Starting Permit User Sessions... [ OK ] Started Regular background program processing daemon. Starting getty on tty2-tty6 if dbus and logind are not available... [ OK ] Started Permit User Sessions. [ OK ] Found device /dev/ttyS0. [ OK ] Started System Logging Service. [ *** ] (2 of 2) A start job is running for…ot available (1min 30s / no limit) [ *** ] (2 of 2) A start job is running for…ot available (1min 32s / no limit) [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. [ OK ] Started OpenBSD Secure Shell server. Warning: Permanently added '10.128.0.14' (ECDSA) to the list of known hosts. [ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 2020/09/01 20:17:36 fuzzer started 2020/09/01 20:17:37 dialing manager at 10.128.0.26:36579 2020/09/01 20:17:37 syscalls: 3315 2020/09/01 20:17:37 code coverage: enabled 2020/09/01 20:17:37 comparison tracing: enabled 2020/09/01 20:17:37 extra coverage: enabled 2020/09/01 20:17:37 setuid sandbox: enabled 2020/09/01 20:17:37 namespace sandbox: enabled 2020/09/01 20:17:37 Android sandbox: enabled 2020/09/01 20:17:37 fault injection: enabled 2020/09/01 20:17:37 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/01 20:17:37 net packet injection: enabled 2020/09/01 20:17:37 net device setup: enabled 2020/09/01 20:17:37 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/01 20:17:37 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/01 20:17:37 USB emulation: enabled 2020/09/01 20:17:37 hci packet injection: enabled 20:21:48 executing program 0: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) syzkaller login: [ 427.612860][ T28] audit: type=1400 audit(1598991708.237:8): avc: denied { execmem } for pid=8500 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 429.025667][ T8501] IPVS: ftp: loaded support on port[0] = 21 [ 429.551729][ T8501] chnl_net:caif_netlink_parms(): no params data found [ 429.800420][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.807953][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.817945][ T8501] device bridge_slave_0 entered promiscuous mode [ 429.867901][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.875503][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.885474][ T8501] device bridge_slave_1 entered promiscuous mode [ 429.947808][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.967788][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.028057][ T8501] team0: Port device team_slave_0 added [ 430.044834][ T8501] team0: Port device team_slave_1 added [ 430.098227][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.106870][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.133145][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.175795][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.182887][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.209080][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.291912][ T8501] device hsr_slave_0 entered promiscuous mode [ 430.305327][ T8501] device hsr_slave_1 entered promiscuous mode [ 430.650274][ T8501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.689028][ T8501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.732893][ T8501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.752943][ T8501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.024362][ T3397] Bluetooth: hci0: command 0x0409 tx timeout [ 431.104855][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.150480][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.160794][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.196023][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.226912][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.237373][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.247279][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.255359][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.296746][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.307571][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.318397][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.328513][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.336088][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.368613][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.390313][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.427880][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.439000][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.474876][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.485728][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.496692][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.538715][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.548078][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.576339][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.586638][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 431.615977][ T8501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.689165][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.697180][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.741574][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.818251][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 431.829865][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 431.904745][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 431.915029][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 431.950096][ T8501] device veth0_vlan entered promiscuous mode [ 431.960000][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 431.970405][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.024424][ T8501] device veth1_vlan entered promiscuous mode [ 432.116114][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 432.126762][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 432.136852][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.147404][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.185659][ T8501] device veth0_macvtap entered promiscuous mode [ 432.211400][ T8501] device veth1_macvtap entered promiscuous mode [ 432.289929][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.299461][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 432.309789][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.321390][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.332447][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.376696][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.386653][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.397614][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:21:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f0000000200), 0xc) [ 433.108158][ T26] Bluetooth: hci0: command 0x041b tx timeout 20:21:53 executing program 0: r0 = socket$inet_sctp(0x2, 0x8000000000000001, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000000040), 0x4) [ 433.418190][ T8736] sctp: [Deprecated]: syz-executor.0 (pid 8736) Use of int in maxseg socket option. [ 433.418190][ T8736] Use struct sctp_assoc_value instead 20:21:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0x101, &(0x7f00000001c0), &(0x7f0000000280)=0x98) 20:21:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001580)={&(0x7f0000000040)=@in={0x10}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=[@authinfo={0x10}], 0x10}, 0x0) 20:21:54 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x101, &(0x7f00000001c0), &(0x7f0000000280)=0xa0) 20:21:55 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x33e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/302], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000140)={0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="000005"], 0x0}, 0x0) [ 434.894779][ T26] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 435.183614][ T8723] Bluetooth: hci0: command 0x040f tx timeout [ 435.255262][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.266779][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.279718][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.40 [ 435.290307][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.305146][ T26] usb 1-1: config 0 descriptor?? [ 435.634133][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 435.640640][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 435.658222][ T26] usb 1-1: USB disconnect, device number 2 [ 436.163732][ T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 436.525208][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.536529][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.546772][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.40 [ 436.557896][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.630185][ T26] usb 1-1: config 0 descriptor?? [ 437.135437][ T26] wacom 0003:056A:033E.0001: unknown main item tag 0x0 [ 437.143118][ T26] wacom 0003:056A:033E.0001: unknown main item tag 0x0 [ 437.151055][ T26] wacom 0003:056A:033E.0001: unknown main item tag 0x0 [ 437.158481][ T26] wacom 0003:056A:033E.0001: unknown main item tag 0x0 [ 437.166567][ T26] wacom 0003:056A:033E.0001: unknown main item tag 0x0 [ 437.174958][ T26] wacom 0003:056A:033E.0001: Unknown device_type for 'HID 056a:033e'. Assuming pen. [ 437.267367][ T26] input: Wacom Intuos PT M 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:033E.0001/input/input5 [ 437.285356][ T8723] Bluetooth: hci0: command 0x0419 tx timeout [ 437.340131][ T26] wacom 0003:056A:033E.0001: hidraw0: USB HID v0.00 Device [HID 056a:033e] on usb-dummy_hcd.0-1/input0 [ 437.399791][ T26] usb 1-1: USB disconnect, device number 3 20:21:58 executing program 1: ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000000)={0x1, 'syz1\x00'}) init_module(&(0x7f0000000040)='*#,#-\x00', 0x6, &(0x7f0000000080)='#^:\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) read$fb(r0, &(0x7f0000000100)=""/58, 0x3a) write$P9_RLOPEN(r1, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x40, 0x1, 0x5}, 0x3f}}, 0x18) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000180)) r2 = getegid() mount$9p_xen(&(0x7f00000001c0)='syz\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x4000, &(0x7f0000000280)={'trans=xen,', {[{@loose='loose'}, {@dfltgid={'dfltgid', 0x3d, r2}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'syz1\x00'}}, {@pcr={'pcr', 0x3d, 0x1c}}, {@uid_gt={'uid>'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*#,#-\x00'}}, {@pcr={'pcr', 0x3d, 0x24}}]}}) r3 = openat$procfs(0xffffff9c, &(0x7f0000000340)='/proc/partitions\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000380)={0xff, 0x10001, 0x1ff, {0x6, 0x7}, 0x7ff, 0x6}) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)="af4fc689bd5baa848bc888a905169dde06546cedefe1344bdbaec884873012752a818be49b3b62c6d1ff49acb182ec6c1ff6fb0217f405ada32d5e3a7cf95eed82510c66e28dee9af2d8a337b7c6cef76f54bb3f4eddc94a77a68e63e537371ac30229") ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000480)={0x8, 0x0, [], {0x0, @reserved}}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540)='NLBL_CALIPSO\x00') semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000580)=""/215) read(r1, &(0x7f0000000680)=""/123, 0x7b) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000000700)={{}, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000740)='#^:\x00', r0}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc01cf509, &(0x7f00000007c0)={r3, 0xfffffffffffeffff, 0x2, 0x82}) fanotify_mark(r4, 0x1e, 0x800001a, 0xffffffffffffffff, &(0x7f0000000800)='./file0\x00') [ 438.105434][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 438.465250][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.476340][ T26] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.486506][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=033e, bcdDevice= 0.40 [ 438.495873][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.527115][ T26] usb 1-1: config 0 descriptor?? 20:21:59 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="7fb7c19e3bda397d59535cf9ab9cd2eea75da2a7e8d8be1e2dcd0000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000a40)={0x280, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x800}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x92c}, {0x5}, {0x6, 0x11, 0x6}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x3}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x4}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xfff8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0xc50}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x200}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8000}, {0x6, 0x16, 0x800}, {0x5}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x8001}, {0x5}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x7}}]}, 0x280}, 0x1, 0x0, 0x0, 0x24000090}, 0x4008001) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000009c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close(r4) bind$unix(r4, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(r4, &(0x7f0000000540)=[{&(0x7f00000000c0)="760b1cc66dd01378c782341b814a98d628306ad8898ea875abdc5a8ed20442ee9bfd78a9285e6fb9a47c4876e5ff88c7af4cd39eac28bf48b5ad3f536ecda1ea34a8a4e18eedb83d57722b412d22", 0x4e}, {&(0x7f0000000180)="b2e9d65e34b88d00d16ffbe5272e620e0e4292e6ff7a91ccedc7c2bb4a130af67bcc742ebaecc0e4f5c41cc781ed83f2fd9c3829a373ce8c84127ca3b36a48f0f7376f2df8bdedb4b54f73445e48dde413dae52332d8", 0x56}, {&(0x7f0000000040)="e1d48bf90dc613359044aea4f25b183724b44314e93910e110caa1e4feae409b66f2572124e0e15acc60", 0x2a}, {&(0x7f0000000200)="a94cfc9caaa92af2f6268b1ab96047494f092399e983286c9fb521d32723f0b4ecc1b3591788eecf65ee24acb4265550c7fedd7e80ffa52af22e9495a503ebb7f81d539f8a3518190a4b9e38c58594305e63e5ad3356a6efda321f62f0876d57b5e76a4d050999a80bf7adfceed66929b65fb97807668d362d1a3cceec455341905b3efdffe598a676acd3d609213590cd47d24533791f5b43894c7949cb7c14eb85678ca7442536ce1fdf4b46c1f88223e7662b2ebf2a03bc4ce64920bbc7365b905bf2fd4003151e6090a434e780516d", 0xd1}, {&(0x7f0000000300)="e9cb79e416541a7c3d0179cd04df621ded88030a2f24cf22cea65a7df8942d34e4dd31dd2366eda60824ad7b83ba6900f650845b9f61431737e54d40a0d7682e9f9eb3fd780003b8289566bb463f9ec56ab433ef5f47a70b2550eb6b8e791ab02c806c270bd4344403bfa1d38206e3ce405cfa8bdfd7f76b545f8759e664c1be3addd4fcd6b6087a2b3166b4505658292a01eb03441544d6457b58ed243825e131a81d155113fdc93bd20be86b61e40bc59e", 0xb2}, {&(0x7f00000003c0)="3936033bbd59cb08138f5a7e4a7d6ecfa717ab6098caaa3caaa2601838bc0ef74001f6a1a83b36b867cede72a7ccede51bf27ef86f804138d027b999fb60153865f0c8d70d73058ecebc9c1f1f4d086cd04a6603689f0d513e52799710f9dcf22496ad623c7b0b99f2a625d9389c0e00aaf0435088931b61ee594afc66cab5cf210326d0ab987b0807cce6a4aabacc4c9699b2442fa23bf55626dc73fee691e18bdbe8db5b6df0f07020725064", 0xad}, {&(0x7f0000000480)="95d7ec", 0x3}, {&(0x7f00000004c0)="4683c59dcef34169a537ede4ffe6e7be4f141d6cd5266180db6c39a457f6df3131a6e3006c6864d0cb2261d0c1da727bb6bd73f041ac536d8bb866e86bf9353045afd8", 0x43}], 0x8, 0xe) execve(&(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f00000005c0)='=cB\xc6+\xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f\f_V\xff\x93\xbaV\xf5Z\x8a\xd8\x9d\xc3\xa9\x99\n&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95z\xf5\xe5\xb0\'{M\x7f\xc8AB\xc7f}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16le\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xce3\xd7\x05\xf0Xk\xb7FhfA\xc7\xb7q%\xfcu#\xfbLoZvo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xbe\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe\x9a\x80\xa0\x15\xee+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\xfb\xde\xaa\xf1\xbb\xdd\x9a\"\x9d\xb5\xbe\xab\xb9\b\xd2l\xf4\x82b?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x17\xf1\x12\xea1K\xc9\xe1\xef\xc6\xcd\xfdv\x03a\x16\xfdk\x96\x98\xae#0\x00\x00\x00\x00\x00\x00\x00\r\xd1YOwy\x19\xb2T\x99\xf0#y\xf91\x9el\xe3WqV\xda\x9a\xa4\x0e\xc9\x9cy\xbbP\xec\aN\x8d\x81\xd0U6\xcc\x7f\xb6\x88,a\x90\x1cX*\x98U\t\xc8\xaf\xdd\xa2D\x9a\x9b\x82\xb0\x9a}\xa495t\xac\xc9)[\xd5]\x16\xd2\xd6&B]\xbc\xf6\x19\xc7\r\xf2\x1aq\x11}\xcf;{\xc0w\xe6\xf6\xc9&\xe2\xd7\x8b\xd4%\xcb\xfc\x88\xaf%\x00'/760]) [ 438.864521][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 438.872009][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 438.935832][ T26] usb 1-1: USB disconnect, device number 4 20:21:59 executing program 0: syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007d37570862b7993eaff638042ac9a18e93483073d30102030109022202010000020000000000009f"], 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$mice(0xffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x400100) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x40, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000280)=""/43) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r5}, 0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x9, 0x7, 0x2, 0x66, 0x65fc, 0x5f, 0x5, {r5, @in6={{0xa, 0x4e22, 0x80, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}}, 0x0, 0x200d12, 0x8, 0x3, 0x3a01}}, &(0x7f00000001c0)=0xb0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x734, 0x11}) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000002c0), 0x4) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) [ 439.469872][ T8798] IPVS: ftp: loaded support on port[0] = 21 [ 439.985476][ T26] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 440.135486][ T8798] chnl_net:caif_netlink_parms(): no params data found [ 440.276371][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 440.292782][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.300653][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.310529][ T8798] device bridge_slave_0 entered promiscuous mode [ 440.328261][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.336546][ T26] usb 1-1: too many configurations: 201, using maximum allowed: 8 [ 440.344676][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.354530][ T8798] device bridge_slave_1 entered promiscuous mode [ 440.412537][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.431448][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.456129][ T26] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 440.464097][ T26] usb 1-1: can't read configurations, error -61 [ 440.492872][ T8798] team0: Port device team_slave_0 added [ 440.509780][ T8798] team0: Port device team_slave_1 added [ 440.562288][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.569641][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.597268][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.619416][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.626644][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.656027][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.665188][ T26] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 440.729288][ T8798] device hsr_slave_0 entered promiscuous mode [ 440.740539][ T8798] device hsr_slave_1 entered promiscuous mode [ 440.750124][ T8798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.758041][ T8798] Cannot create hsr debugfs directory [ 440.916732][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 440.956200][ T26] usb 1-1: too many configurations: 201, using maximum allowed: 8 [ 441.086473][ T26] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 441.096655][ T26] usb 1-1: can't read configurations, error -61 [ 441.103884][ T26] usb usb1-port1: attempt power cycle [ 441.127069][ T8798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 441.179444][ T8798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.214941][ T8798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.237114][ T8798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.350943][ T8723] Bluetooth: hci1: command 0x0409 tx timeout [ 441.619012][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.666890][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 441.676857][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.710005][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.744121][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.757350][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.771208][ T8677] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.778718][ T8677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.825695][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.838213][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.848758][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.858567][ T8677] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.864745][ T26] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 441.875969][ T8677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.892579][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.904114][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.984778][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 442.010933][ T8798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 442.021566][ T8798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.024509][ T26] usb 1-1: too many configurations: 201, using maximum allowed: 8 [ 442.070667][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 442.081905][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.093204][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 442.104316][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.115079][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 442.125369][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.136109][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 442.146109][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.158365][ T26] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 442.166408][ T26] usb 1-1: can't read configurations, error -61 [ 442.253474][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.284986][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.295379][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.304895][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.312739][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.335518][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 442.376975][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 442.387717][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.435875][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 442.476162][ T26] usb 1-1: too many configurations: 201, using maximum allowed: 8 [ 442.479669][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 442.494449][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.528993][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.538973][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.555740][ T8798] device veth0_vlan entered promiscuous mode [ 442.601338][ T8798] device veth1_vlan entered promiscuous mode [ 442.693942][ T26] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 442.699693][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.701743][ T26] usb 1-1: can't read configurations, error -71 [ 442.711327][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 442.726164][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 20:22:03 executing program 0: listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000640)=""/4096, 0x1000) syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) [ 442.737444][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.752666][ T26] usb usb1-port1: unable to enumerate USB device [ 442.790074][ T8798] device veth0_macvtap entered promiscuous mode [ 442.826486][ T8798] device veth1_macvtap entered promiscuous mode [ 442.973869][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.987301][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.004288][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.015798][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 443.031164][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 443.041034][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 443.051397][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 443.164340][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 443.177210][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.193260][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.210536][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 443.221271][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 443.303749][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 443.454778][ T8723] Bluetooth: hci1: command 0x041b tx timeout [ 443.612716][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 443.755054][ T26] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 443.771376][ T26] usb 1-1: config 0 has no interface number 0 [ 443.782068][ T26] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 443.792284][ T26] usb 1-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 443.801613][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.936871][ T26] usb 1-1: config 0 descriptor?? [ 444.237205][ T26] gtco 1-1:0.219: Failed to get HID Report Descriptor of size: 129 [ 444.246444][ T26] gtco: probe of 1-1:0.219 failed with error -5 [ 444.310476][ T26] usb 1-1: USB disconnect, device number 9 20:22:05 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xbaa) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x203, 0x0) r3 = socket(0x2, 0x803, 0xff) r4 = socket$inet(0x2b, 0x1, 0x0) getsockname(r4, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r6 = dup(r3) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101400, 0x0) r9 = creat(&(0x7f0000000180)='./bus\x00', 0xe0) ioctl$USBDEVFS_REAPURB(r9, 0x4004550c, &(0x7f00000001c0)) sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) pkey_mprotect(&(0x7f00002f4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) 20:22:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket(0x2, 0x803, 0xff) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r7 = dup(r6) r8 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x8000fffffffe) mkdirat(r7, &(0x7f0000000080)='./file0\x00', 0x89) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011002504000000000000000010000000", @ANYRES32=r11, @ANYBLOB="6402748a5e63d10b455dc3822f9801e5fbe2dd41879b339daf1a288bc17d34ec9b88020012661b02dad67af72f9fb31ceffc9eb3ffd530d622fe474e4d1920c3e4c76b7b90a3aa3edef2d9ca70cb59dfa21c3de7cb7ab290ab2742d56c539a4ad8da8dd4abd67243208545adce71bf6f047ac112b3ed6dff275d"], 0x20}}, 0x0) [ 445.145311][ T9061] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 445.410964][ T28] audit: type=1804 audit(1598991726.037:9): pid=9064 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir281071496/syzkaller.mCnsZH/1/bus" dev="sda1" ino=15738 res=1 [ 445.605831][ T28] audit: type=1804 audit(1598991726.097:10): pid=9068 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir281071496/syzkaller.mCnsZH/1/bus" dev="sda1" ino=15738 res=1 [ 446.142494][ T8723] Bluetooth: hci1: command 0x040f tx timeout 20:22:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xbaa) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x203, 0x0) r3 = socket(0x2, 0x803, 0xff) r4 = socket$inet(0x2b, 0x1, 0x0) getsockname(r4, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r6 = dup(r3) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101400, 0x0) r9 = creat(&(0x7f0000000180)='./bus\x00', 0xe0) ioctl$USBDEVFS_REAPURB(r9, 0x4004550c, &(0x7f00000001c0)) sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) pkey_mprotect(&(0x7f00002f4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 447.290390][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.676774][ T9066] device bridge_slave_0 left promiscuous mode [ 447.683122][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.009199][ T9067] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 448.224161][ T8726] Bluetooth: hci1: command 0x0419 tx timeout 20:22:08 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000020000102505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000110905810300000000000904010000020d100009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100006c8c6740f60d21004bd1000000010902120001000000000904d93b6301d1e9be"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000080)={0xc, &(0x7f0000000000)={0x0, 0x8, 0x1d, {0x1d, 0xc, "9367819c5ebc60669deb58083301c39577aac32d15e79c82de39e3"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x10, &(0x7f00000000c0)={0x0, 0x17, 0x67, "978ebec451bed4429d7e8c223f4a5598e2455a899c065afa6a969fbaafc20b70d25a4b38452b424f8a960234b72c6220744d9df2fb109c755311f89cef543d10a2cd0ccae437f9438c6e03f6ef8d25bede9cbb66915974ecd6a17bb6345f35d8b2b3adc06523df"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) 20:22:09 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000100)=0xbaa) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x203, 0x0) r3 = socket(0x2, 0x803, 0xff) r4 = socket$inet(0x2b, 0x1, 0x0) getsockname(r4, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r6 = dup(r3) r7 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x8000fffffffe) r8 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) openat$dlm_control(0xffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x101400, 0x0) r9 = creat(&(0x7f0000000180)='./bus\x00', 0xe0) ioctl$USBDEVFS_REAPURB(r9, 0x4004550c, &(0x7f00000001c0)) sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) pkey_mprotect(&(0x7f00002f4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) [ 448.843124][ T26] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 449.083689][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 449.803773][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.815922][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.829125][ T26] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.304081][ T26] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 450.313841][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.321939][ T26] usb 1-1: Product: syz [ 450.326655][ T26] usb 1-1: Manufacturer: syz [ 450.331385][ T26] usb 1-1: SerialNumber: syz 20:22:11 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x7000000, 0xffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@gid={'gid', 0x3d, r5}}]}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000400)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@gid={'gid', 0x3d, r7}}]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@gid={'gid', 0x3d, r9}}]}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x4}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x6, r5}, {0x8, 0x2, r7}, {0x8, 0x3, r9}, {0x8, 0x6, r10}, {0x8, 0x2, r11}], {0x10, 0x4}}, 0x64, 0x0) write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4e0000007d0200000038000900060000000000000000060013000000000000000171ff03000005a4b96ef9ffffffffffffff0000000001007b04002729327d010028", @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=0xee00], 0x4e) 20:22:11 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x7000000, 0xffffffff}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@gid={'gid', 0x3d, r5}}]}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_SREGS(0xffffffffffffffff, 0x8138ae83, &(0x7f0000000400)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@gid={'gid', 0x3d, r7}}]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@gid={'gid', 0x3d, r9}}]}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x4}, {0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x6, r5}, {0x8, 0x2, r7}, {0x8, 0x3, r9}, {0x8, 0x6, r10}, {0x8, 0x2, r11}], {0x10, 0x4}}, 0x64, 0x0) write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="4e0000007d0200000038000900060000000000000000060013000000000000000171ff03000005a4b96ef9ffffffffffffff0000000001007b04002729327d010028", @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=0xee00], 0x4e) [ 451.086023][ T9088] udc-core: couldn't find an available UDC or it's busy [ 451.093129][ T9088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 20:22:11 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x7fffffff) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x6, 0x21, 0x0, 0x0) [ 451.364010][ T26] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 451.414074][ T26] cdc_ncm 1-1:1.0: bind() failure 20:22:12 executing program 1: syz_emit_ethernet(0x2b, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x11, 0x0, 0x0, @loopback, "fc"}}}}}, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x181) ioctl$TIOCNOTTY(r0, 0x5422) [ 451.485943][ T26] usb 1-1: USB disconnect, device number 10 20:22:12 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r1 = syz_usb_connect$uac1(0x2, 0x10c, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xef, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0xd1, 0x20, 0x3f, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x104, 0x1, 0x3, 0x5}, @selector_unit={0x6, 0x24, 0x5, 0x6, 0x3, "bf"}, @feature_unit={0x13, 0x24, 0x6, 0x5, 0x1, 0x6, [0x4, 0x7, 0x3, 0x3, 0xa, 0x2]}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x300, 0x4, 0x1, 0x8}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x6, 0x3, [0x5, 0x9, 0x2]}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x7, '5<'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x81, 0x2, 0x6, 0x0, "508871ba9f7afe009c"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0xfc, 0x81, "3fd7"}, @as_header={0x7, 0x24, 0x1, 0x20, 0x2, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x80, 0x2, 0xff, 0x71, "d609108413e3a5b8d2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x5db, 0x3, 0x7, 0x9, {0x7, 0x25, 0x1, 0x80, 0x4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x40, 0x1f, "99bf8a5e70ef086196"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x6d, 0x3, "820e4f"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x0, 0x7, "2ded", '\\D'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xe, 0x0, 0x8, {0x7, 0x25, 0x1, 0x2, 0x5, 0x733}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0x2, 0x7f, 0x10, 0x3f}, 0x70, &(0x7f0000000240)={0x5, 0xf, 0x70, 0x1, [@generic={0x6b, 0x10, 0x4, "f175519ee7a281af319be81ca3d43a3d317294140c3418b1646002f50507cc7bb76439fb447fd775fabb71b4cfa08c193b088474b9623736323647959c277b53f65cca4d92d91700d7b29a08dfb2cb043854c89e36d49c5641dea5376f332be5a9822df950684321"}]}, 0x6, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x46b}}, {0xe8, &(0x7f0000000340)=@string={0xe8, 0x3, "b95e28a36b2724444dfaceb47593d1ea8bf8b661c32a10c901f313e6d4e9f5b5f44cbb58cb0f5ffd3ba80859b1c57b1d3c9240ef016f9f622886e991db5d93bdb5af3c978ef4b7f54c23dd49adda45d1480abcf060386955503e5fc67d372c24ca8a7b7e13f7116990b8002db9043dd6f8cd99f766efa7bcf6aa3b6bfe6096b89b2b8854b92d50117f9cf030e2c4be7df2fa57c4d138a2568897a1d5d6e33e8b8fe92c2cf73af0f64177d6b4447f07d29a217b460e373a92887b7fc94f383a1ae7576418888413587defaa805b897df40b10def38aba75b3715f051bf06684e1ba03cd6e7a70"}}, {0x39, &(0x7f0000000440)=@string={0x39, 0x3, "16d19e7c99c0f49dee0e53f3131abd25ceba48e913b5704fa477d94859c299998e28842c894308be1f83c30350dc467fd48e05e6352c5d"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x415}}]}) syz_usb_disconnect(r1) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0) syz_usb_control_io(r2, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000002680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x68c303, 0x83) bind$tipc(r3, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10) ioctl$TCSETSW(r3, 0x5403, &(0x7f00000005c0)={0x0, 0x9bc3, 0x10001, 0x3f, 0x13, "b33da08a3d0f7ef371c06d16a3156392921cbc"}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) [ 452.124895][ T8677] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 452.393846][ T8677] usb 1-1: Using ep0 maxpacket: 16 [ 452.434592][ T8725] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 452.529541][ T8677] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.539983][ T8677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.553166][ T8677] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.703712][ T8725] usb 2-1: Using ep0 maxpacket: 16 [ 452.714941][ T8677] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.725404][ T8677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.735700][ T8677] usb 1-1: Product: syz [ 452.741016][ T8677] usb 1-1: Manufacturer: syz [ 452.748605][ T8677] usb 1-1: SerialNumber: syz 20:22:13 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x926, 0x3333, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x24, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "ec370275"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x0, 0xb, &(0x7f0000000180)="37ae97e469ddc14da8654e") r1 = pkey_alloc(0x0, 0x2) pkey_free(r1) [ 452.845273][ T8677] usb 1-1: can't set config #1, error -71 [ 452.861108][ T8677] usb 1-1: USB disconnect, device number 11 [ 452.885763][ T8725] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 452.899234][ T8725] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 452.908834][ T8725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.974643][ T8725] usb 2-1: config 0 descriptor?? [ 453.033295][ T8725] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 453.250855][ T9130] udc-core: couldn't find an available UDC or it's busy [ 453.258119][ T9130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 453.503949][ T8677] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 453.538125][ T9130] udc-core: couldn't find an available UDC or it's busy [ 453.546216][ T9130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 20:22:14 executing program 2: r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$sequencer(r0, &(0x7f0000000040)=""/163, 0xa3) r1 = openat$proc_capi20(0xffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000180)=@getlink={0x470, 0x12, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1803, 0x1004}, [@IFLA_PHYS_SWITCH_ID={0x1e, 0x24, "c239aee6bf4d6144aa221a0937248777732b7a098a8b30bfe28a"}, @IFLA_CARRIER={0x5, 0x21, 0xc1}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_MTU={0x8, 0x4, 0x8}, @IFLA_VFINFO_LIST={0x3e8, 0x16, 0x0, 0x1, [{0xac, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x3}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x84, 0x9, 0x1f}}, @IFLA_VF_MAC={0x28, 0x1, {0x9}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7c6b, 0xfb5, 0xeb16, 0x8100}}, {0x14, 0x1, {0x4, 0x1a4, 0x9, 0x8100}}, {0x14, 0x1, {0x7, 0x7e2, 0x5, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7f, 0x50c0}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x9}}]}, {0xe4, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xfffffffb}}, @IFLA_VF_MAC={0x28, 0x1, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7f, 0x6}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0xc0c, 0x7, 0x88a8}}, {0x14, 0x1, {0x4, 0x16d, 0x2, 0x8100}}, {0x14, 0x1, {0x10001, 0xc59, 0x8001, 0x88a8}}, {0x14, 0x1, {0xffff0000, 0xd62, 0x2, 0x8100}}]}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xcbc, 0x8dfa, 0x88a8}}, {0x14, 0x1, {0x0, 0xd5b, 0xb6b, 0x8100}}, {0x14, 0x1, {0x0, 0x510, 0x9, 0x88a8}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfff, 0x17b0}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4f2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfff, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x1f, 0x0, 0x8000}}, @IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1000, 0x5}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x3ff}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x3f}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x4, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x18e2, @dev={[], 0x1a}}}, @IFLA_VF_RATE={0x10, 0x6, {0x1, 0x9, 0x7}}]}, {0x4}, {0x50, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0xffffff43, 0x2}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x5}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3b2, 0x401}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x7}}]}, {0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x9, 0x6eb, 0x838a, 0x88a8}}, {0x14, 0x1, {0x8a5a, 0x47e, 0x5, 0x8100}}, {0x14, 0x1, {0x7ff, 0x925, 0x7, 0x88a8}}, {0x14, 0x1, {0x5523, 0x44b, 0x1, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xffffffff, 0x1, 0x9, 0x8100}}, {0x14, 0x1, {0x8, 0x925, 0x0, 0x88a8}}, {0x14, 0x1, {0x81, 0xa46, 0x6, 0x88a8}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x5, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x9, 0x52, 0x40}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffff74, 0x2}}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @link_local}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x909, 0x3}}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9, 0x1, 'veth\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x470}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r2 = dup2(r1, r1) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xec, 0x14, 0x1, 0x70bd2a, 0x25dfdbff, {0x21}, [@INET_DIAG_REQ_BYTECODE={0xd6, 0x1, "167a044584ccc01d2c94656e9cda7cd26a64cd60533e04854762d951ff0686c1f2fdf43735eb3ccb54f774af52e776098e09e05f17844c6e8038926525e20971408c729ec897e76b2841c029d87caedbeabdd400a740f26fb4ca563e78a1e8c654f1f9987e286e72428fc2dfd022360296ce9946dbca8ec8ecd12ac432e26c6cce72a9cf3a4d386c95818817177a0e9c0444f52da5deac0314301e497b24b98f0752a5c0f8d80f775f00a798412d41073b99564bb3066bf734c398128815fddb1c161a576e7490aa62e54dbe2fccb5ea5029"}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x800) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000840)={@in6={{0xa, 0x4e22, 0xb81, @local, 0x200}}, 0x0, 0x0, 0x4a, 0x0, "3056252d4881a2ab7690e50cfda2c80f5661c2fdfaba86b5dd0dce63be51a8682492d35d90993239c4db51c84f40e221a0a1572a55a073df0673c5612152fa167b78470a5ca3e3b9986658bb943cbb39"}, 0xd8) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0105502, &(0x7f0000000980)={{{0x6, 0x1}}, 0x30, 0x400, &(0x7f0000000940)="edec8e0809b2fffed1e886363f7aa1c94c4b36eba74676909b695f73d63479a243e0625f0fb843f974277804ff6e5349"}) ioctl$USBDEVFS_IOCTL(r1, 0xc00c5512, &(0x7f00000009c0)=@usbdevfs_connect={0x80000000}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000a00), &(0x7f0000000a40)=0x14) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000a80)='/dev/dlm-monitor\x00', 0x100, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b00)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x30, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40884) sendmsg$kcm(r3, &(0x7f0000000e80)={&(0x7f0000000c00)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c80)="4b10f4b1ce5ce4f24501d11f81681bdc87f4c276a029d0f4c9ea35892922e9f5b145304776c2b6cf126a9e4060fdd966a66ee7b0ff1e3db730771fcd0c49db209c5d290ece013834d672659fc4bcfb41e303b85b9a76075ff1669556ffee38cd84c851cd297f01dbf6d1129ecb600d6b212389e835f1d55ee44d05a6ae45b966a4e30581c046710f52e96540005f699bceb7f40972880470dbd9d86bf4fb7e3ffc6a332049f4fcb47782575b7a8a6a3a5f36bdfda0be3d223b46ab75c5e410b4cf4fd08ed4f93ded96f5f793e59f0b185276484d40fbd57baf", 0xd9}], 0x1, &(0x7f0000000dc0)=[{0x8c, 0x111, 0x6, "ded40ddfa1e35c0364a20e00ad10bef0c634c8f7189895115c0c3bdae3d6fa48a90ff177ee50a00e64cf60a968003889d2987992721eec6bf46ef35949411aa264cb9b6f6cac93f6523f1ade8eb2ea213846b51f67410970543b28a469a237b5fb4b8593357176756e6df4faeec34008c514869fc1a681e55c9d990d5859cf"}], 0x8c}, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000ec0)) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x64, 0x15, 0xa, 0x3, 0x0, 0x0, {0x9, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000080}, 0x2000c808) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)=@mpls_getnetconf={0x2c, 0x52, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfb5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x80}, @NETCONFA_IFINDEX={0x8, 0x1, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x663de9c12607aef2}, 0x90) ioctl$IMGETDEVINFO(r3, 0x80044944, &(0x7f0000001180)) [ 453.914846][ T8677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.926059][ T8677] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 453.935427][ T8677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.980730][ T8677] usb 1-1: config 0 descriptor?? [ 454.457829][ T8677] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 454.490509][ T8677] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input9 [ 454.615139][ T8677] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 454.864840][ T26] usb 1-1: USB disconnect, device number 12 20:22:15 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a3000000000090001bda682985246bc6a00080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = openat$pfkey(0xffffff9c, 0xfffffffffffffffe, 0x20200, 0x0) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000080)={0x32}) [ 455.228053][ T26] usb 2-1: USB disconnect, device number 2 [ 455.512826][ T9153] IPVS: ftp: loaded support on port[0] = 21 [ 455.675937][ T8726] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 455.707389][ T9223] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.890016][ T9153] chnl_net:caif_netlink_parms(): no params data found [ 456.056063][ T9153] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.064252][ T9153] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.074183][ T9153] device bridge_slave_0 entered promiscuous mode [ 456.086069][ T8726] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.097487][ T8726] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 456.107028][ T8726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.224410][ T8726] usb 1-1: config 0 descriptor?? [ 456.287643][ T9153] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.295210][ T9153] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.307769][ T9153] device bridge_slave_1 entered promiscuous mode 20:22:17 executing program 0: personality(0x800000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001600)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}}, 0x0) [ 456.575573][ T8726] usbhid 1-1:0.0: can't add hid device: -71 [ 456.582060][ T8726] usbhid: probe of 1-1:0.0 failed with error -71 [ 456.684112][ T8726] usb 1-1: USB disconnect, device number 13 20:22:17 executing program 1: openat$vsock(0xffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200000, 0x0) [ 456.769382][ T9153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.855052][ T9153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.037888][ T9153] team0: Port device team_slave_0 added [ 457.115154][ T9153] team0: Port device team_slave_1 added [ 457.328866][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.337353][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.364757][ T9153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 20:22:18 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x3) r0 = socket$inet(0x2b, 0x1, 0x0) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) r1 = dup(r0) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000040)="d4db80e78f82a4211afe608164c81f3f5ce4777563aa7b23cd21e2238209481b462787e76a6625e30dedb30d303a17a166a5b365e74e67c75ec4dc242186a5feb013df5817e221a3e9bd585af3d7e5909b4af42e75e01f3e4c") fcntl$setsig(r0, 0xa, 0x2e) getxattr(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0) lremovexattr(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)=@known='com.apple.FinderInfo\x00') 20:22:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) openat$cgroup_ro(r1, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) getsockname(r2, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x0) [ 457.503964][ T8726] Bluetooth: hci2: command 0x0409 tx timeout [ 457.549114][ T9153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.556294][ T9153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.582465][ T9153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 20:22:18 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f0000003780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003840)=ANY=[], 0x408}}], 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) r1 = socket(0x2, 0x803, 0xff) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(0xffffffffffffffff, 0x800c4153, &(0x7f00000000c0)={0x0, &(0x7f0000000080)=[&(0x7f0000000140)="f7ab85605f520c34023877ebffeee19a346714d7ef52791f35c3d10655734c22331037e141ccae98f740ed2f11bd1624c3e2ae53111ec71cb80919034d29fb94eb11223c69a8ffe074d10bacd3610e81ebd7f498e5fb319fa2e460b667f1e0bc87ebdc2b8ae9f62c76a6c91d957ebb9c290e78c4aeecaa4a5a047716229055f6a96cb7de072fae900ab6673dc7504adf4e00947c25e0a60be6a63cd96cadaac32aff9e8580aedab02983349365c202215b1dc4c9e26b377d3f974e259a09f4881bc3c5d3fb8bfdec7cca2c182e60282feb68eff2b2140fc92cf7d9979cbd232b7a0257"]}) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = socket$inet(0x2, 0xa, 0x1) connect$l2tp(r2, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) r3 = dup(r1) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$SOUND_MIXER_READ_CAPS(r4, 0x80044dfc, &(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0x1, 0x4) r5 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x4c0500, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x36}}, 0xffffffffffffff86) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 457.889662][ T28] audit: type=1800 audit(1598991738.517:11): pid=9384 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15754 res=0 [ 457.948542][ T9153] device hsr_slave_0 entered promiscuous mode [ 457.996932][ T9153] device hsr_slave_1 entered promiscuous mode [ 458.015637][ T9153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.024863][ T9153] Cannot create hsr debugfs directory 20:22:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = openat$null(0xffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x20000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000280)=0x10) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048055) ftruncate(r4, 0x2007fff) ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000000)={0x0, 0x2}) r5 = socket$inet(0x2b, 0x1, 0x0) getsockname(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) connect$can_j1939(r6, &(0x7f0000000300)={0x1d, r2, 0x1, {0x2, 0xf0, 0x6}, 0x1}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000002300)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @local={0xfe, 0x80, [0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @remote, {[], @ndisc_ra}}}}}, 0x0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000002c0)) [ 458.355228][ T9419] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 458.442676][ T28] audit: type=1800 audit(1598991739.067:12): pid=9422 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=15753 res=0 20:22:19 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1ff0320b00d23683ad40000000109061200010000334a09045cfa3be701056af1ac4121d00f0a6213d01e8f52009b05002fdce5ee26457b0c5f1b2e1765cc635f917752558d0500000049115f00000000000000"], 0x0) [ 458.919418][ T9153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.969984][ T9153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.019828][ T9153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.088068][ T9153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.133677][ T9042] usb 1-1: new high-speed USB device number 14 using dummy_hcd 20:22:19 executing program 1: r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = openat$hwrng(0xffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x1602, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000000bf1ffffff000000000800010063627100a4080200040406"], 0x8d0}}, 0x0) r5 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 459.395477][ T9042] usb 1-1: Using ep0 maxpacket: 32 [ 459.555260][ T9042] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 459.563158][ T9042] usb 1-1: can't read configurations, error -61 [ 459.583838][ T8677] Bluetooth: hci2: command 0x041b tx timeout [ 459.645741][ T9153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.697761][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 459.707425][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.742829][ T9153] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.776429][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.788989][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.798697][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.806068][ T8726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.824365][ T9042] usb 1-1: new high-speed USB device number 15 using dummy_hcd 20:22:20 executing program 1: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f2, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x449}}]}) statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x6000, 0x10, &(0x7f0000000200)) syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r0 = socket$inet(0x2b, 0x1, 0x0) r1 = openat$autofs(0xffffff9c, &(0x7f00000003c0)='/dev/autofs\x00', 0x200, 0x0) write$P9_RREMOVE(r1, &(0x7f0000000400)={0x7, 0x7b, 0x1}, 0x7) r2 = socket$inet(0x2b, 0x2, 0xfffffffe) getsockname(r2, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) r4 = socket$inet(0x2b, 0x1, 0x0) getsockname(r4, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) getsockname(r2, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000380)=0x80) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xad}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x5c, 0x6, 0x8, 0x9, 0xb38c, 0x5, 0x5, 0x401, r5}, &(0x7f0000000340)=0x20) [ 459.921636][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 459.931312][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.942780][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.952615][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.960067][ T8726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.969437][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.980829][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 460.134903][ T9042] usb 1-1: Using ep0 maxpacket: 32 [ 460.180529][ T9153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.192209][ T9153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.285055][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 460.296317][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 460.307153][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 460.318725][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 460.329482][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 460.339565][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 460.350375][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 460.360634][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 460.375045][ T9042] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 460.385689][ T9042] usb 1-1: can't read configurations, error -61 [ 460.404444][ T9042] usb usb1-port1: attempt power cycle [ 460.425852][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 460.436221][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.495177][ T8677] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 460.586718][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.594773][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.643941][ T9153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.737361][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 460.749942][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 460.776405][ T8677] usb 2-1: Using ep0 maxpacket: 16 [ 460.868419][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 460.879519][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 460.898183][ T8677] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.911430][ T8677] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 460.917231][ T9153] device veth0_vlan entered promiscuous mode [ 460.922340][ T8677] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 460.960949][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 460.970998][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 461.041792][ T9153] device veth1_vlan entered promiscuous mode [ 461.125097][ T9042] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 461.152092][ T8677] usb 2-1: New USB device found, idVendor=04f2, idProduct=1125, bcdDevice= 0.40 [ 461.161723][ T8677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.170972][ T8677] usb 2-1: Product: щ [ 461.175367][ T8677] usb 2-1: Manufacturer: Ó¿ [ 461.180149][ T8677] usb 2-1: SerialNumber: syz [ 461.196095][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 461.206302][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 461.216911][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 461.227414][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 461.245196][ T9042] usb 1-1: Using ep0 maxpacket: 32 [ 461.272887][ T9153] device veth0_macvtap entered promiscuous mode [ 461.300054][ T9153] device veth1_macvtap entered promiscuous mode [ 461.312974][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 461.323581][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 461.408356][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.419294][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.431521][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 461.442140][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.457031][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.468441][ T9042] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 461.476291][ T9042] usb 1-1: can't read configurations, error -61 [ 461.485402][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 461.495757][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 461.578666][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.592264][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.602398][ T9153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 461.613091][ T9153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.629665][ T9153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.636020][ T8677] usbhid 2-1:1.0: can't add hid device: -22 [ 461.639624][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 461.644608][ T8677] usbhid: probe of 2-1:1.0 failed with error -22 [ 461.653637][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 461.735707][ T9042] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 461.780736][ T3228] Bluetooth: hci2: command 0x040f tx timeout [ 461.787996][ T8677] usb 2-1: USB disconnect, device number 3 20:22:22 executing program 0: syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x81, 0x1, 0xc5, 0x40, 0x8086, 0x180, 0x3526, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xeb, 0xf3, 0x23}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="ce"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PORT_SELF={0xe0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xdc, 0x2, '\x00\xa8\xd9,\xfa\xab\x15\x02E@=:A\x82\xd0>@\x1a\xbf\x9a4\xa7\x89\x14zv:\x97\x10\x9af$\xb6!\xe2/Y{\x0e\xe32`>+\x81\x04\x00\x96\t\x1d\xfc%\tV\xbf\xa6\x19tc\xac`9Y\xc4\v\f\x04@\xce\x8d\x13w\xa4\xcd\x05\xdbD\x9e\xcd\r\x1a\xd8\xbb\xed{f}\xa7x\x0f\x19\xc3\xfdV\x1aD\'\xc3\xab8\x98\xa9\xa7\"2\x12\xcdUB\xabH}\xbd\x13{\xcb\\\xcacn\x7f+\xc6\xde\x19Q\xa3\xf6\x86}\x9c\x12\xe8\xc2\xaa\xcc\xc0\xf3mj\xbc\xffKa\x1fr\x9al.f\xd6\xb1\xbdE\xa7\xc3D\\\x9f2;\xa4aF\x1f\xb6M\xff\x0e+\x91\x87v\x83a\xafnoB\xa7\x04o\x86^\'\xe7F\x8b9F\xe5\t\xdd\x83d\x9f\xb8k\xe5P\xbaH\xd1<\x8c\xad\xcb\nU\x94\x7f\xb7\xaf\x18G\xe0'}]}, @IFLA_MASTER={0x8}]}, 0x108}}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000640)={0x6, {{0x2, 0x4e24, @loopback}}, 0x0, 0x5, [{{0x2, 0x4e20, @broadcast}}, {{0x2, 0x4e20, @rand_addr=0x64010102}}, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e21, @private=0xa010100}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}}]}, 0x30c) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@local, 0x7b, r2}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000001c0)={@private2, @empty, @mcast1, 0x6ff, 0xffff, 0x9, 0x0, 0x5, 0x8000104, r2}) [ 462.273975][ T9042] usb 1-1: device descriptor read/8, error -71 [ 462.485006][ T9042] usb 1-1: device descriptor read/8, error -71 [ 462.506427][ T8677] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 462.520966][ T28] audit: type=1400 audit(1598991743.137:13): avc: denied { create } for pid=9477 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 [ 462.608365][ T9042] usb usb1-port1: unable to enumerate USB device [ 462.773628][ T8677] usb 2-1: Using ep0 maxpacket: 16 20:22:23 executing program 2: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e5, &(0x7f0000000100)={0xc, "15d7d801f2d3b95e438cc934e140ffeedeadacd91ec68f6c5596512891568c96e06679567598ab97bfcf9caf3c94d6a620e525c6ea3597e62af6517ab2ab61703eba7d5e4a924562ca081527726861462587868de41c013409eaa4ab8faac4c86e898ec00b722092a2e6a573df2b47e3731d03f1a475e80023aeeb3d29130ac0"}) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='syz1\x00', 0x0, r2) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x32, 0xa4, 0x5b, 0x10, 0x5050, 0x700, 0x9690, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x9e, 0x6a, 0xf2, 0x0, [], [{{0x9, 0x5, 0x1}}, {{0x9, 0x5, 0xf}}]}}]}}]}}, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80047601, &(0x7f00000001c0)) [ 462.925451][ T8677] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.936615][ T8677] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.946748][ T8677] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 462.995009][ T9042] usb 1-1: new high-speed USB device number 18 using dummy_hcd 20:22:23 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x3, 0x4, 0x7ff, 0x6], 0x4, 0x800}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048041}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x9, 0x10, {0x0, 0x0, 0xe000, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x8000, 0x0, 0x59, 0x5, 0x0, "00001acc00719f7d7a000000deff3e0000800000d34a00"}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000140)=0x8) [ 463.454485][ T8677] usb 2-1: New USB device found, idVendor=04f2, idProduct=1125, bcdDevice= 0.40 [ 463.465558][ T8677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.514839][ T9042] usb 1-1: New USB device found, idVendor=8086, idProduct=0180, bcdDevice=35.26 [ 463.524893][ T9042] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.532991][ T9042] usb 1-1: Product: syz [ 463.537456][ T9042] usb 1-1: Manufacturer: syz [ 463.542209][ T9042] usb 1-1: SerialNumber: syz [ 463.586117][ T8677] usb 2-1: can't set config #1, error -71 [ 463.629295][ T8677] usb 2-1: USB disconnect, device number 4 [ 463.654694][ T8723] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 463.698260][ T9042] usb 1-1: config 0 descriptor?? [ 463.825272][ T3228] Bluetooth: hci2: command 0x0419 tx timeout [ 463.914051][ T8723] usb 3-1: Using ep0 maxpacket: 16 [ 463.953660][ T9481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:22:24 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0xcc, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x94c}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x401}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x81}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44010}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x1412, 0x411, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}}, 0x0) [ 464.034839][ T8723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 464.046537][ T8723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 464.060264][ T8677] usb 1-1: USB disconnect, device number 18 [ 464.305941][ T8723] usb 3-1: New USB device found, idVendor=5050, idProduct=0700, bcdDevice=96.90 [ 464.316531][ T8723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.326527][ T8723] usb 3-1: Product: syz [ 464.331132][ T8723] usb 3-1: Manufacturer: syz [ 464.336613][ T8723] usb 3-1: SerialNumber: syz [ 464.401066][ T8723] usb 3-1: config 0 descriptor?? [ 464.456727][ T8723] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 464.466416][ T8723] usb 3-1: Detected FT-X [ 464.470767][ T8723] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 1 [ 464.478460][ T8723] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 15 20:22:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2b2bde9d40319696b905711068b27da6fff0744d4d2176644649a1f5319f68d2b13651a643ba1d864dc423db53c56eb2b04361972eba624cd488693441e33eb8392d76d9b57a78d0d77e908000000000000e263516012857d445602af835297c84c211911e5fadece87db5a8894f36a19f7ba231dacc61ef4b8524330461a0db46abb795fdcd89a50852f130a289058c679d9b7b4a8d431960180e4c751345f328c02a8ba6c2a11788e0b33b6d67cc414da1b492dbf76cbe557e29116a0a9329ec1e9b28ead89bdb5a3b3b6c192ebfac0bde4e2b2415669111d1130476371b533d5d49bdedb3ec524434dc577489b384d9b1426fdd85a6c8544832d58c5c658b338d9bc29516c0492b1e92c47a35eeceffa670a41d1674ec3a9d8e01d788bed55493a0a82154933252a02978a9529b2055beca28b681f66ac75647a3381f2912d7b6719d827924b9974e7ef1c"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000180)={{0xa, 0x1ff, 0x80000000, @private2, 0x9}, {0xa, 0x4e21, 0x6, @empty, 0x3}, 0x1, [0x8, 0x7, 0xe34, 0x0, 0x7fffffff, 0xd6, 0x1, 0x6459]}, 0x5c) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x1e, 0x4, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000040)=0x3ff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000300)="b399692dbaf87d96f8a6f4d0c803", 0xe, 0x0, 0x0, 0x0) r1 = semget(0x1, 0x3, 0x200) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000080)=""/11) r2 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x3d, &(0x7f0000000000), 0x20a154cc) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x0, 0x8001, @ipv4={[], [], @remote}, 0x1ea7}, {0xa, 0x4e22, 0x5ec, @mcast2, 0x40}, 0x5ef6, [0x90, 0xae4, 0x401, 0x0, 0x7, 0x3, 0x8]}, 0x5c) [ 464.664616][ T8723] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 464.686287][ T8723] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 464.737608][ T8723] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 464.788943][ T8723] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 464.843936][ T8677] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 464.844410][ T8723] usb 3-1: USB disconnect, device number 2 [ 464.915119][ T8723] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 464.926873][ T8723] ftdi_sio 3-1:0.0: device disconnected [ 464.944551][ C0] hrtimer: interrupt took 132397 ns [ 464.982566][ T9524] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 464.993538][ T9524] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 465.483840][ T8723] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 465.505343][ T9524] team0: Port device veth3 added 20:22:26 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020b40461de400000000001475414090224000100000000090400005c030101b81e21b200000122a20a0905910300004b5a8e0d0000000000000e6a841eccec806644362cab986c5d15bc4be138352f4ac32381b94e65356adb1ddd5771c3b69a70c74f68885103e187069308be1db464cbfeed9458399191ace7fd5ecd79843eca134b1f20b3122231cb1709d4b4407442a8eca99f3933b6b90a243bd7a641cbacc021c8170cbbc6e1350adb379e3d3eb7e7c26af6"], 0x0) r1 = openat$hwrng(0xffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x80000, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x12}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x78}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4050}, 0x20004000) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x319, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x641}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x440, 0x6, 0xdb, 0x8}}]}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000001580)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="5c000400004546347d7e1df657050004002897"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$nullb(0xffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x420041, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) [ 465.684028][ T8677] usb 1-1: device descriptor read/all, error -71 [ 465.726158][ T9530] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 465.740895][ T9530] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.1'. [ 465.874059][ T9530] team0: Port device veth5 added [ 465.935150][ T8723] usb 3-1: Using ep0 maxpacket: 16 [ 466.056381][ T8723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 466.067818][ T8723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 20:22:26 executing program 1: r0 = socket(0x11, 0x800000003, 0x1) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f00000002c0)={'veth1_macvtap\x00', @ifru_addrs=@phonet={0x23, 0x3, 0x1f, 0x7}}) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r3 = socket$isdn(0x22, 0x3, 0x25) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x5, 0x6, @local}, 0x10) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000280), 0x80800) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(0xffffffffffffffff) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3) socket$inet(0x2b, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000540)=0xfef6) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000040), &(0x7f00000001c0)=0x4) pwritev2(r3, &(0x7f0000000500)=[{&(0x7f0000000300)="1c47c58e9104f07e93ff13f136013c573f76ce03b2cf2064ee0787654f527c0b1e8e0b942e3cce3582c5377688f10398d0384010de4b2c8b0f401b40a6b87d86cadcf593c40781fd46e00d90e3057d64c7f4759469f778c679a0c83e4b25c73534e5a63d4f1261bd14643b31efe9059c3bfe77095b90eb00ef22d077a2005b9c32655ffe763b8afbeaec29e682bef08f8563a3ba77030abfd0c4f518726de6fed9a7ad20e7e154339ccd55ddae619240d3715600559dce", 0xb7}, {&(0x7f00000003c0)="3c538fb1c69b60660911950f239a798e6d456a3dbf71d3154d3faa857928ccd663ead88cf232ba15501c96504db166f72fff4a51af985d8f39b4aea5e7325304e00c6c690a21063a451218aa3c5f322db75092ae1c81e329706e4bb720417e33318f2f7ee73bff39433f99ac104b50f543a509c4d3612affd51775a4f08da12e2d285fb55454e4d1adabaaa0bea32b", 0x8f}, {&(0x7f0000000480)="c71df3fb864d151471fb75c2e029cff2e9ac867e10e5aa0726ff8acb60f0f32f45536529834409d98dd3fd46b05f0a3d4753a152598336febda20d3471380f074afafb4cd22b9b1cc83e2c5de55191183538b1db99d41e", 0x57}], 0x3, 0x7, 0x9, 0x1d) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r2, 0x3, 0x6, @dev}, 0x10) close(r0) [ 466.373914][ T8723] usb 3-1: New USB device found, idVendor=5050, idProduct=0700, bcdDevice=96.90 [ 466.384974][ T8723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.393123][ T8723] usb 3-1: Product: syz [ 466.397721][ T8723] usb 3-1: Manufacturer: syz 20:22:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c001a80080002800400018008001b0000000000ee8670cc77a9e3e3055ab07f87e89c011895f70eda1951a264ff4b44a021a33b19318ab5e250628f4e337d9ebfc137774548d9d2061a1b59d200c102b961ab03ba1df542e9fe1fd05d76dbe520daa3660abb2c5e8166a8d1f9"], 0x34}}, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname(r3, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000002c0)={0x2, 0x101, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'hsr0\x00'}) ftruncate(r5, 0x2007fff) socket$inet(0x2, 0x80000, 0x80000001) perf_event_open(&(0x7f0000000180)={0x4, 0x70, 0xa8, 0x7, 0x5, 0xb2, 0x0, 0x7d, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x425d, 0x1, @perf_config_ext={0x0, 0x6}, 0x18, 0x53d, 0x2, 0x6, 0x40, 0x800, 0x722}, 0x0, 0xf, r5, 0x2) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38483}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private0={0xfc, 0x0, [], 0x1}, 0xc9, 0x2041, 0x200, 0x400, 0xb92d, 0x100004, r6}) [ 466.427272][ T9551] device lo entered promiscuous mode [ 466.439550][ T9551] device lo left promiscuous mode [ 466.467828][ T9553] device lo entered promiscuous mode [ 466.474171][ T9549] device lo left promiscuous mode [ 466.482307][ T8723] usb 3-1: config 0 descriptor?? [ 466.517010][ T8723] usb 3-1: can't set config #0, error -71 [ 466.559741][ T8723] usb 3-1: USB disconnect, device number 3 [ 466.593688][ T8677] usb 1-1: new high-speed USB device number 20 using dummy_hcd 20:22:27 executing program 1: r0 = socket$inet(0x2b, 0x3, 0x2) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000cf3debd259916acbc2b23f4704da947100b6a57561c1d7181f7eea88aa6401604d0c89782d3f17e1168f72405746024e5a08b564841f7972311be7790751af679865d79a1a1d02a6356035d9bd445d30830c41dd440fec74730e451c87ffcd43fa459aea5956ea", @ANYRES16=0x0, @ANYBLOB="200026bd7000fddbdf25040000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c000) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x22) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000040)=0x2) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206b1d0101405200000001000293000301000000090600007f6e01", @ANYRESHEX], 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000080)=0x6) [ 466.919672][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.984447][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.994992][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.175142][ T8723] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 467.365438][ T8677] usb 1-1: Using ep0 maxpacket: 32 [ 467.412950][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 467.430947][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 467.439083][ T9561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.531217][ T8723] usb 2-1: Using ep0 maxpacket: 32 [ 467.549070][ T8677] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 467.557009][ T8677] usb 1-1: can't read configurations, error -61 [ 467.615113][ T28] audit: type=1800 audit(1598991748.237:14): pid=9565 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15771 res=0 [ 467.645921][ T8677] usb usb1-port1: attempt power cycle [ 467.667917][ T8723] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 467.676675][ T8723] usb 2-1: can't read configurations, error -22 [ 467.874438][ T8723] usb 2-1: new high-speed USB device number 6 using dummy_hcd 20:22:28 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x45e, 0x9d, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000000)={0x0, 0x2}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "da510bb7"}]}}, 0x0}, 0x0) [ 468.125879][ T8723] usb 2-1: Using ep0 maxpacket: 32 [ 468.247361][ T8723] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 468.256399][ T8723] usb 2-1: can't read configurations, error -22 [ 468.282351][ T8723] usb usb2-port1: attempt power cycle [ 468.394241][ T8677] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 468.515632][ T8677] usb 1-1: Using ep0 maxpacket: 32 [ 468.573832][ T12] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 468.685259][ T8677] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 468.693084][ T8677] usb 1-1: can't read configurations, error -61 [ 468.883721][ T8677] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 468.974118][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.985400][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.995495][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 469.004562][ T8723] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 469.012281][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.034119][ T8677] usb 1-1: Using ep0 maxpacket: 32 [ 469.097635][ T8723] usb 2-1: Using ep0 maxpacket: 32 [ 469.104785][ T12] usb 3-1: config 0 descriptor?? [ 469.217688][ T8723] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 469.226520][ T8723] usb 2-1: can't read configurations, error -22 20:22:29 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001a00)=ANY=[@ANYBLOB="9000000010001fff000000002000000000000000", @ANYRES32=0x0, @ANYBLOB="ed01060000000000680012800b000100697036746e6c000058000280080008002c00000004001300060012000001000014000200fe8000000000000000000000000000aa0800082001000000080014002000000014000300ff02000000000000000000000000000108000100", @ANYRES32], 0x90}}, 0x0) r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = dup(r0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000000), 0xb, 0x75be0100) [ 469.304694][ T8677] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 469.312558][ T8677] usb 1-1: can't read configurations, error -71 [ 469.382415][ T8677] usb usb1-port1: unable to enumerate USB device [ 469.444267][ T12] usbhid 3-1:0.0: can't add hid device: -71 [ 469.444475][ T8723] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 469.450801][ T12] usbhid: probe of 3-1:0.0 failed with error -71 [ 469.499290][ T12] usb 3-1: USB disconnect, device number 4 [ 469.546137][ T8723] usb 2-1: Using ep0 maxpacket: 32 [ 469.666913][ T8723] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 469.675798][ T8723] usb 2-1: can't read configurations, error -22 [ 469.693093][ T8723] usb usb2-port1: unable to enumerate USB device 20:22:30 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) getresgid(&(0x7f0000000140), &(0x7f0000000100), &(0x7f0000000180)=0x0) keyctl$chown(0x4, 0x0, 0x0, r1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e48000034000502d25a80648c63940d0324fc60080000000a000b0005358221f0792e370900098000f01700d1bd", 0x2e}], 0x1}, 0x20008840) [ 469.958354][ T12] usb 3-1: new high-speed USB device number 5 using dummy_hcd 20:22:30 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="ce"], 0x1) r3 = eventfd(0x400) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000001c0)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xc) socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet(0x2b, 0x1, 0x0) getsockname(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) r6 = socket$inet(0x2b, 0x1, 0x0) getsockname(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRESOCT=r5, @ANYRES64, @ANYRES16=r4, @ANYRES32, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7], 0x108}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', r4, 0x29, 0xe0, 0x2, 0x2, 0x52, @dev={0xfe, 0x80, [], 0x29}, @dev={0xfe, 0x80, [], 0x32}, 0x700, 0x20, 0x3ff, 0x2c0}}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f0000002280)={@void, @val={0x0, 0x0, 0x29}, @ipv6=@gre_packet={0x0, 0x6, '\x00', 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x73}], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "7ccd44586548be63b79b144c491dac3d1e89060154af20b7904d2cc8716d8f959b67c117bf7bef54d3d3768d255d198e295d14f331c8e0333f52138c0aa2c1363713181273607e7f39049a36d5d9a58275bcbfb6f19358b1f34b18a67a3b8c071ed8201e0b5c375de88cef4651b1466e118442fd3f54bc7551b96b605842ef42eab6"}, {}, {}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) 20:22:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2b2bde9d40319696b905711068b27da6fff0744d4d2176644649a1f53192fe82b13651a643ba1d864dc423db53c56eb2b04361972eba624cd488693441e33eb8392d76d9b57a78d0d77e9080000000000000064516012857d445602af835297c84c211911e5fadece87acc61ef4b8524330461a0db46abb795fdcd89a50852f130a9058c679d9b7b4a8d431960180e4c751345f328c02a8ba6c2a00"/206], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000)=0xb3, 0x4) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000300)="b399692dbaf87d96f8a6f4d0c803", 0xe, 0x0, 0x0, 0x0) r1 = semget(0x1, 0x3, 0x200) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000080)=""/11) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f0000000280)=""/127) r2 = socket(0x1e, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x3d, &(0x7f0000000000), 0x20a154cc) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x80000009}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000340)) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000020152dbd7001ffdbdf2502080006d90b0000000000000000"], 0x24}}, 0x1) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x0, 0x8001, @ipv4={[], [], @private=0xa010100}, 0x1ea7}, {0xa, 0x4e22, 0x5ec, @mcast2, 0x40}, 0x5ef6, [0x90, 0xae4, 0x400, 0x0, 0x7, 0x4, 0x8]}, 0x5c) [ 470.324426][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.336202][ T12] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.346329][ T12] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.40 [ 470.355609][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.453258][ T12] usb 3-1: config 0 descriptor?? [ 470.768800][ T9607] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 470.779784][ T9607] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 470.919400][ T12] microsoft 0003:045E:009D.0003: unknown main item tag 0x0 [ 470.947622][ T12] microsoft 0003:045E:009D.0003: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.2-1/input0 [ 470.959350][ T12] microsoft 0003:045E:009D.0003: no inputs found [ 470.966216][ T12] microsoft 0003:045E:009D.0003: could not initialize ff, continuing anyway [ 471.287157][ T8723] usb 3-1: USB disconnect, device number 5 [ 471.389415][ T9607] team0: Port device veth3 added [ 471.422765][ T9607] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 471.432470][ T9607] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.0'. [ 471.466119][ T9607] team0: Port device veth5 added 20:22:32 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000001c0)="a2e6999b", 0x4) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001000000026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000"], 0x20}}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000000200)={0x9, &(0x7f00000000c0)=[{0x7, 0x14, 0x2, 0x6}, {0x7, 0x46, 0x7f, 0x10001}, {0x3, 0x20, 0x17, 0x7}, {0x4, 0x8, 0x6, 0xffffff01}, {0x100, 0x3, 0x80, 0xfff}, {0x7, 0x0, 0x1, 0x1000}, {0x81, 0x7a, 0xfd, 0x5}, {0x5, 0xfa, 0xca, 0x84c2}, {0x0, 0x7, 0x6, 0x2}]}) r4 = syz_open_dev$vcsu(&(0x7f0000000240)='/dev/vcsu#\x00', 0xfff, 0x4401) r5 = socket$inet(0x2b, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000840)=@sack_info={0x0, 0x75, 0x3}, &(0x7f0000000880)=0xc) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) getsockname(r5, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="380000000b14100025bd7000fddbdf250800030003000000080003000300000008003f000200000008000300010000000800180700000000edafe8d147c69b2cf852063d7c71c50e74f6758c1a9dc2d829b00398dbfe701202b50cd1de7e7c815732a40b427886540482dcd868c5b37839b28177ff906a7b5a9c8870968b0b8c9c69e917f624d8cc99843a3edff31e96497a7a57775a6b559fce1b5f5f41e82493be29c36a52fcdffed5434377cc"], 0x38}, 0x1, 0x0, 0x0, 0x20000810}, 0x20008000) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000280)={0x3, 0x0, 0x1f, 0xd, 0xa4, &(0x7f0000000440)}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00'], 0x50) write(r1, &(0x7f0000000400)="360000001a51ed8ac7eb508e5df11999bc194c8b27d5a45c", 0x18) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x3ff, 0x0) 20:22:32 executing program 1: r0 = openat$ttynull(0xffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x101200, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x3}}, 0x20) perf_event_open(&(0x7f0000001340)={0x3, 0x70, 0x0, 0x0, 0x80, 0x0, 0x0, 0x80, 0x15000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xff, 0x80}, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x480000, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname(r3, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000100)={0x62, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 'sed\x00', 0x24, 0x5, 0x55}, 0x2c) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f00000001c0)=0x100, &(0x7f0000000200)=0x4) sendmsg(r2, &(0x7f0000000a40)={0x0, 0xffffff07, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0) [ 472.255750][ T8726] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 472.323261][ T9647] IPVS: set_ctl: invalid protocol: 98 172.30.0.2:20000 [ 472.555660][ T9648] IPVS: set_ctl: invalid protocol: 98 172.30.0.2:20000 20:22:33 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1ecf7a8deda38531}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000300)=0x1ff) r3 = openat$rtc(0xffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x400}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x137, &(0x7f00000006c0)=ANY=[@ANYBLOB="052da05eda263f4196050356a4152d51e5e82c51b6ccb1ccb5fdc898fd277e1324f68da244000000000000000000009fb28e4d5b136bf070dd670d55b8c5ad9888d1114e95fa28531894b0f3ad682e5ea9eadb0278ce19cb23a35de8c3d3999946cab0b296454e936e7f5b9836407697b36fe6448e0cd71014bf9167f4c6f25b246fc25305ed59db6d4a068bf731fedff79cb09944336351cc2902e9a941ad7a4b8aae43388aead26efbe2"]}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x635}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}]}, 0xcc}}, 0x810) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x10a8491, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_any='access=any'}, {@noextend='noextend'}, {@uname={'uname', 0x3d, '/dev/rtc0\x00'}}, {@debug={'debug', 0x3d, 0x2}}, {@aname={'aname', 0x3d, '#'}}, {@access_client='access=client'}, {@access_user='access=user'}, {@access_uid={'access', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '/dev/rtc0\x00'}}], [{@obj_role={'obj_role', 0x3d, '/dev/rtc0\x00'}}, {@fsname={'fsname', 0x3d, ']\\(:{{'}}]}}) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x1}) [ 472.823933][ T8726] usb 3-1: device descriptor read/all, error -71 20:22:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="ce"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_PORT_SELF={0xe0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xdc, 0x2, '\x00\xa8\xd9,\xfa\xab\x15\x02E@=:A\x82\xd0>@\x1a\xbf\x9a4\xa7\x89\x14zv:\x97\x10\x9af$\xb6!\xe2/Y{\x0e\xe32`>+\x81\x04\x00\x96\t\x1d\xfc%\tV\xbf\xa6\x19tc\xac`9Y\xc4\v\f\x04@\xce\x8d\x13w\xa4\xcd\x05\xdbD\x9e\xcd\r\x1a\xd8\xbb\xed{f}\xa7x\x0f\x19\xc3\xfdV\x1aD\'\xc3\xab8\x98\xa9\xa7\"2\x12\xcdUB\xabH}\xbd\x13{\xcb\\\xcacn\x7f+\xc6\xde\x19Q\xa3\xf6\x86}\x9c\x12\xe8\xc2\xaa\xcc\xc0\xf3mj\xbc\xffKa\x1fr\x9al.f\xd6\xb1\xbdE\xa7\xc3D\\\x9f2;\xa4aF\x1f\xb6M\xff\x0e+\x91\x87v\x83a\xafnoB\xa7\x04o\x86^\'\xe7F\x8b9F\xe5\t\xdd\x83d\x9f\xb8k\xe5P\xbaH\xd1<\x8c\xad\xcb\nU\x94\x7f\xb7\xaf\x18G\xe0'}]}, @IFLA_MASTER={0x8}]}, 0x108}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', r2}) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000000)=r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f000099e000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r4, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r5 = gettid() setuid(0xee00) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000080)=r5) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, [], 0x1}, 0x2}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x2}], 0x78) recvfrom(r4, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 20:22:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x100002, 0x0) write$uinput_user_dev(r0, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="cc"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PORT_SELF={0xe0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xdc, 0x2, '\x00\xa8\xd9,\xfa\xab\x15\x02E@=:A\x82\xd0>@\x1a\xbf\x9a4\xa7\x89\x14zv:\x97\x10\x9af$\xb6!\xe2/Y{\x0e\xe32`>+\x81\x04\x00\x96\t\x1d\xfc%\tV\xbf\xa6\x19tc\xac`9Y\xc4\v\f\x04@\xce\x8d\x13w\xa4\xcd\x05\xdbD\x9e\xcd\r\x1a\xd8\xbb\xed{f}\xa7x\x0f\x19\xc3\xfdV\x1aD\'\xc3\xab8\x98\xa9\xa7\"2\x12\xcdUB\xabH}\xbd\x13{\xcb\\\xcacn\x7f+\xc6\xde\x19Q\xa3\xf6\x86}\x9c\x12\xe8\xc2\xaa\xcc\xc0\xf3mj\xbc\xffKa\x1fr\x9al.f\xd6\xb1\xbdE\xa7\xc3D\\\x9f2;\xa4aF\x1f\xb6M\xff\x0e+\x91\x87v\x83a\xafnoB\xa7\x04o\x86^\'\xe7F\x8b9F\xe5\t\xdd\x83d\x9f\xb8k\xe5P\xbaH\xd1<\x8c\xad\xcb\nU\x94\x7f\xb7\xaf\x18G\xe0'}]}, @IFLA_MASTER={0x8}]}, 0x108}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x19, r3, 0x1, 0x8}, 0x14) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 473.134462][ T9655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.167300][ T9655] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 473.315556][ T9658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.340359][ T9658] input: syz0 as /devices/virtual/input/input10 [ 473.406003][ T9665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.448206][ T9664] input: syz0 as /devices/virtual/input/input11 [ 473.534902][ T8726] usb 3-1: new high-speed USB device number 7 using dummy_hcd 20:22:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="ce"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="080100001000010400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000e0001980dc00020000a8d92cfaab150245403d3a4182d03e401abf9a34a789147a763a97109a6624b621e22f597b0ee332603e2b81040096091dfc250956bfa6197463ac603959c40b0c0440ce8d1377a4cd05db449ecd0d1ad8bbed7b95dbe83b79349b5bb2e840bd667da7780f19c3fd561a4427fcc6e6d560ee7479d28c7c39c3ab3898a9a7223212cd5542ab487dbd137bcb5cca636e7f2bc6de1951a3f6867d9c12e8c2aaccc0f36d6abcff4b611f729a6c2e66d6b1bd45a7c3445c9f323ba461461fb64dff0e2b9187768361b2029f0852cfdae713af6e6f42a7046f865e27e7468b3946e509dd83649fb86be550ba48d13c8c9bcb0a55947fb7af1847e008000a00d5111d10ab8f53fea2cbce6f0c2e8e58bf9741b1128a6611575ef585b6fd6ba2f7f7d80ff2fd71ea7c87b5aa5410440222b2cdbc91397aabbbe1f83fc0d7e3ec26eb23ae0391460f772c20a9e3232ca6884d7142280256c2d7bdbeb0fab7be6aca01a450b08b4cec2b05a395ef5081aba079367ae6ed4db411f88462f5b26879bce3819f73f1aa9b44117b96c54373fef0b0a405dbf3b83c09baf3c58bc767eff778e8e02062d23c5a4948c475560e029c34bd91281c6a534c9ef1127ac4c68e0e67219649d19cb39fad43b5ebb0f3", @ANYRES32=0x0, @ANYBLOB], 0x108}}, 0x0) r4 = socket$inet(0x2b, 0x1, 0x0) getsockname(r4, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) getsockname(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, 0x0) r8 = socket$inet(0x2b, 0x1, 0x0) getsockname(r8, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x3708}, @IFLA_OPERSTATE={0x5, 0x3, 0x2e}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x38}}, 0x0) ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, &(0x7f00000000c0)=0x11) [ 473.774042][ T8726] usb 3-1: Using ep0 maxpacket: 32 [ 473.935532][ T8726] usb 3-1: unable to get BOS descriptor or descriptor too short [ 473.948566][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.024729][ T8726] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 474.036336][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 20:22:34 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000000)="83fb0d6b46", 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x3}}) [ 474.195085][ T8726] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 474.204573][ T8726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.212729][ T8726] usb 3-1: Product: syz [ 474.217379][ T8726] usb 3-1: Manufacturer: syz [ 474.222209][ T8726] usb 3-1: SerialNumber: syz 20:22:34 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a0000000424020a"], 0x0) [ 474.335956][ T9652] raw-gadget gadget: fail, usb_ep_enable returned -22 20:22:35 executing program 1: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x20020400) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f0000000080)) fcntl$lock(r0, 0x7, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) [ 474.576881][ T9042] usb 3-1: USB disconnect, device number 7 [ 474.685753][ T8726] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 475.055076][ T8726] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 475.064762][ T8726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.109161][ T8726] usb 1-1: config 0 descriptor?? [ 475.164476][ T8726] usb 1-1: bad CDC descriptors [ 475.179282][ T8726] usb 1-1: bad CDC descriptors [ 475.185667][ T8726] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 475.195036][ T8726] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 475.201803][ T8726] cdc_acm: probe of 1-1:0.0 failed with error -22 20:22:35 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80041272, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000240)={0xa, 0x4e1f, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x20, 0x29, 0x32, {@empty}}}], 0x20}}], 0x1, 0x0) [ 475.362073][ T8726] usb 1-1: USB disconnect, device number 23 20:22:36 executing program 2: r0 = socket(0x10, 0x802, 0xffffffff) write(r0, &(0x7f0000000000)="fc00000049000703ab092500090007000a060000000000000000369321000100ff0100000b05d00000000000000398996c92773411419da79bb94b46fe000000bc0002000003590fa536da25e25b4e2d336705636c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd300", 0xfc) 20:22:36 executing program 1: r0 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x3f00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @local}}}}) sysfs$1(0x1, &(0x7f0000000040)='\x00') 20:22:36 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@gettclass={0x24, 0x2a, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x7, 0xffe8}, {0xc, 0x8}, {0xfffc, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 20:22:36 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/350], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='$\x00\x00\x00!