[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 82.600395][ T31] audit: type=1800 audit(1570124235.654:25): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 82.629712][ T31] audit: type=1800 audit(1570124235.684:26): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 82.650291][ T31] audit: type=1800 audit(1570124235.694:27): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. 2019/10/03 17:37:28 fuzzer started 2019/10/03 17:37:33 dialing manager at 10.128.0.26:46029 2019/10/03 17:37:33 syscalls: 2412 2019/10/03 17:37:33 code coverage: enabled 2019/10/03 17:37:33 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/03 17:37:33 extra coverage: enabled 2019/10/03 17:37:33 setuid sandbox: enabled 2019/10/03 17:37:33 namespace sandbox: enabled 2019/10/03 17:37:33 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/03 17:37:33 fault injection: enabled 2019/10/03 17:37:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/03 17:37:33 net packet injection: enabled 2019/10/03 17:37:33 net device setup: enabled 17:41:09 executing program 0: mlockall(0x2) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x100, 0x5bd, 0x4, 0x1ff}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x60000004}, 0x867ed43ea20567d8) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000180)={{0x2, 0x0, @descriptor="7fd9e3c6f1583335"}}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x501cc2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xf7, 0x9, [0x5, 0x7f, 0x3, 0xd5b, 0x9, 0x1f, 0x1000, 0x0, 0x3]}, &(0x7f0000000280)=0x1a) recvmmsg(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)=""/44, 0x2c}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/84, 0x54}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/15, 0xf}, {&(0x7f0000000640)=""/31, 0x1f}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000780)=""/171, 0xab}, {&(0x7f0000000840)=""/78, 0x4e}, {&(0x7f00000008c0)=""/104, 0x68}], 0xa, &(0x7f0000000a00)=""/179, 0xb3}, 0x8}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000ac0)=""/163, 0xa3}, {&(0x7f0000000b80)=""/235, 0xeb}, {&(0x7f0000000c80)=""/34, 0x22}, {&(0x7f0000000cc0)=""/188, 0xbc}], 0x4, &(0x7f0000000dc0)=""/225, 0xe1}, 0x3}, {{&(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000000f40)=""/233, 0xe9}, {&(0x7f0000001040)=""/196, 0xc4}, {&(0x7f0000001140)=""/243, 0xf3}, {&(0x7f0000001240)=""/207, 0xcf}, {&(0x7f0000001340)=""/242, 0xf2}, {&(0x7f0000001440)=""/52, 0x34}, {&(0x7f0000001480)=""/133, 0x85}, {&(0x7f0000001540)=""/98, 0x62}, {&(0x7f00000015c0)=""/47, 0x2f}, {&(0x7f0000001600)=""/4096, 0x1000}], 0xa, &(0x7f00000026c0)=""/21, 0x15}, 0x5}, {{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002700)=""/176, 0xb0}], 0x1, &(0x7f0000002800)=""/90, 0x5a}}, {{0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/171, 0xab}, {&(0x7f0000002940)=""/242, 0xf2}], 0x2, &(0x7f0000002a80)=""/25, 0x19}, 0x1}], 0x5, 0x20, &(0x7f0000002c00)={0x0, 0x1c9c380}) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000002c40)={r4, 0xfffffffd}, 0x8) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002c80)='/dev/null\x00', 0x0, 0x0) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000002d40)={&(0x7f0000002cc0), &(0x7f0000002d00)=""/10, 0xa}) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002dc0)={0x0, 0x7fffffff, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002e00)={&(0x7f0000002d80)='./file0\x00', r7}, 0x10) r8 = dup2(r7, 0xffffffffffffffff) accept4$unix(r8, &(0x7f0000002e40), &(0x7f0000002ec0)=0x6e, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000002f00)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$RTC_PIE_OFF(r3, 0x7006) r9 = syz_open_dev$vbi(&(0x7f0000002f80)='/dev/vbi#\x00', 0x2, 0x2) ioctl$CAPI_GET_SERIAL(r9, 0xc0044308, &(0x7f0000002fc0)) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000003000)='/dev/full\x00', 0x1b05a886c53e5921, 0x0) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003080)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r10, &(0x7f0000003180)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x44, r11, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40c1}, 0x50000) r12 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$KVM_S390_UCAS_MAP(r12, 0x4018ae50, &(0x7f0000003200)={0x7fff, 0x7fff, 0x1}) write$binfmt_script(r0, &(0x7f0000003240)={'#! ', './file0', [{}, {}, {0x20, '/dev/hwrng\x00'}, {}], 0xa, "7f12a9a27ccc41145fe17623fcc9382b623175125fc0e78ee35f0c7e23ec4749de3d1e1235ffed70b9fa524ca4e167c1db408de1883dc7864001a525e37be1ef83d03395967c15c2493bc6c7ca6e896505ac2a433f1f18fd8d31522ed6e62adf6760171b621d41779348a926c7bea152dc19c3679ed7d374ca0c3bf6d6dcdbabffc29a3125a3eab305d89349fe79dff30ea0ed775f8c65b00e93"}, 0xb4) r13 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000003300)='/dev/dlm_plock\x00', 0x400000, 0x0) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003380)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r13, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x28, r14, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20040010) syzkaller login: [ 316.543977][T12158] IPVS: ftp: loaded support on port[0] = 21 [ 316.692733][T12158] chnl_net:caif_netlink_parms(): no params data found [ 316.749679][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.757071][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.766173][T12158] device bridge_slave_0 entered promiscuous mode [ 316.775952][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.783212][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.791875][T12158] device bridge_slave_1 entered promiscuous mode [ 316.823844][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.836412][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.870941][T12158] team0: Port device team_slave_0 added [ 316.880383][T12158] team0: Port device team_slave_1 added [ 316.997235][T12158] device hsr_slave_0 entered promiscuous mode [ 317.143324][T12158] device hsr_slave_1 entered promiscuous mode [ 317.416006][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.423518][T12158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.431348][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.438646][T12158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.528918][T12158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.550745][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.564264][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.574959][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.587288][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 317.607644][T12158] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.625820][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.634972][ T2853] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.642337][ T2853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.695338][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.704475][ T2853] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.711646][ T2853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.722421][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.732329][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.741887][ T2853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.756054][T12161] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.764856][T12161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.774503][T12161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.787611][T12158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.833609][T12158] 8021q: adding VLAN 0 to HW filter on device batadv0 17:41:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$apparmor_current(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="737461636b200092219265808f757bbb09b89f8d06c8c1d0a07ac2ed5308aa0b7a120d1ef4454d06e0ca42fd2f7faae37ca75b816f45691c7a013adc07000000fd7a354d5ed0bb768020fd3dc039ea8ba1d68888fd9dfcdfe0126d37261609bb9357462f4f97a059bdacd92f6f3905e547f2eabe8f54bd531f"], 0x7) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x85, 0x2a, 0x34, 0x8, 0x921, 0x1200, 0xa672, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x61, 0x0, 0x0, 0x9f, 0x28, 0x6d}}]}}]}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8001080}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010db010000000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20020000641001000800110081000000080005003f00000010000200611d3e4d1b841faaa67c0000"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x22000048) 17:41:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x80003, 0x0) ioctl(0xffffffffffffffff, 0x32, &(0x7f00000001c0)="343db4bbceee13d6af5920accfc3b3e3e6fcbe741e1a435d58339faf46e9e8ea61a0307a70ee1c70b66fa54270848a68f080bc69e9a4a3ccbcbc522eb3ab7467be36803418e24198d70f4b84ed46a5adf4d59317326f028266aa6cb98711f1e1708f6faee2ec4e69ae3872f62ce5cfb5f5c6120a893fc59dad072aa0bdd383233c9f060bcb54e9ac27d652a20807ac878b578b4877b65ed4c60db63eb062fd157409203465c3a46d03a11ca6dc5a5e8785c196fc65e7d47b9939e010d899f0ed69c0e1068b0ca604c662d30896fd8f710ea4cfbcab56841b097dcf2d3102") sendmsg(r1, &(0x7f0000000080)={0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f6105000a00000a1f000003002808000800040004000300280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f00000000c0)={0x13, 0x10, 0x7, {0x0, r6, 0x1}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f00000000c0)={0xffffffffffffffff}, 0x2, r6, 0x0, 0x1, @in6={0xa, 0x4e23, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r7}}, 0x18) [ 318.156951][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 17:41:11 executing program 0: syz_usb_connect(0x0, 0xfffffffffffffd04, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xca, 0x96, 0x46, 0x10, 0x13d8, 0x22, 0xa6c3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2d, 0x0, 0x0, 0xdc, 0xc9, 0xf9}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'ifb0\x00', {0x2, 0x4e22, @loopback}}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000040)={0xffff, 0x9, 0x2, 0x100, 0x2, 0x2}) [ 318.703055][T12161] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 318.942390][T12161] usb 1-1: Using ep0 maxpacket: 16 [ 319.124136][T12161] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 319.132383][T12161] usb 1-1: can't read configurations, error -22 [ 319.283123][T12161] usb 1-1: new high-speed USB device number 3 using dummy_hcd 17:41:12 executing program 1: clone3(&(0x7f0000000240)={0x400000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0x3a, 0x0, &(0x7f00000000c0)=""/198, 0xc6, &(0x7f00000001c0)=""/117}, 0x40) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x320000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)='\x00', 0xffffffffffffffff}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0xa, 0x2, 0x1, 0x0, '\x00', 0x4}, 0x0, 0x2, 0xffff0289, r1, 0x5, 0x1, 'syz0\x00', &(0x7f0000000340)=['(eth1+:bdev\x00', '\x00', '\x00', 'system\xea./}{\x00', ',\x00'], 0x1c, [], [0x2, 0x6, 0x5, 0xffff]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0x20180, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000500)=""/77, &(0x7f0000000580)=0x4d) getpeername(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000640)=0x80) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000680)) syz_genetlink_get_family_id$net_dm(&(0x7f00000006c0)='NET_DM\x00') write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000700)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000780)={0x4, 0x8, 0xfa00, {r4, 0x4d6}}, 0x10) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/nullb0\x00', 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000800)='/proc/capi/capi20\x00', 0x2, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000840)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000980)=0xe8) fstat(r5, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r6, &(0x7f0000000a40)={0x90, 0x0, 0x2, {0x2, 0x1, 0xcb, 0x100000000, 0x3b18, 0x0, {0x1, 0x5c3, 0x5, 0xf97, 0xfffffffffffffcad, 0xdb0, 0xfff, 0x1000, 0x1c, 0x5, 0x7e, r7, r8, 0x9, 0x4}}}, 0x90) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/hwrng\x00', 0x200a80, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r9, 0x28, 0x2, &(0x7f0000000b40), 0x8) r10 = open(&(0x7f0000000b80)='./file0\x00', 0x1000, 0x340) clock_gettime(0x0, &(0x7f0000000c00)={0x0, 0x0}) futimesat(r10, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c40)={{r11, r12/1000+30000}}) r13 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r13, &(0x7f0000000dc0)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000cc0)=""/217, 0xd9, 0x93c6, 0x97066d99, 0x899, 0x1, 0x8}, 0x120) connect$inet6(r0, &(0x7f0000000f00)={0xa, 0x4e21, 0x401, @rand_addr="3eec6531b98733cd66ca23b88a160b6c", 0xe81}, 0x1c) r14 = creat(&(0x7f0000000f40)='./file0\x00', 0x40) bind$can_raw(r14, &(0x7f0000000f80), 0x10) r15 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000fc0)='/dev/cachefiles\x00', 0x2000, 0x0) ioctl$PIO_FONTRESET(r15, 0x4b6d, 0x0) [ 319.535382][T12161] usb 1-1: Using ep0 maxpacket: 16 [ 319.712768][T12161] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 319.720917][T12161] usb 1-1: can't read configurations, error -22 [ 319.739606][T12161] usb usb1-port1: attempt power cycle [ 319.829139][T12180] IPVS: ftp: loaded support on port[0] = 21 [ 319.974142][T12180] chnl_net:caif_netlink_parms(): no params data found [ 320.034661][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.041882][T12180] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.050700][T12180] device bridge_slave_0 entered promiscuous mode [ 320.061468][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.068769][T12180] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.077605][T12180] device bridge_slave_1 entered promiscuous mode [ 320.115885][T12180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.131412][T12180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.168487][T12180] team0: Port device team_slave_0 added [ 320.178225][T12180] team0: Port device team_slave_1 added [ 320.257160][T12180] device hsr_slave_0 entered promiscuous mode [ 320.452465][T12161] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 320.472989][T12180] device hsr_slave_1 entered promiscuous mode [ 320.522450][T12180] debugfs: Directory 'hsr0' with parent '/' already present! [ 320.554356][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.561610][T12180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.569526][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.576834][T12180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.670765][T12180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.695093][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 320.707748][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.719073][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.730898][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 