Warning: Permanently added '10.128.0.120' (ECDSA) to the list of known hosts. 2020/08/26 19:30:30 fuzzer started 2020/08/26 19:30:30 dialing manager at 10.128.0.26:37315 2020/08/26 19:30:31 syscalls: 3161 2020/08/26 19:30:31 code coverage: enabled 2020/08/26 19:30:31 comparison tracing: enabled 2020/08/26 19:30:31 extra coverage: enabled 2020/08/26 19:30:31 setuid sandbox: enabled 2020/08/26 19:30:31 namespace sandbox: enabled 2020/08/26 19:30:31 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/26 19:30:31 fault injection: enabled 2020/08/26 19:30:31 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/26 19:30:31 net packet injection: enabled 2020/08/26 19:30:31 net device setup: enabled 2020/08/26 19:30:31 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/08/26 19:30:31 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/26 19:30:31 USB emulation: enabled 2020/08/26 19:30:31 hci packet injection: enabled 19:35:20 executing program 0: [ 443.255288][ T8491] IPVS: ftp: loaded support on port[0] = 21 [ 443.737571][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 443.909037][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.916455][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.927837][ T8491] device bridge_slave_0 entered promiscuous mode [ 443.970947][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.979405][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.989142][ T8491] device bridge_slave_1 entered promiscuous mode [ 444.052052][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.070618][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.126346][ T8491] team0: Port device team_slave_0 added [ 444.143560][ T8491] team0: Port device team_slave_1 added [ 444.198382][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.205478][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.231691][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.248929][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.256016][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.282648][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.355647][ T8491] device hsr_slave_0 entered promiscuous mode [ 444.368720][ T8491] device hsr_slave_1 entered promiscuous mode [ 444.669390][ T8491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.734932][ T8491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.768740][ T8491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.803812][ T8491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.077900][ T29] Bluetooth: hci0: command 0x0409 tx timeout [ 445.125007][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.163799][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.173363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.195963][ T8491] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.222468][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.234214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.243985][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.251382][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.300417][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 445.309894][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.320520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.330217][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.337559][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.346773][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.358071][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.382180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.393100][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.405080][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.429979][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.441087][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.485076][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.495463][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.505500][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.516005][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.549021][ T8491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.613702][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.624140][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.665146][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.741492][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.752969][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.821559][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.831599][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.849683][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.860298][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.882525][ T8491] device veth0_vlan entered promiscuous mode [ 445.926130][ T8491] device veth1_vlan entered promiscuous mode [ 446.016375][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 446.027051][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 446.036835][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 446.048245][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 446.074141][ T8491] device veth0_macvtap entered promiscuous mode [ 446.097497][ T8491] device veth1_macvtap entered promiscuous mode [ 446.169246][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.179180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 446.188972][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 446.198668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 446.209113][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.239640][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.251568][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.261947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:35:25 executing program 0: 19:35:25 executing program 0: 19:35:26 executing program 0: [ 447.158481][ T8709] Bluetooth: hci0: command 0x041b tx timeout 19:35:26 executing program 0: 19:35:26 executing program 0: 19:35:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x9, 0x6, 0x2, 0x0, 0x5c19, 0x5, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x1, @private0, 0x4}}, 0x5, 0x3, 0x8, 0x6, 0x594b}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000380)=r4, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) write$binfmt_misc(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001001fff64017db9820000000000000d403ffff633b27e59aa146175dd606736d173f0fc7056f26710000000049d2e181baf9459c5c953148c6801d2c0945c08ba8c552fc99a7422007650ddefffd195149bcd77ac3ff274014ae40b8ae4f2a88d2fbea75274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609bda9e6000000000000000000000000000000f390d71cc6092c0100b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e999bba83a7b0e51f6d24317f9ebfeb82ee2469fb31be3d037359f1886a0f3fea4342b1185dbb276bc44e5d1b3cf781dfdb52aad2c2d30be42d741fa17f5886240f361e2dd9a38461c607a98", @ANYRESHEX=r1, @ANYBLOB="b672eec86987e2cf7f82f8e428040b33d6f00645bc653df64c1920dc0ad22c"], 0x14f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x26da}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) [ 447.874588][ C0] sd 0:0:1:0: [sg0] tag#6988 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 447.885370][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB: Test Unit Ready [ 447.892250][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.902196][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.913363][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.924989][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.934872][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.944792][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.955160][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.965425][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.976481][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.986402][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.996375][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 447.996619][ C1] hrtimer: interrupt took 91008 ns [ 448.006312][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.022389][ C0] sd 0:0:1:0: [sg0] tag#6988 CDB[c0]: 00 00 00 00 00 00 00 00 [ 448.699259][ C1] sd 0:0:1:0: [sg0] tag#6989 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 448.709949][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB: Test Unit Ready [ 448.716802][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.726729][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.736749][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.746631][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.756404][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.766301][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.776177][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.786102][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.795957][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.805837][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.815703][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.825590][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 448.835450][ C1] sd 0:0:1:0: [sg0] tag#6989 CDB[c0]: 00 00 00 00 00 00 00 00 19:35:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x9, 0x6, 0x2, 0x0, 0x5c19, 0x5, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x1, @private0, 0x4}}, 0x5, 0x3, 0x8, 0x6, 0x594b}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000380)=r4, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) write$binfmt_misc(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="b672eec86987e2cf7f82f8e428040b33d6f00645bc653df64c1920dc0ad22c"], 0x14f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x26da}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) [ 449.080267][ C1] sd 0:0:1:0: [sg0] tag#6990 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 449.090954][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB: Test Unit Ready [ 449.097787][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.107686][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.117556][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.127597][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.137535][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.147460][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.157401][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.167329][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.177303][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.187214][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.197134][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.207070][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.216993][ C1] sd 0:0:1:0: [sg0] tag#6990 CDB[c0]: 00 00 00 00 00 00 00 00 [ 449.397245][ T8709] Bluetooth: hci0: command 0x040f tx timeout 19:35:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x9, 0x6, 0x2, 0x0, 0x5c19, 0x5, 0x6, {0x0, @in6={{0xa, 0x4e20, 0x1, @private0, 0x4}}, 0x5, 0x3, 0x8, 0x6, 0x594b}}, &(0x7f00000001c0)=0xb0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000380)=r4, 0x4) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) write$binfmt_misc(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="b672eec86987e2cf7f82f8e428040b33d6f00645bc653df64c1920dc0ad22c"], 0x14f) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) ioctl$SOUND_MIXER_INFO(r2, 0x805c4d65, &(0x7f0000000040)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x26da}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) [ 449.679773][ C0] sd 0:0:1:0: [sg0] tag#6991 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 449.690501][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB: Test Unit Ready [ 449.697382][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.707309][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.717257][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.727188][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.737299][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.747242][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.757143][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.767023][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.776877][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.786756][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.796729][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.806791][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 449.816722][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[c0]: 00 00 00 00 00 00 00 00 19:35:29 executing program 0: getpgrp(0x0) r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/61) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) rt_sigqueueinfo(0x0, 0x1c, &(0x7f0000000040)={0x36, 0x0, 0x7}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0xf0, 0x75, 0x20, 0x1608, 0x7, 0xc968, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x8b, 0xff, 0x22, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) [ 450.897037][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 451.137982][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 451.257832][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 451.269041][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 451.279226][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.289238][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.299267][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 451.309381][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 451.321140][ T12] usb 1-1: New USB device found, idVendor=1608, idProduct=0007, bcdDevice=c9.68 [ 451.330747][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.349031][ T12] usb 1-1: config 0 descriptor?? [ 451.391478][ T12] io_edgeport 1-1:0.0: Edgeport 2 port adapter converter detected [ 451.401903][ T12] usb 1-1: detected [ 451.477319][ T8709] Bluetooth: hci0: command 0x0419 tx timeout [ 451.617454][ T12] usb 1-1: error