121de6b03d5d28542029a8b04879d4a30ad7106e0cd290108a94c05b622a7714b2bf77b875b43b517af742adce397aafe91939ce60e213fbbc6fc9c3b9e79f274ddd6333b5169789a743eda531ce5d486c8f7fd3b20781ccc780dc9f978232eca97854d7aae25f527ae012b7c5706e9a80ab16fb0a51e171e5e198b62611fda729fb53ae3eff9d9e01ef3b09ca8c94f38b9ff5edb107a7dcc1cf073294b1dc533166cece8d47fee53aae3f2f687259e8c59667a90bb944bb4ee46b5d5f8966562cad10cb7e3f95b9d89cbf98ab5fd14d13fbbaaaf4fcf18355da31d88533e75bade892886820cbf4fbe995418e30df53fd8844de81a635de0e7a74d49ba830c3acfbff65bcd22f19086a91ae742e47095652b0a1baf09e465109add65729480afd67533a36b335ad34ca352315287c3c85092931ab48bced44bb6cbed88ff90849d48a83a73fa93a05214add6873559b7a444e891df577bdbf6d187e05fb94f72d184042c08e6477397f00e45f15e4d95af8b1b54112af8f3d7e2850e4cfb3a9030cdf1fbc377b3d580388fd073ca471acb6cccd426cfbee2e8e41095f361d29c609e5b0fe25a78ba9a0773f7f129846618cd6f3d896d33517ebdb343e51036ca5453e26639b33cf3fbe40876f10d8279cd4c913155c7f2f882de6f577cdf5c120b5df6b37d7c2fdb134a3291452b13c5f272d74544d66c6036bba3812851ea6965dc29b38c56e6d34986fb6a08ea21a043b2add1dbdc6025496d1213694d02527a716760ef1510853eeb5af921c6f4c894e65f30ea19f0f7062c13a68f6a11aec56166b342ecb2560344d6b4cdca20f43482baa1660d42b03", 0x1000}, {&(0x7f0000001600)="ad3c4c68b861f58be6454997e6671d61f7da9e9fcf3d864c14509eee0cfada620ed6299698d1b027697d6329877f2cf7895f7f9cc23cda3f02d03238ad21c642e4a763f24e10e982e4d9f5a2311c3373d8bd7e89b946dd98b880f16e0c85400fc1b1ff42beb66380d637e94d162aa2a1a5adeb8418bb404978450d18b0d87566996cb80223ef830812b2fb801ec337b0810cc1806116a39073dfb484ccb86738dbf1a6e3a32ef6bbbc5332a074429a23ab6c6ee43dfe06ce547d80bc52a0f6ce4007e4cfc71506a91db3779e9e132e7d8108e2e420e1510a73ff74a6e285c63be279781d351cd6cd14da969af906a34f6b48499fa2313598116a0cdaa0d409e9137da04e0a43ade77c4579dc95954af337f446a2bb6902af7c848c9ba1933e748a40e49c062378bdff49fed3b8421ef08b8a13aea0c2035c6f256aa8e5f33d04868267c8714dc0827fac0b385af7ff2fb63a42dd379c9906785b97b50f4a9a386e6cb5aca2f9889e271cf82bee0c699f24a58a593a706ba49385c726cc3e7a87705857ef90f8dafd81f483651b39d57ca33dde64b8f0bdc5740da02a0e60cd96e79f36888a47c7a1b51a6b5d2544f7e64a7337086f7921ce528f884a8b4f77d974aed813297c246969874dc07b922865df192e80a491291c069ce3ffcc8409a64b76ca039aff4d89e236fc26db86aedb8d94b6d84463912b1b7aa09906b43fb6d489efe0fc65cc6e5d80d841730f8baa77b697a5893520cba54248cd7367b78188081a6e4ad1e011a1cd8ce0895743d091f98d6dea6b17865f9f596e35797c87e62ca4ff05b72d378a3b4bcbdc325e8ae02892ab109df7d6e253d70ed5d900ac6b02a3fb3e2c28804cc2f37e1d2dac92120d0b84ea29469deec60b0425c86f78764e3c232beb97d421f7af4ea5f83603e6eff5192c6b37ddcdb42c3087e27bba2306302d74a172a19f6ab0d24641d4a5536629efce67df7f22a78977e26653b9974ab5f5bed3f9f7063bdd9e742ef01c875f32f1ce6ac59daf77a0fe98f0f9c1d2971b527027993bce021d02c304358bb30cf72b193d90c06996bac9de42be8acc347859063a1e4d7e4e1b14dba1d7ea22426e2cde023421ecde3c2ae269deccb15c865fba90de3e7f1ce1e6e1a2e5388a6aed3a509cdb531115746f655093264a0a16c289c0392c61f5395275d9c9e8cf30cb47313b4f3fa29716eca0e61b720880779deebe85731c5c306da41fcd38a1b2a55e6441dca405d95d94125ca237d2f6aa11a862e645e7ec99c44743b9fa0289fcdde52e4707fa8c9f9442e3fdbd864db86666ecedb689d8ec8727861131f566e467c90ea7ebfc3720bf1de17a43110912cbe95706069c1ad277844c05785f22a3f06529778c7dcd62a9ddeeb56075de4ec2e9a967469132dcbc376e6d9dffb0fcd3422dec0e496f2d2b62909a1c2be9948172e0df45dbd5f3e00dd62809fd043ce7d2270970dc0698a763537a4b99fb5697a8036c9ea9399eb8bd0acfbee5e0dc2af0e3ace5db621cae6beb4930af546d873a9d25bd890d3b4ff6142c21ba00e25b251aec54a7018e4006b48f9e71bf10c8adfdaaadc07bd889fc2b909328a02600d30f8a2ab6642aa4d45ba15640bb20ef3045537e7192b9e7ec552c34306064947dbfe945e5405bce3dc4cb9f27a78902941366d24346577cc6a06edee618f8c9045dc3d00a61e7c16127337d3498612394f28ef4adf0b53eedc9748c501d8dfdf52ff5f4cca71ff840f4c47cc69c46cfdcfdfe99832c1c07a213f19b4f6af77a2e208735fabe62649fb32891a32fdd7174b5cf8c79f941736d3735ee8254d963e9516001ed644cd646618fc053b3fafabbcb1f0facb9a40cd6546f02abcbec24016ea01b154a3737a8b7cca15600324d51891f7ae7f865e0b2a077fc3da67f87c5ca5e8f5444d71a92b59ef9553259e89644676aa2c2166ae1de9eb2e0e0ebefcae11f968bfca5baf2dbf742efafffe090b14d0947984b0c46ba932bc12df6718c0b986494e6021e377f7b773e4722ee55b6eb4b3a1f93d0a707ac9ad0f3efbb3de35309695932f763e213765f5db6e78789d0e02c3bce8be12f60d42fd9f7c665719793cd0a85c89a8f014783fb2e3660dc75dce1656b663cf9efc706c3792bfe2405f82623c05feba0d078e907d15e671bd7100ee74589ebb0e51df78796a77f1ca0ccc399b95f55e77a47f79520c3bbef57fc1cc0dbd1234cd9efe2f7a45f2332589cdd0e6382fb8bb4e5e0f98ed5ce69b4324df2066fa51654cb5253d4757a3e9868e91424c8704dbda2e5d228f168a41039644724e4f0babf9cfd911a2b109fb444703a6a7abd5c2938ad377794f3377fc8cf2ab463c5c299dd23ccd9efc43c97286c6346b7f78feb437f2eb5300eb2c92172d035f83263a0367721a34808410a924cc95f9a8537a51e59e1bb9cb9e791138442e22e23f4763c16855d89f611b3874556dfa3e78285a09050c9270bb8ef092586f1711ec7c332a7e88facf54a225a1c3d33a92a0798176f90c50d3f64f6483e7ea087005a7eb691e1d0d5bb2bebe272f5a9a6b11e2e19b659aa2a9a0e104dbc79d7a629c974cb64859315f3b0e423a43bb81bc6e7c99f8b28c7805d21ccdcc8fa160695ed27044fd874bdf6559eaff0b056a522cea7f8fa30c4482a49cb11622b8891ffa63c40f6be361242c8a6fd9eb11e6b45807a124ff78cd6f730af60fe154740ce2d5fd403995c79029352951207625d1b9164f0dd56192b78e4b67e21d243f9586f8b28eaffb67afa6d411e6649eac7aed05cf569d10a398c70abad556333417824e986fe45d0867ed87d1c102afdd5091b3665eb1566ee3b431bfa1f9163265e7aad46ce86c15533a41c83ef27a529f0993e0279c9d6e562e1955d79b00edbb0d6a2680a5e4b03f1936e60a27176036913d0dd1347c8585e8c0c181d41818ad511f35ef3ad200f9b31a1de58414171352a10f8c693bcf3f2688cc68910a1f415b5afd0620454c5a4621af2ff895902a66565100c2136dcd8cd66ac97353a415608eb9f8090d74365ca158eaa1b8bde797aee34d61782f1029ac5c2bd798341b71e6f5d0af457af084fcc8d6f629742cc83123fce926e2ae2b7c6a08719760773705cb643b1cb9469104ca093459ab447151171fb12f01e1f0aa7a5668a2edb826d6c5a8784fc1bd941b51ce8c0ddf09ea15c96bd76d9c3bdfea14d47c58dc298a3f85a32c4042a2ad26c885e65485ab649be2d7584b7d007fdc68f532420d78d91d0b5231d12df266d74e226d94a931256f4fb4ac6fa04ea82a6f2a3859f99f7e04fe76271d0bf6a1213516efce4690d5bb283aebcd52cc88b3ac7644ab25f38f95cb8e1563fb13e14c3a903bcb9cbfcaecc1e602812942a9bab59719f105a5c241bf6f2dcf6f207c4afd8a240dceb5f8422a1f82abb71527618d20782c1b4a8ee4653ba692c75a1e6bd69fd7695492980befa85d174b4d1d52b958785692d2ff3876118434f64808166b651ddbf99d61b6857e707faf6de3521afcc1bd7995b83550730312533e7c508455684f6735bfd80bc51135af44b88a2b3322f00ac1dfd76603019efdc571093b354a922a954fc93d5b14cef7d0fe1518d5aa15fa0c94271a82c2bfeb13e491b2cd83deccea8ea873a862d569e50d21bca45591ac3b8fbdcf2411a4d79dd689fb71ca05ba9b52e453afdc85f0b03860d32e2d12342e3bba1800a701209d0e50e29ef0973a3f977fbd681b73ba293d3713d5a12976aa29e16d77cac2b042798fc4dcae7a37a6d2c022f3dbb35557f13dccd1924cab2fd53e2154f193a57a3f354701349f3f6deb9e70ce6765d1ede2eac46799f6baaffd85021ffda971917ecc82b1fe1870f92950394824f1f2832e62dfeec8b1f15a1c1bae8e8be4b60c0f4c3ccca57fa511449b72c1eb22227cdad88c5bedac5ad92cb5a8bb0a9c3634318151116ca72cc2f303d44f39e43d2931db01acdcab1961ab0b3d7877de0598e5b82e4d3f456a6b5dbb36dbb1d4a1ebce5ee81b707196e3c15440ebe83492fe005ef038a234ab865149199691bde0a777eb5e67caa63f34dad8878ff02f389de6f0e6b982b2cd98ca1e81705c2411a069674614d0fe10035ca2c1ef39497620f08b69717a4a5aac0969a619e77b11687ce8a9fd26a819a5abd1464a00e7a9f6893654bc9fe8dd80dafd791d2254503e2ddbbb9bac6a82cef3b71c86326289b33a1d8b003336b6758ccf7b14a116ec1b5c24539cb2f3be334ae8bf671794227ece2bfd03ec8767f99c363b313a3309dd6d8c6cb4e8b0ca2405a9c71954b27c40d8b17863c5423ef2e51c6e05c255e94386fae9d977ff7a2c0b79155884203c454fad401f88c6387b182079ade8273bf8eb00b4e00aa8eb1290be3e49ee05032e4c52a4506ad7b756cbcd19621187794b882b922338bcf67b6db74c1b359f7361a0a320a909f54b7f0e18339c4ef7f026b2ffd690df8cbf61bfd4a154203747f6321c34d9f3ade89eabc04b34c4a32e7352ad2fcf032685da59d89db7bebf08e7f2685a7402d1436c8a0f8112c00197d2575c6481ded417193af30e101e52e16e8f106aac32e6aa2a3eb11f3809fc8bb6fa4df32c29b9e0d056fa4745e75159559b1100f206eaaa91037ddc9b1a6cfc13bc9afd9f4097b73d27cd9b3cc4efbd4912b49da144282eb5b276783e8f26a05f3bad29125a7ff22c77f73c5baf33f7580019bcd7f1f8f8a37c44b14a5a76b36aa81f8c08c17a105496c6bf0592ae233b3527cd5a6fafba2fbe1370196c1071ddf6c8be91fcb5a0d40c647823fe57cbbaccd94cfeca557ff97f3206760f72c8a54cb25ffd441356e68a3b80bb6a5490e5eed13d05d639e81d1cf6a05328d22306452a37a54b9a91a9f2fcac237957a12ec252e5d1f3bebcd723737f2f65af6670d350d0151a32161e35118f713208af7ed34e05f734ac6cd137bc635a442ff34ad5c5354b9a42f9f6cd00a05871802d8c4263bf7d768455fa4a0d042eb0f8c9d63e451e27aa2090466249b7ed72c463754a01479d781e18823a90dabd81251deb14ce503a0bd6f7226ccf0caaa108e9da7cb6bd5c4900e58efbf31bdd629b5f437c63a66fdbb03c438c3babd8ee7cf58186a52378903963bc9ad1f7f938ac8b90c791dcb60b29c3bfd9853cd4dbd8615a8f7f2c73d43bb895f06a6a4a79d79b52b5a6b2b4ee44818b62949a8aa64bb808428cd1d8b38c9e7f0703e978d2a64d8be693c137bec15c88db4b309e582c006f58e98a927cf2e15d771c5ecdbaf2a3295a64761e8efa3a1a9e6f9ea4ced9011723f3f9ea0a55b1142678bdde7", 