320.752360][T12161] usb 1-1: device descriptor read/64, error 18 [ 320.752651][T12180] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.777665][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 320.787103][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.794387][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.846464][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 320.855921][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.863230][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.873759][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.883832][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.893476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.904494][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.920172][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 320.936257][T12180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 320.983915][T12180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.134146][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.142538][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.150686][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.159202][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.169721][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.178049][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.186123][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.194373][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.202407][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.210451][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.218442][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.226429][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.234423][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.242400][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.250327][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.258422][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.266495][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.274659][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.282759][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.290758][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.298891][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.306932][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.315011][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.322985][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.331081][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.339079][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.347061][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.355065][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.363054][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.370957][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.378982][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.386966][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.394981][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.402968][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.411188][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.419328][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.427322][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.435344][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.443350][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.451276][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.459302][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.467298][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.475321][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.483328][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.491410][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.499418][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.507389][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.515392][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.523392][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.531426][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.539631][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.547632][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.555657][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.563724][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.571632][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.579625][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.587614][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.595861][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.603841][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.611748][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.619734][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.627715][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.635743][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.643734][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.651650][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.659654][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.667633][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.675644][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.683621][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.691549][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.699577][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.707650][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.715654][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.723617][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.731535][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.739540][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.747511][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.755508][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.763465][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.771371][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.779368][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 17:41:14 executing program 0: r0 = socket$inet(0xa, 0x3, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x45f) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x40800) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000100)=&(0x7f00000000c0)) [ 321.787347][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.795327][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.803303][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.811222][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.819270][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.827306][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.835362][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.843410][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.851460][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.859499][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.867584][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.875645][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.883711][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.891672][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.899720][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.907700][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.915748][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.923732][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.931643][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.939987][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.947975][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.956050][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.964028][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.971992][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.980009][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.988026][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 321.996017][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.004030][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.011961][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.019975][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.027938][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.035926][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.043896][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.051795][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.059801][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.067775][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.075787][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.083732][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.091661][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.099723][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.107758][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.115801][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.123830][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.131743][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.139773][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.147854][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.155903][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.163955][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.171908][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.180060][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.188854][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.197636][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.207436][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.216671][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.225530][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 17:41:15 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @remote}, @tcp={{0x0, 0x0, 0x41424344, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 322.234813][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.243357][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.251438][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.259992][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.268446][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.276628][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.284647][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.293234][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.301870][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.309969][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.318730][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.326864][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.334952][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.343059][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.351156][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.359372][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.368077][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.378456][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.386994][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.396344][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.404699][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.414286][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.422660][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.431523][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.440165][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.448728][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.456972][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.465946][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.474734][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.483375][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.492262][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.501300][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.509600][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.518701][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.527793][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.537804][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.548287][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.558039][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.569965][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.578751][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.586958][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.595669][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.603961][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.612857][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 17:41:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000400000022e8df45ad00001c0016001800010014009f000000000000000000000000000000000008001b0000000000"], 0x44}}, 0x0) [ 322.623362][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.643024][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.650955][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.659147][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.668184][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.676455][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.685183][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.695544][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.703632][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.713867][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.722571][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.732817][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.744911][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.754248][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.762348][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.770447][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.780165][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.789279][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.797447][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.805439][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.813426][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.821343][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.829329][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.837318][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.845315][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.853282][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.861229][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.869249][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.877327][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.885316][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.893286][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.901195][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.909201][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.917188][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.925206][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.933260][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.941176][ T12] hid-generic 93C6:97066D99:0899.0001: unknown main item tag 0x0 [ 322.950029][T12161] usb 1-1: device descriptor read/64, error 18 [ 322.966065][ T12] hid-generic 93C6:97066D99:0899.0001: hidraw0: HID v0.01 Device [syz1] on syz1 [ 322.988741][T12206] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 17:41:16 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)=""/15, &(0x7f0000000100)=0xf) r3 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$netlink(0x10, 0x3, 0x200000000000004) recvfrom$inet6(r1, &(0x7f0000000140)=""/155, 0x9b, 0x41, 0x0, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 17:41:16 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce3ad20012009335e8a000000010902240001000000000904b300020cc1470009058d02000000000009050f000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x0}) 17:41:16 executing program 1: pause() syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce68000000109021200010000000009048e0000090088001c92f5fbff6cf942e99998325d7f030bc99a9d0fe2439a218a423ce414b8e68b32c7c4104a1c9f78d72c2873f4b62213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6ece1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1b5913f87"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x400, 0x4) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r4, 0x0, r5) keyctl$get_persistent(0x16, r3, r4) setxattr$security_selinux(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b, 0x1) r6 = semget$private(0x0, 0x207, 0x0) semop(r6, &(0x7f0000000000)=[{0x0, 0x977e, 0x1400}, {}], 0x2) semop(r6, &(0x7f0000000040), 0x46) semctl$GETALL(r6, 0x0, 0xd, &(0x7f00000003c0)=""/150) quotactl(0x5, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000200)="2a0b73922f34a34cc77f3529a35d86cc1277e9c7dee4a62cea2be0d35cee9dca13ddd6f37eacf2d112984fa613daf19a38a1c98c76e1d2eadea8be125fa5a32719243cb22dbda5a1183434fa6ac1decddf7ec8c7a04537812477740ff14af4363201ad2d0571b04ec89df2421cb2a23283e911584b7fa6bd0d463aed03f39566e7a629ee8bdd0444a308a52174851111e71d570902c10ed80ad47fcfbdf5ade5895c3f179a1393bd5c6ce3f9fea2fc46e16270f78538078b33c41ddbc10d83b53b363e524e8c4fbcf3c9586a080d625e22628c4685cabb228701164abfa0e12a72847e0e2ac67fbbb56d627e91023ff4fa4ded04") [ 323.523093][T12161] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 323.662334][ T17] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 323.802264][T12161] usb 1-1: Using ep0 maxpacket: 32 [ 323.902211][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 323.923245][T12161] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 323.931546][T12161] usb 1-1: config 0 has no interface number 0 [ 323.938427][T12161] usb 1-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 323.948503][T12161] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 323.957641][T12161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.968089][T12161] usb 1-1: config 0 descriptor?? [ 324.022602][ T17] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 324.030920][ T17] usb 2-1: config 0 has no interface number 0 [ 324.112909][ T17] usb 2-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=e6.5c [ 324.122374][ T17] usb 2-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0 [ 324.130633][ T17] usb 2-1: Manufacturer: syz [ 324.137980][ T17] usb 2-1: config 0 descriptor?? [ 324.184289][ T17] hub 2-1:0.142: ignoring external hub [ 324.197172][ T17] gl620a 2-1:0.142 usb0: register 'gl620a' at usb-dummy_hcd.1-1, Genesys GeneLink, fe:ff:40:5f:dd:57 [ 324.232532][T12161] rtl8192cu: Chip version 0x10 17:41:17 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x200000) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r1 = add_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="8b4b28f89d77dc5e9c8331121182b608db31dc64ed8de4d41f30bcdde2f2254a50a782b0955311c31a668209450fbee88351433f1eb25b888c2c924e68badc6c625208dd8dbc3ca355d237cff06e536072ec9f97da9112a4d4bfff4f7cfdabb7e7961b", 0x63, 0xfffffffffffffff8) keyctl$update(0x2, r1, &(0x7f0000000180)="2a12d8bd917f5660cbc513a19e49fba40de096d21e0fdd4d42f789c501f2724558096025954277a29df792e27dcca57830ed8ad84853c3316315", 0x3a) r2 = semget$private(0x0, 0x7ed879fb79ea1b05, 0xa0) semctl$GETNCNT(r2, 0x1, 0xe, &(0x7f00000001c0)=""/73) ioctl$RTC_VL_CLR(r0, 0x7014) write$sndseq(r0, &(0x7f0000000300)=[{0x0, 0xf9, 0x7f, 0x3, @tick=0x7, {0xff, 0x5}, {0x9, 0x2}, @ext={0x9c, &(0x7f0000000240)="e518fe49bbebe26bf36121a0cbfceb3171461c82520351efbdbf76d299143ac7b7500be14a2c998bee18e6b8e5386f8925e58c73e325dbed5c3243a2d6ab2de4ff9c3bc49e39d9f95f0e9ecd04bb3ee9152f6f7f6a577e802e3f31495ef8ec9140acc8dc88a3f6554a9fe79b68819baf22f79feaf32c79ba0680fa1cf6d809247ea8a010e99406f4102b4b7b63a0adc2a34db45d69093199e9701387"}}], 0x30) r3 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x4, 0x800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000740)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000780)={@empty, 0x1c, r4}) r5 = syz_open_dev$mouse(&(0x7f00000007c0)='/dev/input/mouse#\x00', 0x8, 0x2000) r6 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x6) inotify_rm_watch(r5, r6) syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x8001, 0x400100) r7 = syz_open_dev$swradio(&(0x7f0000000880)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(r7, 0xc0285629, &(0x7f0000000900)={0x0, 0x8, 0x25, [], &(0x7f00000008c0)=0x2}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, "47503b3d84aa37966a7c979c8698608290ed0d875b601c9637ecdcc1b07169a6be7bc840a5f1229830bb925ec9887aa92f02ea613e57c3393aa83391b0ab3bee79a4717357623428091fdd51177585844ed85d910cd510aa61b4ec843034bd3dcd2acd0753e18116920862fa22dfa42527a71675081c870e9110de6d2b869962f3290d9ce471cbc313bf9d57210f2a34160bda43e25c13343b9d6a6cbfd669fd05dea0b02cc3b233f224f299a33e86783fcafabab9d4784e7a65a92d99a8cf3c2d8e63af03d9d54c4c798ffb1a46e63ea29ffb371d235d01cbc58f6f22826e0724be39607702d320b8a9e339f712f1cbd95e22ab3484210fe9f3eab3caf7c27c304358813b110ea4bfbf8b0a57912fb50d29bb2f9ea64b039355ae09e2a31bb285e2dccb46d232b6aa71b49411bb52b3d25806b7588ba907d1a045b74456fb5ecf0aef479381f999e5678d332eeb70d928539dd081f53038e44709f28087f5efdbcc598bd03e1f6ea24e452d30f81146e0c37f17a73b7ce9972eb784f2c2c99851a0611cf502387de79b355d16cc9683f7fa1e1ec82fec2f64c08141a5d56d943e47a4c3b4f6e3360e1bf9e02aad28971f554aea161cbed54128202370e584f364a2fa59b0480f2960227d8e28b2a1543ce9dc015cb70f47a6ab11d9245cebabc1dc2132b50ee758cd40f2835b53e1d476e76023ca5831c6af3c693165effe1d66751e97b786796e36e541b6113501acac8923c4928bbd3ffeca8f21dd998fdaf67b7b1d53879b4812bae12b41ac90b0fede48f00b402989ab9f111acd8240160d0b70006e3113a78aa079c6050cbaa09680514720f55eaa880aa61f19270eb72a6491227bb88c9ab57be3908ae10986dce954b5ecedd4565b7f0ff69e999ed0c1a9042508c9d3ada52a8c810c6d6bf99a3c01a074b83c73261a2ce50852ba1027686d7581fc58f54f411299b62a5abc6c9bd8b198c5a045eafb9f2914e7ebf6c2ec5d9dcb973251dea4234303140bac9a7b1702753857a13a3f90a914c215947e4a86c073287a2306440332e94e9001b79b20048fc84322f538adb25ac550e6b216978ce77d8c24eba1d50c70eb683de7612fd76c30d4f4d3df13db5fe0722e3b0f39279d68d709b98dc5a967c3d8327af2b39841b088660ea12903aeb0b4b46e373fc0f2df60e1328ed9092cbf4e19742fb7a4849040fc9a745443bdc889ebe4ef018c592f991d691415feb049dd1ce1e5932fc8c7bb1ff06385c633a6948f68b9b49b871ea37fc80f1321b2f14d7128c7605db0b2d1a54deae2d0d808cb3a048a8395216e5221dbb34e5ad1782be363c539ee6bb1353c3d59339320ac1a3588c527a9efb83343933028cf21262dcbb9420304d84881c97f96291505cdac5d4dfc970c05aeb63e3c6f9ca775ab450c8f9d684ef05f57dfe48885a80856e2cf495c5fd5fb73fe513dee18d75f825c6f3cfd01aea8a653ce4d0cc545f1f5deccdfe2bbe0207c593516516d3c8e0035af18171096deadb07eb5ca66e905526f990e9c2569a7280856a6002584568f842a9cce5b0a1924a60f1d9bc03ef82bdcb58e92c76e2bfeff77e2db2b6579bf75357507b39417176e98e7f835f2974024d4985c03e6b7630fced9d18fc773c356936eb1a9c0dbb0a84e1fda29e0a4f2075a7d98c8cf8ec4595b45c7b0e8dd93a961bb55d2a48a7f18db2c82d36782df305547f4e7b5a7f74beab821e9be752a32f71fdd7b1396c40e8ec2a327c769c0f6ee75be670cceacf626f30c18368271c6479a4f9c0cc54222dc596955a5f930bb6d75fc13e94b4955a720f6213cd362134f6b220df89a9bb8e94cdc172dbf4b781e5c999acc45dbf731727050c85afda17947f7e43119771d9375a7fa81fea395b3f99ed883bf59d1b7c2b9fc4f37965426352ea1b532ea4afe8f54b27f4aa6763741345a4287a54991b1f3a7302a6069c316be6a349e00f2d256f5b78a46ebedb044af2f51fdef212725ada29db570729ec64bf5449740c91e6f03d53d772778c4cbae719c9f3b92dbdcf8e356a0f20b7b8a353d4d5fcfc1f4d0990b6eb0667e8d50bde12bd3249d81ef418084b15ffb113bdb24b07c63173c4e3ee71c6409b99ab1d37802323a43d69ed5c4d9b8b7321fb6d51b18bea0514310d5ddf03e4daccad11ee4be7a1763fd90a8c4261d25131f33afeb7e9a80869300548a42e8ee989c1592ccfcb0cede4c1a75ac3954ec1732615f9e7315c6a477c79b855595065aee76df03eadfcfb65903114e6f2c44b0245062edc8e31738b53f476204a61a659e8294039c28313c87eca82b1202a716b33543e203e9da74969e76399925082d49a6d29e8ab0f8350924c432458b7c9a06c854460effad6dd7f18c96a8f02409813becb59d6ca097701e95882bcdfc52159226b88bc0454bb0769c36db827ca79a0e52a4684b5e46a3cffbff842d269bf4950451f94341bc857a243318c5d533936d3fc2dc138c31f10ede055ae0ba9c284c5a9353b2db8862b0c7b668cbbf12afb77ea5a9dc18fb970bc1bdba83e8af6720a3c26f3e93f3907f630f46064d7a5b141a659276e66b3fb4e912ff6c1ae6b77990a663c1be5ca0f0413c16fa4adb8cf1c86b6c1f0bec9883dfd108c75b4ef53d12ecc82c02ab10c359b647a0e8b22520634c381239be59ac61833666b969d0c18f8c9d38e11a896404d6eb5d7bc6724ccf1028dee00ce606ee3e9397c78275408a03b702cd8caab11e4531e8212f94a5a0d80567d0642f90eedcce3e454b3eafdda1e787b69f27c5d114d2d244349449ed69403009d7fca31ecd613ceb40be58798642683e319c99868646701bd7dfa3c4554fe86469e2321dc1e9883874fadf62835a1dddaba1f4e31b7d82597f67d6bdf6338f45b6655b931e565bd73b9de4f5cc04799d0ccc3116306e210175002501cf9594db15e2d100e8c1a6015fb63739cae2f68d22b97d9c05760826b5978bf192d99d0494fb76b41af4ce2c6992620ce02a0c714ffd6e60cf105673261f1322d167e090ff3bb88780d46cb407e5d50be2e7b998ccbead36a46c24ff557e638d8c3c6b162e35fe103d2ad875ae27d2ea4325ee8357d3828c44d39af2b6f8554475e387b82790bcff8e7275984580f79269bc1ca086a477f2f283e8a4e3cdd2b379ca18c43e8bcff1e41779e9f769d72cf1521ba49f7672dcb8f36a6a35e691f703363b9e485560cbcb12c20a229f34e9d254fc553b5b6ec9c5b20e91b9b0e794ffeffbb44ec9367c0ee979d46e118e8f49b779daf52d02926fa0d302724aef885e1763bf41dcc7309a5d95bdf60b0477fa12d7506190070518ad97da95ccf5fa15de6e287f319883f7e631a54e01f11e4445b4266745c32c1de6b3e0db211107b6bd4308085abe2c1b53f805db46c3d6910ffad4207f9fc8cd8622e7101cff3a9e58ce24d881a7bf3610860ab6cf0e09f14dfbc8b71e763a273775b3019fef3e576331db1bdbb354940b2fe8e7f40b410da2e532c8eae973472f5a28be66e443cb7bf6daf93205fb29593c5275a55d5f51b1ab334da28fa5dc42933f5c4439e754cf33278ba664b16f50baecdf757194af0604c849f974a6fdb433f29fc7400def3a246185cc494b9704f759d0698d887c87a69adc149b4b4fe12eae68b8fff8cf79c051d7984cd0f3ac8c13c1cac376cbc656955cdb634e770a796c9d99cf59c6e377403393adc9eea1e50cd5742f795432bc19ca7414b4007940b00d25bfe852d48a6a8cc2d8e18378beef7dc017dd0c2f5b50d43971ee9b3c556e060048936b25eb0fb6f28088897488819e4755ca1c95e6f0de551dad363e373ca241c0a0e38f5290c42ed3912ff564de4663acd06964d481d88a3b8264eb7f5508fb16dca8ed32e56e81716947b4e3620d9472c62b8414c398a769a9674d5892d0d833ea9bbdc8d9684bb3cdcfb4b741662e2f7c0c42528bfa0e32a8840a4271e534b9e77836be2c5805f90319724c7973965aa9ca0bdbaa05fdbf3cce80a8da26a31d0752944ce426ab057f63c8ca26173fe4f04aeb1e60c7497505c35d16c1fa52c1c7ad07659eebbda72f603a159b0cd283a2adc339b29ba25d727bfc339ebcbc092f684fe70be301f0239d7a4daec29cb4089fcbae7f988e554882567b30396d4975f56fef9d2c9c6a0c4c30fa4b790a7842a642764c9fbdf79835214e1d4d94416ba98bbe652176d8159367e4863d936005e697b5bad5875af078e3d54000586b628eac6ddcdb97b656d55df15b9cccd1a8eba2c253650e493fef699cf37e0dce111ff9a8ec4440679fbaee580f61dee22438968680f8df86da054468b8e1566d87df3d1e6e66ad62c7b4b4f22a65f075c7895e68871741794132739a0bdf57da2525c1e6d5dd0bf8e8950bd21e8084026eb9fec79987b551e1c2f708266a502638bf7e12aa072bfae5557e4af5376be771cdb2cfae985f64a4e3932cb5624ce072ddd224bf7ee4edf577725603084a4585b70feac31f7f4c4004cb28b567c1948382601c8518e45e48f40f6a3dfbfce4153b4b054b7890eae217c59d97e449633e261d82a9e04c86e63a1b2d23927d0d969e65a588d9362ad98ed418f2abfd7cb2d97002417cae68de6836d2530017357792eafd42164d8651932bcbf75ce45f3cced7b27845e596d3b377eb3b3bd4d8eba705ea874262ed9ddef22afa50227fc5b38a274aaecb70b5cf6923ae1c8d27d6ebb4bff7f9a130c7b3340afa257ccd1eb5bc43d70889aac0f515d6a89f511e05a93a847f7c46b56036ee9da3f7b36e9e2c81d830e53a83209679396f559acd337b12090db83ad47fef97ef2f2af1535fa78cdf27b492627d16300ca04cbdf6aa7eb87d2abc3e21bb76204d7da62551971a03f3106f24ffb008cff23ff54bb2df6fa1c1e3cf8de921a60bd06490bcc4921ca1eaf0091fbf4b1c2c61a96967ec11015fd01e4c3dbf02e36dbaeae09bac76e685718989ca59c853dc82da8e5f051c7e88f09ad0d2f6eb34e4670bc14a8d2ae7818729de8059d2828d764501d427057f442351363d7eccf4029539cf7d3f8176656b0bfd1b778105c278688eb127655d6944fcd109bce998a5a9240687f0b68359909a8eaff80624a48fa6c6f625b9c0770fa8e551c99a2a920955b56e633dfe5227c9bfe3e6704e8efeff81d9d7a634b201d00f6b148865fe321ac6c221ac7199816fbb1b018834e1c25520a0b8dcbe0f14f6682ed394f1b13cecf727e21c6c648d5b35b526b7c6483ecd01a8940a95e19c7bc6c005c1a711f65d901c84725d814bc80fca733fa0f00008d0772e9144eb50834f6dc3a2df49e2c4f649dac9e4261e4e03393237743970c23425216385d0499008d60b5e947b92ea9c23e3877d9b0e097f2e1aebfa9e216208a65fc976eccdffbac96370981f245a8e65134d2302ee039ebc23b8e7212627b6dc13dde71ced454228f506551eb524650b6301d65fabc1aa3ae7251f6bf8aa3c3cfe82a0809ba7e815018c31f09bec8a2633f39073ef558d7c257d1115cd442a8d590a42e8d96a2cac81c46279894f22019f8b315bfcb09c8021e4f189ad4ea8ed990d6030917a11ece2b4bd3edce7d1edbe6d9801e71c7f13eec9aac75adb3e152c8c57f0e309a2eb165ca664ec35806f46c08c6e1281b549e19b3ae0804bf75d4fff84668e0402e34a62d78f1f2bfa23d7d51e23130515b2eadad3ece92e81ecf458816250db8d24f5a857c2b617e885bc3b6679e1b9b40786132d86bb87354e0252293e7ede966950c0f6cb03b11fcc", 0x1000}, 0x1006) r8 = semget$private(0x0, 0x465a6ef989fc0b70, 0x20) semctl$GETPID(r8, 0x2, 0xb, &(0x7f0000001980)=""/11) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000019c0)={0x400, 0x400}, 0xc) setxattr$trusted_overlay_opaque(&(0x7f0000001a00)='./file0\x00', &(0x7f0000001a40)='trusted.overlay.opaque\x00', &(0x7f0000001a80)='y\x00', 0x2, 0x1) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000001ac0)='/dev/null\x00', 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r9, 0x8008551d, &(0x7f0000001b00)={0x8412, 0x6, [{0x5, 0x1}, {}, {0xf}, {0xb}, {0xd, 0x1}, {0x7}]}) ioctl$sock_inet_tcp_SIOCATMARK(r7, 0x8905, &(0x7f0000001b40)) r10 = syz_open_dev$sndpcmp(&(0x7f0000001b80)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r10, 0x541e, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/114}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000001cc0)={{0x8, 0x80}, {0xf0, 0x9}, 0x8000, 0x0, 0x80}) r11 = open(&(0x7f0000001d40)='./file0\x00', 