in getting manufacturer descriptor: -71 [ 451.637912][ T12] usb 1-1: error in getting boot descriptor: -71 [ 451.644488][ T12] usb 1-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 451.731530][ T12] usb 1-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 451.740823][ T12] usb 1-1: Failed to load image "edgeport/down.fw" err -2 [ 451.749229][ T12] usb 1-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 451.758553][ T12] usb 1-1: Failed to load image "edgeport/boot.fw" err -2 [ 451.829798][ T12] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 451.868503][ T12] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 451.921032][ T12] usb 1-1: USB disconnect, device number 2 [ 451.958582][ T12] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 452.019505][ T12] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 452.031202][ T12] io_edgeport 1-1:0.0: device disconnected 19:35:31 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xb80, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x4}}]}, 0x44}}, 0x8001) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x88020}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, 0x0, 0xb, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x7, 0x1, '\\@\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0xc, 0x1, 'nl80211\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xe, 0x1, '#\xa0\\\xd6\xeb$!A+\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x8, 0x1, '&(\'\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x1804}, 0x11) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000300)={{}, 0x5, &(0x7f00000002c0)=[0x4fb, 0x4, 0x5, 0x8000, 0x5], 0x2, 0x0, [0x9, 0xab1, 0x0, 0x4]}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0xc, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000540)={'nat\x00', 0x0, 0x3, 0x5d, [], 0x2, &(0x7f0000000480)=[{}, {}], &(0x7f00000004c0)=""/93}, &(0x7f00000005c0)=0x78) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x44880) r2 = openat(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0x0, 0x3) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000e00), &(0x7f0000000e40)=0x4) socket$unix(0x1, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, 0x2, 0x9, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8000000}}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044080}, 0x40004) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000f80)={0xc08b, [0x0, 0x40, 0xffff], [{0x3, 0x2}, {0x4d79, 0xac49, 0x1, 0x1, 0x0, 0x1}, {0x40, 0xffffff00, 0x0, 0x0, 0x1}, {0x8, 0x9, 0x0, 0x1}, {0x7, 0x8, 0x1}, {0xfffffff8, 0x1, 0x0, 0x1}, {0x4, 0x3042, 0x1, 0x1, 0x1}, {0x4, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x4, 0x459, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x800}, {0x200, 0xfffffffd, 0x0, 0x1, 0x0, 0x1}], 0x2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001540)={r1}) bind$l2tp6(r3, &(0x7f0000001580)={0xa, 0x0, 0x46, @remote, 0xffffff89}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000015c0), &(0x7f0000001600)=0x8) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xf6d3) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000001700), &(0x7f0000001740)=0x4) [ 452.526935][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 452.767044][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 452.887853][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 452.899131][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 452.909309][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 452.919249][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 452.929216][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 452.939362][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 452.949494][ T12] usb 1-1: New USB device found, idVendor=1608, idProduct=0007, bcdDevice=c9.68 [ 452.958842][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.973555][ T12] usb 1-1: config 0 descriptor?? [ 453.021618][ T12] io_edgeport 1-1:0.0: Edgeport 2 port adapter converter detected [ 453.030749][ T12] usb 1-1: detected [ 453.247211][ T12] usb 1-1: error in getting manufacturer descriptor: -71 [ 453.269089][ T12] usb 1-1: error in getting boot descriptor: -71 [ 453.275617][ T12] usb 1-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 453.289839][ T12] usb 1-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 453.298771][ T12] usb 1-1: Failed to load image "edgeport/down.fw" err -2 [ 453.307232][ T12] usb 1-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 453.315961][ T12] usb 1-1: Failed to load image "edgeport/boot.fw" err -2 19:35:32 executing program 0: getpgrp(0x0) r0 = syz_open_dev$cec(0x0, 0x1, 0x2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000140)=""/61) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f00000000c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) rt_sigqueueinfo(0x0, 0x1c, &(0x7f0000000040)={0x36, 0x0, 0x7}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc4, 0xf0, 0x75, 0x20, 0x1608, 0x7, 0xc968, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x8b, 0xff, 0x22, 0x0, [], [{{0x9, 0x5, 0x8d, 0x1f}}, {{0x9, 0x5, 0x5, 0x2}}, {{0x9, 0x5, 0x8f, 0x1e}}]}}]}}]}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x101000, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) [ 453.469390][ T12] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 453.498536][ T12] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 453.520031][ T12] usb 1-1: USB disconnect, device number 3 [ 453.535265][ T12] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 453.557338][ T12] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 453.576288][ T12] io_edgeport 1-1:0.0: device disconnected [ 453.937653][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 453.987424][ T8810] IPVS: ftp: loaded support on port[0] = 21 [ 454.242155][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 454.377734][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 454.388965][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 454.399042][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.411322][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.421297][ T12] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 454.431292][ T12] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 454.441597][ T12] usb 1-1: New USB device found, idVendor=1608, idProduct=0007, bcdDevice=c9.68 [ 454.451041][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.695312][ T12] usb 1-1: config 0 descriptor?? [ 454.741327][ T12] io_edgeport 1-1:0.0: Edgeport 2 port adapter converter detected [ 454.750916][ T12] usb 1-1: detected [ 454.802751][ T8810] chnl_net:caif_netlink_parms(): no params data found [ 454.990832][ T12] usb 1-1: error in getting manufacturer descriptor: -71 [ 455.020629][ T12] usb 1-1: error in getting boot descriptor: -71 [ 455.027288][ T12] usb 1-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information. [ 455.040746][ T12] usb 1-1: Direct firmware load for edgeport/down.fw failed with error -2 [ 455.049674][ T12] usb 1-1: Failed to load image "edgeport/down.fw" err -2 [ 455.058036][ T12] usb 1-1: Direct firmware load for edgeport/boot.fw failed with error -2 [ 455.066957][ T12] usb 1-1: Failed to load image "edgeport/boot.fw" err -2 [ 455.093896][ T12] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB0 [ 455.107514][ T12] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB1 [ 455.126933][ T12] usb 1-1: USB disconnect, device number 4 [ 455.140859][ T8810] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.148257][ T8810] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.149060][ T12] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0 [ 455.157897][ T8810] device bridge_slave_0 entered promiscuous mode [ 455.171828][ T12] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1 [ 455.183397][ T12] io_edgeport 1-1:0.0: device disconnected [ 455.308639][ T8810] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.316013][ T8810] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.326252][ T8810] device bridge_slave_1 entered promiscuous mode [ 455.418261][ T8810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.465864][ T8810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.561244][ T8810] team0: Port device team_slave_0 added [ 455.580441][ T8810] team0: Port device team_slave_1 added 19:35:34 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x31) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x9, 0x22, "fd774723a5"}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x9}]}]}, 0x54}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', r5, 0x4, 0x1, 0x40, 0x1ff, 0x5, @private2={0xfc, 0x2, [], 0x1}, @loopback, 0x8000, 0x4087, 0x5, 0x3}}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fedbdf250600000008000300", @ANYRES32=r5, @ANYBLOB="08000100020000000c009900000000000400000008000300", @ANYRES32=r6, @ANYBLOB="1400040073797a6b616c6c6572310000000000000800050001000000080005000c00000008000100ffffffff"], 0x64}, 0x1, 0x0, 0x0, 0x20008080}, 0xc040) [ 455.693833][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.701196][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.727464][ T8810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.797503][ T8709] Bluetooth: hci1: command 0x0409 tx timeout [ 455.802358][ T8810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.810822][ T8810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.837047][ T8810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 19:35:34 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffff, 0x17fff7ffd}, 0xc) r1 = socket$inet6(0x10, 0x2, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(r4, &(0x7f00000009c0)=ANY=[@ANYBLOB="00000000ffffffffffff000000000000080045"], 0x2e) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r3, 0x0, r5, 0x0, 0x18102, 0x0) [ 456.029094][ T8810] device hsr_slave_0 entered promiscuous mode [ 456.083306][ T8810] device hsr_slave_1 entered promiscuous mode [ 456.108003][ T8810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.115740][ T8810] Cannot create hsr debugfs directory [ 456.473526][ T8810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 456.523065][ T8810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.569555][ T8810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.599165][ T8810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 456.969181][ T8810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.012325][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.025111][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.073694][ T8810] 8021q: adding VLAN 0 to HW filter on device team0 19:35:36 executing program 0: syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000000180)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000000100)=@string={0x4, 0x3, "ceae"}}, {0x17, &(0x7f00000001c0)=@string={0x17, 0x3, "0fbac42dca369b4741243963a64f083d78f0210db3"}}]}) read$dsp(0xffffffffffffffff, &(0x7f0000000000)=""/141, 0x8d) semctl$GETPID(0xffffffffffffffff, 0x2, 0xb, &(0x7f0000000140)=""/2) [ 457.257953][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.268665][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.278837][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.286318][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.342426][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.352509][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.362996][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.372788][ T8709] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.380480][ T8709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.392006][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.403434][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.475738][ T8810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 457.486579][ T8810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.514195][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.526236][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.537456][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.548305][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.559535][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.569683][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.580599][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.590584][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.731122][ T8810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.759995][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.770160][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.779744][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.787998][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.835007][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 457.845950][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 457.851229][ T3219] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 457.877761][ T12] Bluetooth: hci1: command 0x041b tx timeout [ 457.953085][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 457.963467][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 458.016961][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 458.028520][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 458.042667][ T8810] device veth0_vlan entered promiscuous mode [ 458.098821][ T3219] usb 1-1: Using ep0 maxpacket: 8 [ 458.112788][ T8810] device veth1_vlan entered promiscuous mode [ 458.229020][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 458.239507][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 458.249495][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 458.260210][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 458.289368][ T8810] device veth0_macvtap entered promiscuous mode [ 458.301755][ T3219] usb 1-1: unable to get BOS descriptor or descriptor too short [ 458.342725][ T8810] device veth1_macvtap entered promiscuous mode [ 