\x00\a', 0x7}], 0x1}, 0x0) r5 = dup3(r1, r4, 0x0) bind$packet(r5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) r6 = openat$cachefiles(0xffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x0, 0x0) mq_getsetattr(r6, &(0x7f0000000380)={0x2, 0x6, 0xfa, 0x6}, &(0x7f00000003c0)) [ 476.153569][ T9042] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 476.516508][ T9042] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 476.526216][ T9042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.635985][ T9042] usb 1-1: config 0 descriptor?? 20:22:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x2) openat$dir(0xffffff9c, &(0x7f0000000080)='./bus\x00', 0x40a000, 0x100) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) [ 476.692823][ T9042] usb 1-1: bad CDC descriptors [ 476.702477][ T9042] usb 1-1: bad CDC descriptors [ 476.709729][ T9042] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 476.717921][ T9042] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 476.724918][ T9042] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 476.886030][ T9042] usb 1-1: USB disconnect, device number 24 20:22:37 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a0000000424020a"], 0x0) 20:22:37 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0xbc9dc8fbd81cb4c1) r1 = gettid() r2 = gettid() tkill(r2, 0x33) kcmp(r1, r2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) fcntl$lock(r0, 0x6, &(0x7f0000027000)={0x1, 0x1, 0x0, 0x100, r1}) unshare(0x40600) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') preadv(r3, &(0x7f00000007c0)=[{&(0x7f00000003c0)=""/94, 0x5e}], 0x8, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000000)) fchmod(r0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000240)=r5) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1000000000016) 20:22:37 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x10) setxattr$security_selinux(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:random_device_t:s0\x00', 0x65, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setxattr$security_capability(&(0x7f0000000040)='./bus\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000300)=@v3, 0x18, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000580)={0x18}, 0x18) 20:22:38 executing program 2: write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x6d, 0x1}, 0x7) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x9, 0x80000000}, {0x2, 0xfffffffb}]}, 0x14, 0x2) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=""/47, &(0x7f0000000100)=0x2f) [ 477.625197][ T8726] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 477.641569][ T28] audit: type=1400 audit(1598991758.267:15): avc: denied { relabelto } for pid=9748 comm="syz-executor.1" name="bus" dev="sda1" ino=15797 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 477.712473][ T28] audit: type=1400 audit(1598991758.297:16): avc: denied { read write } for pid=9748 comm="syz-executor.1" name="bus" dev="sda1" ino=15797 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 477.737663][ T28] audit: type=1400 audit(1598991758.297:17): avc: denied { open } for pid=9748 comm="syz-executor.1" path="/root/syzkaller-testdir281071496/syzkaller.mCnsZH/27/bus" dev="sda1" ino=15797 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 477.766910][ T28] audit: type=1400 audit(1598991758.317:18): avc: denied { setattr } for pid=9748 comm="syz-executor.1" name="bus" dev="sda1" ino=15797 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 20:22:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xd8, 0x0, 0x20, 0x80, 0x0, 0x4, 0x28004, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x3ff, 0x6}, 0x1220, 0x800, 0x7, 0x6, 0x70a5, 0x1, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x9) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000020000000900010073797a3000000000000000020000000c00024000000000000000000900ff000000000000000000140000517c683754d2df60b7a67d254d001100010000000000000000000000000a"], 0x74}}, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) [ 477.971158][ T28] audit: type=1400 audit(1598991758.427:19): avc: denied { relabelfrom } for pid=9748 comm="syz-executor.1" name="bus" dev="sda1" ino=15797 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 477.987221][ T8726] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 478.004851][ T8726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.057028][ T8726] usb 1-1: config 0 descriptor?? [ 478.104627][ T28] audit: type=1400 audit(1598991758.707:20): avc: denied { getattr } for pid=8798 comm="syz-executor.1" path="/root/syzkaller-testdir281071496/syzkaller.mCnsZH/27/bus" dev="sda1" ino=15797 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 [ 478.133932][ T28] audit: type=1400 audit(1598991758.717:21): avc: denied { unlink } for pid=8798 comm="syz-executor.1" name="bus" dev="sda1" ino=15797 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=file permissive=1 20:22:38 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) r2 = socket$inet(0x2b, 0x1, 0x0) getsockname(r2, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_open_dev$vcsu(&(0x7f00000001c0)='/dev/vcsu#\x00', 0x8, 0x151400) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000300)={0x0, 0x4c, "1af1536a239e51aae212008f47a9af38995824e79cc30459f4b6cd7e661c914c0c6164236d35247dc31dec32a36bd702eed31ae0b672bb2f5e6802f127395f8cac80b946dfa45e4520818888"}, &(0x7f0000000380)=0x54) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000000)={r0, 0x8, 0x8, 0xf6eb}) [ 478.176422][ T8726] usb 1-1: bad CDC descriptors [ 478.184855][ T8726] usb 1-1: bad CDC descriptors [ 478.190933][ T8726] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 478.199198][ T8726] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 478.206194][ T8726] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 478.362487][ T8677] usb 1-1: USB disconnect, device number 25 20:22:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00, 0x600}]) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000002400400000060bc7d9400542c00fc010000000000000000000000000000ff020000000000000000000000000001730000000000000000000000c4"], 0x86) 20:22:39 executing program 3: ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0xca81, 0x39555659, 0x2, @stepwise={0xe0000000, 0x447, 0x2, 0xf22, 0x4, 0x400}}) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, {0x8, 0x9, 0xffff, 0x1}}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000080)={0x20, 0x0, [], {0x0, @reserved}}) r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x450000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000180)) ioctl$RTC_PIE_OFF(r0, 0x7006) r1 = signalfd(r0, &(0x7f00000001c0)={[0x5, 0x101]}, 0x8) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000200)={0x7f, 0x0, 0x5, 0x1, 0x2, 0x87}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000002c0)={0x0, 0x50, [0xffffffff7fffffff, 0x0, 0x7ff, 0xfffffffffffffffb], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4000) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000400)={0x8, 0x101, 0xff, 0x5, 0x7, 0x3}) r2 = openat$zero(0xffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x1, 0x0) pidfd_send_signal(r2, 0xf, &(0x7f0000000480)={0x36, 0x2, 0x615}, 0x0) r3 = syz_io_uring_complete(0x0) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0186416, &(0x7f0000000500)={0xba6, 0x5, 0x152d, 0x1, 0x2, 0x9}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000540)={0x1, [0x0]}) openat$ppp(0xffffff9c, &(0x7f0000000580)='/dev/ppp\x00', 0x225a1, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0xc, &(0x7f00000005c0)=@raw=[@map={0x18, 0xa, 0x1, 0x0, r1}, @jmp={0x5, 0x1, 0x9, 0x1, 0xb, 0xffffffffffffffc0}, @map={0x18, 0x0, 0x1, 0x0, r2}, @alu={0x7, 0x1, 0x2, 0xb, 0x4, 0xffffffffffffffc0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0xa, 0x9, 0x8, 0xfffffffffffffff4, 0x4}, @generic={0x5, 0x2, 0x7, 0xc3, 0x2}, @alu={0x7, 0x1, 0x7, 0xb, 0x1, 0xfffffffffffffeef, 0xfffffffffffffff0}, @map={0x18, 0x9, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x27}], &(0x7f0000000640)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x8, [], r4, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x8, 0x7f, 0x8}, 0x10, 0x0, r3}, 0x74) 20:22:39 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a0000000424020a"], 0x0) 20:22:40 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f00000000ffe3140000000027cfc2c8adaec3ad7c6400010076786c616e000000af2d48796b3f3e37c945a2118879637ede7b0287f0967656a6c6b3dc587db2d542c24b81b23ad5d31b7dad14f503db4cfaf329bdf53852c868b30f5d9358459d3f96a37bfb69ce236b4257da16eb678e34710473e163a4c813f4a944f64399dfe168"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x8054) r0 = socket$inet(0x2b, 0x1, 0x0) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000100)=""/157, &(0x7f0000000040)=0x9d) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x7e19) [ 479.683931][ T8726] usb 1-1: new high-speed USB device number 26 using dummy_hcd 20:22:40 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x6, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="66c7", @ANYRESDEC=r1, @ANYRES16=r0], 0x5) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 20:22:40 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000a0272bd5a4001000000000000000000000000000000a200000000c0a01000000000000000000000000000900010073797a300000000070000000120a0100000000000000000008000000040004800900020073797a30000000000900010073797a30001000f3080003"], 0x1}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 480.044787][ T8726] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 480.054509][ T8726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.137021][ T8726] usb 1-1: config 0 descriptor?? [ 480.185933][ T8726] usb 1-1: bad CDC descriptors [ 480.193573][ T8726] usb 1-1: bad CDC descriptors [ 480.199672][ T8726] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 480.207920][ T8726] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 480.214800][ T8726] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 480.425396][ T3228] usb 1-1: USB disconnect, device number 26 20:22:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff68, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x2, 0x2000000, 0x10000000, {0x3}, [@IFLA_PHYS_SWITCH_ID={0xa, 0x24, "120b30a71ac0"}, @IFLA_OPERSTATE={0x0, 0x10, 0x84}]}, 0x34}}, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000100)={{}, 0x0, 0x2, 0x3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 20:22:41 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @rose}, &(0x7f0000000100)=0x1c, 0x800) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000001c0)=0x80) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="0000000000000000000001008f000000000009410000fd"], 0x68}}, 0x4004864) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="25bca2740a0000002734fa0095e0612687ecb86a548802a902000000020000000a0000000a000000250000000206e73ba8f4952bedc6760253ef", 0x7ffff, 0x400}], 0x3, &(0x7f0000000240)={[{@commit={'commit'}}]}) [ 480.782348][ T9814] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.796439][ T9814] EXT4-fs (loop1): bad geometry: first data block 2835515476 is beyond end of filesystem (10) 20:22:41 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a0000000424020a"], 0x0) [ 481.181688][ T9793] IPVS: ftp: loaded support on port[0] = 21 20:22:42 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz0\x00'}) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2280080, &(0x7f0000000180)={'trans=unix,', {[{@access_any='access=any'}, {@cache_none='cache=none'}, {@access_user='access=user'}, {@access_client='access=client'}, {@mmap='mmap'}], [{@dont_measure='dont_measure'}, {@subj_user={'subj_user', 0x3d, '$\\[#){-'}}]}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 482.015229][ T3228] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 482.052029][ T9891] input: syz0 as /devices/virtual/input/input12 [ 482.221385][ T9793] chnl_net:caif_netlink_parms(): no params data found 20:22:42 executing program 1: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x7f, 0x1, 0x1, "c9b855c40a1e2c6d427f483e3d05291fe38d0ca843e2d8a8c7fb7b799f4cf158", 0x2c455951}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="240000005200070400fffd946f6105311c0000040000000077000000421ba3a20400ff", 0x23}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x1, 0x0, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x5, 0x4, @tid=r1}, &(0x7f0000000300)) r2 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x480, 0x0) fcntl$setown(r0, 0x8, r1) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x6, 0x1, 0x80, 0x3f, 0x0, 0x8, 0x11017, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x1, 0x3f}, 0x4000, 0x9, 0x1, 0x4, 0x2, 0x6, 0x87}, r1, 0xe, r2, 0x9) r3 = open(&(0x7f0000000080)='./bus\x00', 0x325802, 0x0) fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 482.435298][ T3228] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 482.444713][ T3228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.516379][ T3228] usb 1-1: config 0 descriptor?? [ 482.606739][ T3228] usb 1-1: bad CDC descriptors [ 482.614855][ T3228] usb 1-1: bad CDC descriptors [ 482.620972][ T3228] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 482.629112][ T3228] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 482.636046][ T3228] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 482.734534][ T9793] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.741974][ T9793] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.753814][ T9793] device bridge_slave_0 entered promiscuous mode [ 482.773914][ T3228] usb 1-1: USB disconnect, device number 27 [ 482.895712][ T9793] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.903072][ T9793] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.913235][ T9793] device bridge_slave_1 entered promiscuous mode [ 482.916654][ T9970] IPVS: ftp: loaded support on port[0] = 21 [ 483.159958][ T8677] Bluetooth: hci3: command 0x0409 tx timeout [ 483.338066][ T9793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.554763][ T9793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.649024][T10000] IPVS: ftp: loaded support on port[0] = 21 20:22:44 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0xffffffffffffffff, 0x4) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000100)=0x3fc, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={'veth0\x00', 0x1, 0x40}) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 20:22:44 executing program 0: [ 483.786786][ T9793] team0: Port device team_slave_0 added [ 483.833195][ T9793] team0: Port device team_slave_1 added [ 483.984438][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.992764][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.018925][ T9793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.100117][T10038] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 484.229720][ T9793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.236960][ T9793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.263207][ T9793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.320803][ T391] tipc: TX() has been purged, node left! [ 484.526829][ T9793] device hsr_slave_0 entered promiscuous mode [ 484.596852][ T9793] device hsr_slave_1 entered promiscuous mode [ 484.630906][ T9793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.638857][ T9793] Cannot create hsr debugfs directory [ 485.245223][ T12] Bluetooth: hci3: command 0x041b tx timeout [ 485.400572][ T9793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 485.446502][ T9793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 485.510134][ T9793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 485.558055][ T9793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 486.829935][ T9793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.070311][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.079820][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.118911][ T9793] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.235184][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.245539][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.255413][ T9042] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.262677][ T9042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.275112][ T8677] Bluetooth: hci3: command 0x040f tx timeout [ 487.375930][ T9042] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.429919][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.440741][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.451180][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.458560][ T8723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.518687][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.592746][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.647534][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 487.664777][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.677721][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.689979][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.774370][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.784652][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.794804][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.805376][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 487.815933][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.860319][ T9793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 488.069191][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 488.078037][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.215981][ T9793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.340112][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.351865][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.452792][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.464343][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.488531][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.500957][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.517845][ T9793] device veth0_vlan entered promiscuous mode [ 488.585508][ T9793] device veth1_vlan entered promiscuous mode [ 488.709696][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.720187][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.730146][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.740555][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.778717][ T9793] device veth0_macvtap entered promiscuous mode [ 488.810589][ T9793] device veth1_macvtap entered promiscuous mode [ 488.901278][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.912485][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.922581][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.933132][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.943126][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 488.953675][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.968776][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.994798][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.004892][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.015338][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.026511][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.094898][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 489.107981][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.118096][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 489.128782][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.138780][ T9793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 489.149341][ T9793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.164455][ T9793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.176498][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.188113][ T3228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.345344][ T3228] Bluetooth: hci3: command 0x0419 tx timeout 20:22:50 executing program 0: 20:22:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0xc850) r3 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@empty}, &(0x7f0000000180)=0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) 20:22:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast1, @ipv4={[0x0, 0x0, 0x8], [], @rand_addr=0x64010100}, @ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x4, 0x6, 0x2, 0x8, 'syz1\x00', 0x8000}, 0x6, 0x400, 0xfffff6a1, 0x0, 0x9, 0x3, 'syz0\x00', &(0x7f0000000000)=['])\x00', '*}-\x00', '-&\x00', '$%\x00', '}-$)$}{\x00', '}\\!/.{.}^\\\x00', '\x00', '[(-,!\x00', '{+\x00'], 0x2a, [], [0x0, 0x0, 0x7f, 0x1000]}) 20:22:50 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fe000800030000000000000000000000000000000000000800000000", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4048001}, 0x40) 20:22:50 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb95e}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x93}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x811}, 0x20000040) r2 = socket$kcm(0x10, 0x2, 0x10) openat$pfkey(0xffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x103000, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000025000511d25a80648c638c0d0424fc6004000e000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) 20:22:50 executing program 0: 20:22:50 executing program 1: bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r0 = socket$inet(0x2b, 0x1, 0x0) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)="13b3f98736b4014daf3ac9c79c1ddf26618ad4a08c38be372777d0170c4db634d2c92bc6a3669d66e4319a8830369d7926998d5cbf97dd3a644a6d6389938bb7582571df56a304b55f8ab1e0e626e6ba094bc6916f8dc6c7c5598cff483a09135f6578c37594292e7cd90a3242812ff89a1ba06d3ad759fd2697e655d6d79b5a2bdf277aacf8517df067988fc953e1c97228b4643aab6ec8dea21b9f277477f8d10d3f9e0d73322925d70d98602aaccabf09b133452d7e40fb7ebc6f49cba3e15d619081e3d633968c1e7ecd91daf38e5f22", 0xd2}, {&(0x7f0000000180)="f5592bd79881a0806e7d43c824bd553e93b2ae88bc8a4b9414a5d1a9c968ffed2d86d4aae0c4a7eb16e004a4f9589ea2492c41b8f0efe388bcf72280f4c218cf1a41ec1d867778e58c719ff6d1601e20efb75ec24e72d20b48b2fec1bf30153188623b415bae1d236d00b4259fc92240dcad7364a58d5d10d2b071c9260c6b6df8fb30d70d1a8382f7a85a2943e9da748f20543b05dffd8d27af888f0921fa404b0bdb4d79afa5c8566f8d470471fe05", 0xb0}, {&(0x7f0000000340)="8ba61857a5cb28d7bc8ee15383b8642d3e662b5305d721ca06c98173b8163b1eb55780ca7700efe5c274c29a1460c58c82041a95ca4d738e5e1038204735ab91389de9e29aa0de243f8b769e31d4f4d60a96cb10cdd2b1dbed5aec6b046a2691250d5c01ab401d64c8d541770e05cd1f43ed151210c827f4423e8f817caf64700433e86cf2a21213c7ef8fffe6e58537e193cfbbd3ac81df482b30606f0cac121ce31df57965504cd6ba128fd9d33032d6574cb856839fa1e8fbac0175423948c7fc8c3f713152d14807e3cbb6a65099420a8c52bac7a5c324c3ad421f6f45aa6ba0d4b6a1621e09e4fee3751233c7", 0xef}, {&(0x7f0000000240)="1ceb4b445c8151bad0c561de", 0xc}, {&(0x7f0000000280)="e701e0dc65d09626d5613096e2", 0xd}, {&(0x7f00000002c0)="f909a1eb318280fc2e6e37f7886ec4b8ef47127aeb922a15cc5bf0007fde01774256c80480144e4a3a38382e3d8e41658c375c17fa450da9fe", 0x39}], 0x6, 0x5, 0x5) openat$vfio(0xffffff9c, &(0x7f0000000580)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000540)={0x2, 0x3, 0x9, @random="a33238958470", 'macvtap0\x00'}) syz_mount_image$xfs(&(0x7f0000000300)='xfs\x00', &(0x7f0000000040)='./bus/file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='gquO\b\x00,\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='xfs\x00'}, 0x10) 20:22:50 executing program 3: syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005971f240c40709a144de01dafe47d40206ecd60000000039040000000d040100"], 0x0) 20:22:51 executing program 0: syz_usb_connect(0x0, 0x45, 0x0, 0x0) [ 490.591784][T10132] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 20:22:51 executing program 1: r0 = socket$inet6(0xa, 0x801, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={[], [], @dev}}, 0x1c) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) openat$cgroup_freezer_state(r2, &(0x7f0000000080)='freezer.state\x00', 0x2, 0x0) [ 490.840920][T10149] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 491.073809][ T8725] usb 4-1: new full-speed USB device number 2 using dummy_hcd 20:22:51 executing program 2: r0 = socket$inet(0x2b, 0x1, 0x0) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffff}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb95e}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x93}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x811}, 0x20000040) r2 = socket$kcm(0x10, 0x2, 0x10) openat$pfkey(0xffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x103000, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000025000511d25a80648c638c0d0424fc6004000e000a0003000200000037153e370a00098002000000d1bd", 0x2e}], 0x1}, 0x0) 20:22:52 executing program 1: syz_mount_image$msdos(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000100)="666174000404090a02000200"/23, 0x17}, {0x0, 0x0, 0x800008004}, {&(0x7f0000000000)="da6ffbf1174450dc44bbfa556c", 0xd, 0x10000}], 0x0, 0x0) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='msdos\x00', 0x0, 0x0) [ 491.364746][ T8725] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 491.444500][ T8725] usb 4-1: config index 0 descriptor too short (expected 60422, got 18) [ 491.453060][ T8725] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 212 [ 491.462277][ T8725] usb 4-1: can't read configurations, error -22 [ 491.527104][T10166] netlink: 'syz-executor.2': attribute type 9 has an invalid length. 20:22:52 executing program 0: syz_usb_connect(0x0, 0x45, 0x0, 0x0) [ 491.727606][ T8725] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 491.917165][T10178] FAT-fs (loop1): bogus number of reserved sectors [ 491.924459][T10178] FAT-fs (loop1): Can't find a valid FAT filesystem 20:22:52 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="326b33f41e36f094fda9dfeae8c100fe504f3c3ee71c0a653e5716bd8a098c4676821e45709924e5d671ad001d52eb220d3ff4f7096f5cbe3c3dc9db8dd7d853cae4cb85122a88ca4f5442f7ff1f79346b1d4f6b01ddd727d2981a0d54c510a83679996f324f9b8a4f58b130201832c0442018c2ebd12adf4d0c4ae35290b4ea13158872861d306ee16e0146d7785a2f4143a363a9ba21325002b577aa97573827d7606ae94ab05430522ab1", 0xac}, {&(0x7f0000000340)="87408dba47ccd75d73a3f4bac75ddf7109c7d91c990b785170309eec34ec75566133454f81e5d76e4f3d8f4c6baedd40e4cd3cf1c557fa508e2d24e51cc81ba1d40d88733c51256281ebe1bd420e25579b51f82da47f29ae337eeacbcda667ef2a164cb5515afcb5116c651aa2864edc59795406de623f26f161211f649ed263c0dd4bdfa70267242d91820d86ff11cac42aeda9f5d6a5c128d6423d460a2c08e0ad41f5e2879979328a32f789e39cd9", 0xb0}, {&(0x7f0000000400)="29f1378941ee8c6e21f970b4dc05106b8aa108d56230c70aef4e22befd284d953e1d8d4642d627aad4e7e12607091b6b092f118e340ba72e37bffa0aab111c1dfdd80a8b95ad7ca8e9dc860d30e558441889f7d28a58d2cc7f662e730d14711dc6630905060ee3b0e2b14b10ae87c2251ffd9c29a9b46595c5f0e00077b03ef2fd4e82b7727ef569ea40c6df2196b98e33938afdc9871c5c952aa1d46cfbaf8d371f4fb41fd544a7eb37dae2ccc4f7a1efa05e7559a623c11c", 0xb9}, {&(0x7f00000004c0)="74a04efcb36016ed76c23c4be28b487512acde5cc7496f0c644eecdc4659977879b8ac130048d8a960c7f3d820e961d7226dacc564239649857bf01ac3159ffdd93b4be1361318772d77db6a1de04ae49b2afc2af8100d41ef8045a22bac03fcfa52872eb1fa3a2cba39a1740b0da00ee00a68428c488ce9057f13f08662bfba7a", 0x81}], 0x4}, 0x440c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000002c0012000c000100626f6e64000000001c00020008000100040100000a001a"], 0x4c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) ioctl$CHAR_RAW_SECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x1a57b, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 492.055890][ T8725] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 492.132972][T10178] FAT-fs (loop1): bogus number of reserved sectors [ 492.139899][T10178] FAT-fs (loop1): Can't find a valid FAT filesystem [ 492.163576][ T8725] usb 4-1: config index 0 descriptor too short (expected 60422, got 18) [ 492.172116][ T8725] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 212 [ 492.181060][ T8725] usb 4-1: can't read configurations, error -22 [ 492.214633][ T8725] usb usb4-port1: attempt power cycle 20:22:53 executing program 1: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0x7a, 0x7c}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'rmd320\x00'}}, &(0x7f0000000140)="7d5ece5873d1c388611776a5082aed3c7346fd2b826546eac69f38cfbac457cbecf0e5bb96cb6826b2aa0bec7b293288db58f2a82b4b7e2989fd690e199c45a40a95fda12e367635a2eb2d2a54f6885c554335b9e0a4852a3f5b645d6123510455fa14382b9cedf27b51c84e9b571a46c5e3921af8eb6221bb8c", &(0x7f00000001c0)=""/124) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x1, 'wg2\x00', {}, 0x3ff}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000300), &(0x7f0000000340)=0x4) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000240)) 20:22:53 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="5001000010000307ebfff40606c6000040040100", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a00100000002500120008000100766574680000000018000200000033d2b2bde9d40319696b905711068b27da6fff0744d4d2176644649a1f5319f68d2b13651a643ba1d864dc423db53c56eb2b043619"], 0x200}}, 0x0) r0 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6815, 0xd2efff7f00000000, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492a3e, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000002c0)={{r3, 0x4, 0x8, 0x7a75, 0x7ff, 0x1000, 0x0, 0x5, 0xaf, 0x3, 0x7, 0x401, 0x1, 0xffffffff, 0xfff}, 0x8, [0x0]}) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="ce"], 0x1) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xc) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_PORT_SELF={0xe0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xdc, 0x2, '\x00\xa8\xd9,\xfa\xab\x15\x02E@=:A\x82\xd0>@\x1a\xbf\x9a4\xa7\x89\x14zv:\x97\x10\x9af$\xb6!\xe2/Y{\x0e\xe32`>+\x81\x04\x00\x96\t\x1d\xfc%\tV\xbf\xa6\x19tc\xac`9Y\xc4\v\f\x04@\xce\x8d\x13w\xa4\xcd\x05\xdbD\x9e\xcd\r\x1a\xd8\xbb\xed{f}\xa7x\x0f\x19\xc3\xfdV\x1aD\'\xc3\xab8\x98\xa9\xa7\"2\x12\xcdUB\xabH}\xbd\x13{\xcb\\\xcacn\x7f+\xc6\xde\x19Q\xa3\xf6\x86}\x9c\x12\xe8\xc2\xaa\xcc\xc0\xf3mj\xbc\xffKa\x1fr\x9al.f\xd6\xb1\xbdE\xa7\xc3D\\\x9f2;\xa4aF\x1f\xb6M\xff\x0e+\x91\x87v\x83a\xafnoB\xa7\x04o\x86^\'\xe7F\x8b9F\xe5\t\xdd\x83d\x9f\xb8k\xe5P\xbaH\xd1<\x8c\xad\xcb\nU\x94\x7f\xb7\xaf\x18G\xe0'}]}, @IFLA_MASTER={0x8}]}, 0x108}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@getqdisc={0x38, 0x26, 0x8, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x4, 0xfff3}, {0x5, 0xe}, {0x7, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000080c}, 0x0) [ 492.856179][T10191] mkiss: ax0: crc mode is auto. 20:22:53 executing program 0: syz_usb_connect(0x0, 0x45, 0x0, 0x0) [ 492.946809][ T8725] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 492.978014][T10199] mkiss: ax0: crc mode is auto. [ 493.028652][T10207] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.038356][T10207] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.071866][T10207] team0: Port device veth3 added [ 493.124133][ T8725] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 493.148780][T10208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.213812][ T8725] usb 4-1: config index 0 descriptor too short (expected 60422, got 18) [ 493.222571][ T8725] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 212 [ 493.231909][ T8725] usb 4-1: can't read configurations, error -22 [ 493.242237][T10207] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.252159][T10207] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.284929][T10207] team0: Port device veth5 added [ 493.308566][T10213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:22:54 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x24}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3b70}], &(0x7f00000000c0)='GPL\x00', 0x4, 0xfe1d, &(0x7f0000000200)=""/4096, 0x41000, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74) 20:22:54 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname(r3, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) r5 = openat$btrfs_control(0xffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x23547d5e9d9ba0c4, 0x0) ioctl$FITHAW(r5, 0xc0045878) getsockname$inet6(r4, &(0x7f00000000c0), &(0x7f0000000200)=0x1c) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='D\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="00000a0000000000f1ff0700080001006270660018000200060004"], 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 493.544147][ T8725] usb 4-1: new full-speed USB device number 5 using dummy_hcd 20:22:54 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @descriptor="2ff111460eaed618"}}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r0, 0x80047453, 0x0) [ 493.745085][ T8725] usb 4-1: device descriptor read/8, error -71 20:22:54 executing program 1: r0 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000180)={0x5, 0x61e5e0e9, 0x2, {0x5, @win={{0x7, 0x9, 0x61, 0x2}, 0x4, 0xfffffe00, &(0x7f0000000040)={{0x6, 0x1, 0x10001, 0x2}}, 0x0, &(0x7f0000000080)="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", 0x1}}, 0x33e744f6}) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000dbb6df086a080200c567020000010902240001000000168a1e72ed2e7f73955b3000090402b4e63c0900000905"], 0x0) [ 493.954005][ T8725] usb 4-1: device descriptor read/8, error -71 [ 493.964840][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 20:22:54 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[], 0x0) [ 494.075081][ T8725] usb usb4-port1: unable to enumerate USB device [ 494.114270][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 20:22:54 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="b0bb13feff5dd61e56b59478b0dca5fa8a11d15055", @ANYRES16=r0], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000140)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 20:22:54 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8020000) clone(0x247ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x401, 0x2, 0x0, 0x1, 0x40, 0x6, 0x1}, 0xc) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x80, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x34, {0x2, 0x4e24, @private=0xa010101}, 'ip_vti0\x00'}) setns(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 494.506140][ T9042] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 494.704873][ T8723] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 494.754910][ T9042] usb 2-1: Using ep0 maxpacket: 8 [ 494.814818][ T3228] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 494.874773][ T9042] usb 2-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 494.885525][ T9042] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 494.975125][ T9042] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 494.984500][ T9042] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 494.992653][ T9042] usb 2-1: Manufacturer: syz [ 494.998942][ T8723] usb 1-1: device descriptor read/64, error 18 [ 495.042916][ T9042] usb 2-1: config 0 descriptor?? [ 495.104771][ T3228] usb 4-1: device descriptor read/64, error 18 [ 495.290411][ T9042] usb 2-1: USB disconnect, device number 9 [ 495.394874][ T8723] usb 1-1: device descriptor read/64, error 18 20:22:56 executing program 2: perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x220007fd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8020000) clone(0x247ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x401, 0x2, 0x0, 0x1, 0x40, 0x6, 0x1}, 0xc) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/ipc\x00') r1 = openat$vcsu(0xffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x80, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @remote}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x34, {0x2, 0x4e24, @private=0xa010101}, 'ip_vti0\x00'}) setns(r0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 495.511861][ T3228] usb 4-1: device descriptor read/64, error 18 [ 495.663792][ T8723] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 495.787013][ T3228] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 495.933674][ T8723] usb 1-1: device descriptor read/64, error 18 [ 496.064245][ T3228] usb 4-1: device descriptor read/64, error 18 [ 496.095053][ T8724] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 496.324214][ T8723] usb 1-1: device descriptor read/64, error 18 [ 496.353703][ T8724] usb 2-1: Using ep0 maxpacket: 8 [ 496.443961][ T8723] usb usb1-port1: attempt power cycle [ 496.473877][ T3228] usb 4-1: device descriptor read/64, error 18 [ 496.485171][ T8724] usb 2-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 496.496030][ T8724] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 496.595494][ T8724] usb 2-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice=67.c5 [ 496.605519][ T8724] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 496.613859][ T8724] usb 2-1: Manufacturer: syz [ 496.628102][ T3228] usb usb4-port1: attempt power cycle [ 496.646259][ T8724] usb 2-1: config 0 descriptor?? 20:22:57 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) write$P9_RWALK(r0, &(0x7f0000000000)={0x23, 0x6f, 0x1, {0x2, [{0x40, 0x0, 0x1}, {0x8, 0x4, 0x5}]}}, 0x23) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x2, 0x4e21}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00000000000000070000000c0000000000000100000000"], 0x18}, 0x0) [ 496.908380][ T8724] usb 2-1: USB disconnect, device number 10 20:22:57 executing program 1: ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x5}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x22}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x18, &(0x7f00000002c0)={0x0, 0x31, 0x22, {0x22, 0x0, "eb2b20da341f5b2aae21c107b91850b0b1600ab5c5b31fc6c16e3d012890917f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 497.154280][ T8723] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 497.201054][T10277] tipc: Enabling of bearer rejected, failed to enable media [ 497.290191][T10278] tipc: Enabling of bearer rejected, failed to enable media [ 497.325322][ T8723] usb 1-1: device descriptor read/8, error -61 [ 497.345754][ T3228] usb 4-1: new high-speed USB device number 8 using dummy_hcd 20:22:58 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[], 0x0) 20:22:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0286429, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=[0x2, 0xfffffffb, 0x8001, 0xfffffffb], &(0x7f0000000040)=[0x6, 0x1ff, 0x7], 0x0, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=[0x3, 0xa6, 0x157, 0x9, 0x1, 0x6]}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f00003cef9f)='\x00', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x0, @loopback}, 0x10) 20:22:58 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280)}, 0x0, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$nvram(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/nvram\x00', 0x84000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) r6 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$KIOCSOUND(r6, 0x4b2f, 0x40) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB='\x00a\x00\x00\x00\"\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB], 0x28}}, 0x0) [ 497.643934][ T8723] usb 1-1: device descriptor read/8, error -71 [ 497.734830][ T3228] usb 4-1: device descriptor read/8, error -71 [ 497.946402][ T3228] usb 4-1: device descriptor read/8, error -71 [ 497.952870][ T12] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 498.061198][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24832 sclass=netlink_route_socket pid=10290 comm=syz-executor.3 [ 498.193174][T10290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24832 sclass=netlink_route_socket pid=10290 comm=syz-executor.3 [ 498.219252][ T12] usb 2-1: Using ep0 maxpacket: 8 20:22:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f322e0f0178000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d683ed", 0x44}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000140)=0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc62]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x3d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000008000000100000000000500000000000000f832c4587476c1f09600000000001512702000000000000000000a000000000000000000b117923b"]) pipe(&(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 498.347549][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.359274][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.369389][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.382469][ T12] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 498.391795][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:22:59 executing program 3: r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = openat$dlm_control(0xffffff9c, &(0x7f00000010c0)='/dev/dlm-control\x00', 0x101201, 0x0) ioctl$KVM_REINJECT_CONTROL(r4, 0xae71, &(0x7f0000001240)) r5 = openat$autofs(0xffffff9c, &(0x7f0000001180)='/dev/autofs\x00', 0x145080, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000001280)=r5, 0x4) connect$nfc_llcp(r5, &(0x7f00000011c0)={0x27, 0x1, 0x1, 0x6, 0x1f, 0x2, "29a321d6bb11b6c2c25e162880ccb91a978a383fd09b1e955662ab7e7f8473a5b4cd07c49ae8300967f428e316424780b9adcd3c6c1d6b5e448654c8cf3329", 0x28}, 0x58) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc00c64b5, &(0x7f0000001140)={&(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060a00000001e80001dd0000040d000c00ea1100000005000000", 0xfdef}], 0x1) [ 498.433837][ T8723] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 498.606741][ T8723] usb 1-1: device descriptor read/8, error -61 [ 498.622461][ T12] usb 2-1: config 0 descriptor?? 