0xec1}], 0x2, &(0x7f0000003880)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38}}, {{&(0x7f00000038c0)=@abs, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000005500)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffe92}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000055c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x3, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/bnep\x00') write$binfmt_elf32(r4, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xc4, 0x20, 0x0, 0x92, 0x3, 0x3e, 0x10000, 0xb0, 0x38, 0x79, 0x0, 0x6, 0x20, 0x1, 0x9, 0x80, 0x8}, [{0x4, 0x8001, 0x81, 0x3, 0x1, 0x4, 0x4, 0x2}, {0x3, 0xffffffc0, 0x8, 0x0, 0xffffffff, 0x9, 0x10000, 0xfff}], "c57547f1d1d5eeb61d1c94650c29545f0efdf6a93a231493e0890911f9c68e99c073abb13b41d956cc9907669d968dae7bc37f935eacb68de96c60e31f4452f7ed82056c1b774d4050e46de8ce144555960b21687887f3a30d1236ef89c3f18fd57effe42fde91e3cd9fef48b5f4e3d25f2f0893b2d336abff3edf592d2d66c01d762e31e8b4620d5cc76109246edb7fde9e57e9592af129", ['\x00', '\x00', '\x00']}, 0x410) (async) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) [ 1433.067399][T26789] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. 12:43:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1433.226676][T26799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1433.265995][T13530] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1433.317149][T19360] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1433.465920][T13530] usb 4-1: device descriptor read/64, error 18 [ 1433.565958][T19360] usb 1-1: Using ep0 maxpacket: 16 [ 1433.735934][T13530] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1433.846084][T19360] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1433.856513][T19360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.864540][T19360] usb 1-1: Product: syz [ 1433.868775][T19360] usb 1-1: Manufacturer: syz [ 1433.873370][T19360] usb 1-1: SerialNumber: syz [ 1433.883375][T19360] usb 1-1: config 0 descriptor?? [ 1433.926844][T13530] usb 4-1: device descriptor read/64, error 18 [ 1434.046912][T13530] usb usb4-port1: attempt power cycle [ 1434.455910][T13530] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1434.486050][T19360] usb 1-1: Cannot read MAC address [ 1434.491277][T19360] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -61 [ 1434.625944][T13530] usb 4-1: device descriptor read/8, error -61 [ 1434.896037][T13530] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1435.066418][T13530] usb 4-1: device descriptor read/8, error -61 [ 1435.186108][T13530] usb usb4-port1: unable to enumerate USB device 12:43:47 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2286, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:47 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 40) 12:43:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:47 executing program 4: read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) (async) fcntl$getown(0xffffffffffffffff, 0x9) r0 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003840)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000ae40)=[{{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000600)="4ad448bb6e9e5cc4c0ceea9cf752f3c90a48a11f942c5d14576b8ff268793f3db9fc5460f317157fbea3e9e07f296045ee8d80c2e3582aac69578fd08bff7228a2028650dcab2ed8469af27ff17a21faae3561cb1628a45a64c4ab567c6f9c5b7835bc1eccb600e551de5a6925d713d00dcacccaf98a2158aa17e472c23df1d2a0205bdd78e04a23ac7d092609e94477c73ff6a233b57142ddbe4a7bdf622a5d1f874b0ce29eebd2ba27b7377970af035640f8cbb89d4e1bc8fa8315e591e9756c484d701b74378658c1fc92e6a01db9e22c5a30874d51ba971fa96196f117c866b1e28c39ead0f4daf8c8a9dc26b220c682d94ee1d084123fffca2410a1dd2119eaf2709ee63c75cf39eec122cd102db7d15f4093e13cbe09de1dc7c1f51a80b8fbb6d44443d32e3a4f0169b649fd6e61caf2b5157cf585e36d814418e6358aca0e56aecbfe38bebd412a2dd004918e4ac60027eba8917171e500150d830aabb8fda0e455097372bda3a973bd43bbddbd0fcbfe2d144b205f1899c46e7b14d24ce0f7c7f228bb9789f47166844dad882097c40e9d2f02be7d0fc89331c3f754831776a2fd4fb74b7e8f4fbe4c0387d3a329123a3edd4a88b211432b45f3f10760813084df1be4c1b0984449b2e277aeb45f4a2aa84ad7a2439fc35d2544177e1c641079bf08975be5b9f6822614c9f8b346f9d0578fe15281ba1d7a7fcef5394da80816c1dc866d016f72e30e4b9de0fbb29a489225631305152c3ffbb27ca80112d3a1da2911cb38e55a3e34e09ea5c6d5e0690bb6ad1da737dc354d64d3e1d85ed5ae1c289508c6890a424fd5aef7822843ad730a02af05523e24cac8b2db6392826fc6476c52405c81f767004d15f3591c3511b21ecbdd4c9612edfc8075d91270bf15439409c348f819eecfc1025fcda2db1f1cd424ee18c5fc65f676508ba6e8a1bacb084958708eb90d53bda689e5e28ccba1aa1c0f2ae5cb2de85f00086047def13fc29b670c7a680359c4ffd22c4c2a0e01738ed8940b0787a4b517cf103dc30af26e841f4cc6cc476abbdebd1206442f304a74192f34d5e55072e880ff53db6f43629b7a38f297eb2fd24c7a4574c0b40ff74e6885855874f8c009294923b5bcc9abbcd402a813df186c5ed55b435aee2ce4a9eae246f12f4ba90456a8611953dcaa871670e0b85cff859963b2acb67ea13ad50790ad1ae42cf6c8e27599e194b080d1e8f31461f2dbf569acc3d31551030676305e2343ed82800510aa2e6179e4e1581bdfb54c5bea6be23fccc7853b0ac97877458c10ff23598b11b67b6eda57db916518469501f785c1178cced34a4b3d792f59859c3d18fe75a32ac938963f1367bfb99ea30ee9c61c0fd45e75f33c5f21b300d0e9e4172c11dfcaf33e52ca98fd8249fb8f54352dd5af941fdbf30db1ec93e8e0f78f3ebe3ff533b50394e77cc80368ee80d86c241512923992b9b9cc14acbe64378add3632ceabc954db98d1a7e7accf383aeba775697473cc00936cef5b9760cd57f69789c2e6d502628587c962e1646d05f8445c4b5079b9a9352f2b4234eb60865238d2426bc86d93040f3c457a74bc65810df27b7cbd2b06f8c385e714320f146e84f67c8064ae3f63ce3f5b8a9c57248b2746dbf014391726028990f71402b02ecb4340147ae3add1138f018288dce6ae1bdcb45463ef79dc06e0e4a43d115db4d2e95499fb941bb79d7ed6b151ed9c8a2df1cfc060dbebb40af1b356cb8ba08f5ea02e7f9474b88746236aac19beb8a61a8bde82a6135b26ee871647466085cb85b87c9736d9a7fb56095c22a1ed4a4de44825d8c081a53e038bf2e9341c69376d2d765a712ad17b543320272767914fdc095e1ad5d8554f27a93cf2b356dcef037686a7387ebf6e178c3b2264a73713d5549cc92b0532acfaa1f996b64abd77e1c45b9f2ce8fd0bd1a96334cbd790599eb318b62b7c7d8a5377c1cad2e8b4268b373b9f3279f4b2b498888f27122880cc5a52bfda53da230cb921a27bcba3cd907eee3d0a6816c1ae18fa71af700135c82ff5edcbf985e8a61b20af9c6d09dc77fd524d36f89ff9adefd3f9062fec521e7fac27ae4c97222dceddf9f43e6f1d903e9cfd21d9bfcc0d25d069a227750b729e6cf605cf7f81ffbe69f7bd18e212322c425af0806a36b854a05ddd47570a8c9c444a6b8025e5758563e1bedf0649c38873ef1056c0b9a6c345908c43052f547c01d4cf6466309d0833f1100c7ebd60bcd3525927a2ee4ca9f33781088c09c5b20ba5822b8b705aab741b1af4e6f652cb8852ccc0ecaf75fd0ae7178fb7e28df3579431e5a1c91f7d68c76c56b4c68b6c5ee20b07144e323a2390030cd45c9bf4acaf6b330d61a11030e85d7f08bf0a8f4127c23dd962ed6e9a860f81c4e82adcce68f6b39d45edf04ce5d136c23a080b9bbd5a5ffe9424eb95946b02ee17cff27a0f793cf0637f940406081a9d71489a0010d6edaf66618859795119ca97636b2fb0373900c1569e1de56b5356414eb2b3e7d9b3a193100140f2d4a3c7feefe680a5496a5c71169df9dd6e3afc2af4e03640df8637c3634b36b5ce5a69333b9248d3cafb0bcbaa5919111c2dd264d083fc954988ecad5408b44cb0c8b299493f3e7965b44e917663f1399807d411c24149417f2a26e17ab7cd15096441cb3e77a448d371feef3b68e73e0381c7240f034ec8bf0261f6fc40a48f2efda591cfea8733ba61563cf76f2cd7e7e0fcd7d2219be42d2aa125eddc32948f9492de14a6586c2df5ead303e60551d0cdf9a6ad857bfa50f4be6eee502518bc628f61ed20c2c73ad7e9510be6b6687c20287a4e0b91ac896eefa4fb07242c18319b6acb9a5adb64b111bb20822ad545f5e65b1652a839184dfbaeda500fcc566d891f7144a07ee05f9b48ae31b0dd5fdd803efb4133b79ee9630a61ea96ff0d5a8c1aaaa008e48c77a9649240452bf43e78fa71d7906aad89c819f17bc2bc38923845023c790265c809ec6bbdff726593dae4c58b992ff9d0ea07e616c0ce81f01160ae068cb4c1a40f9c67de988bf50fae0453b166b49f942aa4b380f9748209b11ba111d81d2d2533fefe2f31b59badbb064da33ce05b5d4fa3e5eaa6aee073e9c189ddc71e0fb89bfcd061f84c88768ae5a99df8252d19a460d10ecd1ce087af8799041aade0f1bddeec5718916e71281acd4b02cdce4f261c8c2f77ba74507cc46efbbafddf97cf90b42cf081ab21f1a5fa0cc21d183d13fe2aba09395709dd1038e5ba9fedb693e89f2736e10318a7922a0c02fadedef3c03344c51cdf4ef44f317650acf48e4ce29f65f09f1aaacbd5b5aab1ded23cdd0aecebba9644bed6db65a088c7a3ad4b1fb70e602e108fd487f8b62353b5075b1aedacb0d3152c91c9ca4631e299564101a4dff42e097d1b0641e5466b3bf96773e79e9367e65e43e9969c8531b0ab5fd5fecc9115a1556e819e9da721a61ad38807b37be27d4d4704458c1ca294aaefc606d7243fb5b485ac03d21f4648369a15b39e7702b1ca41c95d4de6cb972b09dfc8b84dd19ea7abbe8be8cdd9af41e8b91e91e6478f1402f805557fbd2e258b1e8bb9075f9a71284fe60adfe72881bcbc6ce7c080163eff054b5279f012031017e42f0bd90651af8a96b4e00a93ac248239c43ff343927a95b2edd43cd2c730ffa7eaac423c08c8435ac322da1ae33348eac49109d1b61597700f85158fe3f8fe8d17c1ff8b2b1aec2e0edaa1159e5c2670c6dbb79b9aaf45cb983504b2514f0a4b9e890fb1956b8d0bfefdcfcbfc61a2eb3bdf01899697c5a649c9d3e3e45df9b32cc987a65e58b4c0260632bb79c45050c189caa7da9a71be18a00deaaf073e460725e17558320c8fdebc16727fb1d5ddc6a6a530c71534b28f87e0eb57d201f34c296c115fce957ac402855fc2d0bc60c22dcfdb4fc34ccf6406faffe340e7e8504681f54a1b509c4135da1a7ec871093267e7d38433b12dad28eea0c37e8d1e653349f6a123a9a34477a60ab763e125b24cec61b5d8498eb161c0fc508a11d95255ae646cad48e0b5baa28cf8e4bd2e1ea42193b9cc363e14c00271ea73e874da453d2ac25b10a3332d9e52a3e122b896501809693c53d1e8adc757a887fc4da6a7ded0432cd952cd9213e2a512834f11ba685da6e59c035babf25d18df0007dcdbfaac556b4c7058289c0fc1ef4ae56dc30e467d3abe5549eea9e006987b5fb1ef995a7b619227e26b551446caf5ebf6db3b0e0622fd53c0c1556cb38055b5d1f5b0224bcd561af9fbc3d952caba9f86b310cb54486531fff5b330bf97cf89f1d7ce2449d162ea7786ac15d26b479a6432c3cf3c4e60ddb8e3ca840a44cf482d711c9c593036844cf471253ad9312b9667e513376a81f789100ed213962b9a7384ea930c7463325b8a1101e409a9a2bf99e5c36765b29d6073e8c717166f76367d3f93bb09b3411dfce8842ea6e0cf355a5c7c2ac8a7621d233fa163bac651c4705769b9f3d207b2f341747c2bc0c08d99ea714ad8dfc6260a64da13a5b96efb53f77026ea3f602636c6d59060c9c599e5acb0c2ecdc5cf66db78007bf7d61a66d4e39616968cc30ea04473d2d09423a698b3309c12d2a5ce61da76450159374058cd079932dfb518f8c52cd556c9195d37e46ba11739fe3ccdea8374c7ee6690e5a6f2409098b3732b02df50fe89012bc7fa8bfba8f7a8b84705c1c11b14ec045a71c0249de3f99ce554936df2195efd3a1e4b18de3c60c2ddfc9f73ccc7d55037944e2cce545fa0e6fd1a3d0f7eec7425f3a575944c838568af442cbf2fae9418e2fdeb801f4d23a8e67908820a2de1d51c3c66c3660690c9dac02bbc546037f50fd9fd46bebdac32ef70445e0799eb0d10d420382836972f091ff8e0412163bfe571f92b99581c9965dbfd0d3d8121de6b03d5d28542029a8b04879d4a30ad7106e0cd290108a94c05b622a7714b2bf77b875b43b517af742adce397aafe91939ce60e213fbbc6fc9c3b9e79f274ddd6333b5169789a743eda531ce5d486c8f7fd3b20781ccc780dc9f978232eca97854d7aae25f527ae012b7c5706e9a80ab16fb0a51e171e5e198b62611fda729fb53ae3eff9d9e01ef3b09ca8c94f38b9ff5edb107a7dcc1cf073294b1dc533166cece8d47fee53aae3f2f687259e8c59667a90bb944bb4ee46b5d5f8966562cad10cb7e3f95b9d89cbf98ab5fd14d13fbbaaaf4fcf18355da31d88533e75bade892886820cbf4fbe995418e30df53fd8844de81a635de0e7a74d49ba830c3acfbff65bcd22f19086a91ae742e47095652b0a1baf09e465109add65729480afd67533a36b335ad34ca352315287c3c85092931ab48bced44bb6cbed88ff90849d48a83a73fa93a05214add6873559b7a444e891df577bdbf6d187e05fb94f72d184042c08e6477397f00e45f15e4d95af8b1b54112af8f3d7e2850e4cfb3a9030cdf1fbc377b3d580388fd073ca471acb6cccd426cfbee2e8e41095f361d29c609e5b0fe25a78ba9a0773f7f129846618cd6f3d896d33517ebdb343e51036ca5453e26639b33cf3fbe40876f10d8279cd4c913155c7f2f882de6f577cdf5c120b5df6b37d7c2fdb134a3291452b13c5f272d74544d66c6036bba3812851ea6965dc29b38c56e6d34986fb6a08ea21a043b2add1dbdc6025496d1213694d02527a716760ef1510853eeb5af921c6f4c894e65f30ea19f0f7062c13a68f6a11aec56166b342ecb2560344d6b4cdca20f43482baa1660d42b03", 0x1000}, {&(0x7f0000001600)="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", 0xec1}], 0x2, &(0x7f0000003880)=[@rights={{0x18, 0x1, 0x1, [r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x38}}, {{&(0x7f00000038c0)=@abs, 0x6e, 0x0}}, {{0x0, 0x0, &(0x7f0000005500)=[{0x0}, {0x0}, {0x0, 0xfffffffffffffe92}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f00000055c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x3, 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/bnep\x00') write$binfmt_elf32(r4, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xc4, 0x20, 0x0, 0x92, 0x3, 0x3e, 0x10000, 0xb0, 0x38, 0x79, 0x0, 0x6, 0x20, 0x1, 0x9, 0x80, 0x8}, [{0x4, 0x8001, 0x81, 0x3, 0x1, 0x4, 0x4, 0x2}, {0x3, 0xffffffc0, 0x8, 0x0, 0xffffffff, 0x9, 0x10000, 0xfff}], "c57547f1d1d5eeb61d1c94650c29545f0efdf6a93a231493e0890911f9c68e99c073abb13b41d956cc9907669d968dae7bc37f935eacb68de96c60e31f4452f7ed82056c1b774d4050e46de8ce144555960b21687887f3a30d1236ef89c3f18fd57effe42fde91e3cd9fef48b5f4e3d25f2f0893b2d336abff3edf592d2d66c01d762e31e8b4620d5cc76109246edb7fde9e57e9592af129", ['\x00', '\x00', '\x00']}, 0x410) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) 12:43:47 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1435.700932][T13530] usb 1-1: USB disconnect, device number 41 [ 1435.740558][T26807] FAULT_INJECTION: forcing a failure. 12:43:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2287, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1435.740558][T26807] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.761305][T26803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1435.788505][T26807] CPU: 1 PID: 26807 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 12:43:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x0, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff, 0x6}, {0xfff1, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x80) 12:43:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1435.799121][T26807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1435.809190][T26807] Call Trace: [ 1435.812480][T26807] [ 1435.815431][T26807] dump_stack_lvl+0x201/0x2d8 [ 1435.820226][T26807] ? show_regs_print_info+0x12/0x12 [ 1435.825451][T26807] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1435.831211][T26807] ? __might_sleep+0xe0/0xe0 [ 1435.835842][T26807] should_fail+0x384/0x4b0 [ 1435.840285][T26807] ? relay_open_buf+0x5b4/0xe80 [ 1435.845162][T26807] should_failslab+0x5/0x20 12:43:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2288, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1435.849693][T26807] kmem_cache_alloc_trace+0x71/0x330 [ 1435.855099][T26807] ? vmap+0x18d/0x2d0 [ 1435.859204][T26807] relay_open_buf+0x5b4/0xe80 [ 1435.863915][T26807] relay_open+0x3cb/0x990 [ 1435.868279][T26807] do_blk_trace_setup+0x51c/0xa00 [ 1435.873334][T26807] blk_trace_setup+0xfd/0x1b0 [ 1435.878037][T26807] ? __blk_trace_remove+0x1e0/0x1e0 [ 1435.883267][T26807] ? smk_access+0x470/0x4a0 [ 1435.887805][T26807] sg_ioctl+0x1440/0x2d80 [ 1435.892169][T26807] ? sg_poll+0x3f0/0x3f0 [ 1435.893498][T26820] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1435.896450][T26807] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1435.896479][T26807] ? security_file_ioctl+0x9d/0xb0 [ 1435.896504][T26807] ? sg_poll+0x3f0/0x3f0 [ 1435.896524][T26807] __se_sys_ioctl+0xfb/0x170 [ 1435.896546][T26807] do_syscall_64+0x44/0xd0 [ 1435.896571][T26807] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1435.896593][T26807] RIP: 0033:0x7fc9fdb8f059 [ 