458.388631][ T3219] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 458.441009][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 458.451832][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.467135][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.477879][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 458.488259][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 458.498184][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 458.509047][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 458.555393][ T8810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 458.566206][ T8810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.581188][ T8810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.591409][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 458.604097][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 458.608983][ T3219] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 458.621637][ T3219] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.630031][ T3219] usb 1-1: Product: 먏ⷄ㛊䞛⑁挹侦㴈ഡ [ 458.636982][ T3219] usb 1-1: Manufacturer: 껎 [ 458.641703][ T3219] usb 1-1: SerialNumber: syz [ 458.745568][ T3219] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 458.947897][ T12] usb 1-1: USB disconnect, device number 5 19:35:38 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000100)=0xa43afce0a1313ad1) dup3(r3, r4, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @aes128, 0x10, "4bbef72168b67be4"}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67d}]}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) write$P9_RLOCK(r1, &(0x7f0000000300)={0x8}, 0x8) write$binfmt_misc(r1, &(0x7f0000000380)=ANY=[], 0x4240a2a0) bind$inet(r8, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r8, &(0x7f0000000140)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r8, 0x0, 0x30001, 0x0) [ 459.767933][ T12] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 459.963190][ T3219] Bluetooth: hci1: command 0x040f tx timeout [ 460.018251][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 460.178288][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 460.257727][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 19:35:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x420000015001}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', {0x7, 0x0, @private}}) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f00000000c0)={0x4, 0x48, [0x8985, 0x1, 0x6, 0xea], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 460.428241][ T12] usb 1-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40 [ 460.437774][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.446372][ T12] usb 1-1: Product: 먏ⷄ㛊䞛⑁挹侦㴈ഡ [ 460.453688][ T12] usb 1-1: Manufacturer: 껎 [ 460.458604][ T12] usb 1-1: SerialNumber: syz 19:35:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="df000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x70, 0x10, 0x401, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x70}}, 0x0) [ 460.648068][ T12] usb 1-1: can't set config #1, error -71 [ 460.670372][ T12] usb 1-1: USB disconnect, device number 6 [ 461.046511][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 19:35:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="580000001400add427323b472545b4562c117fffffff81004e220e227f0000019267a80020007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffff10000000000200000000020000000000", 0x58}], 0x1) [ 461.659354][ T9100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 19:35:40 executing program 1: r0 = socket$bt_rfcomm(0x1f, 0x1, 0x3) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="43742ea823a74dae9e12a109586117126fb42bacee27e7671541fa42f9782833093ccfe3c6ede6aaabf42e9a56b638e8c24c34d57b9535e86d35421cffeff019b9e6f1dbb1a10c7cd33ba9e7", 0x4c}], 0x1, 0x5, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x0, 0x0, 0x128, 0x0, 0x210, 0x210, 0x210, 0x210, 0x210, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@tcp={{0x30, 'tcp\x00'}, {[], [], 0x0, 0x0, 0xc2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) 19:35:40 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0x20000, 0x2) socket(0x25, 0x0, 0x2) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0xed) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000180)={0x401, "e653c14fb70516a366f4c6e49b282d5f2f40aa92640688a59dd5f39577e210fb", 0x0, 0x3, 0x1, 0x0, 0x1000006}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0xb753, 0x7f}) gettid() clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) 19:35:40 executing program 1: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x0, 0x0, @name="1431688e8b6141d513d92ff094f1b353c46776f7d1c1b729f0ba922f67ebd090"}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000007c0)={0x393, 0x7, 0x4, 0x10000, 0x5, {}, {0x3, 0xc, 0x7, 0x2, 0xfe, 0x0, "53e845c1"}, 0x1, 0x0, @userptr=0x100, 0x7, 0x0, 0xffffffffffffffff}) sendto$l2tp(r1, &(0x7f0000000840)="051fb1e6c4cedaf4a9aa3fb9dfeb1f8dae533d6092467650f0b2751c179627db97718c356bbcb0a064a2b89ccd042873c1b3967c554d0803a1a8a6d5248089a10e94cd8396a6e906135167ff50a7e3812b8bc9249175f7807687d712ec011c1c47e6ae112e5d47d158e064e53e", 0x6d, 0x20004010, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000040)=0x86) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)={r2}, 0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000b00)={r2, 0x7}, 0x8) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x155) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f00000012c0)=[{&(0x7f0000000040)="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", 0x756}], 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000900)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000940)="61a4233a548f8ca58e5ec59944401d8b3d831e932a468da31bec810eaabad76c456dd4399a74010ca187542c9de8b3e9c98faa286725914786921f7f0caaae1a91c48ad18aee873c08fc31e189c0f1c781c852a3adea012b4fb45595cddc41104103ece487c267b7420cf65834f53de351c69a6fb544b90cbabbdd431fa49d96b3924d302b4643f2303aee22706125612073a046e8e0a5386c009f517f49ee7e6bfcd691f1d672e018", 0xa9}, {&(0x7f0000000a00)="d16224955d7da2bf0bec4352e64e1cb385eb0e5472e72900ded618d93e5bd0a5f54c2cbb7f0c515b0025fbc96d20c764e915764b5e63610c413b62eb1eeba96a16e2485a9b0e251918557fc15161c2ff52d3f568634c647389160c24fc082c4f0dfee8787a50447e6ed79422e37e4adfb737dbc752f67a882c9603d762900acf27e636f28063bb0b854f2d7956e7efbde07ef871521ce7955ec2219ff171430e70afaeb0ec558b3ef9e3b76879ce75f45b2e37bb909dd44f17611a7ac50a861608edd1d4c8fc0133eac698d2ab4b3f6235179a29695192989ec34fc08bec0eff779c", 0xe2}, {&(0x7f0000000b40)="da8a6827164fe4583cb48cdf823c6fada2118a2aea592099ce92c20ebbd0208aa08897f913f7b6d35f85e32c5f6f6492cebaec011e551d23004cd3a8a53752c8a1904da82c84b6ecdf6528070c5f9c70aab83f83e78c100a6763c0dd11487f872d4727fa27e60de04c8500214eca0aa6cfe3a0ae4e3decf7947ec2ee", 0x7c}, {&(0x7f0000000bc0)="4e552815149593e060a5f08ea79a946813a7ff71ea10d1e69fdcf731bfaea8dd2cd9e009edcaf0203df7c17c48b0dcb1a32d97c651b62b216512a46815010fdfdcb52b1988af5bf0b9427edf1966590f54108fe0cd858946c73e67b93579ba753fae31ff96a5043666461930d0df5917429c369ca8ecd33a59ff77dd4ae90164b81379f9be2f0bd552ab6c1baa26b6fa8b06ac1457af5358e08a1d3e4cd049bd380045be742b16a8d5ef64609e4fcc", 0xaf}, {&(0x7f0000000c80)="85105960cb3ac2c9b7bad86943c12b2c3e7031bb2b10d800446b77453ceae515d1bb93eb1eb4f0db01d58a2c6d800f10f1a01f2920f911aab9e30acb90b47c5ebe39fd6d07fe98822e576245e42788498fef8df2a1233a134704adfd976096785607eb2c6fd13c304be5dbd356137465030096e6d93e07", 0x77}, {&(0x7f0000000d00)="4635fa06418de622454fb60e0ce661d75e900a78bfc847b01bd1787d822811f63c0b6a722c4029b42f94d457f9e5928bdd02dfd35f998efeb762a86dc4111d1ef110400c6bb9365d96997c67c77115401706d1d97afda8bcebd5662a2149bc575b425a5480a0a9d8bbdfcffd4796b9ddcb58d6a34f1745a5f70f17cc26557e796c848cd95b0d4f5c208fa6dbb35c056c4d7024940e26aa6fd7f2327685022cedd27293ac13bdc5dd33807bb6fce600bb08df0cb8c56f7df9d2e3cf77f0a567e057c79c1b22209a1b8b7949b9c8a46cc79edaec1a5504f6b74cf523da5d1d655bb6", 0xe1}, {&(0x7f0000000e00)="f64335910de20fc42487e6f0aae44f600126c5fe3370e35cb1a15952f13b70c6be2ca487e723f7e4a66b271df38fb4823488b5e0492b5d965b91e78226289bb147a368f6ff59bd6f1101ea003a2abab8c854563d4ac27534fce9743926716af37b5f0a790e88494749bc43dccd9aed6de64cc3242786ba", 0x77}, {&(0x7f0000000e80)="ed5df1f4b8740712c4fa7317f7cb3cc5b2d1596a22360aacb9318816d0883fc575d34324672bb3def7122b8155de0b8d0fb4f226f9cb878c0ce50124c50d21cc8cd64ba787663144c2535caa2c8c75fddf76d6d3d74cc08db7830d3e56ce616901aae1beda98be7183d5a8263bb0010ee3b4b1a184d41b68df0f47a1211fa82c040b176aec1091da", 0x88}, {&(0x7f0000000f40)="1730e6a415d73dc5f994d6a434b3664d39f3e8c569f25e35", 0x18}, {&(0x7f0000000f80)="75d3e259ea5224d337b377e47e5fbb7fd7afcdc3b0071c088e604e32e9834431e1f3c2b34d5129f5188ae849c70b5024fad792f6", 0x34}], 0xa, &(0x7f0000001080)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa7}}], 0x80}, 0x12) [ 462.028618][ T9129] xt_TCPMSS: Only works on TCP SYN packets [ 462.043499][ T9128] IPVS: ftp: loaded support on port[0] = 21 [ 462.059007][ T12] Bluetooth: hci1: command 0x0419 tx timeout 19:35:41 executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000780)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) set_mempolicy(0x1, &(0x7f0000000040)=0x20000, 0x2) socket(0x25, 0x0, 0x2) r0 = syz_open_dev$sg(0x0, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0xed) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f00000000c0)=0x1, 0x4) syz_open_dev$sg(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000180)={0x401, "e653c14fb70516a366f4c6e49b282d5f2f40aa92640688a59dd5f39577e210fb", 0x0, 0x3, 0x1, 0x0, 0x1000006}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0xb753, 0x7f}) gettid() clone(0x4412c500, 0x0, 0x0, 0x0, 0x0) [ 462.474772][ T9152] IPVS: ftp: loaded support on port[0] = 21 [ 462.877351][ T9182] IPVS: ftp: loaded support on port[0] = 21 19:35:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x20}, 0x20}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000080)={{0x9, 0xcb}, 'port0\x00', 0x1, 0x400, 0x7, 0x400, 0x80000000, 0x6, 0x0, 0x0, 0x4, 0x2}) r2 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r2, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x3f) sendmmsg$inet_sctp(r2, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x0) 19:35:42 executing program 1: r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12}}) 19:35:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x123a81, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xd) write(r2, &(0x7f00000000c0), 0x0) close(r0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r3, r4, 0x0) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) r8 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r10 = dup3(r8, r9, 0x0) ioctl$VIDIOC_ENUMAUDIO(r10, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{r4}, 0x8000, 0x967, 0xf7ffffffffffffff}) 19:35:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000001}, 0x1c) bind$tipc(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, r2, 0xc46dfc707e1df77d}, 0x14}}, 0x0) 19:35:43 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x4000000a, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x140f, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x7, 0x45, 'sa\x00'}]}, 0x18}, 0x1, 0x0, 0x0, 0x48090}, 0x90) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000100)="94dd0a0b0000000000002abcd2fa6404727b4306542b35f00000", 0x1a}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/1, 0x1}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x8c, 0x4, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffbff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x20}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x81) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x3d, 0x0, 0x0, 0x5, @tick, {}, {}, @ext={0x18, &(0x7f0000000340)="f7f249b9740c8684445ae826b76af2f3c921bf3c0f339e57"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x20) ptrace$cont(0x9, r0, 0x0, 0x0) 19:35:43 executing program 0: setsockopt(0xffffffffffffffff, 0x40, 0x7fff, &(0x7f0000001e80)="65891c7de0597716cc88e461f963e8fbc815653e1bf308e709d1c7c8952be70bb3c859894bb5d18dfcc7db6b4b60c1bb472397d4c0005cd55de61fd47430c15c", 0x40) r0 = socket(0x10, 0x803, 0x0) sendmmsg$sock(r0, &(0x7f0000001dc0)=[{{&(0x7f00000000c0)=@rc={0x1f, @fixed={[], 0x11}, 0x1a}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="f4a44c8444d6706701f553fce789491a322a7ed5ade713eaeebae47bff3d36e41a051846cad213ac3f2c3d660945fe6f5366a4503cfffb5e78bc77bab6ec30beb53bbec9d22624277f15918355198398bd95d7beae85bbc912028483175519d01a621c83cbd6711b5d79fbe451700005548e05a63aecdea7f199ac9b9062cc", 0x7f}, {&(0x7f00000001c0)="0895d6ffc72a81f7ed2a980013d8f5536390318c410aa349e16347dfa72733d58ff8b393ab13f6866bb68cebf60eb89da56ea3555f12a0874718b490f25dca0643ac48ba8b5af583247b326280ea38b9d4fb465d1d06838268ea603ebb75238a5db8e861fec4179a3f998d6d", 0x6c}, {&(0x7f0000000280)="bfdf3edfdc2bc774fb461882e84ef9f5a20ac134dcaba628ce736d665bf3eeb146d68987b679ff5fce06b2e046fc5fcde4953e5a64de435af12d75355d859cd949f3ca41024f4dc3ad466de72d8a8ef1b397c6e2dc261b78a9e341fe5e35c6ea9f76730894a123718b3d5654c2b61f51719520850b8820ce11", 0x79}], 0x3, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xffff8001}}, @timestamping={{0x14, 0x1, 0x25, 0xd746357a}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x78}}, {{&(0x7f00000003c0)=@in6={0xa, 0x4e24, 0xd8, @private0}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000440)="ac8b2354070228899d4704409bb7d347dbe532402484f597c773494a5dce362d63d9fc2ef78dd01d6abb87c6b6224f09c4f82cd25f1e3c0952e970659ebf6e9957c4278ceb403659647e3633de88dca74e6f68a708bc7ea88a0ac0af5d9c5b171af8a90738276c291ad95d90bb331cec7f264fc77713acc7c7999bbf3ec98b1d72f3281475f541ef61704b6fe01daa0c0ee1cfe7abbca5d0fb8b9eb73e99d36fafd7618cf020490c5a1783b7c16917de2a6b3623bb4978fca319c58725e09ddce84a", 0xc2}, {&(0x7f0000000540)="0799f577dbb28d327fcbe8c9889df24f3ebef9f07f7470f6e6006bbde1bbbca9c5ac422c81f88b5c89d7c91b9c65b628a1567e501a928bb298c7714156ba87d9880a4d", 