20:22:59 executing program 4: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x3fc, 0xffffffff, 0x0, 0x200, 0x200, 0xffffffff, 0xffffffff, 0x334, 0x334, 0x334, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x1d}, @private2, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0xff, 0xff, 0xffffffff, 0xff000000], 'veth0_to_bridge\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x21, 0x6, 0x3, 0x4}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ipv6header={{0x24, 'ipv6header\x00'}, {0x84, 0x22}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0xaa8}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x8, 0x2, 0x0, [0x5, 0x0, 0x4, 0x101, 0x3, 0x1, 0x4, 0x2518, 0x5, 0x3ff, 0x9, 0x4, 0x2, 0x7, 0x5, 0x2], 0xa}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@remote, @empty, [0x0, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xffffff00], 'veth0_macvtap\x00', 'virt_wifi0\x00', {0xff}, {}, 0x3c, 0x5a, 0x5, 0x8}, 0x0, 0x110, 0x134, 0x0, {}, [@common=@mh={{0x24, 'mh\x00'}, {"541b"}}, @common=@dst={{0x48, 'dst\x00'}, {0x3ff, 0x0, 0x1, [0x1b, 0x3ff, 0xfff8, 0x5, 0x2, 0x3, 0xfffd, 0x3f, 0x1ff, 0x7, 0x80, 0x756, 0x5, 0xfff, 0x8, 0x200], 0xf}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0xf}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x458) recvfrom(0xffffffffffffffff, &(0x7f00000004c0)=""/25, 0x19, 0x40000000, &(0x7f0000000500)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x80) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000580)) r0 = open(&(0x7f00000005c0)='./file0\x00', 0x880, 0xa) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000600)=0x1, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000640), &(0x7f0000000680)=0x8) read$alg(0xffffffffffffffff, &(0x7f00000006c0)=""/62, 0x3e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700)='ethtool\x00') prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000740)) bind$netlink(r0, &(0x7f0000000780)={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc) unlinkat(0xffffffffffffffff, &(0x7f00000007c0)='./file0\x00', 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f0000000800)={0x1, 0xa, 0x4, 0x10, 0x401, {}, {0x0, 0x1, 0x20, 0x0, 0x63, 0x4, '#\ac\n'}, 0x710e, 0x1, @offset=0x5de, 0xfd1, 0x0, r0}) ioctl$int_in(r1, 0x5421, &(0x7f0000000880)=0x2) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r2, &(0x7f0000000900)={0x2, 0x4e24, @empty}, 0x10) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000009c0)=@get={0x1, &(0x7f0000000940)=""/88, 0x200}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x28, &(0x7f0000000a00)}, 0x10) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x8, 0x5, 0xcc, 0x2000000}, {0x20, 0xe1, 0x5, 0x9}, {0x7, 0x7f, 0x3a, 0x80000001}]}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0/../file0\x00', 0x101000, 0x44) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) [ 498.862385][T10303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 498.874670][ T8723] usb 1-1: device descriptor read/8, error -61 [ 498.889752][T10305] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 499.001034][T10311] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 499.012683][ T8723] usb usb1-port1: unable to enumerate USB device [ 499.121123][ T12] hid-multitouch 0003:1FD2:6007.0004: unknown main item tag 0x2 [ 499.130327][ T12] hid-multitouch 0003:1FD2:6007.0004: ignoring exceeding usage max 20:23:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r4, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r5], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x401}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @dev}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x74a}}]}, 0x40}}, 0x0) [ 499.370853][ T12] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 20:23:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200)='devlink\x00') r2 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c331b56", @ANYRES16=r1, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB="7f0031d2d589f976c5a7b9798d04fff43263a7c6a4aa4e1204"], 0x3c}}, 0x0) [ 499.481996][ T12] usb 2-1: USB disconnect, device number 11 20:23:00 executing program 3: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000080)={&(0x7f00000003c0)={0x30, r0, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x6}, @TIPC_NLA_MON_REF, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF]}]}, 0x30}}, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x2007fff) write$P9_RSTAT(r2, &(0x7f0000000100)={0x54, 0x7d, 0x1, {0x0, 0x4d, 0x6, 0x7, {0x10, 0x3, 0x3}, 0x40000, 0xffffffff, 0x86a1, 0x7, 0x7, 'TIPCv2\x00', 0x7, '&A@)+\xb5\\', 0x5, 'L#\\(%', 0x7, 'TIPCv2\x00'}}, 0x54) 20:23:00 executing program 2: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88001) r1 = socket(0x11, 0x3, 0x0) bind(r1, &(0x7f0000000100)=@generic={0x11, "8100010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b38360054a5b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8ef6b3327d3a09ffc2c654"}, 0x80) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname(r3, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) r5 = openat$binder_debug(0xffffff9c, &(0x7f00000012c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000001300)=0x1) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x1114, 0x12, 0x800, 0x70bd2a, 0x25dfdbfb, {0x28, 0x9, 0x4, 0x1, {0x4e20, 0x4e20, [0x3, 0x73e, 0x7, 0x80], [0x1, 0x101, 0x1ff, 0x3], 0x0, [0x27, 0xffffff81]}, 0x2bab, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x39, 0x1, "81c56936862ff765f8e575f44deed92e053e258b41662cdf59d4b48991e15025b394a378c352fe2a07dc5f3c2ad47e00fc808ef050"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "8cf11015780f569f9b32ca1f0bf5f33afe20dab68b91aa664c5b3e384734e8a01d1007104d179ea9b1ac9d1df1bec0e84753909db753c2a55179e85f659e0b89a4ce01437dabb03dd9244834b688e09a7af7d1bec0b6e4e89b2e09edba9398cdd7db373e1e6c4e9ecb97d64a3a849f68d1d762104a8840de38c3d0b4200f9ea5fdaa254113ed54c82715c76936381a80d3af9c890d5eb0f7e24eac3971c8daed32fee6ba26735787cc3dee5c07776c0f0d53b43975462b9ed9f810f0f4fc2efe9f2d6ed5ea915f7c978b494fd9fcde49b036725451f4a7129b8a22cb1d776ff2ca1b4a1971b2ad9e39b09df27e781ffe9d5b30c8cf589309b625554e97e04524c6216345060bd3bfddec0d1821d730a0c7f92b4acc081a77fcabe888a34bd313f6af3dcce3795cb7e62052be55435a224fb54c004da3f7fb7f22493784b7f74d7499e6aeb52e4b6fd4eeed7d7c61c1715be4b2a59510baef4fe2c79757ec678e8e21bdaeb12fe13da9bc58b9c83893e1305070d93f62255a6b5c9e04425c3b6351d996acfc632564674da240f5e098793a4430310fcaebdd02f6d69620c67117468cb8f772c3ea42c5aaac92a78c810236d49773fd342e480fd4a970a097aa84d4eb114394f905116488c2d2f3a5f6dce9625af40f1a7294b244220530031bd0b2d0ae1badee1cce4af5d7ac65d697f55a652e3dcb1f172bfc264ff0c4dcd19f704c68d86c5f2e5dc9e135b026d766922da7d5a6c9a6826ba93cebef4159f95d3530ab60cc917151fe2ba24d8088c1c860e4886cd1229fe8f84d4c321729f8e3b4310572b3e14670bed221743f611634784818e6aa35bc3bc01c9c6f6dce0c4d626cf92ab5ebaf55221901d28c4b2666ae69d749405c952d99e8f59feeb1d9b0f13860bdf1dd0cd70609798fc2024482b6e1774effbf0976dd50ad07df00693c483b88aeddc007c5024a2a8d1f0061eb0f184b79ad57ab8571cf9766253f5958de6e13b6df4bd2fae0e61fe3f43f007c5b37fc5bccd5d73ed4343ce3e2924bf4860fa46de164e29aa97aae583e4b83ef804f5abb7a5de6ff1cf72f487440c4c9f4411f54b122a7e468eb83566730ecdff22585dd1e98fe0755d9d12aad54d605c09b7dbf38292219f6f38bc5ec20a2aa93a885fc5474a40ddb21f7c0c5f07b8ce3abfefa1f7fc0d8989640caab3728963fe4f9d4ca47ebfd951420b8558585dc55db8d1ef17ef59a27cd35be469e6ed3468db7c632cf63ab010aa2a41e605e1d15ec35bbc39d137c4deca64ae349d428653d38ad61e9d98cfa5040fe46ba50b91c9d902c7c4a2edd65cbce2969a171c521fae01dbe97b057a7c9e18279878fef0ccdc6fca98e945542c988609fb8218aa94e47521805a63e567eea61402fa25155f2e4f9bff13a3f8c777532c37b0b8538b740b438cd41e4917f10ce1faf63ca7b3946cc7e64a0aba9c889d6d5f543fa9d8bb41d88e06bb6b9125b23ee12b4c1cb03681ad724a9629018acc5cfa430c0681a908dd9abbdd55d19f8bcc808f0547b42c433eb7142ee02b2cd5d975ce5d5f111e8c91a37abbcffe88604a77cd799e2a7bc6634f8a4b4decbc5468fbb18b2842a8257c474ea9ed713bd761740fca404f2ee8457a42062d7a358232ddf28bf019e5806dd62850bc99a1ebe74db2c885a6bafec8fa759985e1bc4805f5deec90134833b623886effa013a3bf875eed4321a2496096dedd271a99b6dcda0ed3e58e41607583fbc2d3d37697712786912c2090c393025dcac47d00ead6484b25933cc40e3b8c867188f397f55322db853c0c1651d744092432ebc0d30ce809b72e2c6b2f3242aea117a412eaf162e4e2169b04294695bda4c9dd8f65063ee8e10f9c85f35efaf637e96cdfb8e571a98b7cf0c8871f1bb45674f0c7236084cf770a4d5fd3e90d1705ee632fb429d5c25da1711669aecc11b14a7833eee35935cc9bf6785dbff3200fa8db0f5729b66c0d94e02e9ba80e78de19263d9aa96b9ea8f4d8aef42f8fcb1fc83ce641d13a96b0c6a009878859d3b1ea20a64c9f69d716c6d543f79337aa5efac7ed31905e43943a48e5375b958d2aebc2fc081da67493562e9e157666c19eedd134ebacd2cbd032a8e9fd9a46cbb0919e3824cc0e7a1ce50fbb76d2309b1d7fc88ce5567b43dcff6c3f9bc2ee6a6cde35d62e8f6a4f2d94da1de23b52597390d0f3f87b75e70a83fa9c35b82b87f2cda03a2ce6737b9f770b0035a9a0f9a31ca8839377f0640e302ddc11e2629eeeff50cffbe0a629fd16f10c0c03e33a0d7e760da91e66c1673a9eaa27ca2307d19276f08d037e156c366cb2fef7a5878d42603a72c00ea5427cd27815cffa89490123975c417cc2628f3de90c3653ebdebfa8a1fa1b2870e65d111bddab43beab4ae502bfb79f87e5d1e53cab2af31593b06290e0c46cd36531429bb7472d82f84bb71c563d41d97be6e26e618eaa4f7a9c27aa6d7c2d60b4e27506d38fb86cef09235367c99f6ebbfa183947c3b297885a338a2f728ed70fb3affe846157ca10ff2c1082db2557e3f047afe5cf5b5d6a0cf1d995b5ee57925f47237e791a2f808e3a97d0c27a59cc98d56b01b9a3fe6bc64447bb446d14a7c017dea338077bce101d9359dbb325f74b042c179e68e417e28746132ecc2b66092d42d3400d177ce94f490a91282def8395cdec6a68c42f85b561e1fff8602c074a860994b55a415ac1d530a1b8ffb4def2c5c710c62262b5d0dc8cddfaf83f5347c50817faba50cf76cc128edaaf8b23bcf4f4eac249ad0e7aa92c9579fd3956f84edb674ca4501be4517449fa297f5bb9a05baa773d2bd35b0e460c994f6e6c058e166007885890c9b243d91ac6559d817936635ad8352bef6524a25050255bf3afb1a1a77481a8f080299949a5add5079791bc1bb6c4e8ec5db0d12ec9922ce57f0b8b4c86392d08f9f73c2a71adb0ed5c99d54ab90d51c31634b39e5a9c7572c2f5487564800a0e7913c9ce7a09a77b8eb0d3d314eb969cf2f9d52f9025637aafff0608c5b24dc8b5d58d6df9b040171f8e25a980a84ded37b4807832a1ea1fdb7617f25b81dfcfd248656b87e73707702fba9e5866f9de654d3105c73fd2bb04b839bfb521c385dccd2307f81f305f43d8fb51f828c6dd2fea894041da19cdd4bf17f2a3ec140f07acaaaae6239619f73680fec9f6b046572182ff4ca651d3df604633c03e4f6ab75fb2cefbceac5501b46a5bd637f142c3dd7c49f12376a96f147a11f6232a3eaf2cc43a36320a989edaa4b73b24f439e144867cbed6e070ceeecf3f03f27bf5429af2baaaa0749b46fda5cab72260d76676149cef5422c7c0ec524239b220b52adfc4224a54a4aeca96b7effdbec3842deb9290ce3da9a60fe008adf41407b72fde1f3d03906d13606f5a5362d2a4276e6bb3d4f04907639598a8452a0ed2d5cdfa3eea34cb874511852a065e21d6178b26a57a0347ff05bab837265c68749d384100670d02340ec2a3211dd797a919a8fb894e6df14c833293e602cee1681fe7b102a73fc57fe7ba4f27ec12399175e0f7950ad6ed6e1c238bebdb3014c8958708ea72a42ba927aaf0367896861f1bf7855abb0e5f16715d29af14bca5bebd5552a81bc514d07bae59e6b3cf049dc36b3496b1639d3a596406175907570955be2b4ebfec1a9080cc6955fc5ad74d8a3b5f24422906b5f2a1b7052e2347fc131b3f80eaf27ce59bfe24372a7755a185e9dd202447a64854607c3e3c61a6af43adc735383e93354147bc0bbf72dd006567f10ce8df3075ec2efbabd08c9fdb9e2e9a962572b126540d6ad351527bc1f90a81888976ba4e4a4a6a0a8e8668204f2b44e52f73bac37dc69e9b4c01f30577871d60a08c708ce40dc8abe6c025605eef2669730ebe085c01683d66bb1cde9fc47839355929e54b5dc231837df20973ce56532cf20df4ee4bde2a444239f32de2b81ea1b286d6bddfe4afeb9a6a0bebe91a8d42ca3ebe5a4a587ba74d7372eea7dea2f9e5eee2b53ac64c9aafd303956005ef8cd4f9b7318ff4f4e15fc7ad6077311a8b564dfe7ff1029d163aaa41f4d9ee2e2010c56bb7b71c02db66148abfe08779720e792654b068463d5d919450a2ae076666523ee73f1533795165e080983433f41f2f04042006fb1fb1fed252f05abba79943dbbce9d4c662f2fd67420443377589a578e7305fbd1d137330fcc8dea3d2de2b5918e0f24a083d59fc5e3acdd5a35d2d50c36dcf3c8f6019aa2555a64a7430e993fd43581c0ec9645cceca930b59bc06219df4b9bd67658de29c99f3526e00d06f06d087c89fa54409849a63c06674e113bfa672f476bcc6c72b7ef31f2bb3f6959950f0f277833373a4e76268fb3416b1e0fe205b4a88a5836aafaa85d2bf55c69cf452a26ec44158f48d0510b67a4315dacd7bd03506186d246961b3beb6ff65a960278b339c49b6397a24a93c7f2736c8e15620bf8124d1e01298a34e96eee4d4ae972c0531fb64ff95495f6b03a0aba2fd467e4ad06abb9ebbd6e4201ebfafc06d85f355f6ff790da224acd4be4f468d73ef02e9baef008271852e29f27f31671b678a3472b4f91ac9f902eb79267fc9852f2ebbbeec9daa1570061436926e988f698eaf6c608f0226528f29b4b6c5b2e8ef28a8ae95027b6950c88e1ae26a2f08c81b0fe33776fd1e228cc9185f2ab960eb064ef7c59334c97f934411385eea4e41cf0679b23e4e48df939b9c30da9351fce7b29ce39252db40e577a94c72c3493b870657574557d2d8efdefca4a1245f35d61050ddb5274ae03202c47f3151a8e7c0126ef9465fdc881376458dad458e0003159da835af540767636b2d8181116cfd6e33041379ceb582892d89941f9afb31dbe84580c50574d63464bad22b97e237ce127ddb32dfc6624a6e0d2fa0d30aac3df038f452fbd044bdaa1a06fd9986ca790e45aef119fb073ca328c3f1df6194d7d60715abb8d15f793db81dbedec89880119f7d35de497415334a968eaf8a8930ae3ec37f6cd20a186d9073af87af522b9615d706ce90c6522383d99a8eb5e52e7314344fdbb2056af471680bbbaae343a8f413ddf2af22e061620bcca97ad13f1013e783e48353d485302e1dfb7e0bb126e9b25cf5d6aaa18dcada678d0692fc9449e3ef4b2546f0af6bab71ac17d58b646a524f9b1b46a6f3e82ee7d4ad6e7cd92624b542fba3c76cdb170e4670778659115d2d11ccf2ab8a2d1e8fa17ca77613c66eb324449841eee41698724d69f61d413a1dda263b50877a959fa778273dd68f9244a483852949d3b68fc85e4e3887b6726e77950cc3e4e0e2e853ba464badd025b189bd399e2b87fd72890b76d6c33af6aaf5183c6319d95b0b054d1368fadd2e291cc26982c4e31b0414a2d07030174c65a409b6c867b41de78e8a990d0aa698589beccac8d164fae50208fa57e37c2f0e38dead7e81744afd3aea669220369e294df8c35982d00a9b36382a3daf9f161de673bd188b5af3170d2426ba4629651bbdce54b583e7f9e33f980676341b370211d7fe5f4fca151c5cb266dd41079f2bcf2e6f67ef52c27d29a3a3d83f17746d94e6974008376e78fb2e331479eb74286df734abe7fcf067bb2882fedd691e318c141384e6801875de586dbad3d268850e0c390fcfc8dc4e77679a86372cdf7eccb7f9caa6e719348fdb73ebe0cd55d675ef0877f17661f4554128794fb159e4771c466727cfa7986dbad76f2c54000c1fcb4c912dec04f2fd3d1b25e6c61ffdff8f0cd78fe48"}, @INET_DIAG_REQ_BYTECODE={0xe, 0x1, "9246a4835f8c760e26ea"}, @INET_DIAG_REQ_BYTECODE={0x78, 0x1, "2b997b25393296de19556ca56a6e0c05ef927d7df9847eb26af2319b5d36a88219d7c6c72c21e06a4195eaa15bf78d87c631e82efe09c2aa8fefa7ac65f4fbcc02d2023bc741088395d72789914b6898a786b02c41732f2d0a7d5c0c74ff60fc164d591dae20ed0d9fb1f7be7fad2c3ec16ab68f"}]}, 0x1114}}, 0x40) sendfile(r1, r2, 0x0, 0xffffffff00d) r6 = socket$inet(0x2b, 0x1, 0x0) getsockname(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, 0x0) getpeername$ax25(r7, &(0x7f0000001340)={{0x3, @bcast}, [@default, @rose, @default, @default, @netrom, @null, @netrom, @bcast]}, &(0x7f00000013c0)=0x48) [ 500.194136][ T12] usb 2-1: new high-speed USB device number 12 using dummy_hcd 20:23:01 executing program 1: r0 = openat$ptmx(0xffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x200d84, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000080)={0x6, {0x20, 0x5, 0xc9c3, 0x4, 0x7fff}}) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@id, &(0x7f0000000100)=0x10, 0x80000) poll(&(0x7f0000000140)=[{r1}, {r2, 0x2602}, {0xffffffffffffffff, 0x400}, {r0, 0x4af}], 0x4, 0x63) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb1, 0x8, 0x92, 0x10, 0xcde, 0x5, 0x7690, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x9a, 0x9f}}]}}]}}, 0x0) [ 500.463082][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.555232][T10346] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.585214][ T28] audit: type=1804 audit(1598991781.217:22): pid=10347 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir180451132/syzkaller.Mfh6hq/28/bus" dev="sda1" ino=15863 res=1 [ 500.685561][ T28] audit: type=1800 audit(1598991781.257:23): pid=10344 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=15862 res=0 20:23:01 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x800020, &(0x7f0000001300)={[{@rtdev={'rtdev', 0x3d, './file0'}}, {@rtdev={'rtdev', 0x3d, './file0'}}]}) [ 500.918429][ T28] audit: type=1804 audit(1598991781.547:24): pid=10354 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir180451132/syzkaller.Mfh6hq/28/bus" dev="sda1" ino=15863 res=1 20:23:01 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[], 0x0) [ 501.055900][ T28] audit: type=1800 audit(1598991781.637:25): pid=10347 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15863 res=0 [ 501.075766][ T28] audit: type=1800 audit(1598991781.637:26): pid=10354 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15863 res=0 20:23:01 executing program 2: readlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/70, 0x46) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\t\x00\x00\x00\x00\x00\x00\x00'], 0x1202c0) [ 501.186086][ T12] usb 2-1: device descriptor read/64, error -71 20:23:02 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0xa, 0x669e) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x40008}, [@IFLA_PHYS_SWITCH_ID={0x1a, 0x24, "1d3505fe6dc6e7c8a23394b2694d45a52785711e5cdb"}]}, 0x3c}}, 0x20000000) 20:23:02 executing program 3: mlockall(0x2) r0 = memfd_create(&(0x7f0000000080)='\x15\xf7^\xf9\x12\x0f\xbd+\xa7\xce\xfa%\x98\xc6\x1e\x1e\xf8\x0213\xce\x89x\xb6\x9b\xfbp\x9f\xd5\x9d\b\xb7\x1b\xcc\x91\xc9\x12\xb01\xa8\x1e\xdb\xea+\xfd\x8d\xe7\xdc\x90\x90\xa8\x1a\xa6%\xc2\x85d?\x15W\xc0\xb9\xfb\x01&\xbb\xce6\xe7\x96\xf2\xf5\n!\xc5\xe2\xef\xce\xff\xec\xac9\x98\xb4<\xc5|\x0e\xae', 0x205) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x42800, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ftruncate(r0, 0x9) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x50800, 0x0, 0x0, 0x4, 0x2, 0x0, 0xcd92}, 0x0, 0x1001, r1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000480)=@ipx, 0x80, 0x0}, 0x3}, {{&(0x7f0000000380)=@ipx, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000500)=""/153, 0x99}, 0x10008}, {{&(0x7f0000000600)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000c00)=""/76, 0x4c}, {&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f0000000680)=""/163, 0xa3}, {&(0x7f0000000780)=""/224, 0xe0}, {&(0x7f0000000880)=""/127, 0x7f}, {&(0x7f0000000900)=""/157, 0xfffffffffffffe79}, {&(0x7f00000009c0)=""/145, 0x91}, {&(0x7f0000000a80)=""/127, 0x7f}], 0x8, &(0x7f0000000b00)=""/99, 0x63}, 0x101}], 0x3, 0x40000003, 0x0) fcntl$getown(r2, 0x9) getpid() semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0xbe, 0x8000]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000180)={0x75d0, 0x0, 0x9, {0x8001, 0x99e5}, 0xffff0d41, 0x2}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='ramfs\x00', 0x44010, 0x0) r3 = memfd_create(&(0x7f0000000280)='security.selinux\x00', 0x0) pwrite64(r3, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x810, r3, 0x3000) chdir(&(0x7f0000000340)='./file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x2) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x1) [ 501.564066][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 501.675223][ T8726] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 501.695295][ T12] usb 2-1: New USB device found, idVendor=0cde, idProduct=0005, bcdDevice=76.90 [ 501.704622][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.732472][T10343] IPVS: ftp: loaded support on port[0] = 21 [ 501.816265][ T12] usb 2-1: config 0 descriptor?? [ 501.953939][ T8726] usb 1-1: device descriptor read/64, error 18 [ 501.957550][ T12] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Checking for firmware prism2_ru.fw [ 502.096781][ T12] usb 2-1: Direct firmware load for prism2_ru.fw failed with error -2 [ 502.106077][ T12] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: Firmware not available, but not essential [ 502.118538][ T12] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): prism2_usb: can continue to use card anyway. [ 502.344001][ T8726] usb 1-1: device descriptor read/64, error 18 [ 502.372981][ T12] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): Cannot get bulk in endpoint status. [ 502.388686][ T12] prism2_usb 2-1:0.0 (unnamed net_device) (uninitialized): hfa384x_drvr_start() failed,result=-5 20:23:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x1, &(0x7f0000000000)=[{0x0}], 0x0, &(0x7f0000000040)={[{@lazytime='lazytime'}]}) [ 502.546044][ T12] usb 2-1: USB disconnect, device number 12 [ 502.619813][ T8726] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 502.753218][T10343] chnl_net:caif_netlink_parms(): no params data found [ 502.861568][T10495] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 502.946097][ T8726] usb 1-1: device descriptor read/64, error 18 [ 503.015661][T10495] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 503.223925][ T12] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 503.335176][ T8726] usb 1-1: device descriptor read/64, error 18 [ 503.456821][ T8726] usb usb1-port1: attempt power cycle [ 503.474303][ T12] usb 2-1: Using ep0 maxpacket: 16 [ 503.481782][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.489289][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.549377][T10343] device bridge_slave_0 entered promiscuous mode [ 503.604622][ T12] usb 2-1: New USB device found, idVendor=0cde, idProduct=0005, bcdDevice=76.90 [ 503.614184][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.641362][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.649320][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.667627][ T8725] Bluetooth: hci4: command 0x0409 tx timeout [ 503.712336][ T12] usb 2-1: config 0 descriptor?? [ 503.724557][T10343] device bridge_slave_1 entered promiscuous mode [ 503.873973][ T12] usb 2-1: can't set config #0, error -71 [ 503.893178][ T12] usb 2-1: USB disconnect, device number 13 [ 503.966065][T10343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.993819][T10343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.164015][ T8726] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 504.167123][T10343] team0: Port device team_slave_0 added [ 504.198152][T10343] team0: Port device team_slave_1 added [ 504.284277][T10343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.291360][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.320180][T10343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.434614][ T8726] usb 1-1: device descriptor read/8, error -71 [ 504.461041][T10343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.468318][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.495076][T10343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.625404][T10343] device hsr_slave_0 entered promiscuous mode [ 504.659280][ T8726] usb 1-1: device descriptor read/8, error -71 [ 504.682733][T10343] device hsr_slave_1 entered promiscuous mode [ 504.704162][T10343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.711808][T10343] Cannot create hsr debugfs directory [ 505.232260][T10343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 505.276766][T10343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 505.316486][T10343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 505.368137][T10343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 505.745651][ T8723] Bluetooth: hci4: command 0x041b tx timeout [ 505.883707][T10343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.003799][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 506.013743][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 506.098069][T10343] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.224597][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 506.235228][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 506.245212][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.252501][ T8726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.458013][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 506.467910][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 506.478823][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 506.489119][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.496489][ T8723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.505770][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 506.517308][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 506.887606][T10343] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 506.898219][T10343] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.922221][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 506.935185][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 506.946129][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 506.957260][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 506.968145][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 506.978452][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 506.989253][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 506.999473][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 507.598666][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 507.609024][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 507.619292][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 507.627507][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 507.687773][T10343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.824171][ T3397] Bluetooth: hci4: command 0x040f tx timeout [ 508.721748][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 508.732418][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 508.910432][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 508.920756][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.011901][T10343] device veth0_vlan entered promiscuous mode [ 509.023181][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.033692][ T8726] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.210064][T10343] device veth1_vlan entered promiscuous mode [ 509.443637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.454664][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.464879][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 509.475428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 509.504984][T10343] device veth0_macvtap entered promiscuous mode [ 509.530713][T10343] device veth1_macvtap entered promiscuous mode [ 509.630594][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.641904][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.652010][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.662589][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.672588][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.683149][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.693143][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 509.703686][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.718786][T10343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.734234][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 509.744862][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 509.754917][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 509.766069][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 509.872444][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.883847][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.893928][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.904503][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.914497][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.918224][ T3397] Bluetooth: hci4: command 0x0419 tx timeout [ 509.925045][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.925152][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 509.951559][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.966857][T10343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.975318][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 509.985970][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:23:11 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x2002, 0x0) syz_mount_image$bfs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000001680)="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", 0x100}], 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000001400)=ANY=[], 0x102f) dup3(r0, r1, 0x0) 20:23:11 executing program 3: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000004c0)=[{0x0, 0x0, 0xfffffffffffffffe}, {&(0x7f0000000300)="e8974e54465320202020", 0xa, 0x1}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'syzkaller1\x00', 0x4}, 0x18) clock_nanosleep(0x1, 0x0, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)) 20:23:11 executing program 1: r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x301c80, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r4}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r4, 0xff39, 0x3ff, 0x1, 0x6, 0xff}, 0x14) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, 0x0, 0x0) 20:23:11 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 20:23:11 executing program 2: syz_emit_ethernet(0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaadb1647eac76fd0b33f5d21000b8700fe8000000000000000000000000000160000000000a71780ac00ffffac141400"], 0x0) [ 511.086683][T10669] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 511.096097][T10669] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 511.109245][T10669] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 511.237394][T10676] ALSA: mixer_oss: invalid OSS volume '' [ 511.243950][T10676] ALSA: mixer_oss: invalid OSS volume 'Ä'R™T%e.¤Ëz-Õjß`†-ìáNÌ=J.aÕ' [ 511.253865][T10676] ALSA: mixer_oss: invalid OSS volume 'M' [ 511.403841][ T12] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 511.421286][T10684] ALSA: mixer_oss: invalid OSS volume '' [ 511.427418][T10684] ALSA: mixer_oss: invalid OSS volume 'Ä'R™T%e.¤Ëz-Õjß`†-ìáNÌ=J.aÕ' [ 511.438031][T10684] ALSA: mixer_oss: invalid OSS volume 'M' 20:23:12 executing program 2: r0 = socket(0x400000000010, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0xfa, 0x1) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="d1052300", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c8}}, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c040009101a020200", 0x33a) socket$can_j1939(0x1d, 0x2, 0x7) getpeername(r0, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000100)=0x80) socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @local}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x34, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x9}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0xffffffff}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x7}, {0x8, 0x0, 0x3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x11) 20:23:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000100)=0x2c) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01001000001a000000000100000000010000", @ANYRES32=r1, @ANYBLOB="04000280"], 0x20}}, 0x0) 20:23:12 executing program 4: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = dup(r0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)={0x2}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c00000010001fff000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800b00010069703667726500003c000280080014000080000006001800ff000000060011004e2200000800040000f0ffff050017000000000008000c0002000000060003008f08000008000a00", @ANYRES32, @ANYBLOB="08001f000200000000ffff000008007728008ceb0000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 511.714381][ T12] usb 1-1: device descriptor read/64, error 18 [ 511.810530][T10669] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 511.820008][T10669] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 511.834103][T10669] ntfs: (device loop3): ntfs_fill_super(): Not an NTFS volume. [ 512.095560][T10693] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 512.103647][T10694] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.104036][T10693] netlink: 254 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.124171][ T12] usb 1-1: device descriptor read/64, error 18 20:23:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf250c00000008003c000100000008002b02060000000a000900aaaaaaaaaa0a000008003c0008000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) [ 512.202912][T10698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.250394][T10697] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 512.259555][T10697] netlink: 254 bytes leftover after parsing attributes in process `syz-executor.2'. [ 512.398664][ T12] usb 1-1: new high-speed USB device number 37 using dummy_hcd 20:23:13 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = socket(0x2, 0xa, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x1c) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r5, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8000000, 0x3, 0x1, 0x0, r4, &(0x7f0000000000), 0x3000}]) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)) 20:23:13 executing program 1: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/850], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x74) ppoll(0x0, 0x0, 0x0, 0x0, 0x1ff0000) 20:23:13 executing program 2: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='cpu&3\n\n\n\n\x00\x00\xc8 \xf4\xb3\xca\f\x1ff\xf0\xed\xe2\xdaX\x96\xe8\xd2\x9ba\xdd\xba\x93\xf3\xa2\x97e\xd7\xa37\xc0\xae$\xef\x1f\x1feq*\xeb\x00\xffx\x7fV-S\xeb\x9c\xf5\xe5!d\x99]\x17~\x9e\\\xac\x1f\x93\x00\x02\x00\x80T\"\x00\x80\xff\xff\x03\x00\x00\x00\x00\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x2) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000002c0)={'macvtap0\x00', 0x10140000, 0x8}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8000, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRESOCT], 0x2) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a10000001428b67ecb4bf179013462cbf159108712200cd2b143cc74e6b9b4ffce88d9b23c1034aac001c1b6116d50cab13b2c721eab543739bb541d396e3ae3010aa571"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x20040822) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x3) chown(&(0x7f00000000c0)='./file0\x00', 0x0, r2) fchownat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x0, r2, 0x800) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000400)) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x10001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e9200ff283ee23d00000000080000b4fa425000"}) socket$nl_generic(0x10, 0x3, 0x10) [ 512.703707][ T12] usb 1-1: device descriptor read/64, error 18 20:23:13 executing program 1: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000c40)={0x1, &(0x7f0000000000)=[{0x3d, 0x0, 0x4}]}, 0x8) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f00000001c0)={0x8}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x48000000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x9, 0x2, 0x2, 0x480000, 0x3, 0xfc18, 0x4761}, &(0x7f0000000080)=0x20) [ 513.060253][ T28] audit: type=1804 audit(1598991793.687:27): pid=10716 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir465990095/syzkaller.mXzROz/3/bus" dev="sda1" ino=15895 res=1 [ 513.104093][ T12] usb 1-1: device descriptor read/64, error 18 [ 513.218582][T10717] IPVS: ftp: loaded support on port[0] = 21 [ 513.231773][ T28] audit: type=1804 audit(1598991793.747:28): pid=10716 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir465990095/syzkaller.mXzROz/3/bus" dev="sda1" ino=15895 res=1 20:23:13 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r2 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="ce"], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000100)=0xc) fcntl$getflags(0xffffffffffffffff, 0x1) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x108, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_PORT_SELF={0xe0, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xdc, 0x2, '\x00\xa8\xd9,\xfa\xab\x15\x02E@=:A\x82\xd0>@\x1a\xbf\x9a4\xa7\x89\x14zv:\x97\x10\x9af$\xb6!\xe2/Y{\x0e\xe32`>+\x81\x04\x00\x96\t\x1d\xfc%\tV\xbf\xa6\x19tc\xac`9Y\xc4\v\f\x04@\xce\x8d\x13w\xa4\xcd\x05\xdbD\x9e\xcd\r\x1a\xd8\xbb\xed{f}\xa7x\x0f\x19\xc3\xfdV\x1aD\'\xc3\xab8\x98\xa9\xa7\"2\x12\xcdUB\xabH}\xbd\x13{\xcb\\\xcacn\x7f+\xc6\xde\x19Q\xa3\xf6\x86}\x9c\x12\xe8\xc2\xaa\xcc\xc0\xf3mj\xbc\xffKa\x1fr\x9al.f\xd6\xb1\xbdE\xa7\xc3D\\\x9f2;\xa4aF\x1f\xb6M\xff\x0e+\x91\x87v\x83a\xafnoB\xa7\x04o\x86^\'\xe7F\x8b9F\xe5\t\xdd\x83d\x9f\xb8k\xe5P\xbaH\xd1<\x8c\xad\xcb\nU\x94\x7f\xb7\xaf\x18G\xe0'}]}, @IFLA_MASTER={0x8}]}, 0x108}}, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000000c0)=r5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8], 0x20}}, 0x0) [ 513.286395][ T12] usb usb1-port1: attempt power cycle [ 513.503861][ T28] audit: type=1804 audit(1598991793.967:29): pid=10716 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir465990095/syzkaller.mXzROz/3/bus" dev="sda1" ino=15895 res=1 [ 513.528789][ T28] audit: type=1804 audit(1598991793.967:30): pid=10716 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir465990095/syzkaller.mXzROz/3/bus" dev="sda1" ino=15895 res=1 20:23:14 executing program 4: clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000000)="0508b33033eccdc9b652e508abccac94399cc0b5fb4a2da577058d055b732571b60447dccd0cc7a8e044325ff4d093653fb609", 0xfffff, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='c', 0xfffff, r0) add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) [ 513.892214][T10732] IPVS: ftp: loaded support on port[0] = 21 [ 513.976943][T10734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 514.023076][T10742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 20:23:14 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) [ 514.153798][ T12] usb 1-1: new high-speed USB device number 38 using dummy_hcd 20:23:14 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000086dd600000000a302b0000000000000000000000000000000000fe800000000000000000000000009baa04009078000000006038ae7500000000fe8000000000000000000000000000aafe8000000000000000000000000000aa9343847ebb48d62320c018a29a8db307c224b073269d423d1c7cde61b4976a8e89fe100ae69617fccc1ea315f82e3a9a27c0b6cda9736d594858abc18ca7c1f3da73d1c33dc3001c743441e98b3cfa9970f8322907c71197435590bff11926d29fd4c0aabdf4bdb79b81a6647306c8452cf570efa57e0dbf4f26411c5796a055f3a8566c48a64b1897413f138fdac5a9a41528be8f82efc09cb7007bb5f7438e9fb8f57e98"], 0x0) [ 514.264532][ T12] usb 1-1: device descriptor read/8, error -71 20:23:15 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) r0 = socket$inet(0x2b, 0x1, 0x1) getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000080)="326e2a374e732f681bad6031ae854e5ca0bd6a37514e745b907884b8834e65497d2a54184c1ded620188d401476d6bb5b5049426ab97fa916ff299d1c1bd75f78a72042e27be", 0x46) mremap(&(0x7f0000196000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000090f000/0x3000)=nil) mbind(&(0x7f00003d2000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000283000/0x3000)=nil, 0x3000) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x0) sendto$ax25(r1, &(0x7f0000000100)="74af9a18e84356ae0f8bfa87a498424d11343df733c2ec22488d5305c2fca4308a65d0158fe9a9dcd312ec8f35a9ef5033ac71c732b75cfd7fc6f195233c08b81f4b2287a552beff5317425f5a4626e4a6365e33d7aaf75edaf810000520ee57dd8afb4b5721cb9895f686403d8ec50e6d6c3abf9ea1aaee5e5baa50e54c7c2710c59dd6ee49207377c7fa311f3a0ed00f488d704ee73cf32616467cbea2fda1e13dc296888cf134f97bbd65290eb4c38cbc928eb6dddad8865bafee472c59e087f0ea75a47df9f1760ebccf0c75bec7c79207a85da6e27419a944aa6df203669f34b32eeab377cbe68eb2dbca61240929573559ca7f1775", 0xf8, 0xed25b0ce98d0fe8f, 0x0, 0x0) [ 514.475077][ T12] usb 1-1: device descriptor read/8, error -71 20:23:15 executing program 1: sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7400000010000104142dfcffffff00feffad1586", @ANYRES32=r1, @ANYBLOB="00000400000000205400128011000100628969646765000000007665000000023c000580050019"], 0x74}, 0x1, 0x88a8ffff}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) 20:23:15 executing program 4: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x0, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1}}}, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8c228, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffff}, 0x42234, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)={0x0, 0x9, 0xfd, "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"}, 0x105) r2 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3ff, 0x1f}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{}, 0x101, 0x0, 0x3ff}) ioctl$NBD_SET_TIMEOUT(r3, 0xab09, 0x400) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) r4 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r4) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80047601, 0x0) set_mempolicy(0x3, &(0x7f0000000200)=0x1, 0x3) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xe4, 0xb, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}, @IPSET_ATTR_IFACE={0x14, 0x17, 'netpci0\x00'}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_ADT={0x74, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80000001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 515.284047][ T12] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 515.464647][ T12] usb 1-1: device descriptor read/8, error -61 [ 515.773775][T10765] IPVS: ftp: loaded support on port[0] = 21 [ 515.857933][T10742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.897896][ T12] usb 1-1: device descriptor read/8, error -61 [ 516.036192][T10759] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 516.077508][ T12] usb usb1-port1: unable to enumerate USB device [ 516.168203][T10772] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 20:23:17 executing program 1: pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x50080) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x20}, 0x526c}}, 0x18) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000080)=0x8) syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 516.450211][T10763] IPVS: ftp: loaded support on port[0] = 21 20:23:17 executing program 3: r0 = socket$kcm(0xa, 0x2, 0x11) shutdown(r0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r0, &(0x7f00000007c0)={&(0x7f0000000240)=@in6={0x2, 0x4e20, 0x0, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x14}}], 0x14}, 0x0) [ 516.662439][ T7] tipc: TX() has been purged, node left! [ 517.162086][T10820] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:23:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000003000ffff000000000000000000000000400001003c00010008000100696665002c0002801c00010000000000000000000000000000000000000100000000ff000c00770ef36c719b06000600050000000000040006000000070000000000000051b6d7e600"/114], 0x54}}, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000000)=""/122) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r2 = dup(r1) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000002c0)=""/247) [ 517.822887][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 20:23:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/ipx\x00') sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b80)}, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000000c0)="bedba76371271ac7b435fbd2c90e6ccd595865757077d185b17dec8a68b55a7a1adebc04df920859eb1762b6a13861e2e24eaad95a0e2bd6b189d43f748cbfc35a7ea5287ec5ce7078cecea631ac53643d0371c9a47b6e105e6ab923f8c92cf2c188ffde47a1e48dab082f936e1c79e331a7bf85eef2adb5f31e2c066a23164d7b004739bd0a50df3ca03f72") 20:23:19 executing program 3: r0 = syz_usb_connect(0x5, 0xa7, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x72, 0x86, 0x1b, 0x40, 0x2013, 0x258, 0x9767, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x95, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe, 0x3, 0x0, 0xba, 0xd0, 0x91, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x400}, [@extension_unit={0x7, 0x24, 0x8, 0x2, 0x7, 0x20}, @extension_unit={0xb, 0x24, 0x8, 0x3, 0x7, 0x5, "b08ff680"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x1ff, 0x3, 0x3, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x302, 0x6, 0x5, 0x7f}]}, @generic={0x56, 0x11, "6e9ce9cc6869b3cd0d7ec6372c3d573e4a36e6c62e96c9c6250cf919f91972106cc71c69e1f6b1ff16e72aedc3250480928ff83fd4ab9c5633dcc44e2ac3f78f206dd02fd4df7e18f8cdbb2c6ddab80afd69eec1"}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 20:23:19 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) 20:23:19 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000ab5c9d20720c110045a80000000109021200411c0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x10, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 20:23:20 executing program 4: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet(0x2b, 0x1, 0x0) getsockname(r4, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) r7 = socket(0x2, 0x803, 0xff) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r8 = dup(r7) r9 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x8000fffffffe) r10 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) r11 = socket$inet(0x2b, 0x1, 0x0) getsockname(r11, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) r12 = openat$dlm_monitor(0xffffff9c, &(0x7f00000034c0)='/dev/dlm-monitor\x00', 0x0, 0x0) io_submit(0x0, 0x8, &(0x7f0000003540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x400, r1, &(0x7f0000000100)="d70a9c88054b74431ad4f6f903d97671ae69d468dc0bad9a5a08c96902290e142b54418ece434b2917fc8bdd06ee91b95cff052b277e659129ebd814318fd27d93ee50cd9797ec2af61f8a631c633c9e19fda73f157cc849ddff8aefff7cb82856a915", 0x63, 0x8}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x1f, r2, &(0x7f0000000340)="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", 0x1000, 0x401, 0x0, 0x4}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x9, r3, &(0x7f00000001c0)="b92f155924ed343b8df1a6f5adb27ab4614040be506f64da15b48a2a570477bab00d6acbfff4b8570015494dcc9c89b6d5b2b1471b853f520213bfb9960cb77b375316e25ed50b629331df8902635bc18a1a6dc1a0d2c10f2730cc108ec4", 0x5e, 0x1, 0x0, 0x2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0xb39, r1, &(0x7f0000001340)="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", 0x1000, 0x1, 0x0, 0x3}, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x2, 0x200, r5, &(0x7f0000002340)="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", 0x1000, 0x100000000, 0x0, 0x1}, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x5, 0xff, r6, &(0x7f0000003580)="4fa3314f9c1cf12f7178a1b0970e0ec26ddaff5d788df03d2f1e44186597309e45dd09ac0ff24b7626486932", 0x2c, 0x6, 0x0, 0x2, r9}, &(0x7f0000003440)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000003400)="f12f28dac3deda5aaae6cff08218a22df289a68f6ad2438f034f5fdaebee791b39891355611f1626f60d19e60bd1ecaf5d46fcd04c868812", 0x38, 0xdc2b, 0x0, 0x3, r10}, &(0x7f0000003500)={0x0, 0x0, 0x0, 0x6, 0xfff7, 0xffffffffffffffff, &(0x7f0000003480)="66dd1426eb8b84738776148b2d79c2a179e29bdf82e3530dd3b9e79f699495", 0x1f, 0x4, 0x0, 0x1, r12}]) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r0, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x45}]}]}]}, 0x34}}, 0x0) [ 519.766401][ T8723] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 519.794990][ T8726] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 519.884919][ T3397] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 519.938694][T10844] tipc: Enabling of bearer rejected, failed to enable media 20:23:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) r3 = socket(0x2, 0x803, 0xff) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r4 = dup(r3) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x8000fffffffe) write$6lowpan_enable(r5, &(0x7f0000000140)='0', 0x1) [ 520.033715][ T8726] usb 2-1: Using ep0 maxpacket: 32 [ 520.050635][ T8723] usb 1-1: device descriptor read/64, error 18 [ 520.067109][ T28] audit: type=1804 audit(1598991800.697:31): pid=10844 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir465990095/syzkaller.mXzROz/7/bus" dev="sda1" ino=15926 res=1 [ 520.092250][ T28] audit: type=1800 audit(1598991800.697:32): pid=10845 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15926 res=0 [ 520.112088][ T28] audit: type=1800 audit(1598991800.697:33): pid=10844 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=15926 res=0 20:23:20 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x2, &(0x7f00000001c0)=[{0x3d}, {0x16}]}) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000180)={0x0, 0xe0, 0x0, 0x1, 0x2}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@sack_info={r0, 0x8, 0x70}, 0xc) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 520.217299][ T8726] usb 2-1: config 28 has too many interfaces: 65, using maximum allowed: 32 [ 520.226488][ T8726] usb 2-1: config 28 has 1 interface, different from the descriptor's value: 65 [ 520.235914][ T8726] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=a8.45 [ 520.245399][ T8726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.335100][ T3397] usb 4-1: config 0 has an invalid interface number: 14 but max is 0 [ 520.343557][ T3397] usb 4-1: config 0 has an invalid descriptor of length 74, skipping remainder of the config [ 520.354851][ T3397] usb 4-1: config 0 has no interface number 0 [ 520.361193][ T3397] usb 4-1: config 0 interface 14 has no altsetting 0 [ 520.368196][ T3397] usb 4-1: New USB device found, idVendor=2013, idProduct=0258, bcdDevice=97.67 [ 520.377486][ T3397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.404598][ T3397] usb 4-1: config 0 descriptor?? [ 520.533676][ T8723] usb 1-1: device descriptor read/64, error 18 [ 520.655408][ T8726] peak_usb 2-1:28.0: PEAK-System PCAN-USB Pro FD v0 fw v0.0.0 (2 channels) [ 520.813850][ T8723] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 520.865668][ T8726] peak_usb 2-1:28.0 can0: sending command failure: -22 [ 520.872797][ T8726] peak_usb 2-1:28.0 can0: sending command failure: -22 [ 520.880744][ T8726] peak_usb 2-1:28.0 can0: sending command