1435.896614][T26807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1435.896638][T26807] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1435.896663][T26807] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1435.896678][T26807] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1435.896693][T26807] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1435.896706][T26807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 12:43:47 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x0, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff, 0x6}, {0xfff1, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') (async) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x0, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff, 0x6}, {0xfff1, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x80) (async) [ 1435.896718][T26807] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1435.896752][T26807] 12:43:47 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x2289, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1436.265920][T13530] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1436.375977][ T3684] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1436.515841][T13530] usb 1-1: Using ep0 maxpacket: 16 [ 1436.565966][ T3684] usb 4-1: device descriptor read/64, error 18 [ 1436.835923][ T3684] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1436.845948][T13530] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1436.855137][T13530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.867868][T13530] usb 1-1: Product: syz [ 1436.872028][T13530] usb 1-1: Manufacturer: syz [ 1436.879209][T13530] usb 1-1: SerialNumber: syz [ 1436.885607][T13530] usb 1-1: config 0 descriptor?? [ 1437.025909][ T3684] usb 4-1: device descriptor read/64, error 18 [ 1437.146073][ T3684] usb usb4-port1: attempt power cycle [ 1437.505967][T13530] usb 1-1: Cannot read MAC address [ 1437.511363][T13530] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -61 [ 1437.565882][ T3684] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1437.735913][ T3684] usb 4-1: device descriptor read/8, error -61 [ 1438.005880][ T3684] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1438.176424][ T3684] usb 4-1: device descriptor read/8, error -61 [ 1438.301450][ T3684] usb usb4-port1: unable to enumerate USB device 12:43:50 executing program 0: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f10109732782290010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:50 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 41) 12:43:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5382, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x0, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x20}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) (async, rerun: 64) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@gettclass={0x24, 0x2a, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xffff, 0x6}, {0xfff1, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x80) (rerun: 64) 12:43:50 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1438.789520][T19360] usb 1-1: USB disconnect, device number 42 [ 1438.828063][T26841] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 12:43:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5385, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1438.833955][T26843] FAULT_INJECTION: forcing a failure. [ 1438.833955][T26843] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.903178][T26843] CPU: 0 PID: 26843 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1438.913714][T26843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1438.923768][T26843] Call Trace: [ 1438.927044][T26843] [ 1438.929966][T26843] dump_stack_lvl+0x201/0x2d8 [ 1438.934647][T26843] ? show_regs_print_info+0x12/0x12 [ 1438.939842][T26843] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1438.945566][T26843] should_fail+0x384/0x4b0 [ 1438.949979][T26843] ? __d_alloc+0x2a/0x700 [ 1438.954301][T26843] should_failslab+0x5/0x20 [ 1438.958805][T26843] kmem_cache_alloc+0x72/0x310 [ 1438.963571][T26843] __d_alloc+0x2a/0x700 [ 1438.967719][T26843] ? rcu_read_lock_sched_held+0x89/0x130 [ 1438.973357][T26843] d_alloc_parallel+0xd3/0x15c0 [ 1438.978214][T26843] ? memset+0x1f/0x40 [ 1438.982190][T26843] ? lockdep_init_map_type+0x9f/0x9b0 [ 1438.987561][T26843] ? lockdep_softirqs_off+0x420/0x420 [ 1438.992928][T26843] ? d_hash_and_lookup+0x1c0/0x1c0 [ 1438.998047][T26843] ? __init_waitqueue_head+0x68/0xd0 [ 1439.003442][T26843] __lookup_slow+0x110/0x3d0 [ 1439.008051][T26843] ? lookup_one_len+0x2c0/0x2c0 [ 1439.012935][T26843] lookup_one_len+0x186/0x2c0 [ 1439.017620][T26843] ? lookup_one_common+0x4b0/0x4b0 [ 1439.022727][T26843] ? mntput+0x63/0xb0 [ 1439.026709][T26843] start_creating+0x184/0x330 [ 1439.031383][T26843] __debugfs_create_file+0x74/0x550 [ 1439.036577][T26843] ? relay_open_buf+0x5b4/0xe80 [ 1439.041421][T26843] ? blk_subbuf_start_callback+0x90/0x90 [ 1439.047049][T26843] relay_open_buf+0x670/0xe80 [ 1439.051730][T26843] relay_open+0x3cb/0x990 [ 1439.056057][T26843] do_blk_trace_setup+0x51c/0xa00 [ 1439.061082][T26843] blk_trace_setup+0xfd/0x1b0 [ 1439.065753][T26843] ? __blk_trace_remove+0x1e0/0x1e0 [ 1439.070954][T26843] ? smk_access+0x470/0x4a0 [ 1439.075459][T26843] sg_ioctl+0x1440/0x2d80 [ 1439.079794][T26843] ? sg_poll+0x3f0/0x3f0 [ 1439.084047][T26843] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1439.088974][T26843] ? security_file_ioctl+0x9d/0xb0 [ 1439.094086][T26843] ? sg_poll+0x3f0/0x3f0 [ 1439.098324][T26843] __se_sys_ioctl+0xfb/0x170 [ 1439.102911][T26843] do_syscall_64+0x44/0xd0 [ 1439.107338][T26843] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1439.113231][T26843] RIP: 0033:0x7fc9fdb8f059 [ 1439.117645][T26843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1439.137241][T26843] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.145655][T26843] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 12:43:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x4, 0x0) 12:43:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1439.153618][T26843] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1439.161579][T26843] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1439.169626][T26843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1439.177587][T26843] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1439.185563][T26843] 12:43:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x4, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') (async) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x4, 0x0) (async) 12:43:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5386, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1439.264760][T26857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 12:43:50 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x4, 0x0) [ 1439.525948][T13530] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1439.575843][T19360] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1439.715915][T13530] usb 4-1: device descriptor read/64, error 18 [ 1439.825842][T19360] usb 1-1: Using ep0 maxpacket: 16 [ 1440.006037][T13530] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1440.126034][T19360] usb 1-1: New USB device found, idVendor=9710, idProduct=7832, bcdDevice=90.22 [ 1440.135448][T19360] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.143849][T19360] usb 1-1: Product: syz [ 1440.148398][T19360] usb 1-1: Manufacturer: syz [ 1440.153001][T19360] usb 1-1: SerialNumber: syz [ 1440.160376][T19360] usb 1-1: config 0 descriptor?? [ 1440.195972][T13530] usb 4-1: device descriptor read/64, error 18 [ 1440.318216][T13530] usb usb4-port1: attempt power cycle [ 1440.726006][T13530] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1440.756144][T19360] usb 1-1: Cannot read MAC address [ 1440.761432][T19360] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -61 [ 1440.896642][T13530] usb 4-1: device descriptor read/8, error -61 [ 1441.165838][T13530] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1441.335940][T13530] usb 4-1: device descriptor read/8, error -61 [ 1441.461678][T13530] usb usb4-port1: unable to