0x43}, {&(0x7f00000005c0)="9f9c513f06dc0fa7a720dd7344e71643e9920bb8d99c69ead87b10629d896020e4dbc09ad4ccd0e29204f655fa9e61a9b25eb73528fe185cbc03ec5f47ac9bcad4ad7d6796cc2c541f407fec4a50eae9ecbfca7eea5feb15d64b5e1c91491152d864ed8eb9e1213b5550f3b2c61f", 0x6e}, {&(0x7f0000000640)="c31db4072538fb4b0ed430b34a4902861f7c840041fd51e0fdd7f40607fcb0e5fd4e8a4d86cec00dc688e76d44f6d2b63a27e7cc6552e222c0cccbef35298bf01e1c5d068f7041c0aa71c3785c712077686cddfdaacce00ea1a7e6dd50680828c2900567c2137b6733518d0cbc9ec6e15724708e5c7178829f86ecc7bad5653a8abbbe9eb3ba13d9bebd437af0dc57e9e0744fe7c2b3ecda0ce4112b1b7a56b033a000c28b879513526d8ec67bf003e4eb8d7633f008d7b1895ec4271e5a07bc8ce526fb7bb8265cc45bc759faa7be28f6373bf60bc7435f", 0xd8}, {&(0x7f0000000740)="8031c820c7fae23f1321f0815b2168088991542b85a492125acf912c3a5a41f5e405935bb0a79b1bf192de5032e320101d82a664b4fb132778ff510b5a694bde839cbb", 0x43}, {&(0x7f00000007c0)="8e15dbc569893d21343058843d2f8e6dd9f5d8bdef76c9ca4531717805a62f52953e02c40f591a4a2df6e6c992b947243b09dc2cde38b9d457388a12f7305e40f38a50f1d2", 0x45}, {&(0x7f0000000840)="e397474d", 0x4}, {&(0x7f0000000880)="456d9d144892fa2723d92289985b56047b2b942066befd69a2e89247df3e8d26a3a199e80ae9ddce2236b9e693b5647dc97d51383293fa2fe2a5da8806ce07892fff89ca4b2879e45110677e46f061facbebf93314acc5807736a0f0a816e6644564ae4198e16e4efe1bda18738c3370c1bea87d4dc54f1de816d4aca39f68bd193ae91c23c897a13895adefa0d53ebd915c6baec3ba6aa74bbdde7e4425783670426fe7c174705429381baf7e2c59c36c303b25915b0e0f46c9928a1f67905c1dad25e2081988c9bc0e7e81436e2aee59ecc454c3d3c5c127e7d67a83cade0a1de04e20240064a90d", 0xe9}], 0x8, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x78}}, {{&(0x7f0000000a80)=@x25={0x9, @remote={[], 0x1}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000b00)="38cfbb24e209a0c0b00b4667806a11902b63f7fa7248e0be366ed8c7706b2fac4300a829584caa8840e5ae1557b42ccceaa77afb0512a19cd7c8832af10ff6ca1935664cddc790ad36df1d241d0cd1b91f3b7a56a58d2f640663fe5bc60e50701f030261fbacba2c0b4195caf4cb7513e510a66b31399f5c02f942f027fa509c5e19fd74a4b8dce90fc65b28e0a4b9294b07905cb79a6bf4050fe4fcd94ce1041c963eeba0e7d134b0f19115563d5550faa82746edd5ba1a968949c3533f2e8a3f5dc046d28974aa32c59710d56ef3ce816b4694e6", 0xd5}, {&(0x7f0000000c00)="031dcbdb0ddf7a85a538d2e1fe743347ca1d1a76bce97c668f8c514180218193", 0x20}, {&(0x7f0000000c40)="a73e83b4c3def1a1b935d680d4125e506edc738ceeaf2da8781359d36a05e17dbe6c279964256a66bc09cb622beb2c55a15a29b253e74dddd50890057fe07970c00d87126dc074f76ccee668a57f6e10d0c6caf93c37b74aafded8eeb3865869b57f73104de4b35ce014a2f6d14d99aade995435f412b9ec0d4bd97bdd62c527297f58483f903649d8", 0x89}, {&(0x7f0000000d00)="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", 0x1000}], 0x4, &(0x7f0000001d40)=[@mark={{0x14, 0x1, 0x24, 0x9584}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0xdc0a}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffffff31}}, @txtime={{0x18, 0x1, 0x3d, 0x100000001}}], 0x78}}], 0x3, 0x8c0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) sendmsg$sock(r3, &(0x7f0000002200)={&(0x7f0000002000)=@sco={0x1f, @none}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002080)="24d0e5", 0x3}, {&(0x7f00000020c0)="46ef25e841c037376f15bc687cce12f39305f8eef36f910bb51e3f87bba2b2220e4dddf8b7a8735a60998624157237c6e83e7e1e55ec921b5f4a771e60958600650fdfdf238b73c37fbb87ae5a3eaad6630e1e8f170ec8b4f54da9261f0c31f2f4cf0e88e141c2a7eef22e2bb38cf2f5285945ab016fe3819c50726f821c919a3bde15db8258fc9df307155536ae4ffcdcf52bb55c20dcd1f8637e126790cd7391b2bd8da05f104f864e912ddd6e4acbce", 0xb1}, {&(0x7f0000002180)="f28721fbfcbd0f2c1d046e8b58c16b9e55d37efd01704daebfe553", 0x1b}], 0x3}, 0x4044041) r4 = syz_open_dev$audion(&(0x7f0000001ec0)='/dev/audio#\x00', 0x6, 0x101) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x3c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000000)={0x10001, 0xfffffffe, 0x1, 0x4, 0x1d, 0x81}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@getnexthop={0x28, 0x6a, 0x221, 0x0, 0x0, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0xfffffffe}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000002240)) 19:35:44 executing program 0: syz_usb_connect(0x0, 0x7f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041789740c80a2d3355d50000000109026d00010000e50009040000200e010000052406000105240000000d240f0100000000000000000006241a000000052406000105240000000d240f0109000000000000002006241a0000000524010000072414000000001524120000a317a88b045e4f01a607c0ffcb7e392a"], 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000000)={0x1, 0x68, [{0x69, 0x0, 0x20}]}) r3 = fsmount(0xffffffffffffffff, 0x1, 0x3) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x181, 0x191600) dup3(0xffffffffffffffff, r4, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x480, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000340)='/dev/dri/card#\x00', 0xfdfffffffffffffd, 0x101100) r10 = dup3(r8, r9, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/adsp1\x00', 0x10002, 0x0) ioctl$VIDIOC_ENUMAUDIO(r10, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000240)={0x6cce, 0x0, &(0x7f0000000200)=[r0, r1, r7, r1, r10]}, 0x5) read$snapshot(r3, &(0x7f0000000100)=""/190, 0xbe) [ 465.498060][ T29] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 465.917828][ T29] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 465.929032][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 465.942486][ T29] usb 1-1: New USB device found, idVendor=0ac8, idProduct=332d, bcdDevice=d5.55 [ 465.951937][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.009035][ T29] usb 1-1: config 0 descriptor?? [ 466.308295][ T29] usb 1-1: string descriptor 0 read error: -71 [ 466.314892][ T29] uvcvideo: Found UVC 0.00 device (0ac8:332d) [ 466.323014][ T29] uvcvideo: No valid video chain found. [ 466.360637][ T29] usb 1-1: USB disconnect, device number 7 [ 467.057057][ T3219] usb 1-1: new high-speed USB device number 8 using dummy_hcd 19:35:46 executing program 2: ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0xe) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x140b, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008010}, 0xedc8feb7d76ab0aa) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x408002, 0x0) getsockname$l2tp(r0, 0xfffffffffffffffe, &(0x7f0000000180)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000001c0)={'team_slave_1\x00', {0x2, 0x4e20, @remote}}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@private, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000000340)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa036304e}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004800}, 0x8000) r2 = fsmount(r0, 0x0, 0xbfc1b538416f50d8) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000480)={'IDLETIMER\x00'}, &(0x7f00000004c0)=0x1e) r3 = fsmount(r0, 0x1, 0x9c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'gretap0\x00', r1, 0x20, 0x7, 0x1, 0x4, {{0x28, 0x4, 0x0, 0x1b, 0xa0, 0x64, 0x0, 0x80, 0x2d, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x4c, 0x64, 0x1, 0x0, [{@remote, 0x2d9b}, {@local, 0x4}, {@local, 0xfffffffb}, {@remote, 0x10000}, {@rand_addr=0x64010100, 0xde6}, {@rand_addr=0x64010101, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr=0x64010101, 0x200}, {@empty, 0x80000001}]}, @rr={0x7, 0xf, 0xa5, [@multicast1, @local, @broadcast]}, @cipso={0x86, 0x2e, 0x3, [{0x7, 0x3, "dc"}, {0x5, 0x12, "721e006ee5be93604907ea5261fd9fc8"}, {0x6, 0x5, "ee6b56"}, {0xf1575b46d20539f3, 0xe, "6acdac221c9876ecade86244"}]}]}}}}}) r4 = syz_open_dev$video4linux(&(0x7f0000000600)='/dev/v4l-subdev#\x00', 0x3f, 0x1b1180) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000640)={0x1, 0x0, {0x1, 0x4, 0x3009, 0x0, 0xa, 0x6, 0x1, 0x6}}) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x7ff, 0x10}, 0xc) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000700)='/dev/autofs\x00', 0x200040, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000740)={'syzkaller0', 0x32, 0x32}, 0xd) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000780)) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x78, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x8014}, 0x4800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x53b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) [ 467.419082][ T3219] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 467.430518][ T3219] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 467.444028][ T3219] usb 1-1: New USB device found, idVendor=0ac8, idProduct=332d, bcdDevice=d5.55 [ 467.453392][ T3219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.550576][ T3219] usb 1-1: config 0 descriptor?? [ 467.847127][ T3219] usb 1-1: string descriptor 0 read error: -71 [ 467.853866][ T3219] uvcvideo: Found UVC 0.00 device (0ac8:332d) [ 467.862225][ T3219] uvcvideo: No valid video chain found. [ 467.960574][ T3219] usb 1-1: USB disconnect, device number 8 19:35:46 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000180)="c5", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="77de0b0cff855d4a4c2e2c87b30c50fe4708de34e93316d058abdfd02ee41399710498f5ff8abedb286de15313d5840d999cbb4ad72d9089218157b18e0328b1", 0x40}, {&(0x7f0000000200)="4de8e3b443a2c6a2e4b794df5819406a1ad1b6d5b63f58d9d81904de804740b095a70bf71e08b70450cb03f0f94b4307c24f07a7e3413303fa1b22e0", 0x3c}, {&(0x7f0000000000)="a62a2d01aff2d5c8e28b74f8ff50ed547cbb247543170b0352fc0b10802efab7e99a8a310d9ef8ead0aacba9af0c6152046368a5e101655d76a612173ee13e88d1ddb6555260d3505fe29e0963", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a3908a6886cceed10ab9b01b027", 0xdc}, {&(0x7f0000000c40)="5f9257f0f2bcff3ba8d986b579c537d9cf75cb611f5d6194c2bb8399098b4abe54414cfe9b7bd7cae1eca27c3ddb4aa90092f63db6903d2da0bdd36eae532df7a7d4a83c1048fa2b7ec11a4918e2ba1c9635baa2400a9b2ef611b977", 0x5c}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000280)="05529400", 0x4}, {&(0x7f0000000300)="4d57edd88e5664e4caf8f05ffaaed2cd890c60167651a736822144fa5d5cbd0776c802a15976625376555e4e057d9520fca82407d44f7f280f72094ade1df69a2830", 0x42}, {&(0x7f00000004c0)="d6e2c2a61a62b44c29b042db299428c3ee2db598d7da7d30f7ed938b6aed01f10a9145f49ad1779955ac8b8f5149c8787b01d2bf45a2d73d7c0d151e0fa8dd256201fdd8f5740b782fc1ae68f929df42290c9cb39fd5e59d0c6fe48205c7a9d168a66b5a1d7dad99362f99534bb4eae7ba1419d4dd80e0d67f37fe5ddba520dd5434f1b2ffb27a5029afbea2493aea5708e7a576af2e45b826c039779a5f77e5ff73025173cd08d43e52f549128dcbc073d19ef8e77e2e0a6ea212c9a3dc43b956bd72ecabf489f4b48cee0fbc2f6b68a3de8c24462b79435bf400163fbbd3ba8c964a27666c3be1b6d10b3acf3dbbf7625cfc2bcd2e", 0xf6}, {&(0x7f0000000380)="1b93683b367d4305b6cbf3715da6f912d4a0caacdfc177da5b7d284894ce48b546303b0d1b2167a0af2e5addb55e3b8fb8c405f06913f29785fe396b5a9cab4cce819a6e25e4e2fad78e977d20846c09e33c175bde35", 0x56}, {&(0x7f0000000640)="9945ae0505e5a3ed128471bfb147d7e233ae83", 0x13}, {&(0x7f00000006c0)="3679b42f7c8feb4261472a0853f4028517be5ae97d11b5d5be2f55b42184a1ac057904f99a1de0bb83a2289779e8882427fea1a80050ca14365ee9e34c7dd93580405630478e8dcb228cc24c170e519654a11e300b062393fb66e17b3ca61f7d43acc436ab5717fd9da30bbc1d8872059e755521f7b8846d17dbbe257619a78e7c1a82d03c9b2391720fd631509ed712bbf9962e8d0891c28955ebfc5498b96019406dcb29bf76f9336223e701a1c7ffa162a30c6c5544d50c6aa6a8fab24d91d8b648c1cc813b4760ec67e0aebc", 0xce}, {&(0x7f0000001a40)="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", 0x355}], 0x7}}], 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) bind$tipc(r3, 0x0, 0x0) 19:35:47 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000180)="c5", 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg(r0, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)="77de0b0cff855d4a4c2e2c87b30c50fe4708de34e93316d058abdfd02ee41399710498f5ff8abedb286de15313d5840d999cbb4ad72d9089218157b18e0328b1", 0x40}, {&(0x7f0000000200)="4de8e3b443a2c6a2e4b794df5819406a1ad1b6d5b63f58d9d81904de804740b095a70bf71e08b70450cb03f0f94b4307c24f07a7e3413303fa1b22e0", 0x3c}, {&(0x7f0000000000)="a62a2d01aff2d5c8e28b74f8ff50ed547cbb247543170b0352fc0b10802efab7e99a8a310d9ef8ead0aacba9af0c6152046368a5e101655d76a612173ee13e88d1ddb6555260d3505fe29e0963", 0x4d}], 0x3}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)="390284246ca1dc05ce4410a6ca80c1439fd609fdadaaa966d94159393148a97dc2efa999231aa8d2b255f1c09634f8a6684c61270614d2edd0b2fb32e02fefe644849d797868b9c0b9fd90fa189c5d3c1bed393699a709243aaf3d5eba9908ed1ba395ae04ad7bdfa9ca552b83794b860580efc4b32cd07905c189e832276bd09b6addcaaa174627814d0751fdff16c3c82edfde1ac3da835fcbb3f7fae30053f44370fbb7c5fdfdb8447a2106d7135b7372ab7a3d8eb6326fb3b1ef6418a1bef59973cf2acf2c085b53e30b241e6a3908a6886cceed10ab9b01b027", 0xdc}, {&(0x7f0000000c40)="5f9257f0f2bcff3ba8d986b579c537d9cf75cb611f5d6194c2bb8399098b4abe54414cfe9b7bd7cae1eca27c3ddb4aa90092f63db6903d2da0bdd36eae532df7a7d4a83c1048fa2b7ec11a4918e2ba1c9635baa2400a9b2ef611b977", 0x5c}], 0x2}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000280)="05529400", 0x4}, {&(0x7f0000000300)="4d57edd88e5664e4caf8f05ffaaed2cd890c60167651a736822144fa5d5cbd0776c802a15976625376555e4e057d9520fca82407d44f7f280f72094ade1df69a2830", 0x42}, {&(0x7f00000004c0)="d6e2c2a61a62b44c29b042db299428c3ee2db598d7da7d30f7ed938b6aed01f10a9145f49ad1779955ac8b8f5149c8787b01d2bf45a2d73d7c0d151e0fa8dd256201fdd8f5740b782fc1ae68f929df42290c9cb39fd5e59d0c6fe48205c7a9d168a66b5a1d7dad99362f99534bb4eae7ba1419d4dd80e0d67f37fe5ddba520dd5434f1b2ffb27a5029afbea2493aea5708e7a576af2e45b826c039779a5f77e5ff73025173cd08d43e52f549128dcbc073d19ef8e77e2e0a6ea212c9a3dc43b956bd72ecabf489f4b48cee0fbc2f6b68a3de8c24462b79435bf400163fbbd3ba8c964a27666c3be1b6d10b3acf3dbbf7625cfc2bcd2e", 0xf6}, {&(0x7f0000000380)="1b93683b367d4305b6cbf3715da6f912d4a0caacdfc177da5b7d284894ce48b546303b0d1b2167a0af2e5addb55e3b8fb8c405f06913f29785fe396b5a9cab4cce819a6e25e4e2fad78e977d20846c09e33c175bde35", 0x56}, {&(0x7f0000000640)="9945ae0505e5a3ed128471bfb147d7e233ae83", 