0x0, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001d80)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000001e00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x9}, r12}}, 0x30) [ 325.072371][T12161] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 325.081415][T12161] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 325.114388][T12161] usb 1-1: USB disconnect, device number 5 [ 325.221140][T12232] IPVS: ftp: loaded support on port[0] = 21 [ 325.372898][T12232] chnl_net:caif_netlink_parms(): no params data found [ 325.436599][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.444014][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.453035][T12232] device bridge_slave_0 entered promiscuous mode [ 325.464649][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.471972][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.481871][T12232] device bridge_slave_1 entered promiscuous mode [ 325.519890][T12232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.535312][T12232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.570218][T12232] team0: Port device team_slave_0 added [ 325.579780][T12232] team0: Port device team_slave_1 added [ 325.652247][T12161] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 325.767285][T12232] device hsr_slave_0 entered promiscuous mode [ 325.902318][T12161] usb 1-1: Using ep0 maxpacket: 32 [ 326.004162][T12232] device hsr_slave_1 entered promiscuous mode [ 326.053602][T12161] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 326.061973][T12161] usb 1-1: config 0 has no interface number 0 [ 326.068281][T12161] usb 1-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 326.078373][T12161] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 326.087516][T12161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.100790][T12161] usb 1-1: config 0 descriptor?? [ 326.112526][T12232] debugfs: Directory 'hsr0' with parent '/' already present! [ 326.163039][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.170296][T12232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.178127][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.185388][T12232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.294903][T12232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.323145][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.344305][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.365456][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.375935][T12161] rtl8192cu: Chip version 0x10 17:41:19 executing program 1: pause() syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100007ce40c08e30502055ce68000000109021200010000000009048e0000090088001c92f5fbff6cf942e99998325d7f030bc99a9d0fe2439a218a423ce414b8e68b32c7c4104a1c9f78d72c2873f4b62213f462b5657e098fbcc939cdbd3e13167e4bd11ffc6ece1a3891b904537f9c87b1e2d95f08ed106916776cec270e8399908c1a89d6ffb6c1e17bb1efada246e6e1b5913f87"], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x400, 0x4) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r4 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r4, 0x0, r5) keyctl$get_persistent(0x16, r3, r4) setxattr$security_selinux(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='security.selinux\x00', &(0x7f0000000380)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b, 0x1) r6 = semget$private(0x0, 0x207, 0x0) semop(r6, &(0x7f0000000000)=[{0x0, 0x977e, 0x1400}, {}], 0x2) semop(r6, &(0x7f0000000040), 0x46) semctl$GETALL(r6, 0x0, 0xd, &(0x7f00000003c0)=""/150) quotactl(0x5, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000200)="2a0b73922f34a34cc77f3529a35d86cc1277e9c7dee4a62cea2be0d35cee9dca13ddd6f37eacf2d112984fa613daf19a38a1c98c76e1d2eadea8be125fa5a32719243cb22dbda5a1183434fa6ac1decddf7ec8c7a04537812477740ff14af4363201ad2d0571b04ec89df2421cb2a23283e911584b7fa6bd0d463aed03f39566e7a629ee8bdd0444a308a52174851111e71d570902c10ed80ad47fcfbdf5ade5895c3f179a1393bd5c6ce3f9fea2fc46e16270f78538078b33c41ddbc10d83b53b363e524e8c4fbcf3c9586a080d625e22628c4685cabb228701164abfa0e12a72847e0e2ac67fbbb56d627e91023ff4fa4ded04") [ 326.405542][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 17:41:19 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce3ad20012009335e8a000000010902240001000000000904b300020cc1470009058d02000000000009050f000000000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0xac, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x0}) [ 326.478044][T12232] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.516978][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.528346][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.538595][T12163] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.546235][T12163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.627622][T12232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 326.642792][T12232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.657900][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.668198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.678101][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.685575][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.694247][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.710788][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.721230][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.731396][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.741153][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.751163][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.760895][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.770447][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.780986][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.790893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 326.806261][T12162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.816064][T12162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.824986][T12161] rtl_usb: reg 0xa, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 326.868505][T12232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.953678][T12163] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 327.065281][T12161] rtl_usb: reg 0xfe66, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 17:41:20 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000200)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f00000003c0)) r7 = dup3(r1, r5, 0x80000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80008400}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r8, 0xaead17a07ac54b83, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xa7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8f8f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x44, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe348}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80010}, 0x932d1ebc27be3e4d) r9 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) keyctl$chown(0x4, r9, 0x0, 0x0) r10 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) keyctl$chown(0x4, r10, 0x0, 0x0) r11 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r11, 0x0, r12) r13 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r11) r14 = socket$inet_tcp(0x2, 0x1, 0x0) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f0000000200)) r16 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r16, 0x1, r15, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r16, 0x3, r15, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r16, 0x1, r14, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADDDEST(r14, 0x0, 0x487, &(0x7f0000000140)={{0x3a, @multicast1, 0x4e21, 0x2, 'sed\x00', 0x12, 0x1, 0x21}, {@remote, 0x4e23, 0x4, 0x1, 0x3, 0x800}}, 0x44) keyctl$KEYCTL_MOVE(0x1e, r9, r10, r13, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="8907040000", 0x3b4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6tnl0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x80}, 0x10) [ 327.193407][T12251] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 327.233068][T12163] usb 2-1: Using ep0 maxpacket: 8 [ 327.312612][T12161] rtl_usb: reg 0xfe67, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 [ 327.321689][T12161] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 327.337290][T12161] usb 1-1: USB disconnect, device number 6 [ 327.712342][T12161] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 327.952376][T12161] usb 1-1: Using ep0 maxpacket: 32 [ 327.988725][T12255] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 17:41:21 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x800000007}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000240)={0x98f904, 0x0, @name="8ff97707005e747432e092700d9d21781422140660eb1613b4e006d2814e1a80"}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000000100), 0x0, 0x24000004) [ 328.084329][T12161] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 328.092689][T12161] usb 1-1: config 0 has no interface number 0 [ 328.098909][T12161] usb 1-1: config 0 interface 179 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 328.109011][T12161] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 328.118163][T12161] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.179013][T12161] usb 1-1: config 0 descriptor?? [ 328.266584][ C0] hrtimer: interrupt took 29438 ns 17:41:21 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x8000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SG_EMULATED_HOST(r3, 0x2203, &(0x7f0000000140)) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000180), 0x4) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)={0x1, [0x0]}) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/bus/file0\x00') [ 328.473178][T12161] rtl8192cu: Chip version 0x10 17:41:21 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000d, 0x12, r1, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, 'eth0-.%lo'}], 0xa, "0554a30e53949d1b1002758332bbedfd6552b62167"}, 0x2a) fcntl$getown(r0, 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000003c0)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000200)) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r10, 0x3, r9, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000000)) r11 = gettid() tkill(r11, 0x14) kcmp(r11, 0xffffffffffffffff, 0x4, r5, r8) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r12, &(0x7f0000000100)={0x40000000}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:41:22 executing program 3: ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000000000)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0xc0000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x0, 0x6}, 'port1\x00', 0x2, 0x10060, 0x10000, 0x81, 0xe000000, 0x7fffffff, 0x6, 0x0, 0x7, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x400000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x50004, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x7, 0x1f, 0xc1, 0x0, 0x3, 0x3, 0x8e, 0x4, 0x0, 0xff, 0x20}, 0xb) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000380)={{0x2, @name="21374961169b4a0816a19fdadf67fc2bdac3a5d6a5dc9ddf58aa495081c604f2"}, 0x8, 0x0, 0x95}) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000003c0)={'nat\x00'}, &(0x7f0000000440)=0x54) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000480)) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000500)={0x2, 0x100, 0x1, {0x2, 0x1, 0x4, 0x2}}) write$FUSE_WRITE(r0, &(0x7f0000000540)={0x18, 0x0, 0x8, {0x40}}, 0x18) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x300, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f00000005c0)={0x72, "6db5535922d0e56386d9594879fd56300c5317313b37bf704f7953b133628d38", 0x3, 0x2d0, 0x142b528b, 0x4000, 0x8}) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000640)=0x9c95fb4a59f464a) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x183a43, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000006c0)={0x0, 0x9, 0x0, 0x800, 0x3f}, &(0x7f0000000700)=0x18) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000740)={r6, 0x40, 0x3, 0x7f}, &(0x7f0000000780)=0x10) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000007c0)=""/134) r7 = syz_open_dev$radio(&(0x7f0000000880)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_G_AUDIO(r7, 0x80345621, &(0x7f00000008c0)) r8 = syz_open_pts(0xffffffffffffffff, 0x40) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000900)) r9 = syz_open_dev$video4linux(&(0x7f0000000940)='/dev/v4l-subdev#\x00', 0x9, 0x4) ioctl$VIDIOC_G_MODULATOR(r9, 0xc0445636, &(0x7f0000000980)={0x0, "4b7448587cecc5de3a0cfc1606e0c58cd9ea8608689562c87417806a42a8bba9", 0x4, 0x2, 0x7f, 0x8, 0x5}) accept4(0xffffffffffffffff, &(0x7f0000000a00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000a80)=0x80, 0x80000) getsockopt$EBT_SO_GET_INIT_ENTRIES(r10, 0x0, 0x83, &(0x7f0000000b80)={'broute\x00', 0x0, 0x3, 0x54, [], 0x4, &(0x7f0000000ac0)=[{}, {}, {}, {}], &(0x7f0000000b00)=""/84}, &(0x7f0000000c00)=0x78) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000c40)) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000001100)='/dev/zero\x00', 0x40200, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000001140)={r6, 0x9, 0x1, 0x200, 0x0, 0x2}, &(0x7f0000001180)=0x14) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f00000011c0)={r12, 0x9, 0x2, [0x2, 0x3f]}, 0xc) [ 329.302345][T12161] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 329.322897][T12161] usb 1-1: USB disconnect, device number 7 17:41:22 executing program 1: socket$kcm(0x2c, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 329.525726][T12269] IPVS: ftp: loaded support on port[0] = 21 17:41:22 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x323, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0xffffffffffffff23, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xfffffffffffffde2, {[@global=@item_4={0x3, 0x1, 0x7}, @main=@item_4]}}, 0x0}, 0x0) [ 329.633134][T12163] usb 2-1: USB disconnect, device number 2 [ 329.639599][T12163] gl620a 2-1:0.142 usb0: unregister 'gl620a' usb-dummy_hcd.1-1, Genesys GeneLink 17:41:22 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00080000000000000000fe0000000000000000", @ANYRES32=0x0, @ANYBLOB="0fff0000000000001c0012000c00010062726964676500000c000200080019003f000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0x232) ioctl$KDENABIO(r2, 0x4b36) prctl$PR_CAPBSET_READ(0x17, 0x1b) 17:41:23 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'erspan0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x100003, @local, 'veth0_to_team\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000000)=""/110) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, '\r\x9cU\x85>\xa1\xbak\x9aDK0\b\x00'}}, 0x1e) dup2(r1, r2) [ 329.943584][T12269] chnl_net:caif_netlink_parms(): no params data found [ 330.032628][T12163] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 