failure: -22 [ 521.050394][ T28] audit: type=1326 audit(1598991801.677:34): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=10860 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f91549 code=0x0 [ 521.084928][ T8723] usb 1-1: device descriptor read/64, error 18 [ 521.157650][ T8726] peak_usb: probe of 2-1:28.0 failed with error -22 [ 521.264204][ T8726] usb 2-1: USB disconnect, device number 14 20:23:22 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x49, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1dc}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0910b803"], 0x0, 0x0, 0x0, 0x0}, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xc5, 0x3, 0x3f, "0d57508068a72f9cab72ef75063b56d5", "0d518d8350c137e0fb6dca646f0d3335a84899dab9828cc5d1564130a42ba4ca5b33cdc523ad54d512d46bcc5a76ecfda28b0ae362d41e53e0df61404c3a4c2a866268ba82ff08dabd719054ac98761e66688d3d7c859a919fb6ceb376f59f89518cd7f29ae5dd655572611de0820bd22b28ac35b28c21fce576e9abc076b2d6b625857ca9f224315ae7320f2d82e31acd3b354ec4c434f8c3d434b2e8133627e5016f8935ef8516bef613a795879252"}, 0xc5, 0x2) r1 = socket$inet(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) [ 521.473829][ T8723] usb 1-1: device descriptor read/64, error 18 [ 521.521872][ T28] audit: type=1326 audit(1598991802.147:35): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=10860 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f91549 code=0x0 [ 521.600428][ T8723] usb usb1-port1: attempt power cycle 20:23:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000300)=0xc) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0xfffffff8, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r1, @ANYBLOB='\x00\x00']) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) ioctl$TCSETXW(r3, 0x5435, &(0x7f00000000c0)={0xfff, 0x3, [0x100, 0x3, 0x2, 0x400, 0x1000], 0x4}) [ 521.883628][ T8726] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 522.112549][T10885] hfs: uid requires an argument [ 522.117725][T10885] hfs: unable to parse mount options [ 522.136661][ T8726] usb 2-1: Using ep0 maxpacket: 32 [ 522.174654][ T8725] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 522.247279][T10888] hfs: uid requires an argument [ 522.252399][T10888] hfs: unable to parse mount options [ 522.259080][ T8726] usb 2-1: config 28 has too many interfaces: 65, using maximum allowed: 32 [ 522.268186][ T8726] usb 2-1: config 28 has 1 interface, different from the descriptor's value: 65 [ 522.277874][ T8726] usb 2-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=a8.45 [ 522.287285][ T8726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.365790][ T8723] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 522.434416][ T8725] usb 3-1: Using ep0 maxpacket: 16 [ 522.555043][ T8725] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 522.566695][ T8725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.577977][ T8725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.588030][ T8725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 20:23:23 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff"], 0x0) [ 522.601252][ T8725] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 522.610598][ T8725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.614627][ T8726] peak_usb 2-1:28.0: PEAK-System PCAN-USB Pro FD v0 fw v0.0.0 (2 channels) [ 522.634993][ T8723] usb 1-1: device descriptor read/8, error -71 20:23:23 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$sequencer2(0xffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x440580, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) write(r1, &(0x7f0000000340)="240000002100255107000165ff00fc020a0066c400000000", 0x18) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$inet(0x2b, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000040)=0x80) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x1}}], 0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x0}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r6 = socket$inet(0x2b, 0x1, 0x0) getsockname(r6, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000280)=0x80) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, 0x0) setsockopt$packet_buf(r7, 0x107, 0xd, &(0x7f0000000100)="09d19137331129f2202bb14bde07e8393285d20d7e1d5cec7b927fcccd5bde198da374100308fbfc7c9b6a6f3b1c92b5eb12a05619a648d7a18529164dba7740683c14de13adc98cb47d18dccb4d0e56e60005e48c62b797db7bcd7aec254798331ec6603ffd4cf976fd4c", 0x6b) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="17030400f3ffffff", 0x8, 0x0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffed2) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:23:23 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x4}, 0x8) syz_mount_image$xfs(&(0x7f0000000400)='xfs\x00', &(0x7f0000000000)='./file1\x00', 0x0, 0x2, &(0x7f0000000780)=[{0x0, 0x0, 0x7ff}, {&(0x7f0000000680)="50d3b18106a021dae4b9b1d16012518c3928a06415e42e0e18bb66723af68b5c462267180c56113ee885b0e21dbc0870d426c29a5e6056e84b33734f053490b26ab294c2499d96745807c609b7a3c9f67ac1e3034efef9091481c067a9d6c775", 0x60, 0x6}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00ff6e5ce7e15448d507488f8ef81548d259ef115f3065539b7343431f3a9251fea4f7cfc1c83fd34c85c41b8b21e994bb9ec9d7276b01a2199220ed1987ee8cff8c9a4932db966476a899624208f49a29ec4120ffdc845ac8525e648d4121debf32fe18d2e7e0cdc3b40e5d11a771ebd5342f678847b8f0503f951354d54c3fd501418e92bd86babc00caf756c38b4f7b9edb1d1e4fd6c7c9ea4cadd6ee72814c21e0c0efb5acfc27ef5604bed59aa1ef222b05e2393fe61e9d22858442224736bd9f305b509214e2db8e0a56824fe537ef5e0c98a4b772551c27ec150735574e94df66"]) [ 522.843785][ T8723] usb 1-1: device descriptor read/8, error -71 [ 522.913947][ T3397] usb 4-1: USB disconnect, device number 10 [ 522.926102][ T8726] peak_usb 2-1:28.0 can0: unable to request usb[type=2 value=5] err=-71 [ 522.935241][ T8726] peak_usb 2-1:28.0: unable to tell PCAN-USB Pro FD driver is loaded (err -71) [ 523.050642][ T8725] usb 3-1: config 0 descriptor?? [ 523.155256][ T8726] peak_usb: probe of 2-1:28.0 failed with error -71 [ 523.214477][ T8726] usb 2-1: USB disconnect, device number 15 20:23:24 executing program 1: prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r1 = semget(0x1, 0x3, 0x200) semctl$SEM_INFO(r1, 0x3, 0x13, &(0x7f0000000080)=""/11) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/4096) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) r2 = semget(0x1, 0x3, 0x200) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000080)=""/11) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f00000000c0)=""/109) prctl$PR_SET_MM(0x29, 0x0, &(0x7f00002d6000/0x2000)=nil) [ 523.384837][T10924] skbuff: bad partial csum: csum=65535/0 headroom=2 headlen=14 [ 523.580836][T10925] XFS (loop3): Invalid superblock magic number [ 523.609041][ T8725] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.0005/input/input14 [ 523.655331][ T8723] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 523.810454][ T8725] kye 0003:0458:5010.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 20:23:24 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="2b491201000000000040b304083140000000000109022400010000000009040000f703010000092100000001220500090581030000000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x74, {0x74, 0x0, "21459a461f31f4f1837d00fe67286261555975edac36b8b0637dd7f53a27ff87f01373cfadb487d7dd20037d994834c867a9d84dc13e9e93d66d6876acae0e090026155bdf36cff6bc4c935f67729845caa29fcd96395926193dd8e69fc77016c98dfeed1988675815a62b5663c400d27602"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) [ 523.866093][ T8723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 523.876673][ T8723] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 523.886036][ T8723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.889753][ T8725] usb 3-1: USB disconnect, device number 8 [ 524.089695][ T8723] usb 1-1: config 0 descriptor?? [ 524.172806][ T8723] usb 1-1: bad CDC descriptors [ 524.210083][ T8723] usb 1-1: bad CDC descriptors [ 524.252195][ T8723] cdc_acm 1-1:0.0: Zero length descriptor references [ 524.259685][ T8723] cdc_acm: probe of 1-1:0.0 failed with error -22 20:23:24 executing program 4: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x70) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="1201000014da2108ab12a190eb09000000010902240001000000000904410002ff5d010009050f1f0100000000090583030091"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xf4, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x80008000}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) [ 524.411366][ T8723] usb 1-1: USB disconnect, device number 43 [ 524.654588][ T8725] usb 3-1: new high-speed USB device number 9 using dummy_hcd 20:23:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000240)="f00fc74f906766c7442400010000006766c7442402000000006766c744240600000000670f0114240f22c2baf80c66b8d01a968d66efbafc0c66b8b500000066ef2e99640f0f8200700cbaf80c66b81cb7068166efbafc0cb8aa4feff40f01df0fae060010", 0x65}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = dup(r2) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = openat$autofs(0xffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf], 0x10000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 524.853587][ T3397] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 524.923892][ T8725] usb 3-1: Using ep0 maxpacket: 16 20:23:25 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff"], 0x0) [ 525.033696][ T8677] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 525.052044][ T8725] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 525.063618][ T8725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.074847][ T8725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.085002][ T8725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 73 [ 525.098157][ T8725] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 525.107445][ T8725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.124634][ T3397] usb 4-1: device descriptor read/64, error 18 [ 525.173897][ T8725] usb 3-1: config 0 descriptor?? [ 525.367749][ T8677] usb 5-1: Using ep0 maxpacket: 8 20:23:26 executing program 2: r0 = socket(0x2, 0x803, 0xff) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = dup(r0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'lo\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 525.513510][ T8677] usb 5-1: config 0 has an invalid interface number: 65 but max is 0 [ 525.514379][ T3397] usb 4-1: device descriptor read/64, error 18 [ 525.521765][ T8677] usb 5-1: config 0 has no interface number 0 [ 525.521922][ T8677] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 525.545781][ T8677] usb 5-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 20:23:26 executing program 1: ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4014f50b, &(0x7f0000000080)={0x0, 0x4, 0x1}) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x43, 0xe8, 0xa1, 0x8, 0x6d0, 0x622, 0xb64e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x78, 0xa6, 0xea}}]}}]}}, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000000)=[{'LINE2', @val={' \'', 'CD', '\' '}}, {'DIGITAL1', @void}, {'CD', @val={' \'', 'Capture Volume', '\' '}}, {'LINE3', @void}], 0x58) [ 525.557049][ T8677] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a1, bcdDevice= 9.eb [ 525.566336][ T8677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.595217][ T8725] usbhid 3-1:0.0: can't add hid device: -71 [ 525.601741][ T8725] usbhid: probe of 3-1:0.0 failed with error -71 [ 525.630266][ T8725] usb 3-1: USB disconnect, device number 9 [ 525.721528][ T8677] usb 5-1: config 0 descriptor?? [ 525.746504][ T8726] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 525.785154][ T8677] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.65/input/input15 [ 525.796245][ T3397] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 525.861504][T11003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 525.869744][T11003] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 526.073996][ T3397] usb 4-1: device descriptor read/64, error 18 [ 526.110923][T11003] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.127317][ T8726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.127444][ T8726] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 526.127521][ T8726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.132111][ T8726] usb 1-1: config 0 descriptor?? [ 526.183123][ T8725] usb 5-1: USB disconnect, device number 2 [ 526.189508][ C0] xpad 5-1:0.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 526.189754][ C0] xpad 5-1:0.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 526.211449][ T8725] xpad 5-1:0.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 526.257437][ T8726] usb 1-1: bad CDC descriptors [ 526.291967][ T8726] usb 1-1: bad CDC descriptors [ 526.301119][ T8726] cdc_acm 1-1:0.0: Zero length descriptor references [ 526.308365][ T8726] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 526.387591][ T8723] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 526.477365][ T8726] usb 1-1: USB disconnect, device number 44 [ 526.485015][ T3397] usb 4-1: device descriptor read/64, error 18 20:23:27 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = openat$bsg(0xffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x200200, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/udplite6\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback, 0x8000}, 0x1c) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f00000013c0)=""/201) eventfd(0xe76d) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x23, &(0x7f0000000080), 0x8) setsockopt$sock_linger(r2, 0x1, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000003c0)=""/4096, &(0x7f00000001c0)=0x1000) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/keycreate\x00') getpeername$inet6(r3, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000380)=0x1c) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x2010, r0, 0x791c000) set_mempolicy(0x4002, &(0x7f0000000140)=0x10000101, 0x2) clone(0x4412c580, 0x0, 0x0, 0x0, 0x0) [ 526.607051][ T3397] usb usb4-port1: attempt power cycle [ 526.633817][ T8723] usb 2-1: Using ep0 maxpacket: 8 20:23:27 executing program 4: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x6c}}, 0x0) 20:23:27 executing program 5: write$capi20_data(0xffffffffffffffff, &(0x7f0000000000)={{0x10, 0xff, 0x87, 0x0, 0x3f, 0xbf4e}, 0x93, "585251193709e93dccd288a7dbde34f8996a809c49bd01afbfbf9c5d83b570849ac4b0bbccbce92cf620e1e066bdb0f1fc9949a370b73f316517d622bb5bf0c245deb82b7ce699edd09e8fd2f237dead1a90ca00e5e74a0e6eb0ee73b3bb7e3cfc5fc45c3a0202c87deed0d71c9a7e392ab902862020f43aad39ad28152543ce04a2a45a5e655143c68fdbff5bd3d29646139f"}, 0xa5) ptrace$setregset(0x4205, 0x0, 0x1, &(0x7f00000001c0)={&(0x7f00000000c0)="660187e4f1112167e8124b509513f6cce38a25f7a8c5c21e7d83cfa86db88edfd5db36800bdb580689dad5024e8e1d2ba72448cccd17d764c9ab2ca35a2ba293a7948aa030e05d46e4d100c6ffd3b2777a578d14b65b519f034e8ef5778f7aea59de04352b7d9768d719413c47ccb4cb80ae9b4b352457688626b3c84cef71d22259757c718e751833ec7f4fd91cb68a93966eea345811d818d374a88407f8263a702c2fefaecb2ce444d6005bcf9a51fd53e2f10c4bd167d3a7e5b8e7492eaccfefd7ab52039d546a6f241347911656c00c8f72dcc52f09db2bd1e5fda2172e9c225198eaf4fc289090e18378f2a34a28224d0db8dfd0", 0xf7}) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200)='FREEZING\x00', 0x9) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0, 0x4}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r1, 0x5}, 0x8) r2 = signalfd4(r0, &(0x7f0000000340)={[0x2, 0x3]}, 0x8, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0xf) getresuid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) r4 = syz_mount_image$fuse(&(0x7f0000000380)='fuse\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x1080080, &(0x7f00000004c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}], [{@uid_lt={'uid<', 0xee01}}, {@euid_eq={'euid'}}, {@euid_gt={'euid>', r3}}]}}) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000600)={0x455, 0x221, 0x2, 0x9, 0x8, [{0x1, 0x6, 0x100000000, [], 0x2281}, {0xf5b, 0x100000000, 0x2, [], 0x3785}, {0x1, 0x2be1, 0xfffffffffffffffd, [], 0xb02}, {0x2, 0x7ff, 0x3, [], 0x8}, {0x81, 0x1, 0x1, [], 0xa00}, {0x6, 0x8, 0x6, [], 0x1001}, {0x100000000, 0x800, 0x9a0, [], 0x80}, {0x6, 0x101, 0x62ba, [], 0x1400}]}) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000800)={'vcan0\x00'}) r5 = geteuid() keyctl$get_persistent(0x16, r5, 0xfffffffffffffff8) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) r6 = syz_open_dev$vcsa(&(0x7f0000000940)='/dev/vcsa#\x00', 0x4, 0x153480) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000980)={r1, 0x7ff, 0x5, [0x5, 0x2, 0x9, 0x8, 0x9]}, &(0x7f00000009c0)=0x12) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000a00)=@assoc_value={r7, 0x7}, &(0x7f0000000a40)=0x8) write$P9_RSTAT(r2, &(0x7f0000000a80)={0x63, 0x7d, 0x1, {0x0, 0x5c, 0x9, 0xd65b, {0x0, 0x1, 0x8}, 0x2000000, 0xfffffff7, 0xffffffff, 0x2, 0x2, '--', 0xa, '\\}\\&5+~:#{', 0x7, 'user_id', 0x16, '-:{[{@%:(#.!#(*!.])kk\xbd'}}, 0x63) [ 526.914788][ T8723] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=b6.4e [ 526.924291][ T8723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.932446][ T8723] usb 2-1: Product: syz [ 526.936971][ T8723] usb 2-1: Manufacturer: syz [ 526.941734][ T8723] usb 2-1: SerialNumber: syz 20:23:27 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff"], 0x0) [ 527.108450][ T8723] usb 2-1: config 0 descriptor?? [ 527.157731][ T8723] net1080: probe of 2-1:0.0 failed with error -22 [ 527.224273][T11039] IPVS: ftp: loaded support on port[0] = 21 [ 527.411234][ T3397] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 527.427292][ T26] usb 2-1: USB disconnect, device number 16 20:23:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f30660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x4a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 527.679648][ T3397] usb 4-1: device descriptor read/8, error -71 20:23:28 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xac, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000) [ 527.891013][T11063] IPVS: ftp: loaded support on port[0] = 21 [ 527.914684][ T3397] usb 4-1: device descriptor read/8, error -71 20:23:28 executing program 2: creat(0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0xfffffcaa) r2 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) [ 528.056546][ T8723] usb 1-1: new high-speed USB device number 45 using dummy_hcd 20:23:28 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="1c0000004a005f0214f9f424000904000a", 0xfffffffffffffc70) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) [ 528.514532][ T28] audit: type=1804 audit(1598991809.147:36): pid=11104 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir465990095/syzkaller.mXzROz/13/file0" dev="sda1" ino=15954 res=1 [ 528.574516][ T8723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.585028][ T8723] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 528.594422][ T8723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:23:29 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vga_arbiter(0xffffff9c, 0x0, 0x2000, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="680e000030003dfa000000000000000000000000540e0100500e01000a0001007065646974000000240e0280200e020000000000000000000000000000000000000000000100"/874], 0xe68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x0, 0x0, {0x5, 0x0, 0x3}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}, 0x1, 0xfcffffff00000000, 0x0, 0x8040}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x4) [ 528.830033][ T8723] usb 1-1: config 0 descriptor?? 20:23:29 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3}]}}}}}}, 0x0) [ 528.905235][ T8723] usb 1-1: bad CDC descriptors [ 528.970572][ T8723] usb 1-1: bad CDC descriptors [ 528.976830][ T8723] cdc_acm 1-1:0.0: Zero length descriptor references [ 528.983964][ T8723] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 529.202178][ T8723] usb 1-1: USB disconnect, device number 45 [ 529.480366][T11134] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 20:23:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000340)={{0x1b, 0x5b, 0x32, 0x7, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 20:23:30 executing program 2: 20:23:30 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f010000"], 0x0) 20:23:30 executing program 4: [ 530.745063][ T12] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 530.929280][T11138] IPVS: ftp: loaded support on port[0] = 21 [ 531.128216][ T12] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.138600][ T12] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 531.148001][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.201292][ T12] usb 1-1: config 0 descriptor?? [ 531.252137][ T12] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 531.260529][ T12] rndis_host: probe of 1-1:0.0 failed with error -22 [ 531.268341][ T12] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 531.276477][ T12] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 531.283220][ T12] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 531.449574][ T12] usb 1-1: USB disconnect, device number 46 [ 531.620018][T11138] chnl_net:caif_netlink_parms(): no params data found [ 531.822734][T11138] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.830382][T11138] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.876327][T11138] device bridge_slave_0 entered promiscuous mode [ 531.910871][T11138] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.918341][T11138] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.929283][T11138] device bridge_slave_1 entered promiscuous mode [ 532.049534][T11138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.104362][T11138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.200109][T11138] team0: Port device team_slave_0 added [ 532.228033][T11138] team0: Port device team_slave_1 added [ 532.285536][T11138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.293240][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.319754][T11138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.350708][T11138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.359115][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.388983][T11138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.480445][T11138] device hsr_slave_0 entered promiscuous mode [ 532.492005][T11138] device hsr_slave_1 entered promiscuous mode [ 532.504510][T11138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.512143][T11138] Cannot create hsr debugfs directory [ 532.709127][ T3397] Bluetooth: hci5: command 0x0409 tx timeout [ 532.926525][T11138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 532.952214][T11138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 533.006405][T11138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 533.051332][T11138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 533.494596][T11138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.554002][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 533.563648][ T8725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 533.596951][T11138] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.640415][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 533.651101][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.661852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.669272][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.724893][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.735555][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.746241][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 533.755939][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.763202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.772586][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.784133][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.920140][T11138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 533.931358][T11138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.105149][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.116602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.128072][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.139601][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.150332][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.160927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.171918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.182167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.500527][T11138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.552516][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.562864][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 534.572786][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.583878][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.784368][ T3397] Bluetooth: hci5: command 0x041b tx timeout [ 535.533697][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 535.544862][ T8677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.834711][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 535.845006][ T3397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 535.931031][T11138] device veth0_vlan entered promiscuous mode [ 536.024203][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 536.034319][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 536.369406][T11138] device veth1_vlan entered promiscuous mode [ 536.546346][ T8723] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 536.866308][ T8723] Bluetooth: hci5: command 0x040f tx timeout [ 536.966989][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.977681][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 537.067757][T11138] device veth0_macvtap entered promiscuous mode [ 537.172664][T11138] device veth1_macvtap entered promiscuous mode [ 537.322505][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 537.334420][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.344577][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 537.355457][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.365506][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 537.376080][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.386117][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 537.396685][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.406752][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 537.417332][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.432711][T11138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.454917][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 537.465883][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 537.475930][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.486793][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.522393][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 537.533113][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.546315][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 537.556989][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.567043][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 537.577717][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.587855][T11138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 537.598497][T11138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.614146][T11138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.626716][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.638307][ T8724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 20:23:38 executing program 5: 20:23:38 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) openat$vga_arbiter(0xffffff9c, 0x0, 0x2000, 0x0) openat$nvram(0xffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) setresgid(0xee00, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="680e000030003dfa000000000000000000000000540e0100500e01000a0001007065646974000000240e0280200e020000000000000000000000000000000000000000000100"/874], 0xe68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x3c, r2, 0x1, 0x0, 0x0, {0x5, 0x0, 0x3}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}, 0x1, 0xfcffffff00000000, 0x0, 0x8040}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) socket(0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 20:23:38 executing program 1: 20:23:38 executing program 2: 20:23:38 executing program 4: 20:23:38 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f010000"], 0x0) 20:23:39 executing program 2: 20:23:39 executing program 4: 20:23:39 executing program 1: [ 538.734967][ T8677] usb 1-1: new high-speed USB device number 47 using dummy_hcd 20:23:39 executing program 5: [ 538.944702][ T3397] Bluetooth: hci5: command 0x0419 tx timeout 20:23:39 executing program 3: [ 539.124718][ T8677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.135074][ T8677] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 539.144415][ T8677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.314411][ T8677] usb 1-1: config 0 descriptor?? [ 539.386528][ T8677] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 539.394882][ T8677] rndis_host: probe of 1-1:0.0 failed with error -22 [ 539.402539][ T8677] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 539.410776][ T8677] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 539.417600][ T8677] cdc_acm: probe of 1-1:0.0 failed with error -22 20:23:40 executing program 2: 20:23:40 executing program 1: 20:23:40 executing program 4: [ 539.624457][ T8677] usb 1-1: USB disconnect, device number 47 20:23:40 executing program 5: 20:23:40 executing program 3: 20:23:40 executing program 1: 20:23:40 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f010000"], 0x0) 20:23:40 executing program 2: 20:23:40 executing program 4: 20:23:41 executing program 5: 20:23:41 executing program 3: 20:23:41 executing program 1: 20:23:41 executing program 2: 20:23:41 executing program 4: 20:23:41 executing program 5: 20:23:41 executing program 3: [ 541.074116][ T3397] usb 1-1: new high-speed USB device number 48 using dummy_hcd 20:23:41 executing program 1: 20:23:42 executing program 2: [ 541.435081][ T3397] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.445709][ T3397] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 541.455811][ T3397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.655109][ T3397] usb 1-1: config 0 descriptor?? [ 541.716451][ T3397] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 541.724623][ T3397] rndis_host: probe of 1-1:0.0 failed with error -22 [ 541.732176][ T3397] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 541.740499][ T3397] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 541.747446][ T3397] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 541.998361][ T3397] usb 1-1: USB disconnect, device number 48 20:23:43 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f010000000000000000000624"], 0x0) 20:23:43 executing program 3: 20:23:43 executing program 4: 20:23:43 executing program 5: 20:23:43 executing program 1: 20:23:43 executing program 2: 20:23:43 executing program 5: 20:23:43 executing program 1: 20:23:43 executing program 3: 20:23:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x33, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fe6000)={0x2, 0x4, 0x4, 0x100000009, 0x0, 0x1}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x3, 0x7, &(0x7f0000000000)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r2, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) 20:23:43 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x10000, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x10034) 20:23:44 executing program 5: [ 543.474356][ T3397] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 543.834852][ T3397] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.845374][ T3397] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 543.854715][ T3397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.048201][ T3397] usb 1-1: config 0 descriptor?? [ 544.128907][ T3397] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 544.137045][ T3397] rndis_host: probe of 1-1:0.0 failed with error -22 [ 544.145409][ T3397] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 544.153609][ T3397] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 544.160339][ T3397] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 544.369690][ T3397] usb 1-1: USB disconnect, device number 49 20:23:45 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f010000000000000000000624"], 0x0) 20:23:45 executing program 1: 20:23:45 executing program 3: 20:23:45 executing program 4: 20:23:45 executing program 5: 20:23:45 executing program 2: 20:23:45 executing program 5: 20:23:45 executing program 4: 20:23:45 executing program 3: 20:23:45 executing program 2: 20:23:45 executing program 1: [ 545.713671][ T8723] usb 1-1: new high-speed USB device number 50 using dummy_hcd 20:23:46 executing program 2: [ 546.095029][ T8723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.105491][ T8723] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 546.114843][ T8723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.207769][ T8723] usb 1-1: config 0 descriptor?? [ 546.258977][ T8723] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 546.267664][ T8723] rndis_host: probe of 1-1:0.0 failed with error -22 [ 546.275343][ T8723] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 546.283578][ T8723] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 546.290433][ T8723] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 546.450146][ T8723] usb 1-1: USB disconnect, device number 50 20:23:47 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f010000000000000000000624"], 0x0) 20:23:47 executing program 5: 20:23:47 executing program 1: 20:23:47 executing program 4: 20:23:47 executing program 3: 20:23:47 executing program 2: 20:23:48 executing program 3: 20:23:48 executing program 2: 20:23:48 executing program 4: 20:23:48 executing program 1: 20:23:48 executing program 5: [ 547.830735][ T8723] usb 1-1: new high-speed USB device number 51 using dummy_hcd 20:23:48 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) [ 548.194646][ T8723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.205110][ T8723] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 548.214535][ T8723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.301337][ T8723] usb 1-1: config 0 descriptor?? [ 548.358894][ T8723] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 548.367014][ T8723] rndis_host: probe of 1-1:0.0 failed with error -22 [ 548.374849][ T8723] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 548.382851][ T8723] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 548.390489][ T8723] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 548.550275][ T3397] usb 1-1: USB disconnect, device number 51 20:23:49 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a000000"], 0x0) 20:23:49 executing program 3: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc008561c, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) 20:23:49 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xfffffffffffffeca, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x942614271ecad7f9) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2) 20:23:49 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000380)="1c0000001a009bae5700af0f550000adf86e28000000008d00000000", 0x1c) recvmmsg(r0, &(0x7f0000007d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 20:23:49 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x8, 0x101}, 0x14}}, 0x0) 20:23:49 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000080)={'tunl0\x00', @ifru_data=&(0x7f0000000040)="0c3de7810adb8de2000ccd0cd96673804eef09ef6c03524b4ef8781b72bbe793"}) 20:23:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0) 20:23:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x84, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x84}}, 0x0) 20:23:50 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000040)='tmpfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'local'}}, 0x33}]}) 20:23:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}]}, 0x24}}, 0x0) 20:23:50 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x19) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a0f000", 0x8, 0x3a, 0x0, @empty={[0x0, 0x0, 0x78]}, @mcast2, {[], @echo_request}}}}}, 0x0) [ 550.008727][T11590] tmpfs: Bad value for 'mpol' [ 550.037157][T11590] tmpfs: Bad value for 'mpol' 20:23:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, 0x1c) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) [ 550.085747][ T8677] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 550.484914][ T8677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.495707][ T8677] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 550.505071][ T8677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.601633][ T8677] usb 1-1: config 0 descriptor?? [ 550.681289][ T8677] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 550.689677][ T8677] rndis_host: probe of 1-1:0.0 failed with error -22 [ 550.697391][ T8677] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 550.706965][ T8677] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 550.713776][ T8677] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 550.856706][ T8677] usb 1-1: USB disconnect, device number 52 20:23:52 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a000000"], 0x0) 20:23:52 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="bf", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close(r0) 20:23:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001540)=[{0xc2010000, 0x0, &(0x7f0000000880)=[{&(0x7f0000000100)='W', 0x1}], 0x1}], 0x1, 0x0) 20:23:52 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000800f109a708f78293c8744e1a", 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0}, 0x40) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000000)=0x2) 20:23:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14}, @NFT_MSG_DELOBJ={0x14}], {0x14, 0x10}}, 0x50}}, 0x0) 20:23:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x125f, 0x0) 20:23:52 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000300)=""/209, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x1, r2}) 20:23:52 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x7, 0x0, &(0x7f0000000040)) 20:23:52 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback}, {@in6=@mcast2, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'poly1305-arm\x00'}}}]}, 0x138}}, 0x0) 20:23:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f02000000000000000001000000000000000c41f00000140014"], 0x30}, 0x1, 0xfffffff0}, 0x0) 20:23:52 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{&(0x7f0000000240)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, 0x0}}], 0x1, 0x0) [ 552.426863][ T8723] usb 1-1: new high-speed USB device number 53 using dummy_hcd 20:23:53 executing program 1: r0 = socket(0x29, 0x2, 0x0) write(r0, &(0x7f0000000000)="fc", 0x1) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) close(r0) [ 552.794855][ T8723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.805596][ T8723] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 552.814965][ T8723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.992883][ T8723] usb 1-1: config 0 descriptor?? [ 553.051982][ T8723] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 553.060524][ T8723] rndis_host: probe of 1-1:0.0 failed with error -22 [ 553.068358][ T8723] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 553.076578][ T8723] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 553.083408][ T8723] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 553.239731][ T8723] usb 1-1: USB disconnect, device number 53 20:23:54 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a000000"], 0x0) 20:23:54 executing program 3: prctl$PR_GET_PDEATHSIG(0x25, &(0x7f0000000000)) 20:23:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x300) 20:23:54 executing program 4: chdir(0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v3, 0x18, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 20:23:54 executing program 5: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000040)=""/145) 20:23:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000040), 0x4) sendto$inet(r0, &(0x7f0000000dc0)="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", 0xc91, 0x0, 0x0, 0xffffffffffffffbc) 20:23:54 executing program 2: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) ioctl$FS_IOC_FIEMAP(r0, 0x40086602, &(0x7f0000000280)=ANY=[@ANYBLOB='(']) write$char_raw(r0, 0x0, 0x0) 20:23:54 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0xffff, 0x0, 0xffffffbc, 0x10}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x26) 20:23:55 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7, 0x1, 'fq\x00'}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x2}, @TCA_FQ_ORPHAN_MASK={0x8}]}}]}, 0x40}}, 0x0) 20:23:55 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:23:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000100)=@in={0x0}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@authinfo={0x1c}], 0x10}, 0x0) [ 554.844668][ T8723] usb 1-1: new high-speed USB device number 54 using dummy_hcd 20:23:55 executing program 2: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 555.027313][T11501] Bluetooth: hci0: command 0x0406 tx timeout [ 555.207653][ T8723] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.218171][ T8723] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 555.227787][ T8723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.326472][ T8723] usb 1-1: config 0 descriptor?? [ 555.381005][ T8723] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 555.400080][ T8723] rndis_host: probe of 1-1:0.0 failed with error -22 [ 555.408827][ T8723] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 555.417940][ T8723] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 555.425762][ T8723] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 555.568678][ T8723] usb 1-1: USB disconnect, device number 54 20:23:56 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a0000000424"], 0x0) 20:23:56 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)=' ', 0x1}], 0x1}, 0x40) 20:23:56 executing program 4: clone(0x4300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x13, &(0x7f0000000100)) ptrace(0x10, r0) waitid(0x0, 0x0, 0x0, 0x100000b, 0x0) 20:23:56 executing program 1: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) listen(r1, 0x3) 20:23:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000300)) 20:23:57 executing program 2: sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 20:23:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x0) 20:23:57 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x40000d) 20:23:57 executing program 1: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd0, 0x18c, 0x148, 0xd0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'bridge_slave_0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0xfdb3) [ 556.993625][ T12] usb 1-1: new high-speed USB device number 55 using dummy_hcd 20:23:57 executing program 4: socket$inet(0x2b, 0x801, 0x1) 20:23:57 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x4}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x3a) 20:23:57 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETGROUP(r0, 0x400454c8, 0xffffffffffffffff) [ 557.384511][ T12] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 557.393955][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.465754][ T12] usb 1-1: config 0 descriptor?? [ 557.536999][ T12] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 557.545748][ T12] rndis_host: probe of 1-1:0.0 failed with error -22 [ 557.553272][ T12] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 557.561429][ T12] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 557.568327][ T12] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 557.740200][ T12] usb 1-1: USB disconnect, device number 55 20:23:58 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a0000000424"], 0x0) 20:23:58 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="240000001a0003041dfffd946f6105000a00000a1f000003006708000800030040000000", 0x24}], 0x1}, 0x0) 20:23:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4ffffff]}, 0x800, 0x0, 0xff}, 0x22) 20:23:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x18, 0x0, &(0x7f0000000080)) 20:23:58 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x12, 0x0, 0x0) 20:23:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, 0x0, 0x6, 0x101}, 0x14}}, 0x0) 20:23:59 executing program 5: io_setup(0x7, &(0x7f0000000180)=0x0) r1 = socket(0x2, 0x5, 0x0) io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 20:23:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fffffff81000000000000dca8f76d8ea513dfb08c00940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000140010c0900fcff0000040e17a5", 0x58}], 0x1) 20:23:59 executing program 1: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x340, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1a0}}, {{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'lo\x00', 'team0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ipv6={@private0, @local, [], [], 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 20:23:59 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}], 0x20}, 0x0) 20:23:59 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) 20:23:59 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x6, 0xd, 0x0, 0x64) [ 559.063642][ T8723] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 559.427245][ T8723] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 559.436660][ T8723] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.583591][ T8723] usb 1-1: config 0 descriptor?? [ 559.654427][ T8723] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 559.662404][ T8723] rndis_host: probe of 1-1:0.0 failed with error -22 [ 559.670176][ T8723] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 559.678458][ T8723] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 559.685395][ T8723] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 559.946454][ T8723] usb 1-1: USB disconnect, device number 56 20:24:01 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a0000000424"], 0x0) 20:24:01 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x5012c2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) 20:24:01 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmsg$sock(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001480)="4d19be16b52fe1fb60ae91b8d1f4a6a2b952c2c93cbcf7ae94165b44771b11e33f65490fbc4228b50f5f38706578bea101a063d8c9b605877016087a5f6a2cd59d04ee9c1435f612b8b118aed17d4f3d9f017e5de8e8c2aaabcf15fc8fb0a0fdf06526a011c9d6c54d5b3bd1289f208e155c3bef1625da330b7f26eb8649f31334d31786070e5595bd632ab6b562f08058216c8d18ed821fc508c36f8419d029c078411a42338972191b936aec8114731bc32cb73052ee2a5757b5dbc836b0ede3ebafb7c4e25692cb", 0xc9}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="f685a288c84ec47e44864a1ae8659eb07e2f26d6c91f25104caa92162d00eba54e68088986aa066431445c5412f138db82e75760578858a6259283c4958956ef0217ed787072bbfb32de603a48f306d3e6346b7c9328b5b8f805a4dc61538e3bc88cdc349dabf717313af026ca16b9669abd", 0x72}, {&(0x7f0000001b40)="cfd063443cdc8585517304d96a713e7fb6273277543dd8cc3f1f2506e70e28180a2d2cf93495d7ef3a25d4b8a05b98a627ae8e98ed6f0fa2c78dd9ce1b9ef81f7c9274c78b198e5032c69cf8ebe9d42dd43d2f19d49ebb5e33cf00ec91a7", 0x5e}, {&(0x7f00000004c0)="8dbfe1345ced9bba8d9344ea79f546d062688ec9466055f891036dac4da8dc5292e3cf612cd6aa2e8dac0ab5a5a7870583a55f5532dab01a6cdf423cc09d60adbd4a2e14a3bb524a1abd3ff286c40bbdbc9e71b9853d4c19b37d45997a54acd7d1695c00af12431be9aeffbfee0f9a9f3f6e6cdee0f3398240572a472ec5688c9c9145e9b21829b5fb74575075e2669995362b8f78260228a6cbf5d138a73d7232404c46e4ea4c6e0466c313126292910cc9864657a3ea400368391c5363036eb2c0fea0acab97cc4864d87f3ccc78d9e33268d22a859f49f11e0bf075c83d46c49b789401c7628eb5bf941b5c3af249ecfc5603a5ea42e09564f1", 0xfb}, {&(0x7f0000000880)="a8e43c937519fb1d89c43084d82103e2b1d6eff5098c14c3b82b95228909a2e8b090eea9c1ea5920740b20c7dc2ab807bed24fd85177cf8cef980b8941fadb3093cabba71eece5bc8a3f02da1276526b40fad694021ad694c6df1642c6cb07e2248f732499adbdf51ea1c03aff00000039656781a086b81f5241c61042ced80e655b1866cb2f2f9d599fa601a13d7ac000002100000000000000", 0x9a}, {&(0x7f0000000700)="f1392ca58994c71206b40eb0cc114480af288dbdfddb9c0c98a46dac3c6f9f4a48d146f0e73d91233a3fe1befb27ef6508804009087b4c0edc16f54d6c13d0b61ddd02dd694c6d61de568252a6eb073af6505ea892b91cb7ce49cf5aa201534fca4c10cd3225a13714c071da7e79e6b5585636", 0x73}], 0x5}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860007ff65ac618ded897489549ddea98abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf74", 0xa04, 0x11, 0x0, 0x27) 20:24:01 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, 0x0) 20:24:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 20:24:01 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 20:24:01 executing program 4: syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="030005000514af0003140000000000ffffffa90000000000000000000500000000205400ffffffffa000800000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 20:24:01 executing program 2: setreuid(0xee01, 0x0) r0 = getuid() setreuid(0xee01, r0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89a0, 0x0) 20:24:01 executing program 1: r0 = socket(0x1e, 0x2, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x10f, 0x82, 0x0, 0x300) 20:24:01 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4}, 0x10) [ 561.210182][T11850] loop4: p2 p3[DM] [ 561.213622][ T8724] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 561.214370][T11850] loop4: partition table partially beyond EOD, truncated [ 561.229880][T11850] loop4: p2 size 327680 extends beyond EOD, truncated [ 561.473121][T11850] loop4: p3 start 10551295 is beyond EOD, truncated 20:24:02 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x4, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 561.616126][ T8724] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 561.625399][ T8724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:24:02 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040), 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) [ 561.772775][ T8724] usb 1-1: config 0 descriptor?? [ 561.889968][ T8724] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 561.898440][ T8724] rndis_host: probe of 1-1:0.0 failed with error -22 [ 561.908255][ T8724] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 561.917088][ T8724] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 561.924085][ T8724] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 562.155425][ T8724] usb 1-1: USB disconnect, device number 57 20:24:03 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a000000042402"], 0x0) 20:24:03 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) 20:24:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f0000001600)={[{@numtail='nonumtail=0'}]}) 20:24:03 executing program 5: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) [ 562.940438][T11881] FAT-fs (loop4): bogus number of reserved sectors [ 562.947436][T11881] FAT-fs (loop4): Can't find a valid FAT filesystem [ 563.002027][T11886] 9pnet_virtio: no channels available for device syz [ 563.050211][T11881] FAT-fs (loop4): bogus number of reserved sectors [ 563.057086][T11881] FAT-fs (loop4): Can't find a valid FAT filesystem 20:24:03 executing program 5: r0 = socket(0x15, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) 20:24:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/31, 0x1f}], 0x1, 0x80000001, 0x0) 20:24:04 executing program 3: preadv2(0xffffffffffffffff, &(0x7f00000027c0)=[{&(0x7f0000000300)=""/134, 0x86}], 0x1, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x375, 0x0, 0x0) [ 563.614065][T11501] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 564.005295][T11501] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 564.015252][T11501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 20:24:04 executing program 5: perf_event_open(&(0x7f0000000040)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 564.099213][T11501] usb 1-1: config 0 descriptor?? 