0x13}, {&(0x7f00000006c0)="3679b42f7c8feb4261472a0853f4028517be5ae97d11b5d5be2f55b42184a1ac057904f99a1de0bb83a2289779e8882427fea1a80050ca14365ee9e34c7dd93580405630478e8dcb228cc24c170e519654a11e300b062393fb66e17b3ca61f7d43acc436ab5717fd9da30bbc1d8872059e755521f7b8846d17dbbe257619a78e7c1a82d03c9b2391720fd631509ed712bbf9962e8d0891c28955ebfc5498b96019406dcb29bf76f9336223e701a1c7ffa162a30c6c5544d50c6aa6a8fab24d91d8b648c1cc813b4760ec67e0aebc", 0xce}, {&(0x7f0000001a40)="5754e111f7e2633066c1bb800a043b78ed49e79704c3b9e6dcdd147fc50597e9743c857c05851ff15e1c26bb2a5584b847194ef5e0e5a65e37354338bdab08b38526d0a19bbc4657ad3431fc9c8fd2492a92a164772b3d7862d5403dbe10b894db962b62d84dd7bc43f23b3b221d1d0360937bc2915c4179cecba60573ca968e13c0e51725d4a797684299d2e406cc05d963bad529ece5bf8eda879ad1545b16f867121166b92a6364de2724ed10f567e36ca292eae9711b9910f86edd1e0859fd98bcdab8c98c05d0fecac38925e55216ca83ded7b835d4d5065f3cb9ffea2d16585e47c01175036eb94b16bbaf67e8cef08e8095471ee683cee7a3a2e70f1bc1bd641bec6e33e1e2ce31c5c0dae77b08c2af7dbc43b1e4cbd5e79f6304dcca0f6a6a6b030ea7f5fd38bc4a07a807763a0d8234820b6bc2de71a0977adc9d5c9a7ac7d1242937042302869b23470dc1c31e835e584194b7c965c6bb3642bdd68ee959e81147e90ae30374e2d2abac00a54c2481c11b43f9ba1eda67b23eb0977c70d653f90b1171f55db6e967bbf59ee108c26a2fe42e901579f86e90145b81265e0466dba3f1df5aabbb421e737cf28fe0ef3639655ad364b4a93b5a4bfad9b36045d7132b40a162289ec3906ae055710ce9522e5ae7bd10d7225ebef007618ebde90121847d6c7f2c1e5cda5d0aa64a9eca63e6366797fb263eb92e966e8d5fe8981cfdb0caef231ff17915b1bd416b5f9576d6e604626fea60f44f15c6e4d0a07b0f97fcb17c0d8a4be0d3c528c3cbb032690d66b2b462537c9156724eb071ec5b140c38532c8f60ace7f867437d0a562ca64b410614ccd6d0cafda0156416a42f7b41bb72fa7884e6d0c072bbaa2076805eacca2dc6e7f88339e86a94203d2bc92907e10ca116e0da05bd36f6f7b0ca66b6389f6a48a6399574946f6f7ac4b2a95e27763cdcc5477695fd635d8513c7c37c92181b53b59ae97a53d7075889bb43c88310229ec5a0f0cb58774f5a6c2e23d63454a40e6c092d118e26f9f41556240e26d5f25000a9a907648af5e1c4499212ed07440b4706c7efb13573020d5db0311d109acb76234a2bc924fe51f9017a82066fcb64ff1b8dcf971e0bbbd927394e4062ebd5603aaeea1a3468dcae537e53c8ccd186836dc704e0bdf33f1c2af8f37b8369206dae6a3840be5a1da0006df15b", 0x355}], 0x7}}], 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) bind$tipc(r3, 0x0, 0x0) 19:35:47 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000380)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 469.115004][ T9275] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 19:35:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f0000000400)=ANY=[]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000040)=ANY=[]}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x200001) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x4) [ 469.397659][ T9284] IPVS: ftp: loaded support on port[0] = 21 19:35:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffd19, &(0x7f0000000180)={0x0, 0x3d2}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080001002d28201c6da00b9e013d115caa0486845c5e43b668bd8a06c1f8f4019c52cabeedab81d9dfccab6b8097cefa29edb689ad1040159fbeb71a7eee6c38b1560c2d7e41142de96c2362792d410c5d3c9257bda7241bb4337e5b9f8e33fd94d5887400fa2d0b5042dda219371b89e68201da42a65df6d8b9791ed7645ad9b8409d25657da3a6d89a6fd9fca4243df99fd1a372b7487a53f723ce5fe670cb42b2bd5dc63be58dd863c2ab10b71c5c7b4b346d21ddead96c9483e29b16762fa54dd06cdbaf6282556cb5f7bdd37e74bb906c55acc2a2481e95cf088a23017a542e080ccf15adc0c6695516cf28fc4db8ffbe1230ad70c5438a1bf2bba70e90a5363f3645c45eb8924171ec567f7a6220f246e05d842dd3f981bde35e8f31b362ae45faa8f8c68c", @ANYRES32=r4, @ANYBLOB="060003003f000000"], 0x44}}, 0x0) [ 470.312033][ T9284] chnl_net:caif_netlink_parms(): no params data found 19:35:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/pfkey\x00', 0x230200, 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0xd, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x30}}, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xf5}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0xb, 0x712e, 0x2}) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$VIDIOC_ENUMAUDIO(r8, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) sendfile(r5, r8, &(0x7f0000000300)=0x7, 0x1ff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000f80)={0x54, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x33fe0}}, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0044d00, &(0x7f0000000240)) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000200)=0x5, 0x4) [ 470.645711][ T9284] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.653361][ T9284] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.663860][ T9284] device bridge_slave_0 entered promiscuous mode [ 470.688626][ T9284] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.695917][ T9284] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.705848][ T9284] device bridge_slave_1 entered promiscuous mode [ 470.763726][ T9284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.788791][ T9284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.848086][ T9284] team0: Port device team_slave_0 added [ 470.865969][ T9284] team0: Port device team_slave_1 added 19:35:49 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffff3e, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000006a00950001addaa624c9d991ff179710", @ANYRES32, @ANYBLOB='\b\x00\n'], 0x3}, 0x1, 0x0, 0x0, 0x20000000}, 0x48045) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) [ 470.934838][ T9284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.943451][ T9284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.969874][ T9284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.994915][ T9284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.002931][ T9284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.029326][ T9284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.151246][ T9284] device hsr_slave_0 entered promiscuous mode [ 471.199702][ T9284] device hsr_slave_1 entered promiscuous mode [ 471.219913][ T9284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.227695][ T9284] Cannot create hsr debugfs directory [ 471.247015][ T29] Bluetooth: hci2: command 0x0409 tx timeout 19:35:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000259e512ff61abf0000000000660000000000000073013d00000000009500000000ac9aec000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x21e, 0x10, &(0x7f00000002c0), 0x3cb}, 0x48) 19:35:50 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r10 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={r7, 0x200, 0x1000}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f00000001c0)={r11, 0x8}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={r9}, &(0x7f00000000c0)=0xfe42) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000001340)=@sack_info={0x0, 0x4, 0x8}, 0xfffffffffffffd53) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0xc2542, 0x0) write$UHID_INPUT(r12, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) [ 471.980801][ T9284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 472.029977][ T9284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 472.139063][ T9284] netdevsim netdevsim2 netdevsim2: renamed from eth2 19:35:51 executing program 0: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006d9a32f53e0c1010c1a5da02000000000f0510cffa5027eb58505289810326ea52ac89e8b44be4dbecc0c6839c2023a46de7e4db72cdc1b57ec4ebb6080bff7c3cc4dcd912cde491284a63590aba85a9b6b9e6ee78668a729af1a6d676e13156ea3f96ca7dbc08f6c227d4716e81fd4393b6b64db5a20b32077a4f48cd82fae18d25df0f300a1247b723a8c1eea9f06c05725e4cba39683948c97138c21f12a63090e00712841a1b5dac597ef46987149dab08ade40e1589043701bf5772be2c1a42f1527b4dafcb82ae7d9ed66e5ecb927fd513fc6091d873c988eab2e610c4deac78defe2a"], 0x0) syz_usb_disconnect(r0) [ 472.204306][ T9284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 472.728004][ T29] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 472.986097][ T9284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.008083][ T29] usb 1-1: device descriptor read/64, error 18 [ 473.108589][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.118177][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.189125][ T9284] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.250316][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.260882][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.270702][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.278107][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.417414][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.427380][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.438876][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.448955][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.456237][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.465566][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.476861][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.490908][ T29] usb 1-1: device descriptor read/64, error 18 [ 473.505185][ T8709] Bluetooth: hci2: command 0x041b tx timeout [ 473.521383][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.533132][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.551002][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.567803][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.579020][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 473.652465][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 473.663337][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 473.720054][ T9284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 473.734269][ T9284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 473.751877][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 473.762896][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 473.777813][ T29] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 473.867626][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.875401][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.922948][ T9284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.014797][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 474.025668][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 474.087075][ T29] usb 1-1: device descriptor read/64, error 18 [ 474.120732][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 474.131826][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 474.164256][ T9284] device veth0_vlan entered promiscuous mode [ 474.183929][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 474.193709][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 474.247023][ T9284] device veth1_vlan entered promiscuous mode [ 474.422294][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 474.432345][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 474.442208][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 474.453326][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 474.477988][ T29] usb 1-1: device descriptor read/64, error 18 [ 474.511319][ T9284] device veth0_macvtap entered promiscuous mode [ 474.566385][ T9284] device veth1_macvtap entered promiscuous mode [ 474.605849][ T29] usb usb1-port1: attempt power cycle [ 474.665351][ T9284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 474.676137][ T9284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.686503][ T9284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 474.697447][ T9284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.712088][ T9284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.732985][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 474.743115][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 474.753721][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 474.823992][ T9284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 474.834871][ T9284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.845999][ T9284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 474.856764][ T9284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.871417][ T9284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.894163][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 474.905431][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 475.346956][ T29] usb 1-1: new high-speed USB device number 11 using dummy_hcd 19:35:54 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(r6, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{r7, r8/1000+10000}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0}, @dev, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, r3}) r9 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r10 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r11 = dup3(r9, r10, 0x0) ioctl$VIDIOC_ENUMAUDIO(r11, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) r12 = signalfd(r11, &(0x7f0000000380)={[0x2]}, 0x8) sendmsg$NL80211_CMD_SET_STATION(r12, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x100}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9, 0xac, "654be8d4d2"}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8090) [ 475.558591][ T3470] Bluetooth: hci2: command 0x040f tx timeout [ 475.587045][ T29] usb 1-1: device descriptor read/8, error -71 [ 475.808684][ T29] usb 1-1: device descriptor read/8, error -71 19:35:54 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201080037bc6340cf1063806d78000000010902240001001e1700090400000201513fc9fc4cd527bf79441200000083adcd00000000000000"], 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000180)={0x2a, 0x4, 0x1}, 0xc) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88000) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=@fragment={0xa2465d38d776b569, 0x0, 0x9, 0x1, 0x0, 0x7, 0x64}, 0x8) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x6, 0x0, 0x0, 0x3, 0x19db, 0x3, 0x2, 0x0, 0x6, 0x0, 0x80000000, 0x401, 0xe6f2, 0x3, 0xa, 0x2, {0x0, 0x6}, 0x40, 0x91}}) 19:35:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/279, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='B0\x00\x00\n\x00', @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) [ 