enumerate USB device 12:43:53 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:53 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 42) 12:43:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x541b, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:53 executing program 4: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x50241, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000100)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = getuid() r4 = syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000380)='./file1\x00', 0x6, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="2a9ff2f4402225855b6a35005496176d6d3df11f476617a9139fd2ce016947b3936bf1c7e7dd01320351631af09e20c6114a9ff4ff96be1326e7ab9b9b280a130254f88a4caec27a08903005428ebd093f431df9b282ab6532584b3eeda78cc63f1f9918f5e13eb9aa47da22972198fa7a5d59ad2e70084a99f91ab58f791c787bb41f39678ca1a322", 0x89, 0x4}], 0x1004010, &(0x7f0000000600)={[{@noextent_cache}, {@fsync_mode_posix}, {@heap}], [{@fowner_lt}, {@uid_gt={'uid>', r3}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'n:U\xd7\x8do\x93\x05&t\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/adsp1\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\xea\xe3\\'}}, {@fowner_gt={'fowner>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xe6\xbce\x0f\x1b\x18\xa1\x96\xb6\xaa\x01\xec\xfc7\xf1\xe3\xa1\xb3\xb4+e\xe3\xe3\x11\xf2\xbb:\xc4\xc8\x83\xb5\x01\x18f\x91;{,F\x10\xecv\x9bSn\xa4\xd4?jm\xa8\xe9\xe7\xbb\x825\x87(\xc15\xc0A\x82\xbc\xdb\xd7\xb6{\xd8b\x1e0|\xdb\xf7\x1b\x15D\xd8l-nZ\xb1\xf070E\xbd\xaa\xef\xf1\xfc\x96\xbb\x92sY\x11h\xa7\x84]\x1d\xa7\x1f\xe5\xfa\xd5g\x93XH\xe7\x1dVp\x94\xaer\xde\xd9\xe5\xcc\x03\xbblD\xb0\xe77?\x83\xf6g\xc9P\xa5\xbec\xf4E\xe7\r\x00\x00\x95\x94\x18\x8b\xda@\xf1\x175q\xcebP@\x13C\xa3\xd5\xaf\xb9$\x8f\x93k\"}\xe5\xdb\xe8x\xa8E\x9c\xf8\xc9\xec\x8b?\x8c\a'}}]}) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) 12:43:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:53 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) [ 1441.970593][T19360] usb 1-1: USB disconnect, device number 43 [ 1442.033369][T26874] FAULT_INJECTION: forcing a failure. [ 1442.033369][T26874] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.064926][T26879] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1442.076605][T26874] CPU: 1 PID: 26874 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1442.082041][T26876] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.087131][T26874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.087156][T26874] Call Trace: [ 1442.087165][T26874] [ 1442.087175][T26874] dump_stack_lvl+0x201/0x2d8 [ 1442.087209][T26874] ? show_regs_print_info+0x12/0x12 [ 1442.087232][T26874] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1442.087267][T26874] should_fail+0x384/0x4b0 12:43:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5421, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1442.087288][T26874] ? new_inode_pseudo+0x79/0x220 [ 1442.087308][T26874] should_failslab+0x5/0x20 [ 1442.087326][T26874] kmem_cache_alloc+0x72/0x310 [ 1442.087345][T26874] ? lookup_one_common+0x4b0/0x4b0 [ 1442.087373][T26874] new_inode_pseudo+0x79/0x220 [ 1442.087396][T26874] new_inode+0x25/0x1d0 [ 1442.087417][T26874] ? start_creating+0x21f/0x330 [ 1442.087438][T26874] __debugfs_create_file+0x146/0x550 [ 1442.087457][T26874] ? relay_open_buf+0x5b4/0xe80 [ 1442.087478][T26874] ? blk_subbuf_start_callback+0x90/0x90 12:43:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5450, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1442.087504][T26874] relay_open_buf+0x670/0xe80 [ 1442.087540][T26874] relay_open+0x3cb/0x990 [ 1442.087567][T26874] do_blk_trace_setup+0x51c/0xa00 [ 1442.087596][T26874] blk_trace_setup+0xfd/0x1b0 [ 1442.116220][T26876] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1442.121420][T26874] ? __blk_trace_remove+0x1e0/0x1e0 [ 1442.121462][T26874] ? smk_access+0x470/0x4a0 [ 1442.121496][T26874] sg_ioctl+0x1440/0x2d80 [ 1442.139097][T26876] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.141025][T26874] ? sg_poll+0x3f0/0x3f0 [ 1442.141079][T26874] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1442.155900][T26876] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1442.159808][T26874] ? security_file_ioctl+0x9d/0xb0 [ 1442.159842][T26874] ? sg_poll+0x3f0/0x3f0 [ 1442.159862][T26874] __se_sys_ioctl+0xfb/0x170 [ 1442.260567][T26874] do_syscall_64+0x44/0xd0 [ 1442.265042][T26874] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1442.270953][T26874] RIP: 0033:0x7fc9fdb8f059 12:43:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5451, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1442.275384][T26874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1442.295525][T26874] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1442.303968][T26874] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1442.311980][T26874] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1442.319965][T26874] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 12:43:53 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5452, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c00010062"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1442.327947][T26874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1442.335936][T26874] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1442.343953][T26874] [ 1442.364055][T26874] debugfs: out of free dentries, can not create file 'trace1' 12:43:53 executing program 4: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x50241, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000100)) (async, rerun: 64) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') (rerun: 64) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) (rerun: 32) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f00000001c0)) (async, rerun: 64) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async, rerun: 64) r3 = getuid() r4 = syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000380)='./file1\x00', 0x6, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="2a9ff2f4402225855b6a35005496176d6d3df11f476617a9139fd2ce016947b3936bf1c7e7dd01320351631af09e20c6114a9ff4ff96be1326e7ab9b9b280a130254f88a4caec27a08903005428ebd093f431df9b282ab6532584b3eeda78cc63f1f9918f5e13eb9aa47da22972198fa7a5d59ad2e70084a99f91ab58f791c787bb41f39678ca1a322", 0x89, 0x4}], 0x1004010, &(0x7f0000000600)={[{@noextent_cache}, {@fsync_mode_posix}, {@heap}], [{@fowner_lt}, {@uid_gt={'uid>', r3}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'n:U\xd7\x8do\x93\x05&t\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/adsp1\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\xea\xe3\\'}}, {@fowner_gt={'fowner>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xe6\xbce\x0f\x1b\x18\xa1\x96\xb6\xaa\x01\xec\xfc7\xf1\xe3\xa1\xb3\xb4+e\xe3\xe3\x11\xf2\xbb:\xc4\xc8\x83\xb5\x01\x18f\x91;{,F\x10\xecv\x9bSn\xa4\xd4?jm\xa8\xe9\xe7\xbb\x825\x87(\xc15\xc0A\x82\xbc\xdb\xd7\xb6{\xd8b\x1e0|\xdb\xf7\x1b\x15D\xd8l-nZ\xb1\xf070E\xbd\xaa\xef\xf1\xfc\x96\xbb\x92sY\x11h\xa7\x84]\x1d\xa7\x1f\xe5\xfa\xd5g\x93XH\xe7\x1dVp\x94\xaer\xde\xd9\xe5\xcc\x03\xbblD\xb0\xe77?\x83\xf6g\xc9P\xa5\xbec\xf4E\xe7\r\x00\x00\x95\x94\x18\x8b\xda@\xf1\x175q\xcebP@\x13C\xa3\xd5\xaf\xb9$\x8f\x93k\"}\xe5\xdb\xe8x\xa8E\x9c\xf8\xc9\xec\x8b?