330.094445][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.101674][T12269] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.110553][T12269] device bridge_slave_0 entered promiscuous mode [ 330.122661][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.129875][T12269] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.138749][T12269] device bridge_slave_1 entered promiscuous mode 17:41:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)) syz_usb_connect(0x5, 0x0, &(0x7f0000000000)=ANY=[], 0x0) [ 330.179420][T12269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.214349][T12269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.257942][T12269] team0: Port device team_slave_0 added [ 330.267631][T12269] team0: Port device team_slave_1 added [ 330.367706][T12269] device hsr_slave_0 entered promiscuous mode [ 330.404889][T12163] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.416339][T12163] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 330.429327][T12163] usb 1-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40 [ 330.438595][T12163] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.452828][T12269] device hsr_slave_1 entered promiscuous mode [ 330.493868][T12269] debugfs: Directory 'hsr0' with parent '/' already present! [ 330.499930][T12163] usb 1-1: config 0 descriptor?? [ 330.535432][T12269] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.542757][T12269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.550674][T12269] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.558258][T12269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.699223][T12269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.726204][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.737532][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.751041][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.784437][T12269] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.803943][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 330.813910][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.823032][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.830209][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.895511][T12269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.906307][T12269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.923653][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 330.933406][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.942959][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.950126][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.959829][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.970223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.980390][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.990405][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.000159][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.010153][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 331.019920][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.029246][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.039096][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.048715][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.063782][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.072658][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.107763][T12269] 8021q: adding VLAN 0 to HW filter on device batadv0 17:41:24 executing program 1: syz_usb_connect(0x0, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0) [ 331.353705][T12163] usbhid 1-1:0.0: can't add hid device: -71 [ 331.359964][T12163] usbhid: probe of 1-1:0.0 failed with error -71 [ 331.415903][T12163] usb 1-1: USB disconnect, device number 8 17:41:24 executing program 2: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0x0, 0x6, 0x6, 0x9}, {0x8, 0x7, 0x2, 0x8}, {0x200, 0x3, 0x7a, 0x2}, {0x5, 0x81, 0x80, 0x26b}, {0x6, 0x5, 0x6, 0x2}, {0x1, 0xff, 0x1, 0x7}, {0x2, 0x80, 0x1, 0x1}, {0x8, 0x94, 0xb0, 0xfffffffd}, {0xa09, 0x3f, 0x20, 0xf8d0}]}, 0x10) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) sendmmsg(r0, &(0x7f00000001c0), 0x1, 0x21) 17:41:24 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000039328640f90a1100598c0000000109021200010000000009046f0000c548d88f"], 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x112) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$dmmidi(&(0x7f0000000600)='/dev/dmmidi#\x00', 0x7fffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x8, 0x800) r9 = socket(0xa, 0x80005, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000000000)={r11}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000140)={r11, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000640)={r11, 0x6}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f00000006c0)={r12, 0x3}, 0x8) ioctl$NBD_DO_IT(r3, 0xab03) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000200)) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r14, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r15, 0x3, r14, &(0x7f00000003c0)) r16 = add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="74c0f0cfa8d0ba9d1150b823657c59f0ba2f3d139d1a72c9424b6d19ce0703dd3fd4d515f3fb852c421a9471df6371572fac16cdb60470c9a4410e7f71168d5aafd86f1adcf1583ae5631c12dfc0d6bf46836e09558cd1d69e56b0aea9d191692ba6ebc86d34789a02d58886fc33e10d490ffa7ebd083c24454058616f05faacad791429915e672ac9f49dde96684f4fcf570d0cbc19bce39754cc67c4", 0x9d, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000400)={r16, 0xc, 0x8c}, &(0x7f0000000440)=ANY=[@ANYBLOB="656e633d6f61657020686173683d6d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cd9f6e05a793cbe1000000000000"], &(0x7f00000004c0)="bd9aa67d24b4c5a692e33a64", &(0x7f0000000500)=""/140) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r13, &(0x7f0000000000)) epoll_pwait(r15, &(0x7f0000dc7fc4)=[{}], 0x1, 0x0, 0x0, 0x0) flistxattr(r15, &(0x7f0000000180)=""/69, 0x45) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r18 = gettid() tkill(r18, 0x14) sched_setattr(r18, &(0x7f00000005c0)={0x30, 0x3, 0x1, 0x6, 0x1000, 0x4ec, 0x7, 0x200}, 0x0) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) r20 = dup2(r19, r17) ioctl$PERF_EVENT_IOC_ENABLE(r20, 0x8912, 0x400200) setsockopt$packet_rx_ring(r20, 0x107, 0x5, &(0x7f0000000240)=@req3={0x5, 0x1, 0x6, 0x2, 0x1, 0x5, 0x5}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xffffff7f, 0x2, 0xffff, 0x8, 0x9, 0x8, 0x1, 0x8, 0x40, 0x0, 0x3}) [ 331.673721][T12161] usb 2-1: new high-speed USB device number 3 using dummy_hcd 17:41:24 executing program 2: quotactl(0x80000101, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readlinkat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/146, 0x92) [ 331.937217][T12161] usb 2-1: Using ep0 maxpacket: 8 [ 331.973914][T12163] usb 4-1: new high-speed USB device number 2 using dummy_hcd 17:41:25 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/igmp6\x00') bind$alg(r2, &(0x7f0000001100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x400400) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x6f6019bcc6cd03bc, 0x0) accept(r0, &(0x7f0000000800)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000880)=0x80) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000008c0)={@remote, @empty, @empty, 0x9, 0x4, 0x80, 0x0, 0x6620000, 0x100200200, r6}) r7 = accept4$alg(r4, 0x0, 0x0, 0x0) sendfile(r7, r3, 0x0, 0x100000001) socket$inet6_sctp(0xa, 0x5, 0x84) [ 332.074068][T12161] usb 2-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 332.084577][T12161] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.094096][T12161] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=a6.2f [ 332.098036][ T17] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 332.103316][T12161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.237861][T12161] usb 2-1: config 0 descriptor?? 17:41:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PPPIOCSCOMPRESS(r9, 0x4010744d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) r15 = dup2(r14, r13) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) r18 = dup2(r17, r16) ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r18, 0x8818564c, &(0x7f0000000700)) r19 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = socket$inet_tcp(0x2, 0x1, 0x0) r21 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r21, 0x1, r20, &(0x7f0000000200)) r22 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r22, 0x1, r21, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r22, 0x3, r21, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r22, 0x1, r20, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r19, 0x84, 0x16, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)) r23 = epoll_create1(0x0) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000040)={0x4004, 0x200, 0x4, 0x58b}) epoll_ctl$EPOLL_CTL_ADD(r23, 0x1, r3, &(0x7f0000000200)) r24 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r24, 0x1, r23, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r24, 0x3, r23, &(0x7f00000003c0)) r25 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x80002, 0x0) writev(r25, &(0x7f00000005c0)=[{&(0x7f0000000100)="e1348bc48ccbbb28f43dcdd5d3ee09d0a12cfd10724d95b0a9c785733e0a8c3183844cf76ff10ffb1e92570979e97cc0d34873a7a2f87054", 0x38}, {&(0x7f0000000080)="e0b86108", 0x1c8}], 0x2) [ 332.391041][T12163] usb 4-1: config 0 has an invalid interface number: 111 but max is 0 [ 332.399456][T12163] usb 4-1: config 0 has no interface number 0 [ 332.405813][T12163] usb 4-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=8c.59 [ 332.415346][T12163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.482313][ T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.482505][T12163] usb 4-1: config 0 descriptor?? [ 332.493602][ T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.493673][ T17] usb 1-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.40 [ 332.493715][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.531869][ T17] usb 1-1: config 0 descriptor?? [ 332.538246][T12161] usb 2-1: USB disconnect, device number 3 17:41:25 executing program 2: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREAD(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="3f00000075020034000000464a972e9c07f7cd347204f1879b6ab5b60fafbacb2137f1fd2da8434fe81c705f7afbbd018176e2bd4d2c5fc05c3f3442f2f4ec"], 0x3f) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x2}, 0x7) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x800005, 0x110, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000100)={{0x4, 0x1, 0x1, 0x1, 'syz1\x00', 0x2}, 0x4, 0x178, 0xfffffffa, r6, 0x2, 0x5, 'syz1\x00', &(0x7f00000000c0)=['\x00', '#bdev/@}\x00'], 0xa, [], [0x96c, 0x1, 0x20]}) getsockopt$inet6_int(r2, 0x29, 0x3e, 0x0, &(0x7f0000000300)) 17:41:25 executing program 3: r0 = socket$inet(0x11, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x171, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0), 0x4) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc={0x27, 0x7}, 0x80, 0x0}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000000)='./file0\x00', 0x512400, 0x110) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xd9c, 0xfffffff9, 0x9, 0xffff]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) recvmsg(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x2000) 17:41:25 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r0 = gettid() tkill(r0, 0x14) r1 = syz_open_procfs(r0, &(0x7f0000000180)='sys\x01\x00lR\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000440)=""/4096) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x22000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, &(0x7f0000000340)="9aca01d1630362f58c3b6e446e9c94c59b21a11629c589af9c77112781c2aaf89122a741f69e4a9fa54bf6869f9908de3e970f4c14692f04cc1d2971a3997d26991886904d984f5e3b19bb17d1e31a3af4a3886a6161b156bf37bf373533e8e5a29f117bdde51104fb7b0fed79d700af5ddada2262ec86b2b7ee8a4af9153074cc84cbaeeb957dd27263e11a189d9c1974d8ea43d44fe2b68610878d6dabc6612ce417de15de0eaa6128a02bd65100ab89d2d75ead2055ea49fdab41a37a54fb639f84a2cded", &(0x7f0000000100)=""/116, 0x4}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92v\xf9\xba\xf4\x12\r\"^\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea\x00'/247) sendfile(r4, r1, 0x0, 0x1f7) 17:41:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000040)) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0xa, 0x3, 0x4) sendmmsg$unix(r5, &(0x7f0000006f00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x30}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r9, r6) dup2(r9, r8) [ 332.885167][T12163] usb 4-1: string descriptor 0 read error: -71 [ 332.895518][T12163] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 332.932628][ T17] usbhid 1-1:0.0: can't add hid device: -71 [ 332.940459][ T17] usbhid: probe of 1-1:0.0 failed with error -71 [ 332.947853][T12163] gspca_spca508: reg_read err -71 [ 332.977758][T12163] gspca_spca508: reg_read err -71 [ 332.994478][ T17] usb 1-1: USB disconnect, device number 9 [ 333.004138][T12163] gspca_spca508: reg_read err -71 [ 333.024479][T12163] gspca_spca508: reg_read err -71 [ 333.047369][T12163] gspca_spca508: reg_read err -71 17:41:26 executing program 0: r0 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000088995bc278078530907ba8daf19580c9613ff8c2531d48e56c969a3547034571923a2c0e75ecb75217584fce8cbddbd735b9d223dd4ca810697ce8f93d0755ee710b002c231a5731bd6a16792b1319e2acc0eb1ba8116a4ae39f9465a4cf19d78a65125d1380901df4df538cb058834aba9ebae214596685cba97d2d3415e76e604937d56be767966a11fb74740036e3751764fb4055519af0d726156fd289bcd0b77abd6395bc76f981c1b9b00555fcc605b7a601abe6923e5da34346d1c6def1ebf629eb5f1e243734564420a61c1150019eaa681088fd49a23bbc1e261a1fb2a18c938deb1bc33264729a89cb75"], 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}, 0xc) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000003c0)) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x2169) write$binfmt_script(r0, &(0x7f0000000300)=ANY=[@ANYRES32], 0x1037b) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0), 0xc) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x1a000) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0'}, 0xb) [ 333.083590][T12163] gspca_spca508: reg write: error -71 [ 333.089315][T12163] spca508: probe of 4-1:0.111 failed with error -71 [ 333.109648][T12163] usb 4-1: USB disconnect, device number 2 17:41:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000100)="b7510b4a62b2e2887b90b8098ca5d2fc68210c19845e70fa3bec3ec3ee256dbb6f8ddbd38f0b6a876d9313ebce272b51249074b9206e71307897d6cb4b67be01eb85f5f5aa51be5ac65d8ec0bef9fe52b1a03e3a8f120efe572d68f60b9fe92f0ae1c02440") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r6 = socket(0x400000000000010, 0x802, 0x0) write(r6, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000000)=0x4b1e, 0x15) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r9, 