20:24:04 executing program 1: pkey_mprotect(&(0x7f0000698000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 20:24:04 executing program 3: symlink(&(0x7f0000000300)='..', &(0x7f00000002c0)='./file0\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='ubifs\x00', 0x0, 0x0) [ 564.197869][T11501] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 564.206560][T11501] rndis_host: probe of 1-1:0.0 failed with error -22 [ 564.215358][T11501] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 564.223412][T11501] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 564.230263][T11501] cdc_acm: probe of 1-1:0.0 failed with error -22 20:24:04 executing program 4: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={[{@block={'block', 0x3d, 0x800}}]}) [ 564.444597][T11501] usb 1-1: USB disconnect, device number 58 20:24:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000031000100000000000000000000000000380001003400010008000100627066000c0003"], 0x4c}}, 0x0) 20:24:05 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a000000042402"], 0x0) 20:24:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) 20:24:05 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x11, &(0x7f00000001c0)={@multicast2, @dev, @local}, 0xc) [ 565.174659][T11923] ISOFS: Unable to identify CD-ROM format. [ 565.264970][T11501] Bluetooth: hci1: command 0x0406 tx timeout 20:24:06 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000140)={0x16, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) 20:24:06 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e00)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) [ 565.373562][T11923] ISOFS: Unable to identify CD-ROM format. 20:24:06 executing program 5: exit_group(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000380)='system.posix_acl_access\x00', &(0x7f0000001880)=ANY=[@ANYBLOB="020000000100020000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x34, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') 20:24:06 executing program 4: r0 = socket$inet6(0xa, 0x40000080806, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) 20:24:06 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000001080)) [ 565.993728][ T3228] usb 1-1: new high-speed USB device number 59 using dummy_hcd 20:24:06 executing program 5: mkdir(0x0, 0x0) socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000000ef2d30ed9e9ae396fcc43020ed7dbc3b7c3fd06c3aed8a89b7085bd01433b0360341925d090efe0d2369c59c71aad05c6d0fe532bfa0abfab9686ba2050c64ef17096431429b00c92d1c105cab83a91537753b06f81a7a2ced6159b8161e81fbe6e51068017de70b90825cdc4dae5c5c807bd49093fb976ec196e2b721e03ae0105bedab2ec3328435ed198f80b82c02d9974adee7743c3924534a1ce29c10751eed6d9c5aeea67b4750af60eff7e99bf4f4f51aafa96b4cb76cc03b49d172cf77ae0cc07331e4e09bdf16e7865ec2bcff59f24a97e1fc2d7d91a591947d04e5c3d43f6a1c7d6b88ea19ce81fd3609ee714a1155a58d7652f03d6f12b9d2ffd9b1ea7e860f35856ad54c182c773174e31f613b179b9c2fa209dce42d02aad1011c1effcb5f91f217eb332b44083b18b4844ec26135ffceb563529aed06a9c0015d1d84c096eb9ea4d110d0c8a85cddfc07c24dd107d86982feec979db5209c7256d7827820f5c8b17f19b5b2d118c406b4e8368b2d29eb98a00f100e7b196360be847201c080000007f81459fbb22a4964c98812047248cf6802788b2b3f4bf6cf42e276476302d96c63d290ee4e59bde664c5becf971e9214f6bce3513789a7e75ce51bf797e106c76ca85abdbec1c0eaa5659238b14c5c23146321c6b604d4ce89ce87fcf8b647de74241c116f6ae2ec5ad87c8f31a4a4bf60341198ebcdb9c20c3b68ebf7d856eea12e0545c5f545e8814d2f6b0206713649947fa4059e040e1f2fc59df8dcad8abfbe08952b6eaeef47e17065c3000341fa87d695c6c9b058372b554b3ec77248a7846fee2266f30ac7d200f0fe23651b053d17c36827c894b80912af524ece4a7d8df41050f35a9f48b6dd350a5953b0a0d5d5b4242288f1f96fcc2ea8ad68903925492565b85abf9952355d9a228092c8064903852af9c606bbfbccc4ba50ad3c1121b27af5b9b4421efe029c56ed54a312adb9653a490bdd2b44e38a12235d7eb6adfd6f2e7e8539fcae286fdd106f925450e131d0dd7323cda7af3ada8767d530ac53080d5a44f1dada62c4e49c9978ff61736f8044352f0bd92180d1e2838ca165fdddf6136babab1d4aa2af869432f97e18c1d00000036861bd4256057141c8b86094fbcfe79f45757759b09b17ce2ed2797397d544ea2b50be03264306c5d68fbaa76bb756b0abb8a22324dbd08aff480e4fc773a2b1ae305e99fc19365217376c5d1bdf556a3200dbf106bc09b646d742137952b5655b9c44940ea6e05e34ad73896f7e438bd25a0b236625bb1"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002e0, 0xe, 0x80000, &(0x7f0000000280)="b95b03b700030005439e40f088a8", 0x0, 0x1a4, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setattr(0x0, 0x0, 0x0) chdir(0x0) 20:24:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$sock(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1}}, {{&(0x7f0000000100)=@nfc, 0x80, 0x0}}], 0x2, 0x0) 20:24:07 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {}, [@qdisc_kind_options=@q_sfq={{0x54, 0x1, 'sfq\x00'}, {0x4c}}]}, 0x78}}, 0x0) [ 566.386880][ T3228] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 566.396146][ T3228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.481793][ T3228] usb 1-1: config 0 descriptor?? 20:24:07 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f00000001c0)) [ 566.615392][ T3228] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 566.623978][ T3228] rndis_host: probe of 1-1:0.0 failed with error -22 [ 566.631553][ T3228] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 566.639796][ T3228] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 566.646670][ T3228] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 566.874130][ T3228] usb 1-1: USB disconnect, device number 59 20:24:08 executing program 0: syz_usb_connect(0x0, 0x45, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000078e1be4021047502556c0000000109023300010000000009040000000202ff00052406000005240000000d240f0100000000000000000006241a000000042402"], 0x0) 20:24:08 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@remote, 0x0, 0x0, 0x2, 0x9}, 0x20) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) dup3(r2, r0, 0x0) 20:24:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380100001a000108cf4dac26306b6835397c81e651b56eecba290000007485ac5fb0e3daef21b27aa924bab3619673862f5d00"/64, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c0000000300000000000000000000000000000100000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) 20:24:08 executing program 2: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x20000200009e5c, 0x400000000000087f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) tkill(r0, 0xb) ptrace$setopts(0x4206, r0, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) 20:24:08 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x168, 0x168, 0x0, 0x168, 0x0, 0x3b0, 0x250, 0x250, 0x3b0, 0x250, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x168, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x1000}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@ipv6={@local, @ipv4={[], [], @loopback}, [], [], 'netdevsim0\x00', 'ip6_vti0\x00'}, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@private0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @dev, @local, @private0, @ipv4={[], [], @local}, @mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private0, @private1, @ipv4={[], [], @remote}, @private0]}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "45e9a767c4c3b3fc1b7ecd8b97815668abbdcdbca268c1aa0729232feb1e"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) 20:24:08 executing program 5: syz_emit_ethernet(0x9e, &(0x7f0000000200)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x68, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce540cd4f791153d5dea6b2590b1c71a8242373244ad2439adc07df0a69748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c11b37adac15084dbaf736b41e5a80302"}, {0x0, 0x1, "ad0d000000000000b267bc6c"}]}}}}}}, 0x0) 20:24:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) [ 567.544396][T11990] NFS: Device name not specified 20:24:08 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) fcntl$dupfd(r3, 0x0, r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) 20:24:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001500add427323b472545a45602117fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac710d2d82817a90d626c65280003ffffffffffffffffffffffe7ee000000", 0x58}], 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x8}, 0x0) 20:24:08 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) 20:24:08 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x8906, 0x0) [ 568.175494][ T8677] usb 1-1: new high-speed USB device number 60 using dummy_hcd 20:24:09 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="d00800002400ffff01009e000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 568.654843][ T8677] usb 1-1: New USB device found, idVendor=0421, idProduct=0275, bcdDevice=6c.55 [ 568.664252][ T8677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.747411][ T8677] usb 1-1: config 0 descriptor?? [ 568.820362][ T8677] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 568.828704][ T8677] rndis_host: probe of 1-1:0.0 failed with error -22 [ 568.836441][ T8677] cdc_acm 1-1:0.0: Control and data interfaces are not separated! [ 568.844637][ T8677] cdc_acm 1-1:0.0: This needs exactly 3 endpoints [ 568.851416][ T8677] cdc_acm: probe of 1-1:0.0 failed with error -22 [ 569.111292][ T8677] usb 1-1: USB disconnect, device number 60 20:24:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x2) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000600)) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x81, 0x3, 0x7, 0x80, 0x0, 0x80000000, 0x4400, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040)}, 0x40, 0xffffffff7fffffff, 0x0, 0x7, 0x8, 0x0, 0x9056}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') 20:24:10 executing program 3: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f00000005c0)=ANY=[@ANYBLOB='[d::]:0:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 20:24:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@loopback, @ipv4={[0x0, 0x0, 0x8], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2}) 20:24:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) 20:24:10 executing program 1: r0 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x4) lseek(r0, 0x0, 0x1) 20:24:10 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 20:24:10 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 20:24:11 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17ec42107f2e6ddbe1150296c6a6db4afa7c81b2636b1c5fbe24ec8831700000000000000000000000000001e19595acb1c70cb679c7d978f4efb3ec1804b058c175666aca33187dbba3c23b3b9432cae007b6e6d29e76a4a22b8c09987f8d5a9f4f116df8bd3ce32c3df65db4c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141433e000000162079f4b4d2f87e5feca6aab840413f2325f1a390104050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) 20:24:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}}) 20:24:11 executing program 4: setuid(0xee00) socket(0x23, 0x0, 0x0) 20:24:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x8090ae81, &(0x7f0000000000)) 20:24:11 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$pppoe(r0, 0x0, 0x0) 20:24:11 executing program 2: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getpid() r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0xe43) perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x3, 0x1, 0x1, 0x7f, 0x0, 0x5, 0x7000, 0xf014e01814af1a36, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x4, @perf_config_ext={0x10000, 0x7}, 0x2100, 0xda7, 0x81, 0x2, 0x1, 0xfffffffd, 0x40}, 0x0, 0x9, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)) [ 571.054187][T12056] syz-executor.5 (12056) used greatest stack depth: 4264 bytes left 20:24:12 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0x400448ca, 0x0) 20:24:12 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x6, 0xd, 0x0, &(0x7f0000000980)) 20:24:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB='\v'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffe0}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x8, 0x2, [@TCA_TCINDEX_ACT={0x4}]}}]}, 0x38}}, 0x0) 20:24:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r0, &(0x7f0000000100), 0xe) 20:24:12 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000100)={0x0, 0x5, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f2d9f401"}, 0x0, 0x0, @planes=0x0}) 20:24:12 executing program 1: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 20:24:12 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 20:24:12 executing program 4: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 20:24:13 executing program 0: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000080)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) 20:24:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x5, 0x3, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 20:24:13 executing program 1: r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 20:24:13 executing program 3: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) 20:24:13 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 20:24:13 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000480)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000001c0)=[{0x2b}], r1, 0x1, 0x1, 0x48}}, 0x20) 20:24:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x3f}) 20:24:13 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) 20:24:13 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 20:24:13 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 20:24:13 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x42, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 20:24:14 executing program 0: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = epoll_create(0x7ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x2, r0, 0x0) 20:24:14 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8921, &(0x7f00000003c0)={'vcan0\x00'}) 20:24:14 executing program 5: r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="00000090fd39"}, 0x14) 20:24:14 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="0300023a0967b207d598a5b45874729900e9015d30130000000002ca"], 0x1}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = fcntl$dupfd(r1, 0x406, r1) fchmod(r5, 0x72) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10040}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x40240}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r4, 0x0) 20:24:14 executing program 3: r0 = socket(0x2, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={0x0, 0x5c}}, 0x0) 20:24:14 executing program 1: r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0xa, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @empty}], 0x2c) 20:24:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000100)={0x10}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 20:24:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209200", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 20:24:15 executing program 5: socketpair(0xf, 0x3, 0x2, 0x0) 20:24:15 executing program 3: getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x246002, &(0x7f00000025c0)) 20:24:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0x5452, &(0x7f0000000000)=0x3) [ 575.130374][T12158] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 20:24:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x17, 0x0, &(0x7f0000000040)) 20:24:16 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x0) 20:24:16 executing program 3: syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 20:24:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x0, 0x2}}) 20:24:17 executing program 2: sysfs$2(0x2, 0x7fff, 0x0) 20:24:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 20:24:17 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x7, 0x21, 0x0, "000000000000000000000000000000000000000000c97a830f435ff4e90000000100"}, 0xd8) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='lo\x00', 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000240), 0xc, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x56) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20044891, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:24:18 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000140)={0x0, [0x5, 0x213d, 0x800], [], 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}) 20:24:18 executing program 3: r0 = socket(0x22, 0x3, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 20:24:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x7, 0x0, 0x0, 0x0, 0x2}}) 20:24:18 executing program 4: r0 = socket(0x25, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 20:24:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="01"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 20:24:18 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @empty}, 0x1c) 20:24:18 executing program 5: r0 = eventfd(0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000)="ffffffffffffffff", 0x8}], 0x1) 20:24:18 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000200)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000240)=0xc77) 20:24:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) 20:24:19 executing program 3: shmget(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) shmget(0x3, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(0x0, 0x0) 20:24:19 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) dup3(r0, 0xffffffffffffffff, 0x0) 20:24:19 executing program 4: r0 = socket$inet6(0x18, 0x3, 0x0) getsockname(r0, 0x0, 0x0) 20:24:19 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1a, 0x0, 0x0) 20:24:19 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)}, 0x0) recvmmsg(r0, &(0x7f0000000300), 0x10, 0x0, 0x0) 20:24:19 executing program 0: truncate(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40000400000002c2, 0x0) ftruncate(r0, 0x0) 20:24:19 executing program 4: 20:24:19 executing program 1: 20:24:19 executing program 3: 20:24:19 executing program 5: 20:24:20 executing program 3: 20:24:20 executing program 0: 20:24:20 executing program 4: 20:24:20 executing program 1: 20:24:20 executing program 5: 20:24:20 executing program 2: 20:24:20 executing program 3: 20:24:21 executing program 4: 20:24:21 executing program 0: 20:24:21 executing program 1: 20:24:21 executing program 5: [ 580.623832][T11501] Bluetooth: hci2: command 0x0406 tx timeout 20:24:21 executing program 2: 20:24:21 executing program 0: 20:24:21 executing program 4: 20:24:21 executing program 3: 20:24:21 executing program 1: 20:24:21 executing program 2: 20:24:22 executing program 5: 20:24:22 executing program 0: 20:24:22 executing program 4: 20:24:22 executing program 1: 20:24:22 executing program 3: 20:24:22 executing program 2: 20:24:22 executing program 5: 20:24:22 executing program 0: 20:24:22 executing program 3: 20:24:22 executing program 4: 20:24:22 executing program 1: 20:24:23 executing program 2: 20:24:23 executing program 5: 20:24:23 executing program 0: 20:24:23 executing program 4: 20:24:23 executing program 3: 20:24:23 executing program 1: 20:24:23 executing program 2: 20:24:23 executing program 0: 20:24:23 executing program 5: 20:24:24 executing program 3: 20:24:24 executing program 4: 20:24:24 executing program 1: 20:24:24 executing program 2: 20:24:24 executing program 5: 20:24:24 executing program 0: 20:24:24 executing program 3: 20:24:24 executing program 4: 20:24:24 executing program 1: 20:24:25 executing program 2: 20:24:25 executing program 0: 20:24:25 executing program 3: 20:24:25 executing program 5: 20:24:25 executing program 4: 20:24:25 executing program 1: 20:24:25 executing program 2: 20:24:25 executing program 0: 20:24:25 executing program 3: 20:24:26 executing program 5: 20:24:26 executing program 4: 20:24:26 executing program 1: 20:24:26 executing program 2: 20:24:26 executing program 0: 20:24:26 executing program 3: 20:24:26 executing program 4: 20:24:26 executing program 5: 20:24:26 executing program 1: 20:24:26 executing program 2: 20:24:27 executing program 0: 20:24:27 executing program 4: 20:24:27 executing program 3: 20:24:27 executing program 5: 20:24:27 executing program 2: 20:24:27 executing program 1: 20:24:27 executing program 0: 20:24:27 executing program 3: 20:24:27 executing program 4: 20:24:28 executing program 5: 20:24:28 executing program 1: 20:24:28 executing program 2: 20:24:28 executing program 0: 20:24:28 executing program 3: 20:24:28 executing program 4: 20:24:28 executing program 5: 20:24:28 executing program 2: 20:24:28 executing program 1: 20:24:28 executing program 0: 20:24:28 executing program 3: 20:24:29 executing program 4: 20:24:29 executing program 5: 20:24:29 executing program 2: 20:24:29 executing program 1: 20:24:29 executing program 0: 20:24:29 executing program 3: 20:24:29 executing program 4: 20:24:29 executing program 1: 20:24:29 executing program 5: 20:24:29 executing program 2: 20:24:30 executing program 3: 20:24:30 executing program 0: 20:24:30 executing program 4: 20:24:30 executing program 1: 20:24:30 executing program 2: 20:24:30 executing program 5: 20:24:30 executing program 3: 20:24:30 executing program 4: 20:24:30 executing program 0: 20:24:31 executing program 1: 20:24:31 executing program 3: 20:24:31 executing program 2: 20:24:31 executing program 5: 20:24:31 executing program 4: 20:24:31 executing program 0: 20:24:31 executing program 2: 20:24:31 executing program 3: 20:24:31 executing program 1: 20:24:31 executing program 4: 20:24:31 executing program 5: 20:24:32 executing program 0: 20:24:32 executing program 2: 20:24:32 executing program 1: 20:24:32 executing program 3: 20:24:32 executing program 4: 20:24:32 executing program 5: 20:24:32 executing program 0: 20:24:32 executing program 1: 20:24:32 executing program 3: 20:24:32 executing program 2: 20:24:33 executing program 5: 20:24:33 executing program 4: 20:24:33 executing program 0: 20:24:33 executing program 2: 20:24:33 executing program 1: 20:24:33 executing program 3: 20:24:33 executing program 5: 20:24:33 executing program 0: 20:24:33 executing program 4: 20:24:34 executing program 2: 20:24:34 executing program 3: 20:24:34 executing program 1: 20:24:34 executing program 5: 20:24:34 executing program 0: 20:24:34 executing program 4: 20:24:34 executing program 2: 20:24:34 executing program 3: 20:24:34 executing program 1: 20:24:35 executing program 5: 20:24:35 executing program 0: 20:24:35 executing program 4: 20:24:35 executing program 2: 20:24:35 executing program 3: 20:24:35 executing program 0: 20:24:35 executing program 5: 20:24:35 executing program 1: 20:24:35 executing program 4: 20:24:36 executing program 2: 20:24:36 executing program 3: 20:24:36 executing program 5: 20:24:36 executing program 0: 20:24:36 executing program 1: 20:24:36 executing program 4: 20:24:36 executing program 2: 20:24:36 executing program 3: 20:24:36 executing program 0: 20:24:36 executing program 5: 20:24:36 executing program 1: 20:24:37 executing program 4: 20:24:37 executing program 3: 20:24:37 executing program 2: 20:24:38 executing program 5: 20:24:38 executing program 2: 20:24:38 executing program 3: 20:24:38 executing program 1: 20:24:38 executing program 0: 20:24:38 executing program 4: 20:24:38 executing program 5: 20:24:38 executing program 2: 20:24:38 executing program 3: 20:24:38 executing program 0: 20:24:38 executing program 1: 20:24:39 executing program 4: 20:24:39 executing program 3: 20:24:39 executing program 5: 20:24:39 executing program 2: 20:24:39 executing program 0: 20:24:39 executing program 1: 20:24:39 executing program 4: 20:24:39 executing program 3: 20:24:40 executing program 5: 20:24:40 executing program 2: 20:24:40 executing program 0: 20:24:40 executing program 1: 20:24:40 executing program 4: 20:24:40 executing program 1: 20:24:40 executing program 3: 20:24:40 executing program 5: 20:24:40 executing program 0: 20:24:40 executing program 2: 20:24:41 executing program 4: 20:24:41 executing program 1: 20:24:41 executing program 5: 20:24:41 executing program 3: 20:24:41 executing program 0: 20:24:41 executing program 2: 20:24:41 executing program 4: 20:24:41 executing program 1: 20:24:41 executing program 5: 20:24:41 executing program 3: 20:24:42 executing program 2: 20:24:42 executing program 0: 20:24:42 executing program 4: 20:24:42 executing program 1: 20:24:42 executing program 5: 20:24:42 executing program 3: 20:24:42 executing program 0: 20:24:42 executing program 2: 20:24:42 executing program 4: 20:24:43 executing program 1: 20:24:43 executing program 5: 20:24:43 executing program 3: 20:24:43 executing program 2: 20:24:43 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) listen(r0, 0x0) 20:24:43 executing program 4: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/230, 0xe6}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:43 executing program 1: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000000), &(0x7f0000000040)=0x8) 20:24:43 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect(r0, &(0x7f0000000080)=@in6, 0x10) 20:24:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x14) 20:24:43 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}], 0x3}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:44 executing program 0: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffe51, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000380)="470d8f2e7a53d3f71650a56dc9c9ca8f2048661303933f193982762fb0adbc2cd0111fd7f36d0c5ef52afeba82ea70e8bc83d7e81db4db96585c3006bad5b5a36f86210737f11a300187a14f8051923db24d1b9788e712a0d235ea92b983618d0297fa64df23e049534f1779c5710dd64e", 0x71}], 0x1}, 0x0) shutdown(r0, 0x1) 20:24:44 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x11, &(0x7f00000000c0), 0x4) 20:24:44 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x29, &(0x7f0000000040), &(0x7f0000000080)=0x8) 20:24:44 executing program 2: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x903, &(0x7f00000013c0), 0x8) 20:24:44 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0902e5"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) r1 = dup(r0) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=ANY=[], 0x10) sendto$unix(r2, &(0x7f00000011c0)='\x00', 0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 20:24:44 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) 20:24:44 executing program 5: 20:24:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x901, &(0x7f0000000080), 0x8) 20:24:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000500)=0x7ff, 0x4) 20:24:45 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) dup2(r0, r1) 20:24:45 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0xc) 20:24:45 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) r3 = socket$inet6_sctp(0x1c, 0x5, 0x84) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x19, &(0x7f0000000000), 0x8) 20:24:45 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) dup2(r2, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={r3}, 0x14) 20:24:45 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c}, 0x1c) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x1, &(0x7f0000000080), &(0x7f0000000180)=0x10) 20:24:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/110, 0x6e}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000040)=""/198, 0xc6}, {0x0}, {0x0}, {0x0}], 0x4) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000000)=""/53, 0x35}, {0x0}, {0x0}, {0x0}], 0x4) recvfrom$inet(r7, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r6, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r8, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r7, 0x0) shutdown(r5, 0x0) 20:24:46 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/110, 0x6e}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000040)=""/198, 0xc6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1) recvfrom$inet(r7, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r6, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r8, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r7, 0x0) shutdown(r5, 0x0) 20:24:46 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x1}, 0x1c) 20:24:46 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x3}, 0x1c) 20:24:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/110, 0x6e}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000040)=""/198, 0xc6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000000)=""/53, 0x35}, {0x0}, {0x0}, {0x0}], 0x4) recvfrom$inet(r7, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r6, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r8, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r7, 0x0) shutdown(r5, 0x0) 20:24:46 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x11, &(0x7f00000000c0)=0x7000000, 0x4) [ 606.223737][ T8723] Bluetooth: hci3: command 0x0406 tx timeout 20:24:47 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8) 20:24:47 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), 0x5) 20:24:47 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x14) 20:24:47 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) shutdown(r0, 0x1) 20:24:47 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:48 executing program 0: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:48 executing program 1: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f00000001c0), 0xc) 20:24:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001880)={&(0x7f0000000080), 0x10, &(0x7f0000001780)=[{&(0x7f0000000140)="f9", 0x1}], 0x1, &(0x7f0000001840)=[@dstaddrv4={0x18}], 0x18}, 0x0) 20:24:48 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000), &(0x7f0000000040)=0x2) 20:24:48 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 20:24:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 20:24:49 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x10, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 20:24:49 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10}, {0x10}], 0x20}, 0x0) [ 608.839892][T12693] sctp: [Deprecated]: syz-executor.4 (pid 12693) Use of int in maxseg socket option. [ 608.839892][T12693] Use struct sctp_assoc_value instead 20:24:49 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@un=@abs={0x8}, 0x8) 20:24:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/45, 0x2d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x2}, 0x10) shutdown(r3, 0x0) 20:24:49 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@in={0x10, 0x2}, 0x10) 20:24:49 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x900, &(0x7f0000000000), 0x8) 20:24:50 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x100, &(0x7f0000000040), &(0x7f0000000100)=0xb8) 20:24:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/109, 0x5e}], 0x1, 0x0, 0x44}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000036c0)=""/4109, 0x100d}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/147, 0x93}, {0x0}], 0x2}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) r4 = socket(0x2, 0x10000001, 0x84) connect$inet(r4, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 20:24:50 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="10024e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000700000000000000000000000000000000000004"], &(0x7f0000000000)=0x8c) 20:24:50 executing program 4: r0 = socket(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 20:24:50 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/109, 0x5e}], 0x1, 0x0, 0x44}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000036c0)=""/4109, 0x100d}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x0) recvfrom$inet(r2, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) 20:24:50 executing program 5: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:51 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x51, 0x0, 0x0) 20:24:51 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/45, 0x2d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x2}, 0x10) shutdown(r3, 0x0) 20:24:51 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in={0x10, 0x2}, 0x10) bind(r0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 20:24:51 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x103, &(0x7f0000000100)={0x0, 0x2, "3993"}, &(0x7f0000000200)=0xa) 20:24:51 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect(r0, &(0x7f0000000040)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 20:24:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x2, 0x2}, 0x10) 20:24:52 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) 20:24:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f00000001c0), &(0x7f0000000100)=0x98) 20:24:52 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 20:24:52 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x103, &(0x7f0000000000)={0x0, 0x2, "48ae"}, &(0x7f00000000c0)=0xa) 20:24:52 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) 20:24:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/109, 0x5e}], 0x1, 0x0, 0x44}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000036c0)=""/4109, 0x100d}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/147, 0x93}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) r4 = socket(0x2, 0x10000001, 0x84) connect$inet(r4, &(0x7f0000000000)={0x10, 0x2}, 0x10) shutdown(r3, 0x0) 20:24:52 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) 20:24:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000002"], 0xa) 20:24:53 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000680)={&(0x7f0000000040)=@in={0x10}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@sndinfo={0x1c}], 0x1c}, 0x0) 20:24:53 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000040)={r3}, 0x14) 20:24:53 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x22, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 20:24:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r0, &(0x7f0000f6fff0), 0x10) 20:24:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000040)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@sndinfo={0x1c}, @sndinfo={0x1c}], 0x38}, 0x0) 20:24:53 executing program 5: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000), 0x8) 20:24:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000100)={0x2, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x1d, &(0x7f0000000140)={0x0, 0x5}, 0x8) 20:24:54 executing program 4: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/45, 0x2d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x2}, 0x10) shutdown(r3, 0x0) 20:24:54 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000100)='n', 0x1, 0x0, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) 20:24:54 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, 0x0, 0x0) 20:24:54 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000100)='n', 0x1, 0x103, &(0x7f0000000000)=@in={0x10, 0x2}, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 20:24:54 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) 20:24:55 executing program 3: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x26, &(0x7f0000000080), 0x8) 20:24:55 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000040), 0x8) 20:24:55 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/109, 0x5e}], 0x1, 0x0, 0x44}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000036c0)=""/4109, 0x100d}], 0x1}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)=""/147, 0x93}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r2, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) read(r4, &(0x7f0000000340)=""/48, 0x30) shutdown(r3, 0x0) 20:24:55 executing program 2: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) dup(0xffffffffffffffff) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(0xffffffffffffffff, 0x0) socket$inet6_tcp(0x1c, 0x1, 0x0) shutdown(0xffffffffffffffff, 0x0) shutdown(r3, 0x0) 20:24:55 executing program 4: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/230, 0xe6}, {0x0}], 0x2}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:55 executing program 3: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/230, 0xe6}, {0x0}], 0x2}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:55 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000580)=@in6={0x1c, 0x1c}, 0x1c) 20:24:56 executing program 0: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) dup2(r2, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0xfffe}, 0x14) 20:24:56 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/110, 0x6e}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000040)=""/198, 0xc6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000000)=""/53, 0x35}, {0x0}], 0x2) recvfrom$inet(r7, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r6, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r8, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r7, 0x0) shutdown(r5, 0x0) 20:24:57 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x1c, 0x2}, 0x1c) r2 = dup2(r1, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000016c0)={0x1, [0x0]}, &(0x7f0000001700)=0x8) dup2(r2, r0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x2, &(0x7f0000000000)={r3, 0x0, 0x0, 0x3, 0xfffe}, 0x14) 20:24:57 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00515) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/45, 0x2d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x7}, 0x0) recvfrom$inet(r3, 0x0, 0x22b41b9a8748b1b5, 0x0, 0x0, 0x800e00510) shutdown(r1, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x2}, 0x10) shutdown(r3, 0x0) 20:24:57 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000040)={0x0, 0x5}, 0x8) 20:24:57 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x2d) 20:24:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000140), &(0x7f0000000180)=0x8) 20:24:58 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x1}, 0x1c) 20:24:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/110, 0x6e}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000600)=[{&(0x7f0000000040)=""/198, 0xc6}], 0x1) r3 = dup(r2) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) shutdown(r4, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r6, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2) recvfrom$inet(r7, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r6, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r8, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r7, 0x0) shutdown(r5, 0x0) 20:24:58 executing program 4: r0 = socket(0x2, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) 20:24:58 executing program 1: r0 = socket(0x2, 0x10000001, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000080), 0x8) 20:24:58 executing program 5: r0 = socket(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffe51, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000001700)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000380)='G\r', 0x2}], 0x1}, 0x104) shutdown(r0, 0x1) 20:24:58 executing program 0: r0 = socket(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x14, &(0x7f00000001c0)={0x1, [0x0]}, 0x6) 20:24:58 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000580)=@in6={0x1c, 0x1c}, 0x1c) dup2(r0, r1) 20:24:58 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa8}, 0x105) 20:24:59 executing program 5: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)=""/232, 0xe8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:59 executing program 1: select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/230, 0xe6}, {0x0}, {0x0}], 0x3}, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x27c7, 0x0, 0x0, 0x800e0050e) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000080)=""/44, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xfec5, 0x0, 0x0, 0x800e00505) shutdown(r5, 0x0) r7 = socket$inet6_tcp(0x1c, 0x1, 0x0) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) shutdown(r6, 0x0) shutdown(r3, 0x0) 20:24:59 executing program 0: r0 = socket$inet6_udp(0x1c, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@in6={0x1c, 0x1c, 0x1}, 0x1c) 20:24:59 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x1c, 0x3}, 0x1c) 20:24:59 executing program 3: socket$inet6_sctp(0x1c, 0x5, 0x84) r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/112, 0x70}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000280)=""/146, 0x92}], 0xb) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e007ae) shutdown(r3, 0x0) r5 = msgget$private(0x0, 0x6d8) msgrcv(r5, &(0x7f00000000c0)={0x0, ""/36}, 0x2c, 0x3, 0x0) shutdown(r4, 0x0) 20:24:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=[@prinfo={0x14}], 0x14}, 0x0) 20:25:00 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) 20:25:00 executing program 5: r0 = socket(0x2, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0}, 0x0) 20:25:00 executing program 4: 20:25:00 executing program 2: 20:25:00 executing program 1: 20:25:00 executing program 0: 20:25:01 executing program 5: 20:25:01 executing program 3: 20:25:01 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto(r0, 0x0, 0x0, 0x80, &(0x7f0000001000)=@in={0x10, 0x2}, 0x10) 20:25:01 executing program 4: 20:25:01 executing program 0: 20:25:01 executing program 1: 20:25:01 executing program 2: 20:25:01 executing program 5: 20:25:01 executing program 4: 20:25:01 executing program 3: 20:25:02 executing program 0: 20:25:02 executing program 1: 20:25:02 executing program 5: 20:25:02 executing program 3: 20:25:02 executing program 2: 20:25:02 executing program 4: 20:25:03 executing program 0: 20:25:03 executing program 3: 20:25:03 executing program 1: 20:25:03 executing program 2: 20:25:03 executing program 5: 20:25:03 executing program 4: 20:25:03 executing program 3: 20:25:03 executing program 0: 20:25:03 executing program 1: 20:25:03 executing program 5: 20:25:04 executing program 2: 20:25:04 executing program 4: 20:25:04 executing program 0: 20:25:04 executing program 3: 20:25:04 executing program 1: 20:25:04 executing program 5: 20:25:04 executing program 2: 20:25:04 executing program 4: 20:25:05 executing program 3: 20:25:05 executing program 1: 20:25:05 executing program 0: 20:25:05 executing program 5: 20:25:05 executing program 2: 20:25:05 executing program 4: 20:25:05 executing program 3: 20:25:05 executing program 1: 20:25:05 executing program 0: 20:25:05 executing program 5: 20:25:05 executing program 2: 20:25:06 executing program 4: 20:25:06 executing program 3: 20:25:06 executing program 1: 20:25:06 executing program 2: 20:25:06 executing program 0: 20:25:06 executing program 5: 20:25:06 executing program 4: 20:25:06 executing program 3: 20:25:06 executing program 2: 20:25:07 executing program 1: 20:25:07 executing program 5: 20:25:07 executing program 0: 20:25:07 executing program 4: 20:25:07 executing program 3: [ 626.708790][ T8723] Bluetooth: hci4: command 0x0406 tx timeout 20:25:07 executing program 5: 20:25:07 executing program 0: 20:25:07 executing program 2: 20:25:07 executing program 1: 20:25:07 executing program 4: 20:25:07 executing program 3: 20:25:08 executing program 5: 20:25:08 executing program 0: 20:25:08 executing program 2: 20:25:08 executing program 3: 20:25:08 executing program 1: 20:25:08 executing program 4: 20:25:08 executing program 5: 20:25:08 executing program 0: 20:25:08 executing program 2: 20:25:08 executing program 3: 20:25:09 executing program 1: 20:25:09 executing program 5: 20:25:09 executing program 4: 20:25:09 executing program 2: 20:25:09 executing program 3: 20:25:09 executing program 0: 20:25:09 executing program 1: 20:25:09 executing program 4: 20:25:09 executing program 5: 20:25:09 executing program 2: 20:25:09 executing program 3: 20:25:10 executing program 0: 20:25:10 executing program 1: 20:25:10 executing program 5: 20:25:10 executing program 2: 20:25:10 executing program 3: 20:25:10 executing program 4: 20:25:10 executing program 0: 20:25:10 executing program 1: 20:25:10 executing program 2: 20:25:11 executing program 5: 20:25:11 executing program 4: 20:25:11 executing program 3: 20:25:11 executing program 0: 20:25:11 executing program 1: 20:25:11 executing program 2: 20:25:11 executing program 5: 20:25:11 executing program 3: 20:25:11 executing program 4: 20:25:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 20:25:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x29, 0x0, &(0x7f0000000240)) 20:25:12 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x1, r4, 0x1, 0x0, 0x6, @remote}, 0x14) 20:25:12 executing program 5: unshare(0x20000) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, 0x81402, 0x0) socket(0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 20:25:12 executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f0000000280)='./bus\x00', 0x0) ftruncate(r5, 0x8200) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a000000}]) 20:25:12 executing program 3: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000ddc1517600"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x6c00) dup2(r0, r2) dup3(r2, r1, 0x0) 20:25:12 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) 20:25:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff91) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fdd000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x54) 20:25:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1000000, 0x7, 0x40}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = creat(&(0x7f0000000380)='./file1\x00', 0x0) write$cgroup_type(r3, &(0x7f0000000180)='threaded\x00', 0x2d1ee37) write(r2, &(0x7f0000000100), 0x2c9f9de1) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528aca1}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x3, 0x100082) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) fcntl$setpipe(r1, 0x407, 0x0) r5 = memfd_create(&(0x7f00000003c0)='\x06\x00\x00!