\x8c\a'}}]}) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) [ 1442.447333][T26892] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1442.545868][T19770] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1442.573439][T26895] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.606187][T26895] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1442.633114][T26895] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.641583][T26895] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 12:43:54 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:54 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 43) 12:43:54 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x5460, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:54 executing program 4: ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x50241, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000100)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = getuid() r4 = syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000380)='./file1\x00', 0x6, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="2a9ff2f4402225855b6a35005496176d6d3df11f476617a9139fd2ce016947b3936bf1c7e7dd01320351631af09e20c6114a9ff4ff96be1326e7ab9b9b280a130254f88a4caec27a08903005428ebd093f431df9b282ab6532584b3eeda78cc63f1f9918f5e13eb9aa47da22972198fa7a5d59ad2e70084a99f91ab58f791c787bb41f39678ca1a322", 0x89, 0x4}], 0x1004010, &(0x7f0000000600)={[{@noextent_cache}, {@fsync_mode_posix}, {@heap}], [{@fowner_lt}, {@uid_gt={'uid>', r3}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'n:U\xd7\x8do\x93\x05&t\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/adsp1\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\xea\xe3\\'}}, {@fowner_gt={'fowner>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xe6\xbce\x0f\x1b\x18\xa1\x96\xb6\xaa\x01\xec\xfc7\xf1\xe3\xa1\xb3\xb4+e\xe3\xe3\x11\xf2\xbb:\xc4\xc8\x83\xb5\x01\x18f\x91;{,F\x10\xecv\x9bSn\xa4\xd4?jm\xa8\xe9\xe7\xbb\x825\x87(\xc15\xc0A\x82\xbc\xdb\xd7\xb6{\xd8b\x1e0|\xdb\xf7\x1b\x15D\xd8l-nZ\xb1\xf070E\xbd\xaa\xef\xf1\xfc\x96\xbb\x92sY\x11h\xa7\x84]\x1d\xa7\x1f\xe5\xfa\xd5g\x93XH\xe7\x1dVp\x94\xaer\xde\xd9\xe5\xcc\x03\xbblD\xb0\xe77?\x83\xf6g\xc9P\xa5\xbec\xf4E\xe7\r\x00\x00\x95\x94\x18\x8b\xda@\xf1\x175q\xcebP@\x13C\xa3\xd5\xaf\xb9$\x8f\x93k\"}\xe5\xdb\xe8x\xa8E\x9c\xf8\xc9\xec\x8b?\x8c\a'}}]}) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000000)) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x50241, 0x0) (async) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000100)) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') (async) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x20}}, './file0\x00'}) (async) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f00000001c0)) (async) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) (async) getuid() (async) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000380)='./file1\x00', 0x6, 0x1, &(0x7f0000000480)=[{&(0x7f00000003c0)="2a9ff2f4402225855b6a35005496176d6d3df11f476617a9139fd2ce016947b3936bf1c7e7dd01320351631af09e20c6114a9ff4ff96be1326e7ab9b9b280a130254f88a4caec27a08903005428ebd093f431df9b282ab6532584b3eeda78cc63f1f9918f5e13eb9aa47da22972198fa7a5d59ad2e70084a99f91ab58f791c787bb41f39678ca1a322", 0x89, 0x4}], 0x1004010, &(0x7f0000000600)={[{@noextent_cache}, {@fsync_mode_posix}, {@heap}], [{@fowner_lt}, {@uid_gt={'uid>', r3}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'n:U\xd7\x8do\x93\x05&t\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/adsp1\x00'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\xea\xe3\\'}}, {@fowner_gt={'fowner>', 0xee01}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xe6\xbce\x0f\x1b\x18\xa1\x96\xb6\xaa\x01\xec\xfc7\xf1\xe3\xa1\xb3\xb4+e\xe3\xe3\x11\xf2\xbb:\xc4\xc8\x83\xb5\x01\x18f\x91;{,F\x10\xecv\x9bSn\xa4\xd4?jm\xa8\xe9\xe7\xbb\x825\x87(\xc15\xc0A\x82\xbc\xdb\xd7\xb6{\xd8b\x1e0|\xdb\xf7\x1b\x15D\xd8l-nZ\xb1\xf070E\xbd\xaa\xef\xf1\xfc\x96\xbb\x92sY\x11h\xa7\x84]\x1d\xa7\x1f\xe5\xfa\xd5g\x93XH\xe7\x1dVp\x94\xaer\xde\xd9\xe5\xcc\x03\xbblD\xb0\xe77?\x83\xf6g\xc9P\xa5\xbec\xf4E\xe7\r\x00\x00\x95\x94\x18\x8b\xda@\xf1\x175q\xcebP@\x13C\xa3\xd5\xaf\xb9$\x8f\x93k\"}\xe5\xdb\xe8x\xa8E\x9c\xf8\xc9\xec\x8b?\x8c\a'}}]}) (async) finit_module(r4, &(0x7f00000005c0)='\x00', 0x0) (async) [ 1442.755920][T19770] usb 4-1: device descriptor read/64, error 18 [ 1442.807281][T26905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1442.808697][T26906] FAULT_INJECTION: forcing a failure. [ 1442.808697][T26906] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.848624][T26904] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.862919][T26904] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1442.876646][T26906] CPU: 0 PID: 26906 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1442.880786][T26904] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1442.887181][T26906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1442.887197][T26906] Call Trace: [ 1442.887205][T26906] [ 1442.887214][T26906] dump_stack_lvl+0x201/0x2d8 [ 1442.887245][T26906] ? show_regs_print_info+0x12/0x12 [ 1442.887269][T26906] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1442.887306][T26906] should_fail+0x384/0x4b0 [ 1442.887331][T26906] ? new_inode_pseudo+0x79/0x220 [ 1442.887354][T26906] should_failslab+0x5/0x20 [ 1442.887373][T26906] kmem_cache_alloc+0x72/0x310 [ 1442.887392][T26906] ? lookup_one_common+0x4b0/0x4b0 [ 1442.925686][T26904] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1442.926888][T26906] new_inode_pseudo+0x79/0x220 [ 1442.926924][T26906] new_inode+0x25/0x1d0 [ 1442.967597][T26906] ? start_creating+0x21f/0x330 [ 1442.972559][T26906] __debugfs_create_file+0x146/0x550 [ 1442.977862][T26906] ? relay_open_buf+0x5b4/0xe80 [ 1442.982731][T26906] ? blk_subbuf_start_callback+0x90/0x90 [ 1442.988369][T26906] relay_open_buf+0x670/0xe80 [ 1442.993057][T26906] relay_open+0x3cb/0x990 [ 1442.997390][T26906] do_blk_trace_setup+0x51c/0xa00 [ 1443.002423][T26906] blk_trace_setup+0xfd/0x1b0 [ 1443.007093][T26906] ? __blk_trace_remove+0x1e0/0x1e0 [ 1443.012290][T26906] ? smk_access+0x470/0x4a0 [ 1443.016794][T26906] sg_ioctl+0x1440/0x2d80 [ 1443.021127][T26906] ? sg_poll+0x3f0/0x3f0 [ 1443.025388][T26906] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1443.030324][T26906] ? security_file_ioctl+0x9d/0xb0 [ 1443.035435][T26906] ? sg_poll+0x3f0/0x3f0 [ 1443.039675][T26906] __se_sys_ioctl+0xfb/0x170 [ 1443.044269][T26906] do_syscall_64+0x44/0xd0 [ 1443.048691][T26906] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1443.054589][T26906] RIP: 0033:0x7fc9fdb8f059 [ 1443.059007][T26906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1443.078627][T26906] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1443.087045][T26906] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1443.095017][T26906] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1443.102989][T26906] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1443.110954][T26906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1443.118920][T26906] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1443.126905][T26906] [ 1443.142950][T26906] debugfs: out of free dentries, can not create file 'trace1' [ 1443.145009][T26910] device bond187 entered promiscuous mode [ 1443.215487][T26910] device bond187 left promiscuous mode [ 1443.299245][T19770] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1443.515965][T19770] usb 4-1: device descriptor read/64, error 18 [ 1443.646228][T19770] usb usb4-port1: attempt power cycle [ 1444.075892][T19770] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1444.285971][T19770] usb 4-1: device descriptor read/8, error -61 [ 1444.587580][T19770] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1444.766067][T19770] usb 4-1: device descriptor read/8, error -61 [ 1444.886538][T19770] usb usb4-port1: unable to enumerate USB device 12:43:56 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="79010000cbcd4f1010973278229001"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 12:43:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x8933, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:56 executing program 1: set_mempolicy(0x0, 0x0, 0x9) set_mempolicy(0x3, 0x0, 0x3) r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000940)={'\x00', 0x0, 0x800, 0x9, 0x0, 0x287e, 0xffffffffffffffff}) (fail_nth: 44) 12:43:56 executing program 4: io_setup(0x7fffffff, &(0x7f0000000080)=0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r3 = syz_mount_image$omfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2991, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="17376d8e738c4118", 0x8}], 0x26, &(0x7f0000000540)=ANY=[@ANYBLOB='*\\*!)