476.433661][ C0] sd 0:0:1:0: [sg0] tag#7007 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 476.444362][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB: Test Unit Ready [ 476.451260][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.461178][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.471092][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.481014][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.490926][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.500835][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.510763][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.520710][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.530620][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.540564][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.550475][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.560382][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.571016][ C0] sd 0:0:1:0: [sg0] tag#7007 CDB[c0]: 00 00 00 00 00 00 00 00 [ 476.618354][ C1] sd 0:0:1:0: [sg0] tag#7008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 476.629097][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB: Test Unit Ready [ 476.635777][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.645804][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.655834][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.665834][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.675817][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.685752][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.695698][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.705622][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.715634][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.725573][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.735529][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.745472][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 476.755413][ C1] sd 0:0:1:0: [sg0] tag#7008 CDB[c0]: 00 00 00 00 00 00 00 00 19:35:55 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/279, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='B0\x00\x00\n\x00', @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) [ 477.275995][ C0] sd 0:0:1:0: [sg0] tag#7009 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.286868][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB: Test Unit Ready [ 477.293538][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.303497][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.313391][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.323334][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.333225][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.343117][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.353013][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.362909][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.372817][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.382745][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.392659][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.402571][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.412487][ C0] sd 0:0:1:0: [sg0] tag#7009 CDB[c0]: 00 00 00 00 00 00 00 00 [ 477.546951][ T8709] usb 3-1: new high-speed USB device number 2 using dummy_hcd 19:35:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000100060000000000020002c0304edb22351cb2d9febac8b2d2ed7e8a9b9e5041998c7996dfc637f385af3814ef1a96d400f067e35593e8fa55a93aa89e625a064e6c382b4094d3045dc2f3ef0f3f2d93ca280b2abd8f2da2b2dbee57009c534b283da89199cf854e759131d305be62d1cebc11f662a3284f765a415851badda58e7293bb7faf4e389d0be2a532125115765c3ee97e55d5b6d7f06435784d26bfd06239670deff4812eca57df3a55cc9bb31fc761bf558313e4eaacca5531a2baf053ea31b6e9a165e708799b9923118874d4bf793e28f612d126d40c47db1a77fa6631efc02651fdca07baaed315368636799659d8274202193275206e9f986b0c8a5951441f0e00"/279, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='B0\x00\x00\n\x00', @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) [ 477.637093][ T9534] Bluetooth: hci2: command 0x0419 tx timeout [ 477.896873][ C1] sd 0:0:1:0: [sg0] tag#7017 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 477.907626][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB: Test Unit Ready [ 477.914284][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.924206][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.934071][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.943943][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.953839][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.963726][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.973616][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.983550][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 477.993436][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.003332][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.013224][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.023097][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.032970][ C1] sd 0:0:1:0: [sg0] tag#7017 CDB[c0]: 00 00 00 00 00 00 00 00 [ 478.058096][ T8709] usb 3-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 478.068619][ T8709] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 478.081782][ T8709] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=78.6d [ 478.091053][ T8709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:35:57 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x14f) r1 = socket$inet_udplite(0x2, 0x2, 0x88) lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/279, @ANYRES32=0x0, @ANYRES16=r1, @ANYBLOB='B0\x00\x00\n\x00', @ANYRESDEC=r0, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYBLOB], 0x5c, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) dup(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7fffffd}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x5, 0x3, 0x5844, 0x1}, 0x40) [ 478.146784][ T8709] usb 3-1: config 0 descriptor?? [ 478.427662][ T8709] usb 3-1: string descriptor 0 read error: -71 [ 478.458924][ C0] sd 0:0:1:0: [sg0] tag#7018 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 478.460884][ T8709] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 478.469609][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB: Test Unit Ready [ 478.469749][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.469886][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.470036][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.514046][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.523990][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.533926][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.543903][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.553854][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.563857][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.573815][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.583815][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.589358][ T8709] usb 3-1: USB disconnect, device number 2 [ 478.593733][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 478.609383][ C0] sd 0:0:1:0: [sg0] tag#7018 CDB[c0]: 00 00 00 00 00 00 00 00 19:35:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x8, 0x7f}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={r1, 0xfffffffb, 0x8, 0x4}, &(0x7f0000000100)=0x10) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r4 = dup3(r2, r3, 0x0) read(r3, &(0x7f00000003c0)=""/145, 0x91) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x6d, &(0x7f0000000080)={r7}, &(0x7f00000000c0)=0xfe42) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x204, 0xe0, 0x4, r7}, &(0x7f0000000280)=0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001800010100000000000000000a000000000000000000000014000500fc0000000000000000000000000000aa6dca9c49e5ff6b3c52922d1b8de5b2ab35d86cdf2c97d99b2001cb95ce2189a7e331566b5c3c5bb84d5b021039ca75877088a29c8d59e9cd37216a52f9dd7e3904a6b2fc615c3400"/130], 0x30}}, 0x0) [ 479.187985][ T8709] usb 3-1: new high-speed USB device number 3 using dummy_hcd 19:35:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000007c0), 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000840)='/dev/dri/card#\x00', 0x0, 0x612680) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000800)) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="03d2c83d00786d4ecb1e0400fae3e3479a38980d3f", @ANYRES16=0x0, @ANYBLOB="000327bd7000fddbdf250100000005000600060000000500060080000000080003000300000005000600090000000500050001000000080003004e000000100004000000002002000000000000000500060005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x801) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000780), 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 479.576050][ T8709] usb 3-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 479.586642][ T8709] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 479.599953][ T8709] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=78.6d [ 479.609329][ T8709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.643944][ T8709] usb 3-1: config 0 descriptor?? [ 479.725021][ T9585] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2852530792 (91280985344 ns) > initial count (8777803040 ns). Using initial count to start timer. [ 479.947243][ T8709] usb 3-1: string descriptor 0 read error: -71 [ 480.027828][ T8709] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. 19:35:59 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) 19:35:59 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x10000, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000240)="0a0775db7b2803eef0cdf4d7815d26b0d5e383e5b3b6f1ed5c54fcb729abe965db630b0b793cf1efa61d8e6de7dc1d23bbcf9315d524d28d639cbdf0466987670fc8542f1cde8851f82a1b8bc3add66405ba50bf33d0a01a52e5b28ef5b668c07ac006cdb6ca0d20150100000095752956c108269389299acd78a4998e838e8495fe8e28e5e03e1db09a63b17ea1b563b55274395f0f21a63790071913f3796081b96f08a5e377cd74d225941413b723f42d5cea2298f970e9ac7752d6cd86e3c26b604df82c6386345ec8ba2d960016c3011a2d430760ba58bfecf8b2a203365d84fc698125d2", 0xe7) r4 = accept$alg(r0, 0x0, 0x0) r5 = dup(r4) recvmmsg(r5, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)=""/33, 0x21}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000780)=""/155, 0x9b}], 0x1}}], 0x2, 0x0, 0x0) 19:35:59 executing program 2: syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201080037bc6340cf1063806d78000000010902240001001e1700090400000201513fc9fc4cd527bf79441200000083adcd00000000000000"], 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f0000000180)={0x2a, 0x4, 0x1}, 0xc) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x88000) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=@fragment={0xa2465d38d776b569, 0x0, 0x9, 0x1, 0x0, 0x7, 0x64}, 0x8) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x6, 0x0, 0x0, 0x3, 0x19db, 0x3, 0x2, 0x0, 0x6, 0x0, 0x80000000, 0x401, 0xe6f2, 0x3, 0xa, 0x2, {0x0, 0x6}, 0x40, 0x91}}) [ 480.135915][ T8709] usb 3-1: USB disconnect, device number 3 19:35:59 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) 19:35:59 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) [ 480.777397][ T8709] usb 3-1: new high-speed USB device number 4 using dummy_hcd 19:35:59 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) 19:35:59 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) [ 481.159650][ T8709] usb 3-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 481.170197][ T8709] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.183486][ T8709] usb 3-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=78.6d [ 481.192750][ T8709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.211731][ T8709] usb 3-1: config 0 descriptor?? 