0x3, r8, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r7, &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) [ 333.422943][T12162] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 333.682242][T12162] usb 2-1: Using ep0 maxpacket: 8 [ 333.823116][T12162] usb 2-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 333.833704][T12162] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.842891][T12162] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=a6.2f [ 333.852396][T12162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.863012][T12162] usb 2-1: config 0 descriptor?? [ 334.127162][ T17] usb 2-1: USB disconnect, device number 4 17:41:27 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020200090c0000000000000000000000020000000000000000000000030006000000000002000000e0000001000000000000000002000100030100010000000200000000030005000000000002000000e0000001fffffffffffffff981ef8f24548f641e0e9d704bf1766e0f43c8a9dafd79b31dc5e08b9289c004d6e696575e49edd4aaabde2afa121ac2390c6d63a6823300000000000037293af014a1003adbd62114400877b593f950abc52ffb23883d6a97eeb02b7a042b3ef7fbe4011b31de7f2c0f2d42fe790f4a43475bd99c67802f392fbaee999aa36ea0739a45e6725867eed949affdaed79c11e7d1405c38689027674dbc3e87c97d768d790d1f610400000000"], 0x60}, 0x1, 0x2000000000000000}, 0x0) 17:41:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fchmodat(r3, &(0x7f00000001c0)='./file0\x00', 0x256) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000040)={0x0, 0xfb, 0xc4, 0x2, 0x3, "a66ba676cdf45b48df3d9d727c7cc539", "1a6be95eb20155297008f2b5294bf75e46e9ecf2f62c5db6845f8e12f46384dd3b76b061e1d28ea497b77921ee3a15a4828a54898c7852eb22a2e2a5eb7f86fd1223c71283f1f2c4528afca72cde9252b9f214d686d37d49c11870563bdf8ebf42c611c4c3ae481fe2b84edbd0731da7b01930929dbd18d24c1714b117974a0159df59f6a491ca03858b3a2688e6a51696cdc4a9cda3a03880fb5a774185b71c4a19dc3494b8c8c6b76b15ac09bcc0"}, 0xc4, 0x1) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfffffffffffffe4c, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x12, 0xfffffff00000003}]}}}]}, 0x3c}}, 0x0) 17:41:27 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x210201) ioctl$HIDIOCGSTRING(r1, 0x81044804, &(0x7f0000000040)={0xb, "756e7e60ff828f359a42fb"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0xfffffffffffffeb0, &(0x7f0000000100)={0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = accept$inet(r4, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000001c0)=0x2, 0x4) ioctl$RTC_AIE_ON(r4, 0x7001) 17:41:27 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f0000000080)={0x0, 0x2, 0x6, [], &(0x7f0000000040)}) sendfile(r1, r0, 0x0, 0xc) 17:41:27 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x19eb7a2517197db1, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffed, 0x0, 0xffffffffffffffff}) open_by_handle_at(r1, &(0x7f0000000200)={0x21, 0x8543, "a03c236413a8ba788ec4ac10cc8313da6ca39f4c193e3ffdee"}, 0x400) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x0, 0x30, 0x89a5113483b2eea3]}}, &(0x7f0000000140)=""/114, 0x1e, 0x72}, 0x20) 17:41:27 executing program 0: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xe3, 0xad, 0x20, 0x2001, 0x3309, 0x8a5e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb3, 0x0, 0x2, 0xc, 0xc1, 0x47, 0x0, [], [{{0x9, 0x5, 0x8d}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001880)={0xac, &(0x7f0000001280)=ANY=[@ANYBLOB="000003000000ff00b9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x22, 0x56, {0xffffffffffffff4a, 0x2e, "b76a09b132de1e65cd21ec742ab3a41406259debeeeb10bc23b002ad45739d832e9136e53de9c84aa9a647e014cfb909b3111828523637aa7e816bc79bdf73dd69b10199d5fa97adcc8d78cdce42a497d6b8b73b"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}, &(0x7f0000000100)={0x0, 0x22, 0xd, {[@global=@item_012={0x2, 0x1, 0x9, "d4c8"}, @global=@item_4={0x3, 0x1, 0x8, "122cada5"}, @main=@item_012={0x0, 0x0, 0xd}]}}, &(0x7f0000000140)={0x0, 0x21, 0x1de, {0x9, 0x21, 0x7f, 0x0, 0x1, {0x22, 0x27}}}}, &(0x7f0000000440)={0x2c, &(0x7f00000001c0)={0x40, 0x21, 0xfd, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xa9}, &(0x7f0000000340)={0x0, 0x8, 0x1}, &(0x7f0000000380)={0x20, 0x1, 0x41, "f51702a76125c4812ad9fe6b1e93d89fc790753132f44aaa2c98563f0ca2dd9f957924d41c0f6cd360b44e71c0340f31a204e91b3f7f7fbaced642b96726754e96"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x1f}}) 17:41:27 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) close(r1) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) set_thread_area(&(0x7f0000000100)={0xb4f, 0x20000800, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)) r5 = dup2(0xffffffffffffffff, r2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000000c0)=0xad, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00), 0x3fffffffffffdb0, 0x0, 0x0) readv(r1, &(0x7f00000002c0), 0x17c) 17:41:27 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x7, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, 0x23, 0x847, 0x0, 0x0, {0x2804}, [@typed={0x10, 0x18, @str='\x01\xac\x0f\x00\x06\xac\x0f\x00\f\xac\x0f\x00'}]}, 0x54c}}, 0x0) [ 335.000943][T12162] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 335.243549][T12162] usb 1-1: Using ep0 maxpacket: 32 [ 335.341574][T12371] syz-executor.3: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=syz3,mems_allowed=0-1 [ 335.356599][T12371] CPU: 0 PID: 12371 Comm: syz-executor.3 Not tainted 5.3.0-rc7+ #0 [ 335.364536][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 335.374632][T12371] Call Trace: [ 335.378095][T12371] dump_stack+0x191/0x1f0 [ 335.382488][T12371] warn_alloc+0x4e4/0x710 [ 335.386913][T12371] __alloc_pages_nodemask+0x5ca0/0x5fa0 [ 335.392535][T12371] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 335.398733][T12371] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 335.404874][T12371] ? cpuset_nodemask_valid_mems_allowed+0x5b/0xd0 [ 335.411367][T12371] alloc_pages_current+0x68d/0x9a0 [ 335.416639][T12371] ion_page_pool_alloc+0x6db/0x830 [ 335.421985][T12371] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 335.427956][T12371] ion_system_heap_allocate+0x47f/0x1400 [ 335.433681][T12371] ? ion_system_contig_heap_create+0x210/0x210 [ 335.439912][T12371] ion_ioctl+0x775/0x2250 [ 335.444361][T12371] ? debug_shrink_set+0x220/0x220 [ 335.449450][T12371] do_vfs_ioctl+0xea8/0x2c50 [ 335.454132][T12371] ? security_file_ioctl+0x1bd/0x200 [ 335.459487][T12371] __se_sys_ioctl+0x1da/0x270 [ 335.464229][T12371] __x64_sys_ioctl+0x4a/0x70 [ 335.468872][T12371] do_syscall_64+0xbc/0xf0 [ 335.473389][T12371] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 335.479595][T12371] RIP: 0033:0x459a29 [ 335.483569][T12371] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 335.503239][T12371] RSP: 002b:00007f58aa603c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.511706][T12371] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 335.519724][T12371] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 335.527739][T12371] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 335.535773][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f58aa6046d4 [ 335.543789][T12371] R13: 00000000004c2705 R14: 00000000004d6100 R15: 00000000ffffffff [ 335.552825][T12371] Mem-Info: [ 335.556058][T12371] active_anon:117876 inactive_anon:201 isolated_anon:20 [ 335.556058][T12371] active_file:11778 inactive_file:18550 isolated_file:43 [ 335.556058][T12371] unevictable:0 dirty:101 writeback:0 unstable:0 [ 335.556058][T12371] slab_reclaimable:4434 slab_unreclaimable:10095 [ 335.556058][T12371] mapped:41344 shmem:253 pagetables:841 bounce:0 [ 335.556058][T12371] free:755677 free_pcp:379 free_cma:0 [ 335.594298][T12371] Node 0 active_anon:471504kB inactive_anon:800kB active_file:46872kB inactive_file:70316kB unevictable:0kB isolated(anon):80kB isolated(file):172kB mapped:165376kB dirty:404kB writeback:0kB shmem:1008kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 319488kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 335.623588][T12371] Node 0 DMA free:13980kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.650651][T12371] lowmem_reserve[]: 0 2738 3428 3428 [ 335.656068][T12371] Node 0 DMA32 free:112120kB min:55036kB low:64696kB high:74356kB active_anon:462796kB inactive_anon:12kB active_file:27932kB inactive_file:65020kB unevictable:0kB writepending:384kB present:3129332kB managed:2809036kB mlocked:0kB kernel_stack:3392kB pagetables:2576kB bounce:0kB free_pcp:1380kB local_pcp:0kB free_cma:0kB [ 335.687092][T12371] lowmem_reserve[]: 0 0 690 690 [ 335.692123][T12371] Node 0 Normal free:17904kB min:11788kB low:14220kB high:16652kB active_anon:8708kB inactive_anon:788kB active_file:18168kB inactive_file:1856kB unevictable:0kB writepending:20kB present:786432kB managed:706752kB mlocked:0kB kernel_stack:11328kB pagetables:784kB bounce:0kB free_pcp:940kB local_pcp:0kB free_cma:0kB [ 335.722282][T12371] lowmem_reserve[]: 0 0 0 0 [ 335.727600][T12371] Node 0 DMA: 1*4kB (U) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 1*64kB (E) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 1*4096kB (M) = 13980kB [ 335.743784][T12371] Node 0 DMA32: 10270*4kB (UM) 2174*8kB (UM) 873*16kB (UM) 421*32kB (UM) 39*64kB (M) 23*128kB (UM) 11*256kB (M) 8*512kB (M) 4*1024kB (M) 3*2048kB (M) 1*4096kB (M) = 112600kB [ 335.761358][T12371] Node 0 Normal: 1502*4kB (UME) 546*8kB (UME) 113*16kB (UME) 43*32kB (UME) 16*64kB (ME) 7*128kB (ME) 4*256kB (E) 1*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 18040kB [ 335.778263][T12371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.787949][T12371] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.797414][T12371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 335.807094][T12371] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 335.816521][T12371] 28784 total pagecache pages [ 335.821255][T12371] 0 pages in swap cache [ 335.825579][T12371] Swap cache stats: add 0, delete 0, find 0/0 [ 335.831687][T12371] Free swap = 0kB [ 335.835552][T12371] Total swap = 0kB [ 335.839324][T12371] 1965979 pages RAM [ 335.843332][T12371] 0 pages HighMem/MovableOnly [ 335.848062][T12371] 330656 pages reserved [ 335.852341][T12371] 0 pages cma reserved 17:41:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) r2 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xd0fb) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_G_CROP(r5, 0xc014563b, &(0x7f0000000080)={0x3, {0x0, 0x2, 0x0, 0x4}}) listen(r2, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x40, 0x900) setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000000180)=0x5, 0x4) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) sendmsg(r1, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) accept4$packet(r2, 0x0, 0x0, 0x0) 17:41:29 executing program 1: r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2ec5e4050cecdb4c9fdc4da8e6431a00000000fffffff0cade0006000c0008ffe79226c52b30a33b000000000000", 0x2e}], 0x1}, 0x20401) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000008000000006448294583464b1119a233a010277c1c5accef7a37a55b7b00b51ae0e655b85853a61f04d98181c8115f84b77362579a5b7c0f6a0856f4afc7af854e109ddf781fcd6e0ab4976c183e37592d84fe8e5b2f0d4630a5f56f21adae2dfeb9e5c048d206f8a06b99942a28ca3f4c0c60cef69ab6ac22919f3f7f2d499d6f9a479c87a8412160a0cba9195f90935c427b756d014e7f"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000048000100736662002c000200280001000000000000000000000000000000000000000000000000000000000000000000000000008097ae90e6a13726664458efc191469879f10000000016c6663c730c2a8100"/105], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200100002c00010700000000f7703bf1207d8f0000000000000000", @ANYRES32=r6, @ANYBLOB="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"], 0x120}}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200)=0x0, 0x0) r8 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x27) r9 = socket(0x0, 0x3, 0x6) connect$bt_rfcomm(r9, &(0x7f0000000000)={0x1f, {0xfe, 0x0, 0x1000, 0x80000001, 0x6, 0x5}, 0x8}, 0xa) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r11, r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r13, r12) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000fc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000002c0)=0xfe4195632fe23bd5) r15 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r15, 0x84, 0x6d, &(0x7f0000000900)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b619002d1d896e5ffb3b62ccfa516aec8038d482cd2aa0b6ac0d684fba227e9983be9f367da66938eddee11b161213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f686a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a06096d7483194ad47775d355b9800000008008b0500"/192], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r15, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r17) r18 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r18, 0x84, 0x6d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r18, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r19) r20 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r20, 0x84, 0x6d, &(0x7f0000000b40)=ANY=[@ANYBLOB="ab000000a6d23fa0c9cb488b6190f2d1d89677354590dde5ffb3b62ccfa516aec8038d48d684fba227e9983be9f367da66938eddee11b1613f0d5ff3b2213cdf2bd00a8ae552bc17ec5e976fa67846060aa7629aed35eb9bb9e096cc3825df10acb8c0dff4569bb0f6a15cab46fa86a3856eb778df7afa4a3112676e9547e0d65bee83afa0b4f46a0b10af299da7efdcc6c573074de84403de7902a07096d7483194ad47775d355bd65460a5a52aa9cc384c962b12062cf85884362f08008b07"], &(0x7f0000000540)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r20, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000000c0)=0xe8) setuid(r21) r22 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r22, 0x0, r23) r24 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r24, 0x0, r25) r26 = request_key(0x0, &(0x7f0000001300)={'syz', 0x2}, &(0x7f0000001340)='em0cpusetmime_type\x00', 0xfffffffffffffff8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) keyctl$chown(0x4, r26, 0x0, r27) r28 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r28, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r28, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fstat(r28, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r8, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000a00)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r14, @ANYBLOB="02000200", @ANYRES32=r16, @ANYBLOB="02000100bb86b4c5600d592e64b86edda53135e0f392e4c9ca69b61556778ccf29c4990d1893fd049001c62278a88220d8bb3ef088a2bbfd6fdd3bbbaa8e7ff1e7d747037c523caba1237cfd937b81d9ae40c8e42df69a9ad815e799bd07b8468681a262136f0b4027e75c77b74f2bc0ad4402225b8f934741a657b08fa3e58bffe4394310ebab08c71788455eb3b79d61d24d289378388103fdaa96ee42a18df1027aa5865c0b", @ANYRES32=r17, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000600", @ANYRES32=r19, @ANYBLOB="02000200", @ANYRES32=r21, @ANYBLOB="02000500", @ANYRES32=r7, @ANYBLOB="040002000000000008000100", @ANYRES32, @ANYBLOB="08000400", @ANYRES32=r23, @ANYBLOB='\b\x00\x00', @ANYRES32=r25, @ANYBLOB="08000400", @ANYRES32=r27, @ANYBLOB="08000300", @ANYRES32, @ANYRES32=r29, @ANYBLOB="0800d8b8", @ANYRES32, @ANYBLOB="10000200000000002000d6f800000000"], 