@[,,net/packet\x00,dont_hash,fsmagis=0x0000000000000008,audit,\x00']) r4 = eventfd2(0x7fffffff, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r5, &(0x7f0000000ac0)=[{&(0x7f00000001c0)=""/39, 0x27}], 0x1, 0x72, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000006c0)={0x6000, 0x10000}) io_submit(r0, 0x3, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1ff, 0xffffffffffffffff, &(0x7f00000001c0)="4e6c9547e1d053c23bebadd7aa99082f2199de9ac79303c1aac9706f42a742bf3f1f637f2c5a3505e3f8323fb8f9a5efceef59e3929a8d98bfc5a676ae09f2f4332097b0b0150018f55062872b3a5023165ad81131310bf162f90af006d15879d7a683faed9986e752333e8c55ef4146fce38b8b1150275ddc6cb88ff8c30e1745c532b6e9290514d046ef429c652c0a51e734926fdc1a4bad39ee1ff25927a2ad7d43fa916d9ab423ad85e1afc29c2d6613bf4a5809ed39fec9e2f5", 0xbc, 0x200, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f0000000380)="982958eb7447aa3b5bb280d1f6f7", 0xe, 0x9, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f00000005c0)="8dad3ed0c16bdf3376a953817b1502dd5e537fa2983d4527728cb98d7a7d0ee7e2f050c6c9f79f476c34ede517b0be91996c182d0c980df9db7d2fc01a5f729786905e20265f76508f6cfe23025ee29d35f736a61b76c84d766e582bf5bc276c3d79120c85caedd27d261f9a143b4792fb016f", 0x73, 0xff, 0x0, 0x0, r4}]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) splice(r6, &(0x7f0000000000)=0x6, r6, &(0x7f0000000040)=0x9, 0x2, 0x1) 12:43:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 12:43:56 executing program 0: syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00249e"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000940)={0x0, 0x0, 0x2, '4Q'}, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000002a00)={0x2c, &(0x7f0000002840)=ANY=[@ANYBLOB="0004020000008c75"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x2, '2F'}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000480)={0x0, 0x0, 0x2, "31e3"}, 0x0, 0x0, 0x0, 0x0}) 12:43:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x400448c9, 0x0) set_mempolicy(0x0, 0x0, 0x0) [ 1445.040661][T26926] loop4: detected capacity change from 0 to 20 [ 1445.048976][T26925] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1445.093375][T26929] FAULT_INJECTION: forcing a failure. [ 1445.093375][T26929] name failslab, interval 1, probability 0, space 0, times 0 12:43:56 executing program 4: io_setup(0x7fffffff, &(0x7f0000000080)=0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r3 = syz_mount_image$omfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2991, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="17376d8e738c4118", 0x8}], 0x26, &(0x7f0000000540)=ANY=[@ANYBLOB='*\\*!)@[,,net/packet\x00,dont_hash,fsmagis=0x0000000000000008,audit,\x00']) (async) r4 = eventfd2(0x7fffffff, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r5, &(0x7f0000000ac0)=[{&(0x7f00000001c0)=""/39, 0x27}], 0x1, 0x72, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000006c0)={0x6000, 0x10000}) io_submit(r0, 0x3, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1ff, 0xffffffffffffffff, &(0x7f00000001c0)="4e6c9547e1d053c23bebadd7aa99082f2199de9ac79303c1aac9706f42a742bf3f1f637f2c5a3505e3f8323fb8f9a5efceef59e3929a8d98bfc5a676ae09f2f4332097b0b0150018f55062872b3a5023165ad81131310bf162f90af006d15879d7a683faed9986e752333e8c55ef4146fce38b8b1150275ddc6cb88ff8c30e1745c532b6e9290514d046ef429c652c0a51e734926fdc1a4bad39ee1ff25927a2ad7d43fa916d9ab423ad85e1afc29c2d6613bf4a5809ed39fec9e2f5", 0xbc, 0x200, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f0000000380)="982958eb7447aa3b5bb280d1f6f7", 0xe, 0x9, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f00000005c0)="8dad3ed0c16bdf3376a953817b1502dd5e537fa2983d4527728cb98d7a7d0ee7e2f050c6c9f79f476c34ede517b0be91996c182d0c980df9db7d2fc01a5f729786905e20265f76508f6cfe23025ee29d35f736a61b76c84d766e582bf5bc276c3d79120c85caedd27d261f9a143b4792fb016f", 0x73, 0xff, 0x0, 0x0, r4}]) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) splice(r6, &(0x7f0000000000)=0x6, r6, &(0x7f0000000040)=0x9, 0x2, 0x1) [ 1445.195519][T25196] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1445.210946][T26929] CPU: 1 PID: 26929 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1445.221476][T26929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.231541][T26929] Call Trace: [ 1445.234826][T26929] [ 1445.237769][T26929] dump_stack_lvl+0x201/0x2d8 [ 1445.242467][T26929] ? show_regs_print_info+0x12/0x12 [ 1445.247666][T26929] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1445.253408][T26929] ? __might_sleep+0xe0/0xe0 [ 1445.258008][T26929] ? __mutex_lock_common+0x437/0x2490 [ 1445.263386][T26929] ? __mutex_trylock_common+0x1e8/0x300 [ 1445.268931][T26929] should_fail+0x384/0x4b0 [ 1445.273359][T26929] ? tracepoint_add_func+0x2d4/0x960 [ 1445.278633][T26929] should_failslab+0x5/0x20 [ 1445.283145][T26929] __kmalloc+0x94/0x380 [ 1445.287311][T26929] tracepoint_add_func+0x2d4/0x960 [ 1445.292418][T26929] ? blk_add_trace_rq_issue+0x1a0/0x1a0 [ 1445.297958][T26929] ? blk_add_trace_rq_issue+0x1a0/0x1a0 [ 1445.303493][T26929] ? blk_add_trace_rq_issue+0x1a0/0x1a0 [ 1445.309034][T26929] tracepoint_probe_register+0x109/0x170 [ 1445.314662][T26929] ? mutex_lock_io_nested+0x60/0x60 [ 1445.319859][T26929] ? tracepoint_probe_register_prio+0x180/0x180 [ 1445.326099][T26929] ? blk_add_trace_rq_issue+0x1a0/0x1a0 [ 1445.331656][T26929] ? relay_open+0x826/0x990 [ 1445.336158][T26929] get_probe_ref+0x4f/0x3e0 [ 1445.340655][T26929] do_blk_trace_setup+0x81a/0xa00 [ 1445.345688][T26929] blk_trace_setup+0xfd/0x1b0 [ 1445.350366][T26929] ? __blk_trace_remove+0x1e0/0x1e0 [ 1445.355565][T26929] ? smk_access+0x470/0x4a0 [ 1445.360077][T26929] sg_ioctl+0x1440/0x2d80 [ 1445.364414][T26929] ? sg_poll+0x3f0/0x3f0 [ 1445.368847][T26929] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1445.373776][T26929] ? security_file_ioctl+0x9d/0xb0 [ 1445.378886][T26929] ? sg_poll+0x3f0/0x3f0 [ 1445.383120][T26929] __se_sys_ioctl+0xfb/0x170 [ 1445.387712][T26929] do_syscall_64+0x44/0xd0 [ 1445.392130][T26929] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1445.398015][T26929] RIP: 0033:0x7fc9fdb8f059 [ 1445.402424][T26929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1445.422019][T26929] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.430427][T26929] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1445.438388][T26929] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 12:43:56 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000002040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x400448dd, 0x0) set_mempolicy(0x0, 0x0, 0x0) 12:43:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x4a, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 1445.446351][T26929] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1445.454313][T26929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1445.462273][T26929] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1445.470250][T26929] [ 1445.478961][T26936] loop4: detected capacity change from 0 to 20 12:43:56 executing program 4: io_setup(0x7fffffff, &(0x7f0000000080)=0x0) (async) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) r3 = syz_mount_image$omfs(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x2991, 0x1, &(0x7f0000000500)=[{&(0x7f00000004c0)="17376d8e738c4118", 0x8}], 0x26, &(0x7f0000000540)=ANY=[@ANYBLOB='*\\*!)