19:36:00 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) 19:36:00 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) [ 481.497585][ T8709] usb 3-1: string descriptor 0 read error: -71 [ 481.518732][ T8709] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 481.551497][ T8709] usb 3-1: USB disconnect, device number 4 19:36:00 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) 19:36:00 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) 19:36:00 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() 19:36:00 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() 19:36:01 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) 19:36:01 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:01 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:01 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) 19:36:01 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:01 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:01 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x88}}, 0x408d0) 19:36:01 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:02 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) 19:36:02 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000200)=0xfff) 19:36:02 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:02 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) gettid() 19:36:02 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) 19:36:02 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x8636d) 19:36:02 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:02 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) 19:36:02 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x8636d) 19:36:02 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:03 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:03 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x8636d) 19:36:03 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:03 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:03 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:03 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:03 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:03 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:04 executing program 0: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:04 executing program 2: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:04 executing program 0: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:04 executing program 0: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:04 executing program 1: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:04 executing program 2: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:04 executing program 0: set_mempolicy(0x4003, 0x0, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:04 executing program 1: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:05 executing program 2: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:05 executing program 0: set_mempolicy(0x4003, 0x0, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:05 executing program 1: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:05 executing program 2: set_mempolicy(0x0, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:05 executing program 0: set_mempolicy(0x4003, 0x0, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:05 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:05 executing program 1: set_mempolicy(0x4003, 0x0, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:05 executing program 2: set_mempolicy(0x4003, 0x0, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:05 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:06 executing program 1: set_mempolicy(0x4003, 0x0, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:06 executing program 2: set_mempolicy(0x4003, 0x0, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:06 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:06 executing program 1: set_mempolicy(0x4003, 0x0, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:06 executing program 2: set_mempolicy(0x4003, 0x0, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:06 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:06 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:06 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:06 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:07 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:07 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:07 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:07 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:07 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:07 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140), 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:07 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:07 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:08 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:08 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:08 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:08 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:08 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) 19:36:08 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:08 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:09 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) 19:36:09 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 19:36:09 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:09 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) 19:36:09 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:09 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 19:36:09 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 19:36:09 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:09 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(0x0, 0x0, 0x0) 19:36:10 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 19:36:10 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:10 executing program 2 (fault-call:1 fault-nth:0): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:10 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) [ 491.604368][ T9834] FAULT_INJECTION: forcing a failure. [ 491.604368][ T9834] name failslab, interval 1, probability 0, space 0, times 1 [ 491.617326][ T9834] CPU: 1 PID: 9834 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 491.625983][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 491.636096][ T9834] Call Trace: [ 491.639589][ T9834] dump_stack+0x21c/0x280 [ 491.644054][ T9834] should_fail+0x8b7/0x9e0 [ 491.648625][ T9834] __should_failslab+0x1f6/0x290 [ 491.653708][ T9834] should_failslab+0x29/0x70 [ 491.658427][ T9834] kmem_cache_alloc+0xcf/0xc50 [ 491.663290][ T9834] ? kmsan_get_metadata+0x116/0x180 [ 491.668613][ T9834] ? getname_flags+0x14b/0xc40 [ 491.673500][ T9834] getname_flags+0x14b/0xc40 [ 491.678192][ T9834] getname+0x55/0x60 [ 491.682255][ T9834] do_sys_openat2+0x923/0x1020 [ 491.687129][ T9834] __se_sys_open+0x270/0x2d0 [ 491.691827][ T9834] __x64_sys_open+0x4a/0x70 [ 491.696485][ T9834] do_syscall_64+0xad/0x160 [ 491.701128][ T9834] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 491.707087][ T9834] RIP: 0033:0x417101 [ 491.711020][ T9834] Code: Bad RIP value. [ 491.715142][ T9834] RSP: 002b:00007fa0f9eb8820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 491.723696][ T9834] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417101 [ 491.731742][ T9834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fa0f9eb8850 [ 491.739785][ T9834] RBP: 00007fa0f9eb8ca0 R08: 000000000000000f R09: 0000000000000000 19:36:10 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) [ 491.747822][ T9834] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000 [ 491.755865][ T9834] R13: 000000000169fb6f R14: 00007fa0f9eb99c0 R15: 000000000118cf4c 19:36:10 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:10 executing program 0 (fault-call:2 fault-nth:0): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:11 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:11 executing program 2 (fault-call:1 fault-nth:1): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) [ 492.213180][ T9845] FAULT_INJECTION: forcing a failure. [ 492.213180][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 492.226030][ T9845] CPU: 1 PID: 9845 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 492.234681][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 492.244792][ T9845] Call Trace: [ 492.248190][ T9845] dump_stack+0x21c/0x280 [ 492.252631][ T9845] should_fail+0x8b7/0x9e0 [ 492.257155][ T9845] __should_failslab+0x1f6/0x290 [ 492.262192][ T9845] should_failslab+0x29/0x70 [ 492.266874][ T9845] __kmalloc+0xae/0x410 [ 492.271122][ T9845] ? kmsan_get_metadata+0x116/0x180 [ 492.276468][ T9845] ? tomoyo_realpath_from_path+0x15a/0xcb0 [ 492.282396][ T9845] tomoyo_realpath_from_path+0x15a/0xcb0 [ 492.288133][ T9845] tomoyo_path_number_perm+0x2a4/0xaf0 [ 492.293701][ T9845] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 492.299631][ T9845] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 492.305804][ T9845] tomoyo_file_ioctl+0x74/0x90 [ 492.310667][ T9845] ? tomoyo_inode_getattr+0x60/0x60 [ 492.316031][ T9845] security_file_ioctl+0x10a/0x210 [ 492.321292][ T9845] __se_sys_ioctl+0x143/0x4d0 [ 492.326088][ T9845] __x64_sys_ioctl+0x4a/0x70 [ 492.330770][ T9845] do_syscall_64+0xad/0x160 [ 492.335358][ T9845] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 492.341307][ T9845] RIP: 0033:0x45d5b9 [ 492.345321][ T9845] Code: Bad RIP value. [ 492.349445][ T9845] RSP: 002b:00007f301bb84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.357939][ T9845] RAX: ffffffffffffffda RBX: 00000000000126c0 RCX: 000000000045d5b9 [ 492.365973][ T9845] RDX: 000000000000288e RSI: 0000000000009204 RDI: 0000000000000003 [ 492.374016][ T9845] RBP: 00007f301bb84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 492.382059][ T9845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.390113][ T9845] R13: 000000000169fb6f R14: 00007f301bb859c0 R15: 000000000118cf4c [ 492.398681][ T9845] ERROR: Out of memory at tomoyo_realpath_from_path. 19:36:11 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:11 executing program 0 (fault-call:2 fault-nth:1): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:11 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) [ 493.011059][ T9853] FAULT_INJECTION: forcing a failure. [ 493.011059][ T9853] name failslab, interval 1, probability 0, space 0, times 0 [ 493.024029][ T9853] CPU: 0 PID: 9853 Comm: syz-executor.2 Not tainted 5.8.0-rc5-syzkaller #0 [ 493.032679][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.042797][ T9853] Call Trace: [ 493.046203][ T9853] dump_stack+0x21c/0x280 [ 493.050633][ T9853] should_fail+0x8b7/0x9e0 [ 493.055261][ T9853] __should_failslab+0x1f6/0x290 [ 493.060318][ T9853] should_failslab+0x29/0x70 [ 493.065021][ T9853] kmem_cache_alloc+0xcf/0xc50 [ 493.069884][ T9853] ? __alloc_file+0x85/0x760 [ 493.074587][ T9853] __alloc_file+0x85/0x760 [ 493.079110][ T9853] alloc_empty_file+0x27f/0x570 [ 493.084073][ T9853] ? do_syscall_64+0xad/0x160 [ 493.088849][ T9853] path_openat+0xfc/0x6ba0 [ 493.093363][ T9853] ? kmsan_set_origin_checked+0x95/0xf0 [ 493.099005][ T9853] ? kmsan_get_metadata+0x116/0x180 [ 493.104301][ T9853] ? kmsan_get_metadata+0x116/0x180 [ 493.109607][ T9853] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 493.115547][ T9853] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 493.121798][ T9853] ? should_fail+0x208/0x9e0 [ 493.126476][ T9853] ? kmsan_set_origin_checked+0x95/0xf0 [ 493.132119][ T9853] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 493.138038][ T9853] ? kmsan_get_metadata+0x116/0x180 [ 493.143330][ T9853] ? kmsan_internal_set_origin+0x75/0xb0 [ 493.149048][ T9853] ? __msan_poison_alloca+0xf0/0x120 [ 493.154420][ T9853] ? kmsan_get_metadata+0x116/0x180 [ 493.159721][ T9853] do_filp_open+0x2b8/0x710 [ 493.164359][ T9853] do_sys_openat2+0xa6a/0x1020 [ 493.169242][ T9853] __se_sys_open+0x270/0x2d0 [ 493.173936][ T9853] __x64_sys_open+0x4a/0x70 [ 493.178537][ T9853] do_syscall_64+0xad/0x160 [ 493.183130][ T9853] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 493.189096][ T9853] RIP: 0033:0x417101 [ 493.193029][ T9853] Code: Bad RIP value. [ 493.197166][ T9853] RSP: 002b:00007fa0f9eb8820 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 493.205782][ T9853] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000417101 [ 493.213860][ T9853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fa0f9eb8850 [ 493.221916][ T9853] RBP: 00007fa0f9eb8ca0 R08: 000000000000000f R09: 0000000000000000 [ 493.229978][ T9853] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001 [ 493.238031][ T9853] R13: 000000000169fb6f R14: 00007fa0f9eb99c0 R15: 000000000118cf4c [ 493.327611][ T9855] FAULT_INJECTION: forcing a failure. [ 493.327611][ T9855] name failslab, interval 1, probability 0, space 0, times 0 [ 493.340581][ T9855] CPU: 0 PID: 9855 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 493.349235][ T9855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.359355][ T9855] Call Trace: [ 493.362759][ T9855] dump_stack+0x21c/0x280 [ 493.367197][ T9855] should_fail+0x8b7/0x9e0 [ 493.371726][ T9855] __should_failslab+0x1f6/0x290 [ 493.376771][ T9855] should_failslab+0x29/0x70 [ 493.381492][ T9855] __kmalloc+0xae/0x410 [ 493.385747][ T9855] ? kmsan_get_metadata+0x116/0x180 [ 493.391039][ T9855] ? tomoyo_encode2+0x5b1/0xab0 [ 493.395984][ T9855] tomoyo_encode2+0x5b1/0xab0 [ 493.400778][ T9855] tomoyo_realpath_from_path+0xba0/0xcb0 [ 493.406530][ T9855] tomoyo_path_number_perm+0x2a4/0xaf0 [ 493.412103][ T9855] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 493.418030][ T9855] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 493.424206][ T9855] tomoyo_file_ioctl+0x74/0x90 [ 493.429074][ T9855] ? tomoyo_inode_getattr+0x60/0x60 [ 493.434360][ T9855] security_file_ioctl+0x10a/0x210 [ 493.439594][ T9855] __se_sys_ioctl+0x143/0x4d0 [ 493.444376][ T9855] __x64_sys_ioctl+0x4a/0x70 [ 493.449078][ T9855] do_syscall_64+0xad/0x160 [ 493.453675][ T9855] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 493.459739][ T9855] RIP: 0033:0x45d5b9 [ 493.463696][ T9855] Code: Bad RIP value. [ 493.467820][ T9855] RSP: 002b:00007f301bb84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.476318][ T9855] RAX: ffffffffffffffda RBX: 00000000000126c0 RCX: 000000000045d5b9 [ 493.484392][ T9855] RDX: 000000000000288e RSI: 0000000000009204 RDI: 0000000000000003 [ 493.492469][ T9855] RBP: 00007f301bb84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 493.500521][ T9855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.508594][ T9855] R13: 000000000169fb6f R14: 00007f301bb859c0 R15: 000000000118cf4c [ 493.517196][ T9855] ERROR: Out of memory at tomoyo_realpath_from_path. 19:36:12 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) 19:36:13 executing program 0 (fault-call:2 fault-nth:2): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:13 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x8636d) 19:36:13 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) [ 494.489612][ T9863] FAULT_INJECTION: forcing a failure. [ 494.489612][ T9863] name failslab, interval 1, probability 0, space 0, times 0 [ 494.502529][ T9863] CPU: 0 PID: 9863 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 494.511196][ T9863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 494.521325][ T9863] Call Trace: [ 494.524756][ T9863] dump_stack+0x21c/0x280 [ 494.529187][ T9863] should_fail+0x8b7/0x9e0 [ 494.533710][ T9863] __should_failslab+0x1f6/0x290 [ 494.538764][ T9863] should_failslab+0x29/0x70 [ 494.543461][ T9863] __kmalloc+0xae/0x410 [ 494.547731][ T9863] ? kmsan_get_metadata+0x116/0x180 [ 494.553144][ T9863] ? mon_bin_ioctl+0xb2e/0x1d70 [ 494.558117][ T9863] mon_bin_ioctl+0xb2e/0x1d70 [ 494.562923][ T9863] ? mon_bin_poll+0x340/0x340 [ 494.567688][ T9863] __se_sys_ioctl+0x319/0x4d0 [ 494.572470][ T9863] __x64_sys_ioctl+0x4a/0x70 [ 494.577166][ T9863] do_syscall_64+0xad/0x160 [ 494.581771][ T9863] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 494.587734][ T9863] RIP: 0033:0x45d5b9 [ 494.591666][ T9863] Code: Bad RIP value. [ 494.595790][ T9863] RSP: 002b:00007f301bb84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.604299][ T9863] RAX: ffffffffffffffda RBX: 00000000000126c0 RCX: 000000000045d5b9 [ 494.612352][ T9863] RDX: 000000000000288e RSI: 0000000000009204 RDI: 0000000000000003 [ 494.620412][ T9863] RBP: 00007f301bb84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 494.628472][ T9863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.636532][ T9863] R13: 000000000169fb6f R14: 00007f301bb859c0 R15: 000000000118cf4c 19:36:13 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x8636d) 19:36:13 executing program 0 (fault-call:2 fault-nth:3): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:14 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x0) 19:36:14 executing program 3: getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f00000000c0)=0x84) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x4e22, @loopback}}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000140)={0x2, 0x0, 0x3, 0x0, 0xb047}) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000180)=0x2) ioctl$SNDRV_PCM_IOCTL_UNLINK(r1, 0x4161, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000001c0)={0xb, {0x1, 0x4, 0x1f, 0x72}}) r2 = dup2(r1, r1) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000200)=0x5, 0x4) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='.