0x1c, 0x2) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@dev={0xfe, 0x80, [], 0x18}, @in=@multicast1, 0x4e24, 0xfff9, 0x4e20, 0x3, 0x2, 0xa0, 0x0, 0x3c, r6, r14}, {0x3, 0x9, 0x4, 0x4, 0x1ff, 0x7, 0x0, 0x7}, {0x2cb, 0x3f, 0x0, 0x4}, 0x80000000, 0x6e6bb9, 0x0, 0x0, 0x2, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0xa, @in6=@mcast2, 0x3502, 0x1, 0x2, 0x4, 0x7, 0xaeb8, 0x543b000}}, 0xe8) [ 336.138981][T12389] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.142764][T12162] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 336.156980][T12162] usb 1-1: config 0 has no interface number 0 [ 336.163310][T12162] usb 1-1: New USB device found, idVendor=2001, idProduct=3309, bcdDevice=8a.5e [ 336.172480][T12162] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 17:41:29 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @reserved}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_emit_ethernet(0x77, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaffff0000000000000800490000280000000000339078ac141400ac1423bb440a90675733e01e1d7d9e000000000000000000"], 0x0) [ 336.238418][T12162] usb 1-1: config 0 descriptor?? [ 336.355845][T12386] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 17:41:29 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x200004) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0xfffbffff80000013}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f00000003c0)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)) epoll_pwait(r4, &(0x7f0000dc7fc4)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000000c0)="4994663f993352af2a89d1b2c476ba5a5ae21e84a1f77effa16672caaece1cdacffc37cb264a2175114b73439493ace57026c72e36debc24380cde45306aa709beee444513fbaae007a8355ea85f59166547b4487f1e7bb991765d879db1a1114a19471a4ed6d672b0f651106419518171ac9af536c1f8782523fd4f87dd9f9b5afd93669063d3e248f8bc4483f064a95326317c0097be9667fb6a284a4827c5ea8c8115a3b5521127636ffaf625ac73e27bdb84b130eeee9eeda2b3fad47eaa992a12c779caf4765d3feb12b85819d103f32100b09cf8b65f6dd7b84df23de8f2d1520bafc96676883a573ffe1362a6f84e2653956e15bfb0fa6e0d085fa678") sendfile(r0, r1, 0x0, 0x80001d00c0d0) 17:41:29 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe5, 0xbc, 0x28, 0x8, 0x546, 0x3273, 0xdce9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x16, 0x0, 0x1, 0x23, 0x82, 0x6c, 0x0, [], [{{0x7, 0x5, 0x81}}]}}]}}]}}, 0x0) 17:41:29 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x19eb7a2517197db1, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffed, 0x0, 0xffffffffffffffff}) open_by_handle_at(r1, &(0x7f0000000200)={0x21, 0x8543, "a03c236413a8ba788ec4ac10cc8313da6ca39f4c193e3ffdee"}, 0x400) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x0, 0x30, 0x89a5113483b2eea3]}}, &(0x7f0000000140)=""/114, 0x1e, 0x72}, 0x20) [ 336.533235][T12162] rtl8192cu: Chip version 0x0 [ 336.556345][T12401] ucma_write: process 37 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed. 17:41:29 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x19eb7a2517197db1, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010009, 0xffffffffffffffed, 0x0, 0xffffffffffffffff}) open_by_handle_at(r1, &(0x7f0000000200)={0x21, 0x8543, "a03c236413a8ba788ec4ac10cc8313da6ca39f4c193e3ffdee"}, 0x400) lstat(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x0, 0x30, 0x89a5113483b2eea3]}}, &(0x7f0000000140)=""/114, 0x1e, 0x72}, 0x20) [ 336.865666][T12414] syz-executor.2: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=syz2,mems_allowed=0-1 [ 336.880661][T12414] CPU: 0 PID: 12414 Comm: syz-executor.2 Not tainted 5.3.0-rc7+ #0 [ 336.888960][T12414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 336.892934][ T17] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 336.899088][T12414] Call Trace: [ 336.909918][T12414] dump_stack+0x191/0x1f0 17:41:30 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040)) write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, "b343cfac9a369165afec060a8ada7e68ff24a27b6a1c4f07f82e504d709b995defcac6096448b35addf64f85cb536ee782fb038e0ef59a9aa1f6d73ce18a53cc605b915f53f2c2d1fdb20f9e763397df0418e0a439bb792b54ff76855cf17770458e7bafa81c93f72b34463ce70ca9149e72cfca752c22331abe455a701563b25904c7010e9c09f621133fb25ca31441f215a6e8d3e1175d46154d733334239cb6b8157d92f180d7abe0c2b2754603331f48edcc6686f5fc7c323e00e0db8275129e8c56ca4a043c5b50dbd76acb4576503e02dbfbbe57b21e95b59a7866944eb830828b4e9770168803ad2355fc62c64c5f72e4fe1dce835a35b3a157e5a3cc4fd7d519c634c768cf258e7085167a00e7bf4bd0794c606066acfc1ad6a98a50435b3372c62ec66692a4e3acf4ae46ed64254c85faabf851438ab6284fb03152df259abeec7bccc50b28eaa293c301b4b411a3d6f66874d47ebf220d95cbd189c2c7a57064fa9a0ff142d2dce1fb41fc64bcfee09cecacc7d93c100a66a84d7c87d5c276d9852f6d5525660c70c3494b6c916931335fea1537bfd136a2c0304f7190ebea03c86d8448894e9a311ce434adc1c9828ff68b19f010338b6fd8eb9435ee88ab26b005a2a1892e407a56fd4cf0e3c5fed654d4f70b8bebf3265910b155ed7616e656f66605e60c221b2b90879d86ab33879cda16e2e3aaf6d98516f1a2bbd1d85cf504d63537ad8bd511147528bcaacb7081b381b8fc7e7ff7ced133d9de1219878728cf71579e4d75589155eab20e6514ebaf516c6d2bf0d8afa50bbfbd8429572bb2b6242ab0cc092a79b05d063f44df339ede2e0aa2cfd48f43b4f884be3e0c88ce23c185caade71333d1ae6443108db302923d419043777a5931c72bc66328504689be28c1db5dd490d0778b63d06c731fd1642d624796c390aaa6fef1bd24f531e8c8465d486a3a9f3568513524a67df3c183be0fab8ba88d29c32870729f22eeb74e364c1b9719ec8a0605b8fed748e41f61e7e39f55de095751b8e4d39adf4af60a4b3d48973b9b02c6fbd54af7fdb43d7c535a3f573ec7473fb2033d24077385f6a4961f3cdcb935398f87375f52f2800874388d6757872614b413751574bd0fd193d3e94a3d442171dcb90ed7de39476427f117b309a749866c3d5dfd84023754199180ed3b76f26a31a1834626ae0cecd7cb07b1acf7c988321f0678a79c6d04bc7a27e54f902b744354378b6de834d0bda0a0567264762de2d60a3e5319943721ed84f2be68be5613b1c10e21a18a147451118c8e266ff51149504c38392af94ecff60b977844bb4ad4e82698c9afa8ea53f3133bc462fc0ec2991e408ce403569af0a7cda4f1e6c2090d5e4ceac7f45e40b2c3e596745fc87c928307b63a45c7f353639f2975e9bbea173385f482b5dc81e008c88a0c93b1e6d9126581fcc7cbed8b5c3b73740808359334b02163952a3006f72871ee23c13baee864f4940937b4b2e364a4770ad9b2e9c9ea6cc89abd87fa425bee9a0ee8f29f65ce453f2d714a0c42449044cf319fc4f9d79be41bfe0f6a06032c18ae3b0afe794afce4439963a019c622208533fe8f872b285469823b72f5b6826909865cdbbeb33c5a8b6e0a16f9e7c74e293b47eaf6eda585026212c63497c9287bdb3c08ecc0d8c6b4c4415a3c053f847534562983ea1767349b1da4854f4c70c97989e070f5bc8a3572973b06470d72c6401e504d20d3ca269399126b00fe6c1dac25325da5d6a8f0b63a9e8653b50dffc299e806a2d81a67a70f8917f349d073da790e0c646dbdc81325eb1ba8fdf35ec8d68c56052604bad6767934e964369d787ad4b623676f9ae145c71fe4b277f4dcbf12f6cc84567becd70a91ecbbf62fefac4dc914e07713d8051e35dd5db595e432ea9d190bc19288b1a14a0a8bd0f7d36ec3cc6d5d9289b11e4c46bf3965a8367369506bcb05587c26caf7a0ec36d498a81404443afae83d6b86af3ad8f345c29534baf8fba1827d86be20a0314dba6799456ff825f99f93e3ff01aa8a34591d5e832e9bccc49d7fccf20733cfc7b7943aced120581b24afc303f3157ac0b31db1144e59298c48d513eeae6bbd3a559d4a5da467b50beb14188bd0d4be547fce6d3354ff2feb1d41c7c62dadc2ab1e4913e5213fcdd169379d1a218f38051a47c29fa7d61415a71c063927df0afa012062f5cce3ea2a5a55c71d46d9db4af8a685d921a0ea5cceda9308adb6581140716e431aad06c91d6e403aaaba62a4b11a07e0d2be96965494b80de6c0eaf1677cbd444f1e15d28c80130dddbe7f94d82c66a274eed0f2bcb9b71674b7ae5d27e3e45ccd45ffd53c0d2f0a2f9c17f70f878272fe700cd5b86f38aee19ed5e7db3862fa0200372912cc89c903b1e5007f5a2b921d0bdd40f8affde9032ec33970641cd7ce2b7f105d011fe5b8295454fbb524c1fafa74c29e6021b9b9767f844710f96fc88ab3b5fb53eb0cd576b9e7769c88414b49edb76dfeda4d239afc3930bcd759f32cc5e3af5e9c03cc6d3138df747397d039a7026d86dc236a6d00017fa4283294636049883f580d803452d03a1f71af15a0ad10bef468321e4545f8f71dd9e37ef849db1209791a5b63c358d4d95a74e5f2c76e712cf8572ef48ad67f2a281445407b5fa97980d4b5e4b448ba3d08144a7623d0a903fa48f642f41c0c53001cc5db5e6bd40181d7fa272fa239e7f6db29529b7ac21317c0f7ea9247e6bcd54b86dee71fadbe8e6e8c3f536acb0e22ff140ec1cab1c36ed4d38f81dcd4ed1ef8007a9d67f216fb43a93c936c6fe4cd6c439930d88c84cc1785a56029eda3c9280535f55dff0ae6d1f49269c447dc44b467c32b363381110bad06c3744e0fe2f73a70428c4a51fddcf7aecf56578e4006f5bff163637b51a3379b35e9cc1a4344b72855cbb13089cf39e52db41f30b8768bbeefa91f9b2d06783d6fa76d857d1517cbab9925d67f3906dc9ac5c764512de3aee3671dd9cfa6c71e0ee2a2e7bf7bb4b3c430a60f471ae767f9a51d41cacfea5956227bafb2a8b4c0deb5691c32d5f735a17e2670214021d28dedc3922c22bdb0372c4568092f8d53386f14a82a1188301bb9e9024ec17a598f4361ed9da80a1c743bb466cc752e7631bae68852721e29e04e4bc5d14b92522359083a9092e6d06d5921aa2c70fb5799bb4f53409bb2426f6de5bb8efbb39d9c70b17015c798120aadcd38b8c86fc97945fda9d747b49fec3e02bc4a15bc920743ce7aa2000318b13a3b473a000abbe73fba73660e3175d04f65836009cc8bf0309ef0dc3d3e2ceaf32cd3ea4346b86975c4199f81013f74ebfc0aa8027c3225e644f6c6c85e04821997ff23a3d30316ca819ebe445aa89292c6b9dd9c13f956ee57157e8fb45cb631b78232b187e769794946745e334ba3de61d4bd32dd069018d5dacc4875a5465f728ea23f8667cb840b9c76ab1a078c4a35bf82659251ac0c496e1d1003509e8de5e25a7cb5052f0f6e8a01e2e9857b1eb5353a8259e2beebf8ef9d9de941fa8a51450dc88e876f30ad0957566e443b425ba38227972bfad3a2462f69ed4ebd3181fd7b85e645e5822c86bc9ba68032b76b5ba64408c234445320a9eb5576699e0270911ea53d6edb30ec72a27aa07fa451378be43d9e27562387e0a9a8624d5cd3319be6af2db4ded36818e2733389eafe13a4ded5af7db05109cd07452d75a76c0d16550940a773f527ee0139a190cc6a95dc1b51a3596d58c2a5b3044b0cf50e185c143848e223089a5a36b70a28686240526c97b59b88a902bd001d23f4c27a8fda35704caefe9e52efe313213f6b36f2c8a91b202c92e95cc95959fd6fa92305654a84a1334ef308ead1c4c880459c2dfc41e4afaa4d50385aeb3c3fa8f7ce67ddee42379828082bc495d28bbf21fa72852e9a1b7432c3d92c1506a57181aa65d2107ad09a0e7bcc57b7990907a733cfbff6df76894770ca2fc6b81bbbe61d37d1d5bb397d1bcda692c71535c4b463d3bc2471c8977716c17e5873e8faa14e7da8873bd75977aa642393ec17cf3318622c4f834b9d664ee930b1f47de15722b6db13a74ef57a5a295082a6326b7864b723d3e7118375ed9827f119eadccc14a596e6d738e213e1bfd0d628d49a71796f2129a028798114e4d89862a2fd543b4c849824002a60a14983be3f910ef0cd229156689532f3f4651a4de7963ad66a5a969cac32eaae31a7a12302eb90366301a27944db8f8a6372989f2e7af938c7cfdf84294d28f393c4978d37df1e09cb8b9abaf5d3506d02d4733a3a18ea32b09db10b9565a07fcf3984461d93f0a7402dca656126dce47c98dd5b073896ed898e4c75fb0f85f7d171ac184b343a701b58b92ab87a24760a6a447c090fbf15f9709b4aabe0f944816e17ec9daf2a5544d0a440b235aafbbdd9cd11e1aa48503094e7139568cecaec0a84d73126354cb2c9fbe3d6db93499a0414a5f80fd06ee8f6d5c81156ecb4625f3ba292998e2d04a089d385fe8f059bc169793876316ea21455d15655074ce92dc74bccec8dfb67e02a5948a1b17c696f50c8ecb5397afee4779b960f09281ae36653ef7863a46b4675e73f05a04370d65ba56f0ee19f4ec016dac226fe9824bda850a956e25c78193b7639c4d5d2f651c4b4b12ba29898a6c10a07a4d1eec0f2b8875b798321247846cd2cc2f889dc9992dd448c3c13aca6784f069475d0ec676aa123887d331a85cf3024a65cd5302c5de958f32c08d8f946fb6250a22ca1cf001707c831ba887f9f36652013bc1ead831d920e31d5ba17e01f104c4426c81590671ae9517c20ef8ac7891eb03e941cd13df2ed0d5284839eb61d54f661f02dcc29dbbdc43342a51a4691a9ce0375e1b8ae8a8c3adcabac27c4abde75396abe54559008a94ad0cf63d91df3bb55351adebbc8ad43b0b243f3d1a83e1c0ca5b9f1f6fa582d9e3221b75eac1a85f6c141d47f3ecb45774a022d4d202119810240ad837a0a805a0e70eab6033ba8127dfc560bf2a7aa1ea8fdb260776424771b79100446bf1b70bb2afc29a03a97c654da3fa01d9550ee7bba14f3ff167029317dbc95c9d5c2a0154f1fbc2a951ed9438406981b1dc04503f909f87d4d99f09ac7ba94c976fdf89372b43cceb2bea50114093a2ff2fae157398b349c06a0e2f6a3f4a1b182b57103857c4246ec31c1bfa57198a0b1d6db0a6d6486d60e1681b041351c722c5e29ab3eae563141ca00cc34aad5399bd2bea3ddefc6278bed4f718cce555eb5e17fad4fecd9fa55da331337d035ffd959d9deb8e2f842ebbda860baf110e2fdfaf679ad27caad3b87b711b95fea06cbc6169407eac8b599cee856fce36619ccf94a17d3d5b24baf27b4426bb9e6faac79236f6441400c0b889240444823f780a211fed356fa0229e18ee76b42fcba803a1a5432c69339a963b1a9ba2e2f19813abc35f1a253f99f5ae0008c232ca3aa7411602b2ae2e3292e4397ebd4b0eefe79395f3e7043bd531f90415f7b6bc06b0f969e547dbbe0a0a17e97b99c65b4b3131f599e07b7f6948f7c7b8980382ded9662187bd483d6bbbd1d28294694201ee5f160da9d892c32e446ae0d2a8d109e353622f13a10a6d36e6bcfcc4bb19d6a555a3d421455e63a470cfcf5aa61638f8a9c968e6ffd263f7ca349a49feb1f515579c9697f6c17f22a52c431f8e4feef507e7a1764441ea39c77e4dde33aa7cbfe08bbaf4e7c71839c43c90eaa6ef253a9a4f63f988191c1e991", 0x1000}, 0x1006) r1 = userfaultfd(0xc1800) open_by_handle_at(r1, &(0x7f00000010c0)={0x6a, 0x5, "3d54e81e6c3c0c9172adbea024f37e3a6dfa5ef885be623ec27512205c20ad109e37230583814ae12e1d8b3cab40eef7c757991c2236119ee7a8e2cb3a095264c22adbdccac19b7e1ef67767f559d75abafb04a28eda6e9207ce66bec0fa381e4a0e"}, 0x40000) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$setflags(r2, 0x2, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001180)='/dev/autofs\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f00000011c0)={0x7fffffff, 0x1, {0x1, 0x0, 0x80000000, 0x1, 0x88c}}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001240)='/dev/vsock\x00', 0xd7d3805c4e9d0214, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000001280)) r5 = syz_open_dev$swradio(&(0x7f00000012c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000001300)={"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"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001800)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001700)="3639c62213f57f8705867ec5fa911b24541bd94c79cab99cc322ccb8300cf80595c14a410b84e8593763ff08ba499fee5db150700f99ba2316e6b0c416b5862e2d55dce00f0655ae62d8082f3e29cc797ad50a78949b9b32e487550b03002fd08a8f287f828e6000d910b781667edd229a8ab4f89d6742eb264f41a6ff3d67a597cb3fa3f7604f189ffd891409d565fc1eeb23b04b3e614174c8b9d43883381df748a643bd5621d1716ccc302cbc293ffbc653ca666d047abfbb3fee32e5d3ffbf2635e7e2468b3e1133ce01e36d3c4bc62fbcde1eb9dbad81c55e5583c466ce527b", 0xe2, r1}, 0x68) openat$vimc2(0xffffffffffffff9c, &(0x7f0000001880)='/dev/video2\x00', 0x2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/null\x00', 0x442100, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f0000001900), 0x4) r7 = accept4(r0, &(0x7f0000001940)=@sco, &(0x7f00000019c0)=0x80, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r7, 0x800448d2, &(0x7f0000001d00)={0x5, &(0x7f0000001a00)=[{}, {}, {}, {}, {}]}) fsetxattr$security_selinux(r4, &(0x7f0000001d40)='security.selinux\x00', &(0x7f0000001d80)='system_u:object_r:mqueue_spool_t:s0\x00', 0x24, 0x0) sendto$rxrpc(r0, &(0x7f0000001dc0)="a00cfb1ada7a18b4fa396aba9b37773693a14a25c060c31012c65d67af5f0fd4b526870a6668402e0c599fb4a7ffe6521ebc7e8e53fe25b17bda57edcef08d832a9f12aa22ad9afbacbc1445710703a5e0532b555d5dcb9e8072d6afb8bfc4bcd3b430de866ae2414a49b65c038aad0fb0cd6a0ddcb33c7ffb65472d7c83bb14df9e4874366af9721bfb6e6220433a2a620fe70d61232eb1d027641f91c1e94bbb32c453e4a2ef8a47561d100aa1f3", 