\x00\x00\x00\x00u\x86e\x00\x00\t\x00\xa9\x03\x00\x00\xd6\xfbmZ\x84~\x9e\xf6\xb7\xc0\x8ac\x86l\xff\x7f\x00\x00\x90`\xc4\xf1L\x99\x06\x00\xe1\vn\xe0\x8d\x8a\xf2g\xeb\xa2q\x82\xd6\x1f\x98\xd8\xc6k\xeb\xb2O\x8c\x81Y\xbc*\xb3\xb3\x7ft\xab\xecoB\xcc\x1b8\xa29\xa7`\x91\xeb\x0f\xa2\xa5r\x0e4\t\xe3\xbf\xd43\x81\xa6\x19\xe1\xec\x85\xe9+\x197\xf1\xd3\xe2\xc6\xfbL\x91\xdf\xc5\xb2\x9c\xa2\a3\xb2\x8bN\x19\xb9x-\xe4{\xdd~\xe5\xbf\xc0]l\xf7\x00'/151, 0x0) pwritev(r5, &(0x7f0000001400)=[{&(0x7f00000007c0)="cdfdfd", 0x3}], 0x1, 0x48180a, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) sendfile(r4, r5, 0x0, 0x20000102000003) [ 632.227537][T13202] serio: Serial port pts0 [ 632.327514][T13202] serio: Serial port pts0 20:25:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) 20:25:13 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x1269, 0x0) 20:25:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b1a3fcd00000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x14e, 0x0, 0x0, 0x0, 0x24b, 0xd0}}], 0x34, 0xac0, 0x0) 20:25:13 executing program 0: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x5, 0x4) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) getpid() 20:25:13 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f0000000200)=0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1299}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x40000}]) 20:25:14 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x0, 0x0, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0x0, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x1, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 20:25:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x9) 20:25:14 executing program 5: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f00000001c0)=""/234, 0xea) 20:25:14 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) io_submit(r1, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000009, 0x8003f00, 0x3, 0x1, 0x0, r0, &(0x7f0000000000), 0x3000}]) 20:25:14 executing program 4: fanotify_init(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) unshare(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) 20:25:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:14 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) write$cgroup_int(r0, &(0x7f0000000000), 0x400c00) 20:25:15 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000001ff050000000000000000000000003c0010002c00010014000300000000000000000000000000000000d9560000242a2600070800ffff00000000000000bb0c0002000500010000000000240002000c000200050001000000000014000100080001000000000008000200e00000010800070000000000080015000000000008000800000010"], 0x8c}}, 0x0) 20:25:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) shmctl$IPC_SET(0x0, 0x1, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 20:25:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0xcc, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000040), 0x0}, 0x20) 20:25:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000000206010000000000000000fffffff0000c000300686173683a69700005000400000000000900020073797a30000000000c0007800800124000040000050005000a0000000500010007"], 0x50}}, 0x0) 20:25:16 executing program 0: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = gettid() read$char_usb(r1, &(0x7f00000001c0)=""/157, 0x9d) tkill(r2, 0x25) 20:25:16 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x3a3dd400a4008f01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x70280}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x420080, 0x0) r1 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r1, &(0x7f0000000040)="06", 0x1) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000040000000000000081000000040000000000000000000000000000e90000000000000090a38e8478e683a73d5ae0bbc157564c86534830c726bee0356204fb10d4ba531636283f642fa110aa74bf3fa26af3c3db848125dbb61ffd3aab6c81bccdd34e68f47b2901987bbea3483329df79680d2f532499d8d9046aa1b11339999490ac7ac841adc14a33cd3ee4f924f4bf292f17a9af75cc67db6bc974f9536b18a4bf54eb5ebe189df1b645b1d00a429058c76908e5a5b80a4660fabea4a39eb0426077a65af1b2c171"], 0x2c) sendfile(r1, r1, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r1, 0x0) r2 = mq_open(&(0x7f0000000000)='md5sumeth1wlan0{cgroupmime_type@\x00', 0x842, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000080)="8b884f641e81a8aa512b5ecfaba5ed64dcccb7f8c3", 0x15, 0x5, &(0x7f00000000c0)={0x77359400}) 20:25:16 executing program 4: r0 = syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x541b) 20:25:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:16 executing program 0: sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012000c000100626f6e640000000018000200140008000f"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924926c0, 0x0) 20:25:16 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000100)={0x101}, 0x4) clone(0x2900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000940)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x0, 0x0, "1445976105efead0da089cdf6aab5db4c8b8958e591df11bc28788566dfc10f908cebdba3f8ed2043da30296279325bc13ededa1e541d74815c86c84022e4a", 0x37}, 0x80) r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001bc0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a69623a2f57ba32e8cf1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef809606056fe5c34664c0af9361f007a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45ef4adf634be763289d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468972089b302d7bf6023cdcedb5e0125ebbcebdde510cb2364149215106bffffffffffffd40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926bc781e3b59c9b081d6a0893fea53187217441620b4f78ae8ae361000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532af9c4d2ec7c32f2095e63c80aff9fa749d247632f32030916f89c6dad7603f2ba2a790d62c6faec2fed453a4928b3014ab2f70344e16cb9a6298060d6b2ba11de6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb61e8caab9c70764b0a8a7583c90b3433b829bdb9fbd48bc873495cbff8a329000000000000000ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c7120162198487a0e001747c4366c5c20d58345624b87cec2dbe98223a0eb4fa39f6b5c0200000000000000000000000000030000000000000000000000000010008bc0d955b6b6be4377422992c73be7c72bea63a656033d2d0d2f074a37c56c98b06096c50bde602c588fe9a2799711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b6c4a000000002b435ac15fc0288d0943b1b108bb4f71b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad897ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2633398631c7771429d120000003341bf4a00fcffffffffffffffe09fecf8816fe02271fe01589646efd1cf870cd7bb2366fde4a59429738fcc917a57f94f6c453cea793cc5ee0c2a5ff870ce5dcb05cfd9fcb32c8ed1dbd9ee58969c41595229df17bcad72fb4021428ce970275d5bc8955778567bc79e13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822a8b649d1fd4184a54ecff0f719197724f4fce1093b62d7e8c7123d8ecbbc55bf404e4e1f74b7eed82571be54c30f21f60197bca535f693c4772d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074ebc41fc248bc79e8e9d154b405c37feaf3dd95f6ef2acd1fe582786105c7103aa377b14997fd686936ff018ededf05e5877050c91301bb997316dbe17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc7af1b612375cf2458e3542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec6e8bf694da85bff9f5f4df9b3e90e5c708ce65cd6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bba9e6ee9877ede6c2551e18b99b6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de2feb7c8ba06ad9b11beba199da44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9aa3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ac1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186f55fe0086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8101000000009f18101288a0268893373750d1a8fe64680b0a3fc22dd704e421d1a9fbe1e7d58c08acaf30235b928a31d2eca55f74a23641f61f2d5b308cf0b731b0c7f0ced69993e9960ff5f7e14e730b263d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff2040051ea44baa11064ae19292936619caf300e03f6340e4a8a66dd8998dfb905f59201b58aa64b543c7dbcffd7d2eae511b2b1d035baca2147349f2a90551953f7b43d3d9cb13ceb3b30c220ed860fa3642be9d79ced99a7802ddb25b605470795f5b7f47c8874f619a8f616a938de9c995f71744c2c962b96aabb44dee26c5b60c5bcb0cc9ac62b0eed951949afa958c661634c4392c5d806d9a192b697a91257bb9ff4ba824768109aad9809ac93767712168d08d13e3e6a36251cfdaf7a4b482f2f2bcb9c1c6ce1b9bd83b75fc23cec86e20b93198474801e22f0214146cb9a375b07e0cee67cc41875728588faa8808c540d5adca7f8d6e7461993e5d66c9f571e952e82d8448ab35c05c87f3c9dd2b9d6fc6beae52a9cba8c0066f7032815a7915eb3d3144578f8d500672d873acd1af11c3f463e4b114901e122ac8370d9d98bbd709e1db03000f921e345200000000000008e54135cb32ee59bef8a8ab1d212df98ba478be2a180a391d95189ba9758a9f346037681c9f72a50f629383dd73bb5d56120beb48f6e010616aeb759f6af3626783033c2c1b817bb7ac9641910a0fbf5000c588792ba2223cf202fb40a8c2e6abae9ecc3fafae4826ba6cdd21692a40289627c7bb0384dbfdb9c2f4e2abd9e75cd9bd7d447a48476173e1725ff1815df1857e1f07210399b6b4292ec7fa73e397810891bafa5d2b0e1cdbcdd2150d52ca661d41980992c31375e8b9d60305bb84822f4f8ac8b5b7a120ec15b93511b24db209ecbc2eb53647ed4cd2e50faf119bbcdc1c52320583154f787dde6e820cc18941527efbfd47fe51bee092548205968701502d64260890e3af41dae11eab95150fbcd3f604b588c2cb4cc78274141b17cf81cd7a31ad52ac07749181d621a2458c12addbbff912d17af877ceb69547a38614e6f166528623271f9ad57a562dbae4d1f843d0d5271305e91633ba302fb4fb17f3e7155b0f267ca4b6bcefaf59c64c8a70fc819b0838df03e3547c607b68f0874f72b2714c1bbf060fce4d74b460c5f53f968089f12920f40a54437b18000049abc44b725342fed3d61b8d049cf5ea2c1be69d397fb75aeca9dbcd897cc53ac7e520d4fc31cfa5fe3c3386a5c1747160c38bc88f8eb9050442e5a94525d18f33b69e0f5d6ce2d05679791715be4b75ddd1599687aaa9f5579d5152e2a30c903a59e47210803540af645e5282bffb7bb48f0b2ec88ddd04b2ae6a458518e4cbb9cf71614e852c0ff035"], &(0x7f0000000100)='GPL\x00'}, 0x48) fcntl$getown(0xffffffffffffffff, 0x9) exit(0x0) 20:25:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) [ 636.615075][T13304] [ 636.617641][T13304] ********************************************************** [ 636.626089][T13304] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 636.633778][T13304] ** ** [ 636.641466][T13304] ** trace_printk() being used. Allocating extra memory. ** [ 636.649180][T13304] ** ** [ 636.656824][T13304] ** This means that this is a DEBUG kernel and it is ** [ 636.664459][T13304] ** unsafe for production use. ** [ 636.672075][T13304] ** ** [ 636.679757][T13304] ** If you see this message and you are not debugging ** [ 636.687390][T13304] ** the kernel, report this immediately to your vendor! ** [ 636.695061][T13304] ** ** [ 636.702900][T13304] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** 20:25:17 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x12081ff) fcntl$setstatus(r0, 0x4, 0x6100) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0xf642e7e) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x4003fe) r4 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x6, r2}) [ 636.710558][T13304] ********************************************************** 20:25:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000009c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 637.395689][T13315] [ 637.398306][T13315] ********************************************************** [ 637.406033][T13315] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 637.413663][T13315] ** ** [ 637.421097][T13315] ** trace_printk() being used. Allocating extra memory. ** [ 637.428711][T13315] ** ** [ 637.436321][T13315] ** This means that this is a DEBUG kernel and it is ** [ 637.443877][T13315] ** unsafe for production use. ** [ 637.451304][T13315] ** ** [ 637.458876][T13315] ** If you see this message and you are not debugging ** [ 637.466516][T13315] ** the kernel, report this immediately to your vendor! ** [ 637.474057][T13315] ** ** [ 637.481507][T13315] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** 20:25:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) [ 637.489052][T13315] ********************************************************** 20:25:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10}]}]}]}, 0x40}}, 0x0) 20:25:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) [ 638.605582][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 638.694304][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 638.868269][ T28] audit: type=1800 audit(1598991919.496:37): pid=13323 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16371 res=0 [ 641.592829][T13293] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.601423][T13293] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.189294][T13293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.656921][T13293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.751830][T13303] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 652.762066][T13303] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 652.774776][T13330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:25:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'veth1_to_hsr\x00', 0x3}, 0x18) ioctl(r0, 0x8916, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl(r0, 0x8936, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r1, 0x29, 0x49, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @dev}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) 20:25:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000002400)="c442090d890300000035004000000f30d07531f5f566b83d018ee80920a43500004000c4b3ce4b50330026660f3881694f66430fe65a8cf342d8860080000066b820018f69c095a5fa2291092e66420fc72366ba2000ed", 0x57}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0x80}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 652.795447][T13340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 20:25:33 executing program 0: syz_mount_image$msdos(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xffffffffffffffd6, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x9800, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x84420, &(0x7f0000000000)) 20:25:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x0, 0x0, @loopback}, 0x5f) 20:25:33 executing program 1: getuid() syz_mount_image$tmpfs(&(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[]) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 20:25:33 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xab, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = inotify_init() dup3(r0, r1, 0x0) 20:25:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:34 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', 0x0, 0x0, 0x0) 20:25:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0) 20:25:34 executing program 1: 20:25:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:34 executing program 4: [ 654.170678][T13386] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 654.318227][T13399] EXT4-fs (sda1): re-mounted. Opts: ,errors=continue [ 654.391546][T13396] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 654.526664][T13396] overlayfs: filesystem on './bus' not supported as upperdir 20:25:35 executing program 0: 20:25:35 executing program 1: 20:25:35 executing program 2: 20:25:35 executing program 5: 20:25:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0x8d) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:35 executing program 4: 20:25:35 executing program 1: 20:25:36 executing program 2: 20:25:36 executing program 0: 20:25:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:36 executing program 5: 20:25:36 executing program 4: 20:25:36 executing program 2: 20:25:36 executing program 1: 20:25:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:36 executing program 0: 20:25:36 executing program 5: 20:25:36 executing program 2: 20:25:36 executing program 4: 20:25:37 executing program 1: 20:25:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:37 executing program 0: [ 657.424050][T11501] Bluetooth: hci5: command 0x0406 tx timeout 20:25:38 executing program 5: 20:25:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:38 executing program 0: 20:25:38 executing program 4: 20:25:38 executing program 2: 20:25:38 executing program 1: 20:25:38 executing program 4: 20:25:38 executing program 5: 20:25:38 executing program 0: 20:25:38 executing program 1: 20:25:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:38 executing program 2: 20:25:39 executing program 4: 20:25:39 executing program 5: 20:25:39 executing program 0: 20:25:39 executing program 1: 20:25:39 executing program 2: 20:25:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:39 executing program 4: 20:25:39 executing program 5: 20:25:40 executing program 0: 20:25:40 executing program 2: 20:25:40 executing program 1: 20:25:40 executing program 4: 20:25:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:40 executing program 5: 20:25:40 executing program 0: 20:25:40 executing program 2: 20:25:40 executing program 4: 20:25:40 executing program 1: 20:25:41 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:41 executing program 5: 20:25:41 executing program 0: 20:25:41 executing program 2: 20:25:41 executing program 1: 20:25:41 executing program 4: 20:25:41 executing program 5: 20:25:41 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:41 executing program 0: 20:25:42 executing program 2: 20:25:42 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') 20:25:42 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffeac, &(0x7f0000000400)=[{&(0x7f0000000240)="3e53940a773793b5e15cb02b10011f2b76415400217a60611a40764209b52ec5dd77731ea22b65fd677629c42887072d3789b7429553e377f4de9ca1bd25d26f58d94ffc94f184732f24da1d3f85d98f06a3f517aa0e015a958909a691375a6d5aa54c07a6517d215559d647340e15edacb56179ab307fa43ef99b9b81a08d6cf4624fd3af756e863de94c7c03611466fc2cebbf23ec72e403cb999892ea38f1c9bb19b574f3c85937e65326b82414a8e56a5717b2741a3a9123f2ce183ff845b09a9608b593202a"}, {&(0x7f0000000180)="be1c879fd7b79cf9ba9690a73a93cfadf0f609c530"}, {&(0x7f00000004c0)="8366ad81c9c08b99d8c5b78d6de7614452ef357e1cb8a171d85fe7e701282272fcebbc544d3048956d009e232fbb268620328b7f2d51dfc4d58a28c53c4a2800c395b239975d795f6501d8778067e465810ef2493247f26fb779af3495f77f10242a110fc35efa7026010d18a47d9ad672cdb78884f8ddd10aaeb79b215b8bca29671e6755bc023c66d15989e620271e47b2b922ac3b25a4ef9ff7229b176f4ba5042a6f3a797576db30ba503055c847ab2ed18ccd9beb6172a1f43483a513ccdc3856ab3c472edcda30a4fd9ddab5f66aeea488d8c97e79056b"}, {&(0x7f00000001c0)="678b024be7fb7a"}, {&(0x7f00000005c0)="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"}, {&(0x7f00000003c0)="2331177e3757df57cbc1651ffc527577c0155526ffe4ba41fbd346ca3c1d80071e53cf0276a0"}, {&(0x7f00000015c0)="dd0e3927adb5fc72d43e67159029187d4eaf183aba7d2737613ec90a65e12802871e2d929f335e7b9b8d1bcc7c22c95b8b194771c200db659abc76fad6d1e83d0935bdfa904be1a6a1c5d40d80be824c27f62252709ab870498f1b5f201682d1c36ca3b42ae0c707adea80edb85172edf45ad0a2db66949b5a523babbe35437da8f3b7cf8769226ce0fedf1a7b3af39dd40f3db46a1bbb0a40cd6911f9b5c08c5a483270"}]}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305839, &(0x7f0000000040)) write$cgroup_int(r0, &(0x7f0000000200), 0x7af19) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0xa00}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) 20:25:42 executing program 5: gettid() perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa64c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x13, 0x10, 0x3}, 0x40) 20:25:42 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400)='/dev/net/tun\x00', 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) 20:25:42 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:42 executing program 2: [ 662.133600][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 20:25:43 executing program 4: 20:25:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:43 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local, @random="e0381e00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, "5d0f27c7ce94ff2e"}}}}}, 0x0) 20:25:43 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0x100000110) r2 = epoll_create(0x2000007) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xb0000001}) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x2e0) pipe(0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="f2f34197d7a6b4bb3eed0d827f6dd28db8d081bfeec068d69156565e8547490546f5cb850c5f21eb8e2b1f140ba6d630272fa4dd699a8f06c33357e4b329c73cb6560a501094da47c4230c1625dadbbbfe735038ff8424b63e208ba41a118d3d71536078d9caeb766033402942a249bdd04eb5a4c7a5976f70f37b", 0x7b}, {&(0x7f0000000380)="69ce7da94d8a6dd323cf61e599141112fdf7f82ccaa3645a6275d1efad2a072cfe9d02cb549b255778e19d1f3cf2ba0b83ba34e30d28b7e5107ab92951f2", 0x3e}], 0x2, &(0x7f0000000400)}, 0x850) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x563, @loopback, 0x2}, 0x1c) 20:25:43 executing program 0: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x80) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="9e", 0x1}], 0x1}}], 0x1, 0x2c0000f8) 20:25:43 executing program 2: r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00', @remote}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'hsr0\x00', @link_local}) [ 663.105276][ T28] audit: type=1400 audit(1598991943.726:38): avc: denied { block_suspend } for pid=13551 comm="syz-executor.1" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 20:25:43 executing program 4: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) bpf$PROG_LOAD(0x5, 0x0, 0x0) 20:25:44 executing program 0: ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000280)='/\x93posix_acl_access\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000d000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b700000000000000950000000000000056ce36b68b0f334d6c37d03057c90000866f55e3376e4a44041d7827af04f8426e5b0eb4642172797fc01200533324f871d94768e25851d3162c1bde856ed69b673e5b8d861ff207c0eb4b60a82fc3c0e2085d6add5893b223f703b454af0805f231eb8474953f640e3d490cdc0448ecf21b205768e34ab95b6ef820398c1ba4b81cee61a98d7df3768db9bd084623ca56c82b205eca4d90620fb89f8abf8e94d4429449cd85af76d9929b318c989bebd2f992912024650892c2e25b38f9cac8fea1a8c4712b53306c00a649a62720cd661d21ab5d7a8b9f974b4f5da4862c01b4cbe5f279fe779d5f9f366ec0aee3344d712d35edc17c209296c3db7ff279c9bc5ab356c3471399f860fef75f37888d0b0968f5a8fcdf57cc5c62f45fcaccb1a3401d604f415840873a0e1df38c8c7c9ce232542acf57c44faea190b98dca6aa113dba42def9c5bc3c90823529860583d8fb2dd17279eafcbdb226c00545f7f7c4fa93603f2ae2260bb56cb1a542ab27dfb25f54b6f73e2da29ef6b6f33e099cd94987238b5b09ab1b377fc08135572dd7e7ae09d603115f1cde757c9d2fd838a84251cbe5f8e9e62fee4d1554fa20d84df5e107d368c139b5c17e916a990422a72150235ea93abb04521db134aad75b7c41ec63ca90e22c26a6ef512cd5c598330e07b18183e20f145c031a129aed2186d7a6e3cc00125abaf55b18a727bfc6616d0df05a684730e2f014e5400000000000000007d468676e6c0da27c75254f16c0680519c26f1a602b0df27df00e16af8ac465612353a1e4fc13dfb"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcca}, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe80, 0x3580, &(0x7f0000000280)="b95b03b708030000009e40f086dd", 0x0, 0xfd, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 20:25:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:44 executing program 5: r0 = socket$packet(0x11, 0x4000000000002, 0x300) recvmsg(r0, &(0x7f0000000740)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000000700)=""/36, 0x24}, 0x0) [ 663.614617][T13565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 663.625393][T13565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 20:25:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2f606557d6081b8a, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:44 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x31) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @empty}, 0x1c) 20:25:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="dc"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 20:25:45 executing program 4: unshare(0x6c060000) r0 = socket$inet6(0x10, 0xa, 0xfffffffc) bind(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b276062f763e9b200a00080001c0", 0x1c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000001400)={0x54, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1e80}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x41d841282e10ddb6}, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4096, 0x1000, 0x0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000300)=""/181, &(0x7f0000000180)=0xb5) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1}}, 0x0) r2 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x10000}) r3 = socket$inet6(0xa, 0x3, 0x5) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{0x0, 0x256, 0x0, 0x0, &(0x7f0000000040)=[@hopopts_2292={{0xf, 0x29, 0x4, {0x0, 0x2d}}}], 0xc}}], 0x55f, 0x0) 20:25:45 executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f0000001100)=ANY=[@ANYBLOB=','], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f0000000000)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002d00fd"], 0x2}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0xfffffffffffffeb6) r4 = socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x86ffde, 0x0) 20:25:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:45 executing program 1: 20:25:45 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2, 0x3, 0x2d8, 0x0, 0x190, 0xa4ffffff, 0x0, 0x0, 0x240, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f}}]}, @common=@SET={0x60, 'SET\x00'}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_batadv\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) [ 665.180445][T13599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13599 comm=syz-executor.2 [ 665.195489][T13599] netlink: 2220 bytes leftover after parsing attributes in process `syz-executor.2'. [ 665.283135][T13601] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.4'. [ 665.287216][T13600] IPVS: ftp: loaded support on port[0] = 21 20:25:46 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x20040001) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x8000000025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00') close(0xffffffffffffffff) sendmsg(0xffffffffffffffff, 0x0, 0x0) 20:25:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x4a, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x6) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) [ 666.021958][T13601] IPVS: ftp: loaded support on port[0] = 21 [ 666.126547][T13603] netlink: 40067 bytes leftover after parsing attributes in process `syz-executor.4'. 20:25:46 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xda00) write$cgroup_devices(r0, &(0x7f0000000000)={'a', ' *:* ', 'rwm\x00'}, 0xa) 20:25:46 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1132}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000100)='net_prio.ifpriomap\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, 0x0, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x8, 0x2, 0x5e, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x8ce, 0x3}, 0x1801, 0x4, 0x0, 0x2, 0x0, 0x400, 0x5}, 0xffffffffffffffff, 0x4, r2, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) [ 666.220679][ T391] tipc: TX() has been purged, node left! 20:25:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000200)="1f", 0x1}, {0x0}], 0x2}, 0x0) 20:25:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:49 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x0, 0x2) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x8000000025, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='bond0\x00') 20:25:49 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000001080)={0x0, ""/174}, 0xb2, 0x3, 0x1000) msgsnd(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="03"], 0xd7, 0x0) 20:25:49 executing program 2: r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getpeername(r0, 0x0, 0x0) 20:25:49 executing program 5: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f00000020c0)={0x0, ""/185}, 0xc1, 0x8000000000000000, 0x0) 20:25:49 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x57, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) 20:25:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:49 executing program 2: r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f000000c280)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000007500)={&(0x7f0000006f80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0, 0x0, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000400004000000000000000a009500000000000000d387777ab82499fd7a38de0cd87509fd1d80585afff33091b533c720577af017450b2a776733ceb617f121d79e3628e72be0d39e77dcb168873294214f541bb89938c19978ea22254c58d75439a1edfee2adfeafe92d14ffab3ddc1dc21efe6f7c3913f273d7b48d10b9904fda943414bf2f1c68c4878937c8f83a5203d5b63a2689d486e66c4a5e059db4238ee52d47e704465a6a9726ba058bd85acc9322902ce974e50faf989fd44b665a1b795d04df0d9bfd563c608880516f25136a81d6b48d5f205d0d44bfabd7013f8192a3029ad96441ba7db2c3e80f0dbf59164e8806259d3b7633f704b15c3dc9259fa3aa3106e4821a62a5c356d074eeb638904c8af7cd704f4afa93fc61d6ba0e2148b09a28cd376bc43a1445c635c73a6bd9cda98b27f9981f6af47d74e057515bef88b90f987de14f2a9e1b07dd8b865715f25a4f95cc0024e18e96570000f7dab1a31b2f0fb51e0d9348aa80e2e60cd60800000088b06a13d14f14e829e4330e4475096c886864c5bf8be6441e7e24a4162d88a668b65bc80a10d3357cd22db832a98c116b0000d92a6dabe73e52fd78db32e4f531abb858e1a4ee680c94407e1ee01d68139635ab636723848d90a40d2a2298b5cb3cbe8366b09957fc5ee5472fb7671f1b99a7b0508949eaf27f98356e321bb3ef7bfd1c957c1fe85603ff909878b9db38af432516700efc72e2847e1e86967d2a12a357a69a6cd73b73cfff08965818b338e5f5d20031bad9c612f6ea2861dd34e5be9aa536bd5b16857f8a19ba6e7c6936dd077c98e273537b833df0f0d1f75fb153292c2c8d93d7bede97270f771917308d5cedb342b0ebac9c727e52d462ddea9e404f273b7f4f38cc671f30d17ed7058cca7ca3460a1b5877fe36b2a65627c10daa87ee6a9caa32aef136326076e22f7661c916d0215a6c6b6b140ed86a97ab7721f1eb00000000000000000ef52bdeb49a189c429363effa95251bb75537b668f2a0a3b4e213425caaa03eb17c943a912122013f16ca05cc2a99f91c85c5694396d1b4a3c028336abf6dfb3fc9dbd0ef24b01da4e278114cb81a928731930bad795c1b39e0ab09c047bc9ce9f0fe32da6abad0e2bf7e5a30722392b7666b5831d67bb52e9f0da712f2af42a11ffd44f481a546ce0774fc7369dc7e7583de2f22d3e1ade747bab0c4af9b23ed6c0bb71944acc239f9616759ffb423670051caa7960b11ffbc04e9be5539d1437987d4340e2a81870331ea01c57609758b9b26acbfbc79fbf447b204e05844c00f2577581d03a19515e3120e1673ceaec0c59ca6f8a68d2f47cb08fd9c5885d06833b094f91a8ea02318318cc6b8d6ad77a8d2d3ff8779d34ac10c76ad6a099c050467ced134bafebcdd91664bf1a8fd667fd7d0686e5e3a50e8d6b39c73e3a9392814f525429e067ac024c00b66dc2873d8d0992354bf8096355c27bef22a91deeb17107895beff0f3728c42ee0581562fc7ed0a230645b1f5934adf6d6f9a4e01c6d659ba585a60790802ed79f47c1ccbf8524fa10398ef91e53a69b06b54a3e3e3ef13addeb6b95de0753bf5d05081157466f48d7758882e903cda3e93ece7c8e64719067ada30aec0f767d91c0678d9be28d0e6c20a25dca96d3af2942d34b93a69fcebcbb01df095836ec2f1fca52eb513b1308cfa0f747ce8c928e038f035a79672514570b7844b1b2000000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 20:25:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) 20:25:49 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)) 20:25:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{}, "8d6084549c7aaa23", "6970019c61c1eeaadc8db29fadc65388", "f01d4815", "214f8688198a2297"}, 0x28) 20:25:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) signalfd(r0, &(0x7f0000000140), 0x8) 20:25:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:50 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000180), 0x4) 20:25:50 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000180), 0x4) 20:25:50 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)={0x4, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x40) close(r0) 20:25:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000040)={0x2, 0x4e25, @empty}, 0x10, 0x0}}], 0x1, 0x0) 20:25:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:51 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x0) 20:25:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8980, 0x0) 20:25:51 executing program 5: r0 = socket(0x1e, 0x4000000000080002, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 20:25:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002e000100"/20, @ANYRES32, @ANYBLOB="26b415f1b6fefe918d360c"], 0x24}}, 0x0) 20:25:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) 20:25:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f00000000c0)='X', 0x1, 0x50, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 20:25:52 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmmsg$alg(r1, &(0x7f0000004740)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)='W', 0x1}], 0x1}], 0x1, 0x0) 20:25:52 executing program 4: syz_emit_ethernet(0x26, &(0x7f0000000040)={@local, @random="b4f0e75acf08", @val={@void}, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @empty, "", @link_local}}}}, 0x0) 20:25:52 executing program 0: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 20:25:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000c40000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 20:25:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) [ 672.059690][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 20:25:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000180)={0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2={0x1f, 0x0, @fixed}, @ethernet={0x0, @dev}, 0x7fff}) [ 672.157659][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 20:25:52 executing program 2: syz_emit_ethernet(0x92, &(0x7f0000000000)={@multicast, @empty=[0x2], @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0000000108653904010705020000003f6a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc6a9471314a1d8c69"}}}}}}}, 0x0) 20:25:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="501971d62bf100a76c7b3363e17b3380", 0x10) 20:25:53 executing program 0: r0 = socket(0x200000000000011, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003480)=[{{&(0x7f0000000140)=@caif=@rfm={0x25, 0x3, "cd1ede4b3ff3ccfc7458a591e97371b9"}, 0x80, 0x0}}], 0x1, 0x0) [ 672.410642][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 672.478167][T13749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 20:25:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x98}}, 0x0) 20:25:53 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffd50}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="0500000023002f0000068908ac14140de20000093c31b47d0510c147885b6e765e30637ec921f605", 0x28}], 0x1, 0x0, 0x0, 0x50}, 0x0) 20:25:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:53 executing program 5: 20:25:53 executing program 0: 20:25:54 executing program 4: 20:25:54 executing program 5: 20:25:54 executing program 2: 20:25:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:54 executing program 1: 20:25:54 executing program 0: 20:25:54 executing program 4: 20:25:54 executing program 5: 20:25:55 executing program 2: 20:25:55 executing program 1: 20:25:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:55 executing program 0: 20:25:55 executing program 4: 20:25:55 executing program 5: 20:25:55 executing program 2: 20:25:55 executing program 1: 20:25:55 executing program 0: 20:25:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:56 executing program 4: 20:25:56 executing program 5: 20:25:56 executing program 2: 20:25:56 executing program 1: 20:25:56 executing program 0: 20:25:56 executing program 2: 20:25:56 executing program 5: 20:25:57 executing program 4: 20:25:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:57 executing program 1: 20:25:57 executing program 0: 20:25:57 executing program 2: 20:25:57 executing program 4: 20:25:57 executing program 5: 20:25:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:57 executing program 1: 20:25:57 executing program 0: 20:25:58 executing program 2: 20:25:58 executing program 5: 20:25:58 executing program 4: 20:25:58 executing program 1: 20:25:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:58 executing program 0: 20:25:58 executing program 5: 20:25:58 executing program 2: 20:25:59 executing program 4: 20:25:59 executing program 1: 20:25:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:59 executing program 0: 20:25:59 executing program 5: 20:25:59 executing program 2: 20:25:59 executing program 1: 20:25:59 executing program 4: 20:25:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:25:59 executing program 0: 20:26:00 executing program 5: 20:26:00 executing program 2: r0 = socket(0x2, 0x80003, 0x101) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000040)) 20:26:00 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$RDS_FREE_MR(r0, 0x29, 0x16, 0x0, 0x300) 20:26:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0xc) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)='U', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x11, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 20:26:00 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:00 executing program 0: r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x3e, 0x0, &(0x7f0000000080)) 20:26:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000100)=0x10000e, 0x4) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0xa, 0x6, 0x3}, 0x14}}, 0x0) 20:26:00 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2000000000000000, 0x80f01) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x0, 0x10000, 0x800}) 20:26:00 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001800000001040000000000003fffffffc70000000000000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:26:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:01 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 20:26:01 executing program 2: prctl$PR_CAPBSET_READ(0x18, 0x208000000013) 20:26:01 executing program 5: r0 = socket(0x11, 0xa, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 20:26:01 executing program 4: clone3(&(0x7f0000000700)={0x38976666463f42d7, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20:26:01 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:02 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x1c, 0x0, 0x0) 20:26:02 executing program 2: r0 = socket(0xa, 0x3, 0x8) sendmmsg$nfc_llcp(r0, &(0x7f0000003100)=[{&(0x7f0000000000)={0xa, 0x0, 0x80fe, 0x0, 0x0, 0x0, "cfe9d4e94f792a00000065a1c9cdfea3a971dd6bc8743ec355d2155de84eb76d6584369f8e5eb66e3fed9ea2e9e39b9bf9b8b6de62dabb4fcdc17dc340bffd"}, 0x60, 0x0}], 0x1, 0xfe80) 20:26:02 executing program 5: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x89e0, &(0x7f0000000040)) 20:26:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/225, 0xe1}, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4400ae8f, &(0x7f0000000040)) 20:26:02 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x1, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 20:26:02 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x83, 0x0, 0x0) 20:26:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x8010aebb, 0x0) 20:26:03 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 20:26:03 executing program 0: select(0x0, 0x0, &(0x7f0000008380)={0x0, 0x0, 0x0, 0x62}, &(0x7f0000009fc0)={0x0, 0x8, 0x8, 0x0, 0x2, 0x892, 0x9, 0x1}, &(0x7f000000a000)={0x0, 0x2710}) r0 = socket(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 20:26:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffff9, r1, 