@[,,net/packet\x00,dont_hash,fsmagis=0x0000000000000008,audit,\x00']) (async) r4 = eventfd2(0x7fffffff, 0x0) (async) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r5, &(0x7f0000000ac0)=[{&(0x7f00000001c0)=""/39, 0x27}], 0x1, 0x72, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000006c0)={0x6000, 0x10000}) io_submit(r0, 0x3, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x1ff, 0xffffffffffffffff, &(0x7f00000001c0)="4e6c9547e1d053c23bebadd7aa99082f2199de9ac79303c1aac9706f42a742bf3f1f637f2c5a3505e3f8323fb8f9a5efceef59e3929a8d98bfc5a676ae09f2f4332097b0b0150018f55062872b3a5023165ad81131310bf162f90af006d15879d7a683faed9986e752333e8c55ef4146fce38b8b1150275ddc6cb88ff8c30e1745c532b6e9290514d046ef429c652c0a51e734926fdc1a4bad39ee1ff25927a2ad7d43fa916d9ab423ad85e1afc29c2d6613bf4a5809ed39fec9e2f5", 0xbc, 0x200, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x200, 0xffffffffffffffff, &(0x7f0000000380)="982958eb7447aa3b5bb280d1f6f7", 0xe, 0x9, 0x0, 0x1, r2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x6, r3, &(0x7f00000005c0)="8dad3ed0c16bdf3376a953817b1502dd5e537fa2983d4527728cb98d7a7d0ee7e2f050c6c9f79f476c34ede517b0be91996c182d0c980df9db7d2fc01a5f729786905e20265f76508f6cfe23025ee29d35f736a61b76c84d766e582bf5bc276c3d79120c85caedd27d261f9a143b4792fb016f", 0x73, 0xff, 0x0, 0x0, r4}]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) (async) splice(r6, &(0x7f0000000000)=0x6, r6, &(0x7f0000000040)=0x9, 0x2, 0x1) [ 1445.510107][T25288] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1445.531714][T26929] ------------[ cut here ]------------ [ 1445.556421][T26929] WARNING: CPU: 0 PID: 26929 at kernel/trace/blktrace.c:1090 get_probe_ref+0x31c/0x3e0 [ 1445.578104][T26942] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1445.599118][T26929] Modules linked in: 12:43:56 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/220, 0xdc}], 0x1, 0x2, 0x0) r1 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x2d00, 0x0, 0xb}, 0x18) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000080)) [ 1445.603212][T26929] CPU: 0 PID: 26929 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1445.603883][T25288] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1445.625823][T19770] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1445.655361][T25288] Buffer I/O error on dev loop4, logical block 0, async page read [ 1445.673197][T26929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1445.702365][T25288] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1445.710615][T26929] RIP: 0010:get_probe_ref+0x31c/0x3e0 [ 1445.737716][T26929] Code: 89 c3 31 ff 89 c6 e8 c3 e5 f8 ff 85 db 0f 85 c6 00 00 00 e8 a6 e1 f8 ff 48 c7 c7 e0 b3 b6 8c 5b e9 99 e9 87 08 e8 94 e1 f8 ff <0f> 0b e9 44 fd ff ff e8 88 e1 f8 ff 0f 0b e9 65 fd ff ff e8 7c e1 [ 1445.749682][T25288] Buffer I/O error on dev loop4, logical block 1, async page read [ 1445.777142][T26929] RSP: 0018:ffffc90011027b88 EFLAGS: 00010246 [ 1445.783917][T26929] RAX: ffffffff818ccbfc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1445.792546][T26929] RDX: ffffc900035d5000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1445.809893][T26929] RBP: ffff88801a7e7a00 R08: ffffffff818cc93a R09: fffff52002204f45 [ 1445.827178][T26929] R10: fffff52002204f45 R11: 0000000000000000 R12: dffffc0000000000 [ 1445.840740][T26929] R13: ffffc90011027ca0 R14: 1ffff110034fcf46 R15: ffff88801a7e7a30 [ 1445.852010][T26929] FS: 00007fc9fc504700(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 1445.869676][T26929] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1445.875984][T19770] usb 4-1: Using ep0 maxpacket: 16 [ 1445.884396][T26929] CR2: 00007f7d84ba4998 CR3: 000000003762c000 CR4: 00000000003506e0 [ 1445.897116][T26929] Call Trace: [ 1445.900536][T26929] [ 1445.903538][T26929] do_blk_trace_setup+0x81a/0xa00 [ 1445.909210][T26929] blk_trace_setup+0xfd/0x1b0 [ 1445.913947][T26929] ? __blk_trace_remove+0x1e0/0x1e0 [ 1445.920738][T19770] usb 4-1: no configurations [ 1445.921118][T26929] ? smk_access+0x470/0x4a0 [ 1445.925356][T19770] usb 4-1: can't read configurations, error -22 [ 1445.937443][T26929] sg_ioctl+0x1440/0x2d80 [ 1445.941876][T26929] ? sg_poll+0x3f0/0x3f0 [ 1445.946275][T26929] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1445.951298][T26929] ? security_file_ioctl+0x9d/0xb0 [ 1445.959797][T26929] ? sg_poll+0x3f0/0x3f0 [ 1445.964140][T26929] __se_sys_ioctl+0xfb/0x170 [ 1445.968959][T26929] do_syscall_64+0x44/0xd0 [ 1445.973463][T26929] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1445.979518][T26929] RIP: 0033:0x7fc9fdb8f059 [ 1445.984015][T26929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1446.004144][T26929] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.012889][T26929] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1446.021167][T26929] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1446.029509][T26929] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1446.038870][T26929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1446.047121][T26929] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1446.055185][T26929] [ 1446.058599][T26929] Kernel panic - not syncing: panic_on_warn set ... [ 1446.065199][T26929] CPU: 1 PID: 26929 Comm: syz-executor.1 Not tainted 5.17.0-rc2-syzkaller-00353-g90c9e950c0de #0 [ 1446.075685][T26929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1446.075932][T19770] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1446.085741][T26929] Call Trace: [ 1446.085757][T26929] [ 1446.085766][T26929] dump_stack_lvl+0x1dc/0x2d8 [ 1446.085800][T26929] ? show_regs_print_info+0x12/0x12 [ 1446.085821][T26929] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 1446.085856][T26929] panic+0x2d6/0x810 [ 1446.085878][T26929] ? __warn+0x145/0x240 [ 1446.085896][T26929] ? nmi_panic+0x90/0x90 [ 1446.085934][T26929] ? get_probe_ref+0x31c/0x3e0 [ 1446.085951][T26929] __warn+0x237/0x240 [ 1446.136177][T26929] ? get_probe_ref+0x31c/0x3e0 [ 1446.140962][T26929] ? get_probe_ref+0x31c/0x3e0 [ 1446.145744][T26929] report_bug+0x1b1/0x2e0 [ 1446.150086][T26929] handle_bug+0x3d/0x70 [ 1446.154242][T26929] exc_invalid_op+0x16/0x40 [ 1446.158743][T26929] asm_exc_invalid_op+0x12/0x20 [ 1446.163587][T26929] RIP: 0010:get_probe_ref+0x31c/0x3e0 [ 1446.168962][T26929] Code: 89 c3 31 ff 89 c6 e8 c3 e5 f8 ff 85 db 0f 85 c6 00 00 00 e8 a6 e1 f8 ff 48 c7 c7 e0 b3 b6 8c 5b e9 99 e9 87 08 e8 94 e1 f8 ff <0f> 0b e9 44 fd ff ff e8 88 e1 f8 ff 0f 0b e9 65 fd ff ff e8 7c e1 [ 1446.188568][T26929] RSP: 0018:ffffc90011027b88 EFLAGS: 00010246 [ 1446.194641][T26929] RAX: ffffffff818ccbfc RBX: 00000000fffffff4 RCX: 0000000000040000 [ 1446.202607][T26929] RDX: ffffc900035d5000 RSI: 000000000003ffff RDI: 0000000000040000 [ 1446.210570][T26929] RBP: ffff88801a7e7a00 R08: ffffffff818cc93a R09: fffff52002204f45 [ 1446.218530][T26929] R10: fffff52002204f45 R11: 0000000000000000 R12: dffffc0000000000 [ 1446.226492][T26929] R13: ffffc90011027ca0 R14: 1ffff110034fcf46 R15: ffff88801a7e7a30 [ 1446.234465][T26929] ? get_probe_ref+0x5a/0x3e0 [ 1446.239138][T26929] ? get_probe_ref+0x31c/0x3e0 [ 1446.243924][T26929] ? get_probe_ref+0x31c/0x3e0 [ 1446.248684][T26929] do_blk_trace_setup+0x81a/0xa00 [ 1446.253711][T26929] blk_trace_setup+0xfd/0x1b0 [ 1446.258385][T26929] ? __blk_trace_remove+0x1e0/0x1e0 [ 1446.263580][T26929] ? smk_access+0x470/0x4a0 [ 1446.268102][T26929] sg_ioctl+0x1440/0x2d80 [ 1446.272436][T26929] ? sg_poll+0x3f0/0x3f0 [ 1446.276691][T26929] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1446.281620][T26929] ? security_file_ioctl+0x9d/0xb0 [ 1446.286733][T26929] ? sg_poll+0x3f0/0x3f0 [ 1446.291489][T26929] __se_sys_ioctl+0xfb/0x170 [ 1446.296260][T26929] do_syscall_64+0x44/0xd0 [ 1446.300677][T26929] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 1446.306568][T26929] RIP: 0033:0x7fc9fdb8f059 [ 1446.310980][T26929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1446.330735][T26929] RSP: 002b:00007fc9fc504168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1446.339150][T26929] RAX: ffffffffffffffda RBX: 00007fc9fdca1f60 RCX: 00007fc9fdb8f059 [ 1446.347116][T26929] RDX: 0000000020000940 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1446.355083][T26929] RBP: 00007fc9fc5041d0 R08: 0000000000000000 R09: 0000000000000000 [ 1446.363053][T26929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1446.371016][T26929] R13: 00007ffd32f103ff R14: 00007fc9fc504300 R15: 0000000000022000 [ 1446.378997][T26929] [ 1446.382178][T26929] Kernel Offset: disabled [ 1446.386777][T26929] Rebooting in 86400 seconds..