0xaf, 0x4000, &(0x7f0000001e80)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) r8 = syz_open_dev$admmidi(&(0x7f0000001ec0)='/dev/admmidi#\x00', 0x98b7, 0x14302) ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, &(0x7f0000001f00)) r9 = syz_open_dev$sndpcmc(&(0x7f0000001f80)='/dev/snd/pcmC#D#c\x00', 0x9, 0x0) ioctl$TIOCSCTTY(r9, 0x540e, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001fc0)={0x0, 0x0, 0x7ff}, &(0x7f0000002000)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000002040)={r10, 0x2, 0x3}, 0x8) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000002080)='/dev/full\x00', 0x20000, 0x0) ioctl$RTC_WIE_ON(r11, 0x700f) [ 336.914330][T12414] warn_alloc+0x4e4/0x710 [ 336.918765][T12414] __alloc_pages_nodemask+0x5ca0/0x5fa0 [ 336.924450][T12414] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 336.930636][T12414] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 336.936778][T12414] ? cpuset_nodemask_valid_mems_allowed+0x5b/0xd0 [ 336.943302][T12414] alloc_pages_current+0x68d/0x9a0 [ 336.948522][T12414] ion_page_pool_alloc+0x6db/0x830 [ 336.953729][T12414] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 336.959707][T12414] ion_system_heap_allocate+0x47f/0x1400 [ 336.965451][T12414] ? ion_system_contig_heap_create+0x210/0x210 [ 336.971680][T12414] ion_ioctl+0x775/0x2250 [ 336.976133][T12414] ? debug_shrink_set+0x220/0x220 [ 336.981229][T12414] do_vfs_ioctl+0xea8/0x2c50 [ 336.985940][T12414] ? security_file_ioctl+0x1bd/0x200 [ 336.991326][T12414] __se_sys_ioctl+0x1da/0x270 [ 336.996086][T12414] __x64_sys_ioctl+0x4a/0x70 [ 337.000755][T12414] do_syscall_64+0xbc/0xf0 [ 337.005254][T12414] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 337.011198][T12414] RIP: 0033:0x459a29 [ 337.015157][T12414] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 337.034805][T12414] RSP: 002b:00007f2729362c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 337.043273][T12414] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29 [ 337.051299][T12414] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 337.059349][T12414] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 337.067354][T12414] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f27293636d4 [ 337.075351][T12414] R13: 00000000004c2705 R14: 00000000004d6100 R15: 00000000ffffffff [ 337.084024][T12414] Mem-Info: [ 337.087299][T12414] active_anon:117878 inactive_anon:200 isolated_anon:12 [ 337.087299][T12414] active_file:10844 inactive_file:11095 isolated_file:0 [ 337.087299][T12414] unevictable:0 dirty:122 writeback:0 unstable:0 [ 337.087299][T12414] slab_reclaimable:4436 slab_unreclaimable:10103 [ 337.087299][T12414] mapped:41389 shmem:270 pagetables:883 bounce:0 [ 337.087299][T12414] free:736015 free_pcp:510 free_cma:0 [ 337.125494][T12414] Node 0 active_anon:471408kB inactive_anon:784kB active_file:43128kB inactive_file:43636kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:165556kB dirty:480kB writeback:0kB shmem:1064kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 321536kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 337.154685][T12414] Node 0 DMA free:13924kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15904kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.181704][T12414] lowmem_reserve[]: 0 2738 3428 3428 [ 337.187117][T12414] Node 0 DMA32 free:96476kB min:93948kB low:103608kB high:113268kB active_anon:462904kB inactive_anon:0kB active_file:28592kB inactive_file:37708kB unevictable:0kB writepending:420kB present:3129332kB managed:2809036kB mlocked:0kB kernel_stack:3392kB pagetables:2636kB bounce:0kB free_pcp:1460kB local_pcp:80kB free_cma:0kB [ 337.217617][T12414] lowmem_reserve[]: 0 0 690 690 [ 337.222704][T12414] Node 0 Normal free:12452kB min:13836kB low:16268kB high:18700kB active_anon:8704kB inactive_anon:784kB active_file:14744kB inactive_file:6132kB unevictable:0kB writepending:60kB present:786432kB managed:706752kB mlocked:0kB kernel_stack:11328kB pagetables:784kB bounce:0kB free_pcp:368kB local_pcp:0kB free_cma:0kB [ 337.242219][ T17] usb 2-1: Using ep0 maxpacket: 8 [ 337.252523][T12414] lowmem_reserve[]: 0 0 0 0 [ 337.252618][T12414] Node 0 DMA: 1*4kB (U) 2*8kB (UE) 1*16kB (E) 2*32kB (UE) 2*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 1*4096kB (M) = 13924kB [ 337.278328][T12414] Node 0 DMA32: 15537*4kB (UM) 2516*8kB (UME) 496*16kB (UME) 216*32kB (UM) 18*64kB (UM) 4*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 99044kB [ 337.294412][T12414] Node 0 Normal: 853*4kB (UME) 508*8kB (UME) 113*16kB (UME) 43*32kB (UME) 12*64kB (UME) 2*128kB (ME) 3*256kB (UE) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12452kB [ 337.310800][T12414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.320503][T12414] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 337.329936][T12414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.339676][T12414] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 337.349094][T12414] 21845 total pagecache pages [ 337.353922][T12414] 0 pages in swap cache [ 337.358144][T12414] Swap cache stats: add 0, delete 0, find 0/0 [ 337.364397][T12414] Free swap = 0kB [ 337.368172][T12414] Total swap = 0kB [ 337.371936][T12414] 1965979 pages RAM [ 337.373813][ T17] usb 2-1: config 0 has an invalid interface number: 22 but max is 0 [ 337.375953][T12414] 0 pages HighMem/MovableOnly [ 337.384017][ T17] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 337.388643][T12414] 330656 pages reserved [ 337.398940][ T17] usb 2-1: config 0 has no interface number 0 [ 337.402988][T12414] 0 pages cma reserved [ 337.409154][ T17] usb 2-1: New USB device found, idVendor=0546, idProduct=3273, bcdDevice=dc.e9 [ 337.422347][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.516073][ T17] usb 2-1: config 0 descriptor?? [ 337.632433][T12162] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 1 [ 337.655858][T12162] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 337.843471][T12162] usb 1-1: USB disconnect, device number 10 17:41:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_IOCTL(r4, &(0x7f0000000040)={0x20, 0xfffffffffffffff5, 0x1, {0x9, 0x4, 0x1, 0x8000}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000480)=0x7fe, 0x4) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000140)=0x7, 0x4) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f00000000c0)) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e22}, 0x10) recvmmsg(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000001b8, 0x12001, 0x0) [ 338.046969][T12163] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw_TMSC.bin failed with error -2 [ 338.049636][ T17] gspca_main: sunplus-2.14.0 probing 0546:3273 [ 338.057441][T12163] usb 1-1: Direct firmware load for rtlwifi/rtl8192cufw.bin failed with error -2 [ 338.072516][T12163] rtlwifi: Loading alternative firmware rtlwifi/rtl8192cufw.bin [ 338.080185][T12163] rtlwifi: Selected firmware is not available [ 338.086727][ T17] gspca_sunplus: reg_w_riv err -71 [ 338.091895][ T17] ===================================================== [ 338.098859][ T17] BUG: KMSAN: uninit-value in gspca_dev_probe2+0xe93/0x2230 [ 338.106195][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.3.0-rc7+ #0 [ 338.113576][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.123658][ T17] Workqueue: usb_hub_wq hub_event [ 338.128696][ T17] Call Trace: [ 338.132147][ T17] dump_stack+0x191/0x1f0 [ 338.136508][ T17] kmsan_report+0x13a/0x2b0 [ 338.141036][ T17] __msan_warning+0x73/0xe0 [ 338.145641][ T17] sd_init+0x5b6f/0x5e60 [ 338.149903][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.155813][ T17] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 338.161979][ T17] ? sd_config+0x37d/0x710 [ 338.166408][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.172358][ T17] ? sd_config+0x710/0x710 [ 338.176872][ T17] gspca_dev_probe2+0xe93/0x2230 [ 338.181843][ T17] gspca_dev_probe+0x346/0x3b0 [ 338.186631][ T17] sd_probe+0x8d/0xa0 [ 338.190619][ T17] ? i2c_write+0xe40/0xe40 [ 338.195142][ T17] usb_probe_interface+0xd19/0x1310 [ 338.200375][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.206286][ T17] ? usb_register_driver+0x7d0/0x7d0 [ 338.211583][ T17] really_probe+0x1373/0x1dc0 [ 338.216291][ T17] driver_probe_device+0x1ba/0x510 [ 338.221450][ T17] __device_attach_driver+0x5b8/0x790 [ 338.226860][ T17] bus_for_each_drv+0x28e/0x3b0 [ 338.231748][ T17] ? deferred_probe_work_func+0x400/0x400 [ 338.237699][ T17] __device_attach+0x489/0x750 [ 338.242495][ T17] device_initial_probe+0x4a/0x60 [ 338.247542][ T17] bus_probe_device+0x131/0x390 [ 338.252429][ T17] device_add+0x25b5/0x2df0 [ 338.256979][ T17] usb_set_configuration+0x309f/0x3710 [ 338.262490][ T17] generic_probe+0xe7/0x280 [ 338.267006][ T17] ? usb_choose_configuration+0xae0/0xae0 [ 338.272735][ T17] usb_probe_device+0x146/0x200 [ 338.277594][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.283510][ T17] ? usb_register_device_driver+0x470/0x470 [ 338.289418][ T17] really_probe+0x1373/0x1dc0 [ 338.294129][ T17] driver_probe_device+0x1ba/0x510 [ 338.299274][ T17] __device_attach_driver+0x5b8/0x790 [ 338.304670][ T17] bus_for_each_drv+0x28e/0x3b0 [ 338.309530][ T17] ? deferred_probe_work_func+0x400/0x400 [ 338.315271][ T17] __device_attach+0x489/0x750 [ 338.320203][ T17] device_initial_probe+0x4a/0x60 [ 338.325244][ T17] bus_probe_device+0x131/0x390 [ 338.330113][ T17] device_add+0x25b5/0x2df0 [ 338.334647][ T17] usb_new_device+0x23e5/0x2fb0 [ 338.339530][ T17] hub_event+0x581d/0x72f0 [ 338.344012][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.349921][ T17] ? led_work+0x720/0x720 [ 338.354258][ T17] ? led_work+0x720/0x720 [ 338.358601][ T17] process_one_work+0x1572/0x1ef0 [ 338.363677][ T17] worker_thread+0x111b/0x2460 [ 338.368482][ T17] kthread+0x4b5/0x4f0 [ 338.372563][ T17] ? process_one_work+0x1ef0/0x1ef0 [ 338.377788][ T17] ? kthread_blkcg+0xf0/0xf0 [ 338.382405][ T17] ret_from_fork+0x35/0x40 [ 338.386856][ T17] [ 338.389192][ T17] Uninit was created at: [ 338.393443][ T17] kmsan_internal_poison_shadow+0x53/0x100 [ 338.399252][ T17] kmsan_slab_alloc+0xaa/0x120 [ 338.404020][ T17] kmem_cache_alloc_trace+0x8c5/0xd20 [ 338.404034][ T17] gspca_dev_probe2+0x30d/0x2230 [ 338.404045][ T17] gspca_dev_probe+0x346/0x3b0 [ 338.404056][ T17] sd_probe+0x8d/0xa0 [ 338.404072][ T17] usb_probe_interface+0xd19/0x1310 [ 338.404086][ T17] really_probe+0x1373/0x1dc0 [ 338.404120][ T17] driver_probe_device+0x1ba/0x510 [ 338.414449][ T17] __device_attach_driver+0x5b8/0x790 [ 338.443561][ T17] bus_for_each_drv+0x28e/0x3b0 [ 338.448419][ T17] __device_attach+0x489/0x750 [ 338.453187][ T17] device_initial_probe+0x4a/0x60 [ 338.458213][ T17] bus_probe_device+0x131/0x390 [ 338.463061][ T17] device_add+0x25b5/0x2df0 [ 338.467569][ T17] usb_set_configuration+0x309f/0x3710 [ 338.473028][ T17] generic_probe+0xe7/0x280 [ 338.477535][ T17] usb_probe_device+0x146/0x200 [ 338.482385][ T17] really_probe+0x1373/0x1dc0 [ 338.487062][ T17] driver_probe_device+0x1ba/0x510 [ 338.492176][ T17] __device_attach_driver+0x5b8/0x790 [ 338.497544][ T17] bus_for_each_drv+0x28e/0x3b0 [ 338.502393][ T17] __device_attach+0x489/0x750 [ 338.507158][ T17] device_initial_probe+0x4a/0x60 [ 338.512196][ T17] bus_probe_device+0x131/0x390 [ 338.517055][ T17] device_add+0x25b5/0x2df0 [ 338.521556][ T17] usb_new_device+0x23e5/0x2fb0 [ 338.526412][ T17] hub_event+0x581d/0x72f0 [ 338.530984][ T17] process_one_work+0x1572/0x1ef0 [ 338.536027][ T17] worker_thread+0x111b/0x2460 [ 338.541177][ T17] kthread+0x4b5/0x4f0 [ 338.545254][ T17] ret_from_fork+0x35/0x40 [ 338.549660][ T17] ===================================================== [ 338.556584][ T17] Disabling lock debugging due to kernel taint [ 338.563455][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 338.570046][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.3.0-rc7+ #0 [ 338.578805][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 338.588888][ T17] Workqueue: usb_hub_wq hub_event [ 338.593930][ T17] Call Trace: [ 338.597244][ T17] dump_stack+0x191/0x1f0 [ 338.601595][ T17] panic+0x3c9/0xc1e [ 338.605525][ T17] kmsan_report+0x2a2/0x2b0 [ 338.610051][ T17] __msan_warning+0x73/0xe0 [ 338.614565][ T17] sd_init+0x5b6f/0x5e60 [ 338.619013][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.624912][ T17] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 338.631066][ T17] ? sd_config+0x37d/0x710 [ 338.635490][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.641473][ T17] ? sd_config+0x710/0x710 [ 338.645908][ T17] gspca_dev_probe2+0xe93/0x2230 [ 338.650871][ T17] gspca_dev_probe+0x346/0x3b0 [ 338.655653][ T17] sd_probe+0x8d/0xa0 [ 338.659636][ T17] ? i2c_write+0xe40/0xe40 [ 338.664061][ T17] usb_probe_interface+0xd19/0x1310 [ 338.669275][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.675175][ T17] ? usb_register_driver+0x7d0/0x7d0 [ 338.680475][ T17] really_probe+0x1373/0x1dc0 [ 338.685173][ T17] driver_probe_device+0x1ba/0x510 [ 338.690301][ T17] __device_attach_driver+0x5b8/0x790 [ 338.695689][ T17] bus_for_each_drv+0x28e/0x3b0 [ 338.700543][ T17] ? deferred_probe_work_func+0x400/0x400 [ 338.706277][ T17] __device_attach+0x489/0x750 [ 338.711062][ T17] device_initial_probe+0x4a/0x60 [ 338.716096][ T17] bus_probe_device+0x131/0x390 [ 338.720958][ T17] device_add+0x25b5/0x2df0 [ 338.725503][ T17] usb_set_configuration+0x309f/0x3710 [ 338.731015][ T17] generic_probe+0xe7/0x280 [ 338.735524][ T17] ? usb_choose_configuration+0xae0/0xae0 [ 338.741249][ T17] usb_probe_device+0x146/0x200 [ 338.746107][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.752011][ T17] ? usb_register_device_driver+0x470/0x470 [ 338.757911][ T17] really_probe+0x1373/0x1dc0 [ 338.762606][ T17] driver_probe_device+0x1ba/0x510 [ 338.767730][ T17] __device_attach_driver+0x5b8/0x790 [ 338.773117][ T17] bus_for_each_drv+0x28e/0x3b0 [ 338.777974][ T17] ? deferred_probe_work_func+0x400/0x400 [ 338.783713][ T17] __device_attach+0x489/0x750 [ 338.788495][ T17] device_initial_probe+0x4a/0x60 [ 338.793527][ T17] bus_probe_device+0x131/0x390 [ 338.798388][ T17] device_add+0x25b5/0x2df0 [ 338.802926][ T17] usb_new_device+0x23e5/0x2fb0 [ 338.807802][ T17] hub_event+0x581d/0x72f0 [ 338.812279][ T17] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 338.818175][ T17] ? led_work+0x720/0x720 [ 338.822504][ T17] ? led_work+0x720/0x720 [ 338.826841][ T17] process_one_work+0x1572/0x1ef0 [ 338.831891][ T17] worker_thread+0x111b/0x2460 [ 338.836684][ T17] kthread+0x4b5/0x4f0 [ 338.840753][ T17] ? process_one_work+0x1ef0/0x1ef0 [ 338.845963][ T17] ? kthread_blkcg+0xf0/0xf0 [ 338.850571][ T17] ret_from_fork+0x35/0x40 [ 338.856656][ T17] Kernel Offset: disabled [ 338.861083][ T17] Rebooting in 86400 seconds..