0x0) 20:26:03 executing program 4: r0 = creat(&(0x7f00000062c0)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000006300)) 20:26:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x8, 0x68000}, 0x10) 20:26:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @remote}}}, 0xa0) 20:26:04 executing program 0: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, [], 0x1}}}) r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 20:26:04 executing program 1: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'hsr0\x00', 'xfrm0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 20:26:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x1b, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x290, 0xffffffff, 0x410, 0x0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, 0x0, {[{{@ipv6={@mcast2, @ipv4={[], [], @remote}, [], [], 'veth1_vlan\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4=@multicast2, @gre_key, @gre_key}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'team_slave_0\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 20:26:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:04 executing program 2: clock_adjtime(0x904bb69c2d2acc39, &(0x7f00000000c0)) 20:26:04 executing program 5: prctl$PR_CAPBSET_READ(0x2f, 0x1) 20:26:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000002c0)=0x9c) 20:26:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0x0, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @remote, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000600)={r2, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, &(0x7f0000000700)=0x100) 20:26:05 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000080)='system_u:object_r:tpm_device_t:s0\x00', 0x22) 20:26:05 executing program 5: prctl$PR_CAPBSET_READ(0x2f, 0x0) 20:26:05 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, 0x0, 0x1000000) [ 685.265506][ T28] audit: type=1400 audit(1598991965.896:39): avc: denied { create } for pid=13988 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=key permissive=1 20:26:06 executing program 4: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x38) 20:26:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:06 executing program 0: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205649, &(0x7f00000004c0)={0x0, 0x500, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000080"}}) 20:26:06 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x347, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205647, &(0x7f00000004c0)={0xf010000, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000080"}}) 20:26:06 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000580)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8c6747", 0x8, 0x4, 0x0, @empty, @local, {[], @ndisc_rs}}}}}, 0x0) 20:26:06 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x1e, 0x0, 0x0) 20:26:06 executing program 0: r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x0, 0x0, @remote, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x14) 20:26:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) 20:26:07 executing program 2: openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/raw/rawctl\x00', 0x0, 0x0) 20:26:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x4008556c, &(0x7f0000000980)) 20:26:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x7c, 0x0, 0x0) 20:26:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x84080, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) 20:26:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x88, 0x64, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'hsr0\x00', 'xfrm0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 20:26:07 executing program 4: sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x2, 0x5, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 687.396917][T14013] syz-executor.0 (14013) used greatest stack depth: 3576 bytes left 20:26:08 executing program 0: r0 = socket(0xa, 0x3, 0x5) bind$can_j1939(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe}, 0x2f) 20:26:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) 20:26:08 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:08 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 20:26:08 executing program 2: r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) 20:26:08 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}) 20:26:09 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) 20:26:09 executing program 1: r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x25, 0x0, &(0x7f0000000080)) 20:26:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) 20:26:09 executing program 5: r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x14, r0, 0x1, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 20:26:09 executing program 4: r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0xe, 0x0, &(0x7f0000000080)) 20:26:09 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 20:26:09 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001800000001040000000000003fffffffb60000000000000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:26:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) syz_open_pts(r0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5412, &(0x7f0000000100)={0xffffffcd, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) [ 689.429778][T14073] sock: process `syz-executor.4' is using obsolete getsockopt SO_BSDCOMPAT 20:26:10 executing program 5: r0 = socket(0x15, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x891d, &(0x7f0000000100)={'sit0\x00', 0x0}) 20:26:10 executing program 2: socketpair(0x27, 0x0, 0x0, &(0x7f0000000300)) 20:26:10 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x1267, &(0x7f0000000040)) 20:26:10 executing program 0: r0 = socket(0x2, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x890d) 20:26:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:26:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r1, 0x805}, 0x14}}, 0x0) 20:26:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045569, &(0x7f0000000980)) 20:26:10 executing program 2: r0 = socket(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x6, 0x12, 0x0, &(0x7f0000000140)) 20:26:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x79, 0x0, 0x0) 20:26:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0), 0x10) 20:26:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$RDS_FREE_MR(r0, 0x29, 0x14, 0x0, 0x300) 20:26:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:26:11 executing program 5: setresuid(0xee00, 0xee00, 0xee00) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) 20:26:11 executing program 2: r0 = socket(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x6, 0x4, 0x0, &(0x7f0000000140)) 20:26:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x88, 0x40, 0x0, 0x0) 20:26:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) geteuid() 20:26:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 20:26:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, 0x0) 20:26:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x14, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 20:26:12 executing program 2: r0 = socket(0xa, 0x3, 0x2) getpeername$llc(r0, 0x0, 0x0) 20:26:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x16, 0x0, 0x0, 0x4}, 0x40) 20:26:12 executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, 0x0) 20:26:12 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket$isdn_base(0x22, 0x3, 0x0) socket$isdn_base(0x22, 0x3, 0x0) 20:26:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 20:26:13 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x6, 0x14, 0x0, &(0x7f0000000140)) 20:26:13 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) 20:26:13 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000000)) 20:26:13 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d7, 0x0) 20:26:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:13 executing program 5: r0 = socket(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 20:26:13 executing program 4: r0 = socket(0x11, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, "9e7db4f1b66a63f0da4bda775d41ce818201af08923518e567a57c337a9e0692ef47b0f04df547b42fdb14edeb174ba88946afe48e5a280b0bfbe7ea7beb14"}, 0x60) 20:26:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x5450, 0x0) 20:26:14 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 20:26:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"}) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "fa3656c90cdd4c13d09d2b6d776dcdc0a40d1d"}) ioctl$TCSETA(r0, 0x5406, &(0x7f00000004c0)={0xfff9, 0x0, 0x0, 0xbffa, 0x0, "078cf0251c0e00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000010000000001000"}) 20:26:14 executing program 0: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 20:26:14 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x29, 0x3, 0x0, 0x0) 20:26:14 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x347, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205647, &(0x7f00000004c0)={0xff000000, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000080"}}) 20:26:14 executing program 2: setreuid(0xee01, 0x0) r0 = getuid() setreuid(0xee01, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x1200, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 20:26:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x1e, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7339dd53f00128ea4dde4f8214a21c0e80c63ac56b2c000322dc8dbd8b80"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 20:26:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_TAIL={0x4, 0x117}]}, 0x18}}, 0x0) 20:26:15 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x4, 0x0, 0x10) 20:26:15 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f000049d000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 20:26:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @loopback}}) r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 20:26:15 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) 20:26:15 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f00000003c0)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8f6a4941"}, 0x0, 0x0, @fd}) 20:26:15 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:26:15 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001340)) socketpair(0x1a, 0x0, 0x0, &(0x7f0000000140)) 20:26:16 executing program 2: r0 = socket(0xa, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000040)={{0x2, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) bind$netrom(r0, 0x0, 0x0) 20:26:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x10, 0x18, 0x1}, 0x10}], 0x1}, 0x0) 20:26:16 executing program 4: getresuid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) [ 695.718140][T14219] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure 20:26:16 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socketpair(0x1e, 0x4, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000010e80)=[{{0x0, 0x0, &(0x7f000000ca00)=[{&(0x7f000000c8c0)=""/248, 0xf8}], 0x1, &(0x7f000000ca40)=""/235, 0xeb}}, {{0x0, 0x0, &(0x7f000000d540)=[{&(0x7f000000cf40)=""/115, 0x73}], 0x1}}], 0x2, 0x4013, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) 20:26:16 executing program 3: r0 = socket(0x11, 0x2, 0x0) getpeername$packet(r0, 0x0, 0x0) [ 696.034714][T14227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=14227 comm=syz-executor.5 20:26:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x5501, 0x0) 20:26:16 executing program 5: r0 = socket(0x2, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8919, &(0x7f0000002680)={'gre0\x00', 0x0}) 20:26:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x8004500f, &(0x7f0000000bc0)) 20:26:17 executing program 1: r0 = socket(0x29, 0x5, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 20:26:17 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) connect$rds(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) 20:26:17 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socketpair(0x1e, 0x4, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000010e80)=[{{0x0, 0x0, &(0x7f000000ca00)=[{&(0x7f000000c8c0)=""/248, 0xf8}], 0x1}}, {{0x0, 0x0, &(0x7f000000d540)=[{&(0x7f000000cf40)=""/115, 0x73}], 0x1}}], 0x2, 0x4013, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x0) 20:26:17 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000280)) 20:26:17 executing program 2: prctl$PR_GET_FPEXC(0x18, 0x0) 20:26:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x77, 0x0, 0x0) 20:26:17 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x8, 0x0, 0x0) 20:26:17 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x14, 0x18, 0x1, 0x0, 0x0, "", [@generic="80"]}, 0x14}], 0x1}, 0x0) 20:26:18 executing program 2: r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0xb, 0x0, &(0x7f0000000080)) 20:26:18 executing program 5: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x290, 0xffffffff, 0x410, 0x0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, 0x0, {[{{@ipv6={@mcast2, @ipv4={[], [], @remote}, [], [], 'veth1_vlan\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4=@multicast2, @gre_key, @gre_key}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'team_slave_0\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 20:26:18 executing program 0: connect$nfc_raw(0xffffffffffffffff, 0x0, 0x0) 20:26:18 executing program 4: r0 = perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, 0x0) 20:26:18 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40828, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x100000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:26:18 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) 20:26:18 executing program 2: r0 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000001280)={'syz', 0x0}, &(0x7f00000012c0)="e6", 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000015c0)='user\x00', &(0x7f0000001640)={'syz', 0x2}, &(0x7f0000001680)="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", 0x801, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000002680)={r0, r1, r0}, 0x0, 0x0, 0x0) 20:26:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x40045568, &(0x7f0000000980)) 20:26:18 executing program 4: r0 = socket(0xa, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000080)={'macvtap0\x00', @ifru_settings={0x0, 0x0, @raw_hdlc=0x0}}) 20:26:18 executing program 0: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000440)='9p\x00', 0x0, 0x0) [ 698.374445][T14277] MPI: mpi too large (16392 bits) 20:26:19 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5421, 0x0) 20:26:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0)='gtp\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r1, 0x601, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x24}}, 0x0) 20:26:19 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x347, 0x0) read$FUSE(r0, 0x0, 0x0) 20:26:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x4, 0x0, &(0x7f0000000080)) 20:26:19 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x40400) 20:26:20 executing program 1: r0 = socket(0x23, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x89ef, &(0x7f0000000040)) 20:26:20 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) fanotify_init(0x0, 0x0) 20:26:20 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af12, &(0x7f00000000c0)) 20:26:20 executing program 5: r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000fef000/0xf000)=nil) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001340)) shmctl$SHM_STAT(r0, 0xd, 0x0) 20:26:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 20:26:20 executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001340)) mq_open(&(0x7f0000000040)='@*^-,({&:^\'}\\($\x00', 0x40, 0x0, 0x0) 20:26:20 executing program 0: r0 = socket(0x10, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 20:26:20 executing program 2: r0 = socket(0x15, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000040)={{0xa, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) getpeername$netrom(r0, 0x0, &(0x7f0000000000)) 20:26:21 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = socket(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x894b, &(0x7f0000000140)={'vxcan0\x00'}) 20:26:21 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x0, 0x0, 0x0, "", ["", "", "", "", "", "", "", ""]}, 0x10}}, 0x0) 20:26:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x8400ae8e, &(0x7f0000000040)) 20:26:21 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x5452, 0x0) 20:26:21 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x1, @mcast1, 0x3f}}, 0x24) 20:26:21 executing program 2: set_mempolicy(0x0, &(0x7f00000002c0), 0x0) 20:26:21 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', @ifru_mtu=0x531100}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) read$proc_mixer(r1, &(0x7f0000000140)=""/177, 0xb1) 20:26:21 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040), 0x4) 20:26:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x10, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'hsr0\x00', 'xfrm0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 20:26:22 executing program 4: prctl$PR_GET_FPEXC(0x1c, 0x0) 20:26:22 executing program 2: r0 = socket(0x15, 0x5, 0x0) getsockname$netrom(r0, 0x0, &(0x7f0000000000)) 20:26:22 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000001040)={0xfffffffffffffffb, 0x0}) 20:26:22 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}}, 0x0) 20:26:22 executing program 5: r0 = socket(0x1e, 0x2, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) 20:26:22 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000800)='/dev/null\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000eac000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x8000000) 20:26:23 executing program 4: prctl$PR_CAPBSET_READ(0x17, 0x208000000013) 20:26:23 executing program 2: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)) [ 702.359575][T14378] kcapi: manufacturer command 4294967291 unknown. 20:26:23 executing program 0: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@null=' \x00', 0x0, 'veth0_to_batadv\x00'}) 20:26:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xc) 20:26:23 executing program 1: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001340)) socket$inet_icmp_raw(0x2, 0x3, 0x1) 20:26:23 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'gre0\x00', @ifru_mtu=0x531100}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x10, 0x4, 0x8, 0x8}, 0x40) 20:26:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r2}, 0x8) 20:26:23 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$RDS_FREE_MR(r0, 0x29, 0x8, 0x0, 0x300) 20:26:24 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$RDS_FREE_MR(r0, 0x29, 0x17, 0x0, 0x0) 20:26:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000080)=0x80) ioctl$sock_inet6_SIOCDELRT(r1, 0x40186366, &(0x7f0000002a00)={@remote, @empty, @mcast2}) 20:26:24 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) clock_gettime(0x2, 0x0) 20:26:24 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) clock_getres(0x2, &(0x7f0000000040)) 20:26:24 executing program 4: r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, &(0x7f0000000300)) 20:26:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e80)={0xe0, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_HEAD={0xca, 0xe, "1170c59c5f8cca02ba71a42a851794963eda15857579bd2e888976bc02d913dfc1d122a6799ee32d03671b04f19880de32d06efb222e7af4d77cf013afe643428c93e4daffe89f808691a136ef650308dfc354aea3366c1c0e76012cda6529e02d70b19d646fe5f62c4a3ec435f3e9cb0a6d78754b5366e14b3254ee09a4f525bbc85133ae365993dd6bc9e184cd5b25f856366bc06d1dfc8a784ee36a0811548f87e6260d08bffc8ad8a88720fa4a6acbfb8dc9a116294777f723ffbee9b04036647c34a8dc"}]}, 0xe0}}, 0x0) 20:26:24 executing program 3: r0 = socket(0x22, 0x2, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000006040)) 20:26:24 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket$can_raw(0x1d, 0x3, 0x1) socket(0x1e, 0x0, 0x0) 20:26:25 executing program 1: bpf$PROG_LOAD(0x7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:26:25 executing program 4: r0 = socket(0x22, 0x2, 0x1) getsockname$ax25(r0, 0x0, 0x0) 20:26:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x8, 0x6, 0x503}, 0x14}}, 0x0) 20:26:25 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x8918, &(0x7f0000000340)={'team0\x00', @ifru_addrs=@qipcrtr={0x2a, 0x4}}) 20:26:25 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) clock_gettime(0x0, &(0x7f0000007380)) 20:26:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, &(0x7f00000001c0)) 20:26:25 executing program 1: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000659000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000280)) 20:26:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x18, 0x10, 0x30}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe0c, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 20:26:25 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket$netlink(0x10, 0x3, 0x13) 20:26:26 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) 20:26:26 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) 20:26:26 executing program 1: syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x0, 0x5256c0) 20:26:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$BPF_PROG_QUERY(0x4, 0x0, 0x1a) 20:26:26 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = getpid() getpgid(r1) 20:26:26 executing program 5: socket(0x15, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000007c0)) select(0x40, &(0x7f0000000700), &(0x7f0000000740)={0x8}, 0x0, 0x0) 20:26:26 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000003c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)=ANY=[@ANYBLOB="03", @ANYRES32=0x0], &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={r2}, &(0x7f0000000300)=0x8) 20:26:27 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000180), 0x4) 20:26:27 executing program 3: r0 = socket(0x11, 0x2, 0x0) bind$nfc_llcp(r0, 0x0, 0x0) 20:26:27 executing program 0: r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x22, 0x0, &(0x7f0000000080)) 20:26:27 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socketpair(0x11, 0xa, 0x0, &(0x7f0000000080)) 20:26:27 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x16, 0x4, 0x0, 0x4}, 0x40) 20:26:27 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x347, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205649, &(0x7f00000004c0)={0xf010000, 0x0, 0x4, 0xff000000, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000080"}}) 20:26:27 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xe970be9e4652985e}]}) 20:26:27 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x2000000000000000, 0x80f01) write$midi(r0, 0x0, 0x0) 20:26:27 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 20:26:28 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x12, &(0x7f0000000040)={{{@in6=@dev, @in=@private}}, {{@in=@remote}, 0x0, @in=@broadcast}}, 0xe8) 20:26:28 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000000)=0x3, 0x4) 20:26:28 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) inotify_init() 20:26:28 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$RDS_FREE_MR(r0, 0x29, 0x49, 0x0, 0x300) 20:26:28 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) 20:26:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_BEACON_TAIL={0x4, 0xe}]}, 0x18}}, 0x0) 20:26:28 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001340)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}}}}, 0x3c}}, 0x0) 20:26:29 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x347, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0205647, &(0x7f00000004c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000080"}}) 20:26:29 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000180)) 20:26:29 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af13, &(0x7f00000000c0)) 20:26:29 executing program 3: r0 = socket(0x22, 0x3, 0x0) getpeername$l2tp6(r0, 0x0, 0x0) 20:26:29 executing program 0: recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 20:26:29 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) socket$inet_udplite(0x2, 0x2, 0x88) 20:26:29 executing program 4: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x11, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x290, 0xffffffff, 0x410, 0x0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, 0x0, {[{{@ipv6={@mcast2, @ipv4={[], [], @remote}, [], [], 'veth1_vlan\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4=@multicast2, @gre_key, @gre_key}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'team_slave_0\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 20:26:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae47, 0x0) 20:26:29 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xcb002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040), 0x2) 20:26:29 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8901, &(0x7f0000000100)={'sit0\x00', 0x0}) 20:26:30 executing program 5: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x48, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x290, 0xffffffff, 0x410, 0x0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, 0x0, {[{{@ipv6={@mcast2, @ipv4={[], [], @remote}, [], [], 'veth1_vlan\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4=@multicast2, @gre_key, @gre_key}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'team_slave_0\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) [ 709.785419][T14553] misc userio: Begin command sent, but we're already running 20:26:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x40}) 20:26:30 executing program 4: getresgid(&(0x7f0000000000), 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x38) 20:26:30 executing program 3: r0 = socket(0x11, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, 0x0) 20:26:30 executing program 2: syz_open_dev$hidraw(&(0x7f0000000040)='/dev/hidraw#\x00', 0x0, 0x0) r0 = socket(0x2, 0x3, 0x4) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) [ 710.042448][T14557] misc userio: Begin command sent, but we're already running 20:26:31 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x25, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7339dd53f00128ea4dde4f8214a21c0e80c63ac56b2c000322dc8dbd8b80"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 20:26:31 executing program 0: socketpair(0xf, 0x0, 0x0, &(0x7f00000003c0)) 20:26:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000240), 0x4) 20:26:31 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0xf09cbaa7a8f73ad5) 20:26:31 executing program 2: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x107, 0x8, 0x0, 0x0) 20:26:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xae45, 0x0) 20:26:31 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae53c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:26:31 executing program 1: r0 = socket(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x29, 0x0, 0x0) 20:26:31 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x77, &(0x7f0000000000)=@assoc_value={0x0, 0x1000000}, 0x8) 20:26:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x41a0ae8d, &(0x7f0000000040)) 20:26:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x2, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'hsr0\x00', 'xfrm0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3) 20:26:32 executing program 0: r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x5, 0x0, &(0x7f0000000080)) 20:26:32 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280), 0x6) ioctl$sock_bt_hci(r0, 0x800448d7, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x84080, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) bind$bt_hci(r2, 0x0, 0x4b) 20:26:32 executing program 5: setreuid(0xee01, 0x0) r0 = getuid() setreuid(0xee01, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19}, 0x40) 20:26:32 executing program 4: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001340)) bpf$BPF_PROG_QUERY(0x12, 0x0, 0x0) 20:26:32 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001340)) r0 = syz_open_dev$loop(&(0x7f0000008340)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, 0x0) 20:26:32 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80010102, 0x0) 20:26:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x11, r1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 20:26:33 executing program 5: r0 = socket(0x23, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) 20:26:33 executing program 1: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x107, 0x13, 0x0, 0x0) 20:26:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4188aea7, &(0x7f0000000040)) 20:26:33 executing program 2: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x11, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x128, 0x0, 0xffffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@loopback, @rand_addr, 0x0, 0x0, 'hsr0\x00', 'xfrm0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@ip={@rand_addr, @rand_addr, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 20:26:33 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x10, 0x0, 0x0) 20:26:33 executing program 0: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0xcb002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000200)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000000), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080), 0x2) 20:26:33 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000000)={0x3, @bcast, 0xee00}) 20:26:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r0, 0x0, 0x0, 0x12000, 0x0) 20:26:34 executing program 4: pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000014, 0xffffffffffffffff) 20:26:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002b80)={&(0x7f0000001440)={0xa, 0x4e21, 0x0, @local, 0x1}, 0x1c, 0x0}, 0x0) 20:26:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x11, 0x0, 0x0) 20:26:34 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000100)={0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000001c0)={r1, 0x1, r2, 0x3ff}) 20:26:34 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"48a512b2181c8a44a94fd0b2b2298dc07bed2b2bd96ff375a1f0d70ff3c0", 0xffffffff}) 20:26:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$RDS_FREE_MR(r0, 0x29, 0x38, 0x0, 0x0) 20:26:34 executing program 0: r0 = io_uring_setup(0x1911, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x300000c, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x290, 0xffffffff, 0x410, 0x0, 0x520, 0x520, 0xffffffff, 0x520, 0x520, 0x5, 0x0, {[{{@ipv6={@mcast2, @ipv4={[], [], @remote}, [], [], 'veth1_vlan\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@remote, @ipv6=@private0, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private, @ipv4=@multicast2, @gre_key, @gre_key}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'team_slave_0\x00', 'veth1_to_team\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 20:26:34 executing program 3: r0 = socket(0x25, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 20:26:34 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x84, 0x7c, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x100, 0x0, 0x100, 0xffffffff, 0xffffffff, 0x248, 0x248, 0x248, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7339dd53f00128ea4dde4f8214a21c0e80c63ac56b2c000322dc8dbd8b80"}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 20:26:35 executing program 4: r0 = socket(0x23, 0x2, 0x0) recvmsg(r0, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40000040) 20:26:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20:26:35 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) connect$can_bcm(r0, &(0x7f0000000000), 0x10) [ 715.084039][ T28] audit: type=1326 audit(1598991995.696:40): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=14686 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7efd549 code=0x7fc00000 [ 715.108259][ T28] audit: type=1326 audit(1598991995.696:41): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=14686 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7efd549 code=0x7fc00000 20:26:35 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80053, r0, 0x0) 20:26:35 executing program 3: r0 = socket(0x23, 0x2, 0x0) bind$can_raw(r0, &(0x7f0000000300), 0x10) [ 715.131163][ T28] audit: type=1326 audit(1598991995.696:42): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=14686 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7efd549 code=0x7fc00000 20:26:36 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 20:26:36 executing program 5: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) 20:26:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) [ 715.519855][ T28] audit: type=1326 audit(1598991995.796:43): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=14686 comm="syz-executor.5" exe="/root/syz-executor.5" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7efd549 code=0x7fc00000 20:26:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000100), 0x4) 20:26:36 executing program 0: socketpair(0x1e, 0x1, 0x0, &(0x7f0000004a40)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/84, 0x54}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 20:26:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x11, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000), 0xe) 20:26:36 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0, 0x1000000}, 0x8) 20:26:36 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x11, 0x0, 0x0) 20:26:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20:26:37 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x45c) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000980)={0x0, {0x0, 0x0, 0x7}}) 20:26:37 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 20:26:37 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) 20:26:37 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f00000001c0)) 20:26:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20:26:37 executing program 2: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8970, &(0x7f0000000100)={'sit0\x00', 0x0}) 20:26:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$RDS_FREE_MR(r0, 0x29, 0x12, 0x0, 0x0) 20:26:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100), 0x4) [ 717.326763][ T28] audit: type=1326 audit(1598991997.956:44): auid=0 uid=0 gid=0 ses=5 subj=system_u:system_r:kernel_t:s0 pid=14750 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f72549 code=0x0 20:26:38 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r0, 0x0, 0x0) 20:26:38 executing program 1: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20:26:38 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101}) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001800000001040000000000003f000000160000000000000095"], &(0x7f0000000540)='GPL\x00', 0x4, 0xf1, &(0x7f0000000080)=""/241, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:26:38 executing program 2: r0 = socket(0x2c, 0x3, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) 20:26:38 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x5015, 0x0) 20:26:38 executing program 3: setuid(0xee00) bpf$BPF_LSM_PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x1, &(0x7f00000000c0)=@raw=[@generic], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 20:26:38 executing program 1: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20:26:38 executing program 4: r0 = socket(0x11, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x107, 0x17, 0x0, 0x0) 20:26:39 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100}) clock_gettime(0xfffffffffffffffd, &(0x7f0000000000)) 20:26:39 executing program 5: r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x29, 0x0, &(0x7f0000000080)) 20:26:39 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) 20:26:39 executing program 1: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20:26:39 executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x402, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x7) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xb, 0x12, r0, 0x0) 20:26:39 executing program 4: mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000) 20:26:39 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x6, 0x3, 0x0, &(0x7f0000000140)) 20:26:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000040)={{{@in6=@dev, @in=@private}}, {{@in=@remote}, 0x0, @in=@broadcast}}, 0xe8) 20:26:40 executing program 0: r0 = socket(0x2, 0x3, 0x8) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x13, 0x0, &(0x7f0000000080)) 20:26:40 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20:26:40 executing program 4: socketpair(0x0, 0x9d02a94a5ebb6c08, 0x0, 0x0) 20:26:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0xc) 20:26:40 executing program 5: r0 = socket(0x2b, 0x1, 0x0) bind$bt_sco(r0, 0x0, 0x0) 20:26:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @private}}}}) 20:26:40 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x8, 0x6, 0x503, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 20:26:40 executing program 3: openat2(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xc00002}, 0x18) 20:26:40 executing program 4: r0 = socket(0x18, 0x0, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = eventfd(0x200) r3 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)={0xf8, 0x16, 0x1, 0x0, 0x0, "", [@nested={0xe8, 0x0, 0x0, 0x1, [@generic="b99687ef88b5864d8d6c7b23e986", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@dev}, @generic="bc6168c9cc77af9602ef0094697b384b0c4bd5784b8d34b50046c6f2e85248c106115acd38e8e2352997dee6e41ee07813f73288486b7303be027a8efd7747c702402ccc92f16b80f88fe813b922232b3d219e84f1606a281b7a2584dcbab595634cba57713525ff278ec426c423401c23fa52e4b62b4c2b711e5e9d467aee4895ccf1bbf56fe43ac58cca9f28a9f23631f4167351d2c34a2eccac92b5872dedfa4a73c0c964cb4885608fa5c804a458222491", @generic="5fe994d5b5ab03bf17c41ec7f06a7876476c08f89a5155f89a5155"]}]}, 0xf8}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xd989b09d65e78fed, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) io_submit(0x0, 0x4, &(0x7f0000000600)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3, 0x1ff, r0, &(0x7f0000000180)="5be04dcba3fcf780584b4fd2668cd5be897886d898502b1cba9fac7904d2eccf6a6deaf649022ccb8b49d43fe04fdff59b4517c58f8428e6c4082d5f05b1cf080eb83b49b4b1e80d5404ff553be4d4033073d004ab4908f0b8fdcf1980db90883f1ba4539a4cfc2f2c05", 0x6a, 0x8, 0x0, 0x1, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r4, &(0x7f0000000300)="0b5cd5749af247978e794368065b974367ad602e9348c177a97dc0164938ed4ddeba10e9f855582d7e38cc5d8e415a069291eac24ff348df77ea1381decda331548e661be935f823a10cf4545b69f436", 0x50}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x3, r5, &(0x7f0000000380)="3a8c4f51d71fb1d46e25ba84708c963b5e015aea839c8b7b8ce3f4781befa80313ed7478f90f535e407c4da3cb1fafebce4353747444e2ba81a146d9e8d8393c3e52fb4f7dee59ff4914aa9b9dfc69dd70914a7c6e2b50027451160ada5d9ea45fbac9b47bbb35fb386f8604973a13a7211546230d859708e655177fe688ac4c5c1f7a3648db2b9ad627bf8fae62251cf85cd89a701e12619196ce4f4ff58c9b41e940c3a1455df042a068bea3957cab60276fcccd215a10ed2aab950eb2a2e0a00d3f", 0xc3, 0x7fff}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f00000004c0)="dc7d40f26bbb9bce853f74acabc583336e450e4294dc713c1e07e15b2a456884b5363748211729151a269b26a52521a03875f614eb0d679f826c4175791cf7195f7a88238d6186cdd6d659d897071478818ee7979e104508f6a251275584a7c3f503ec351532cf62eed651a76deed8908018c1438f9ca942ae971dcc1fa63cd2b0454d7680efe7ad69d449979aa65b17b59e4d93b54c21add999b58d1afc58c54f34c6ab4a5909c3e02b0b33c3fae4da826c3a4ba41195db5efb7194edbd854e8f87576dd0a9f64d42c913b39bb5442beb9eb65591fa045b1ab5af6bbcb2ffcd513ad7dd02b0f1396ff7be62b500886422bc62ecbc1e8876b1", 0xf9, 0x9, 0x0, 0x3}]) getsockname(r1, &(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, &(0x7f00000007c0)=0x80) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xd989b09d65e78fed, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000680)={0x13a002, &(0x7f0000000640), 0x3, r2, 0x5}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r8, 0x4018f50b, &(0x7f0000000040)={0x0, 0x0, 0x7}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000003000ed8f000000000000000000e319807b696e666f00001c000280180003000200000800000000000000000000000000000000040006000c0007000000000000000c000800"/91], 0x60}}, 0x0) ioctl$FICLONE(r7, 0x40049409, r0) 20:26:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xf, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x40) 20:26:41 executing program 5: r0 = socket(0x11, 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x11, 0x400, 0x0, 0x0, 0x0, 0x0, "9e7db4f1b66a63f0da4bda775d41ce818201af08923518e567a57c337a9e0692ef47b0f04df547b42fdb14edeb174ba88946afe48e5a280b0bfbe7ea7beb14"}, 0x60) 20:26:41 executing program 2: prctl$PR_GET_FPEXC(0x34, 0x0) 20:26:41 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8906, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 720.931756][T14824] ===================================================== [ 720.938767][T14824] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x81/0x90 [ 720.946273][T14824] CPU: 1 PID: 14824 Comm: syz-executor.4 Not tainted 5.8.0-rc5-syzkaller #0 [ 720.954957][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.965027][T14824] Call Trace: [ 720.968359][T14824] dump_stack+0x21c/0x280 [ 720.972729][T14824] kmsan_report+0xf7/0x1e0 [ 720.977204][T14824] kmsan_internal_check_memory+0x238/0x3d0 [ 720.983026][T14824] ? kmsan_get_metadata+0x116/0x180 [ 720.988249][T14824] ? kmsan_get_metadata+0x116/0x180 [ 720.993480][T14824] kmsan_copy_to_user+0x81/0x90 [ 720.998391][T14824] _copy_to_user+0x18e/0x260 [ 721.003028][T14824] move_addr_to_user+0x3de/0x670 [ 721.008025][T14824] __sys_getsockname+0x407/0x5e0 [ 721.013016][T14824] ? put_old_timespec32+0x231/0x2d0 [ 721.018281][T14824] ? kmsan_get_metadata+0x116/0x180 [ 721.023512][T14824] ? kmsan_get_metadata+0x116/0x180 [ 721.028750][T14824] ? kmsan_get_metadata+0x116/0x180 [ 721.033992][T14824] __se_sys_getsockname+0x91/0xb0 [ 721.039068][T14824] __ia32_sys_getsockname+0x4a/0x70 [ 721.044310][T14824] __do_fast_syscall_32+0x2af/0x480 [ 721.049563][T14824] do_fast_syscall_32+0x6b/0xd0 [ 721.054496][T14824] do_SYSENTER_32+0x73/0x90 [ 721.059059][T14824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 721.065416][T14824] RIP: 0023:0xf7f91549 [ 721.069520][T14824] Code: Bad RIP value. [ 721.073608][T14824] RSP: 002b:00000000f558b0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016f [ 721.082047][T14824] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000740 [ 721.090154][T14824] RDX: 00000000200007c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 721.098150][T14824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 721.106146][T14824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 721.114242][T14824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 721.122251][T14824] [ 721.124600][T14824] Local variable ----address@__sys_getsockname created at: [ 721.131826][T14824] __sys_getsockname+0x91/0x5e0 [ 721.136800][T14824] __sys_getsockname+0x91/0x5e0 [ 721.141648][T14824] [ 721.143987][T14824] Bytes 2-3 of 24 are uninitialized [ 721.149190][T14824] Memory access of size 24 starts at ffff88810a7dbd50 [ 721.155955][T14824] Data copied to user address 0000000020000740 [ 721.162113][T14824] ===================================================== [ 721.169073][T14824] Disabling lock debugging due to kernel taint [ 721.175242][T14824] Kernel panic - not syncing: panic_on_warn set ... [ 721.181867][T14824] CPU: 1 PID: 14824 Comm: syz-executor.4 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 721.192028][T14824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.202122][T14824] Call Trace: [ 721.205454][T14824] dump_stack+0x21c/0x280 [ 721.209820][T14824] panic+0x4d7/0xef7 [ 721.213786][T14824] ? add_taint+0x17c/0x210 [ 721.218233][T14824] kmsan_report+0x1df/0x1e0 [ 721.222766][T14824] kmsan_internal_check_memory+0x238/0x3d0 [ 721.228631][T14824] ? kmsan_get_metadata+0x116/0x180 [ 721.233856][T14824] ? kmsan_get_metadata+0x116/0x180 [ 721.239114][T14824] kmsan_copy_to_user+0x81/0x90 [ 721.243989][T14824] _copy_to_user+0x18e/0x260 [ 721.248638][T14824] move_addr_to_user+0x3de/0x670 [ 721.253618][T14824] __sys_getsockname+0x407/0x5e0 [ 721.258602][T14824] ? put_old_timespec32+0x231/0x2d0 [ 721.263827][T14824] ? kmsan_get_metadata+0x116/0x180 [ 721.269055][T14824] ? kmsan_get_metadata+0x116/0x180 [ 721.274281][T14824] ? kmsan_get_metadata+0x116/0x180 [ 721.279514][T14824] __se_sys_getsockname+0x91/0xb0 [ 721.284578][T14824] __ia32_sys_getsockname+0x4a/0x70 [ 721.289824][T14824] __do_fast_syscall_32+0x2af/0x480 [ 721.295061][T14824] do_fast_syscall_32+0x6b/0xd0 [ 721.299932][T14824] do_SYSENTER_32+0x73/0x90 [ 721.304468][T14824] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 721.310814][T14824] RIP: 0023:0xf7f91549 [ 721.314883][T14824] Code: Bad RIP value. [ 721.318981][T14824] RSP: 002b:00000000f558b0cc EFLAGS: 00000296 ORIG_RAX: 000000000000016f [ 721.327414][T14824] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000740 [ 721.335411][T14824] RDX: 00000000200007c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 721.343410][T14824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 721.351467][T14824] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 721.359497][T14824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 721.368634][T14824] Kernel Offset: disabled [ 721.372966][T14824] Rebooting in 86400 seconds..