\x00', r1}, 0x10) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x1c9000, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048003}, 0x4) r5 = signalfd4(r3, &(0x7f0000000440)={[0x3]}, 0x8, 0x800) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcsu\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@map=r5, r2, 0x21, 0x0, r6}, 0x14) r7 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x7fff, 0x800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000540)={r0, 0x1000, "5741af7236fc326ee9ea9d56d4d78e9db1b2e7df42f7f641d44e3831dffde34472e8e536e3559f0f53c93e7774881655663e2b40f28f8c096aa231eef2697782a4b1ec21dfb5769c4bdaf0e08c75365055abe4312cb2ec3dd11a2c3991b1561a6c0c123d17e35dd687dd8eb561ca662bbc2ca4c4dd65ceb1016478225565b53e3618b659f556a59d221b2f04af7df5d39f96475cb829adb0c160279c42c0389b72ffc96cf36c24d028007c17b2567a1a0a9079e10977185ceb6f16591daf82ab6fa864d274831aa8752dda063f6f9563145939c0edac962cfec835d365d371cbf0cc477dfce2cf84184f8cd025a0377735ab4f42f396472c3596878cac5eea78cc9fcaa528e79f1d819677846525545a448be51e71a6a686046eb76d91a4d01b602c0a67076b1e7d1b5d4c1c00e438173252287318b3899fbcf831d3762347615844779cd276807de4dc437159f33f3d2f2a3bd5ae62d1b2da0eda8681d69c216e2a0f2ac15e2d2fb320fb1271c5846d6f1f5d5d4328a7c5b83df48cc2585e465f3407de4caf12ab824240b535c34a8f8c2867867de7d51c6650ce695ee0b5db2f0e2ee933d9a42242156b81e93ec8f820810ca2e7d1738b30a515dc48b6a49dceedfc8098a3f50791759121f4dc11d5a7f25af5cfb89b0ab96e6a56e054e6114b079c3fc56dd3140c5767f0829e9b56998bc6345bd7bb309b28b571a4fa3603f544fe190f2a4c7f844eb7dd1fdc8f11953c2e5548d99a398cebf46224fed317a05dfe355d0bf5b9cbf2761a5576d9d6a9a308b4ab50f482e2e16a8a3cd786e8b642315bb4c1157f3c9c723a7202a7031c57cf585f71b5144c1208264010fc977edf9c71d2e1d1ba9d7864ae5d10744ed355095222b89f017eec51da0f5409f755545540b2e238fb8ef7b56915d8aec4858a75fa6dd9b87c4db331321fac46ef417849463bf48421f656315bdf95300b8613405a9b2017763d6f4ffd333f58340432be238644a8fb68be5b76a7afe161c972b1dae66655f66c0a97e687aa1b48ee5d4b504b7455be25e8721ad4d62885a792635569731e957433f3aab1ba390d5663f7baa07fa7e431183f68c71f1440946e250890278737ef9ba8d58ca288ffb9f90fa2d962820f6666f133d2ba61e770d91eebe2f437f48200c5dcedc742c9a3f02004967ad50dd26eb2902a744ebc94058424f1fbee4a15c3291f985d7b74a3e6fdf83fff8f36aac3976e4b956b402264fd0e187968d52955e6f5532d2bd57adebd11be4035bb5fca0952bf486c3b497ec76df33c82f5f4bfcb2b8c5d3a0609fc274871ed579d5991258b265fea761a7c4ef8a90da75f2fd0ddb2317cb69e35963e01b9c950cb963881c0c2b8acc754618f024c2d0961395d4b1dcf06f54096d150fe89f911d739adbfccaad239a77055e4c9382190bb0ef451d1fa8ab25794d67c972e0e9661aae0b5dce979b3598f6205de8b140bd88a46f4881e6cbce22d90efbdab862f18ac80bd9db19e7830f114efde5a746c3b7ed1bdd288b9cbacee0d19e459b508434beaf1487a881ddc5469247bdc52ab703588e0568a61774300921f934f3e7a7299cda048fc286e10b1d13c45d2da391b219e26bb6c1fad0b9d20995b190e3233c7a06f3b6c2c04d47883926861b2c3179dca5546294630237e7bd97b2f08bbbe9266fa3d2e3460575ed95487b92601a3af62b7669b22f66955b6ee20da7ac744d7937f3ac2a6ca8af43fe860b959caceb8e7139115ccaf021ba9a242e584299858eec760f67dcb7bcb0bcbbdd742755f8b6adfdf79f1c27a20ba9c1fbdbc4287123f4f31662a96386bd43118b74684d3d0f9dde81b41aeb78c4e858b23340f7396e5bc9c37ffce8555df6bd523007d9b2244674447cde7668e3d643a52b0329223f1ec92a9b03f733f51628257784b7d773f94a202b496733f4b23c5fb8437dc8875f0a8759fa10bb1259aafbad675690e42a22deb8428270ac07415a854ea9f8213d2f976cd061ee4bc0c7b505102b5348d7c5c03aef6a8c4988728e336bf95864f5a7fba7702c52902a0cb771d53d181bb86939aaaa9043e5bd19486485cac6747d003fb066319cd53c4069a4250f19abd89d368ed7b4568b250a7a1ef142a98c239d3d98108f980e317967e677a1d57241a54bd3184d477f2533caa2edfcff0b0f5063e6367dcf76fb3452c641c7158eff281ad1dc9cbcfaad6eae107121b0c52ba9fa0c80902191b51d1b92d9548d1e2038ca22c406457a5def4ce35d7b648e2111217817557bb72069c5be36c418775c2e61c5b08d349bce99191edd9f55d2c1b7e1cb50e25d54429afd9065cc1227dfd0e153282cf9ca0e34636e9ef22eacbdf54cc63b4193cfa9ecf8a158f68713fe65bb3417af52bfda0663158954d9f25d5f7e5208a4a11e914637b8ea7f51d66a5e4e031ba03574896f009f190ed9e220482bb09ba5ad67aa0a36ebf637d4b8e033c22a812013a67aede14cc76189209f9f5ff6dc1f3c8fb1ab2596407b1f4ed0863190aa586755a5f479f39250c84516149881e88e2aecc790d62acd28f31a816912935ccbc93e5908ec0f4a9f405d82ab52878a7be0bb70b9043acd5ca031fe4cf6b50ca25acbc5e3656e3c5ee379842fa0a6da80c702263b5374495622128c28a03d9fb95125891c4599d6b7f80d7a72911b29474a87ad4a0d715c1aaef3a1537c0ca6d9a745bd04de3e97af2a7df19340ee3b8d7af07760746b385126751102721b3c94257a034f180bca8b3595dd18f0bf2b4ba478d80f8de7cd60c8d34c8d8ab7b94ca9635ae0fe8b26a306a0e0f1b84823d6b29f2f851c77f5b9e2f414fef07e330c51a4a9048f8585fe6911e87790a29c7f6bd47e3fe2f1782aaa50e66fda4f615868c4f23fee919fa8d004e6dc3da1ccfce891626d664f30ba7c70be4fcf33223c63d7f60ff55bf5839d601ac12988d4e9a1057ec2ad110e643b18eab92a2a4bd10705b5fac7f57d66e8c3df3bd51734a4b09c453dc9ed0001c1251ec002b8e4220fec35f0de416138613172f01ed6ab5f305c69ebe28750fc36f73595446db7e631e7e64b5a8e930cdfda9dab6ffc9cd87b6c52d8a7a79314bd5ab6cbc614f480f7d8dfb453c1d6acef4786427a9970b85b45d3d8fd5ecfe2f291c43eeeb13c6fd76301e11e6b7723339a9b2e48dbaa16a0fc0e4881644738dad671c244d0651d90c0c382e3bb6a1466a0f961b52bbfd6cbfb91a1a5e88c1d02577793aba841ef2f45dad1557c46521d07b064b1d2f412670a0b39f8c910e18f4a6334ef595202717200630c8f5e0aac9cb8ea005ae8cf941de23cfbfb93ca3c7d93ecfbbaa8e8901be3601f64729784cab84ab006497850b8b0eb8118709ca5c95a00cc8f6fac0a5680bf316c4dc856e749b751fb471f0ec78d0c1b9b6a6452e2aa95936ba2748d895555eb3d169159b992882ccee9a8a1b290fa8617db434ede1794507caef7a4414fc836d3f6768e418a57629095bb831e042338ad1808bf7b7026701a42c1ddd4622962d406c7f07d04555a17f886e784bd0f627a762626e4ee072affb5515c6df0dc87190371b6dc79c2a0705dd00e083147fe2c0c908987b37b8cf1cfe540df4aa9ad7063c1b2df706842d6f3f657f75558b922ed0f2569953b2c7b2f9d75b1eb09c51f7c1792603c2b7d03201491a0f71ceaf239310eb19bb95833674a744d2271b281e9fcec14f5248f882a14bd0e5bd651879f2cf87b3a828a115eb24d52f89f7d10b140a18c9587a2998c583d6cc3f70e6216ba49053718ea7427aaf704d78268012f07d46db3d42e6855437a0c4bf266f9a151ba4462ccb2689ff0be67ad68fff38ec4171e09fcab95115f93e97f19a546e5b7abad118d1056c295a7c91ed27499e5794a327b8f0d2b69732e47c054a0c3d04dbf261258c3020e2a6eddc0178df58745f0c4804e03c7d820bdbf36a8741a3dc0cc6d983fd7a4f155a8ddcc8509d4c8fbe80fca3e04fdaa1b3b24a847f87d636653871e6f298f36db5959d863b430562099b087ee16c681d089840a7c6e0c5856fe1422810bd220b0d56533eac855069fe2082350e5181a333605eed85a4e9efc5453b8a0dcc167496a97dfa15297d9ac24a8dfec658e23c5bc589ce1688e02308b14b184d0f49bfdca4ddfc0765c7cc35701ef3763c333bbc8d941c37dfbdb5b85684aaf8ed740e56f6d6c6b66e991262c728f12c30be0f0b96f432e716090248d711ed67c1b412bb624a8a085f30f3caee55463885765d16d24d52a7def0e386bf4c80eeabfaff70c739dbb91c75529f751ae3f17acbaafdd0fc8463f6948c6240868e0bab2cf7c720d776d8c6a90cc1246c4fad07d508473bd00f53221dd886758363a4857cf77ff9d4e1b2c0f4553e367dc687712061e5016693aee3a567d0587c7b2eddc17ee3e8a508185718e0f2377d6d30169b23ec906ad2206d4e590179573a042a4fd5b0280af9c58ce0051cbd4cbfb77c0c7cf40cff098c44fa6ff05c9e3fc57951ba987a7525200e4a59490c7303e8801093daec15acab2bf8d7b74f2bb377adb0db808eb5b045567f8b7708a9cca27b8fc0df3bb43cde2f60689a156f5193421be2e43a20ec04f22a131b11308c17008738e887a1ba712acad5831d5fe4ee7b0025cd644a73d3b9ce6d2961fc8e6674ff319f35865f4a533191f6e6a1e6097b79d69078a78c849be2d6fd42e050475dc025365e1272ca472223c6933d3d541a313084d828f859f17ab27bad2d74355a1daedcfcff1fedefc4cf479f5b0af7a854c74fc202df7306570474185c5cb7ab60cd59d6522d4abc3424a7cbba7be7802bf6b1c959bb6f6dfc0cdafe1c3789decc0287fbac8a819bc2453d8ea33e58aaeac11191923b4d91a6040af9da80ac2e965952d8213c05e593b93a8c3484c10b8b1ee92d2ac131fc95f7f83a843904f850e43bde7b3a542e4544d1b292b699b9ef25695c36ca655cca23b2281336a9757e77a76e093774e51633c567297d9c60bf63dcc683a91f38f60045a210d62122b7bcb362808253916f87c4ae0bf47bdb82552876fb3dcee36693581fd8ce16c88b856d84ab8ea28e9d2aad0f304712fb6f7c8780e91ad1fb3aed121cda76c2cb774802d12bd0d649d50171c72e1c1f2f598d7515d7b83b6342644462834d84c25252974c4765d50892b945faa76808e4a327ee304d2bf4f4c8f649131b6883bd88723182d8acde8d4583815e61c0bc06d64cfc5cdd5e4a75f0007bbb552baf780ccfc27825411ef3f9765c8774085d6dac7942f8e03a941ec685f1b8f9649a5c2f78af54004b2f7f5597714f74896454cd010c45d840c6343462011d724a33a535e4316966c30e60cbba7f5167d9affa2f16f11d932a45bf3f5f40396a12feadf49a4ff1722ed51810ad4f71558783d2fd374a6812c5d8d21de78f6d7bae700a9c6190ddb2d96c2e4c00a8c8706c1131aa70bf8e71af81cda2b93cdd9b474899345803283b5b449cd0be0a7201c8f1c3f045ac4d45fe89a5b7ff636d5695901f61f9c2fc75220b6df5394be6488dc9fe98e3ca3fd8cb00b8de90fc254befc6c809da8600a3187217188f8987516f82b4ee0c4a5a7a329e5940c030afd3971bdab4b248fb7bca4e0f4537a0d7c54cd3043f5c91c457994776f86d8fb9e32cb4bd3a065094262bf6c9426e50ab34e1e4c553e041080f6fb82b8c2f958d87fe68315655fdb9d059db897a71f0a45bcaf51d674776c4a4b454b465d6b45ad11307465482ef135a9910d8797aeb75bd2b1e8acbddc7"}, &(0x7f0000001580)=0x1008) setsockopt$inet_buf(r6, 0x0, 0x9, &(0x7f00000015c0)="c6a366f41e17ee9a22241567603005bec7a718353751", 0x16) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000001640)=0x2, 0x4) 19:36:14 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x8636d) [ 495.201370][ T9872] FAULT_INJECTION: forcing a failure. [ 495.201370][ T9872] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 495.214911][ T9872] CPU: 1 PID: 9872 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 495.223565][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 495.233678][ T9872] Call Trace: [ 495.237074][ T9872] dump_stack+0x21c/0x280 [ 495.241512][ T9872] should_fail+0x8b7/0x9e0 [ 495.246072][ T9872] should_fail_alloc_page+0x1e9/0x260 [ 495.251622][ T9872] __alloc_pages_nodemask+0x3d6/0x1030 [ 495.257202][ T9872] alloc_pages_current+0x5c8/0xb50 [ 495.262415][ T9872] ? __kmalloc+0x117/0x410 [ 495.266966][ T9872] get_zeroed_page+0x47/0xd0 [ 495.271663][ T9872] mon_bin_ioctl+0xc6c/0x1d70 [ 495.276452][ T9872] ? mon_bin_poll+0x340/0x340 [ 495.281212][ T9872] __se_sys_ioctl+0x319/0x4d0 [ 495.285979][ T9872] __x64_sys_ioctl+0x4a/0x70 [ 495.290666][ T9872] do_syscall_64+0xad/0x160 [ 495.295267][ T9872] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 495.301234][ T9872] RIP: 0033:0x45d5b9 [ 495.305192][ T9872] Code: Bad RIP value. [ 495.309321][ T9872] RSP: 002b:00007f301bb84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 495.317830][ T9872] RAX: ffffffffffffffda RBX: 00000000000126c0 RCX: 000000000045d5b9 [ 495.325869][ T9872] RDX: 000000000000288e RSI: 0000000000009204 RDI: 0000000000000003 [ 495.333907][ T9872] RBP: 00007f301bb84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 495.341945][ T9872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 495.349984][ T9872] R13: 000000000169fb6f R14: 00007f301bb859c0 R15: 000000000118cf4c 19:36:14 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 19:36:14 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x0) 19:36:14 executing program 0 (fault-call:2 fault-nth:4): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) [ 496.205101][ T9884] FAULT_INJECTION: forcing a failure. [ 496.205101][ T9884] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.218651][ T9884] CPU: 0 PID: 9884 Comm: syz-executor.0 Not tainted 5.8.0-rc5-syzkaller #0 [ 496.227327][ T9884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 496.237448][ T9884] Call Trace: [ 496.240863][ T9884] dump_stack+0x21c/0x280 [ 496.245312][ T9884] should_fail+0x8b7/0x9e0 [ 496.249847][ T9884] should_fail_alloc_page+0x1e9/0x260 [ 496.255355][ T9884] __alloc_pages_nodemask+0x3d6/0x1030 [ 496.260941][ T9884] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 496.266878][ T9884] alloc_pages_current+0x5c8/0xb50 [ 496.272123][ T9884] ? __kmalloc+0x117/0x410 [ 496.276671][ T9884] get_zeroed_page+0x47/0xd0 [ 496.281380][ T9884] mon_bin_ioctl+0xc6c/0x1d70 [ 496.286214][ T9884] ? mon_bin_poll+0x340/0x340 [ 496.290989][ T9884] __se_sys_ioctl+0x319/0x4d0 [ 496.295814][ T9884] __x64_sys_ioctl+0x4a/0x70 [ 496.300541][ T9884] do_syscall_64+0xad/0x160 [ 496.305158][ T9884] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 496.311129][ T9884] RIP: 0033:0x45d5b9 [ 496.315072][ T9884] Code: Bad RIP value. [ 496.319208][ T9884] RSP: 002b:00007f301bb84c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.327717][ T9884] RAX: ffffffffffffffda RBX: 00000000000126c0 RCX: 000000000045d5b9 [ 496.335766][ T9884] RDX: 000000000000288e RSI: 0000000000009204 RDI: 0000000000000003 [ 496.343814][ T9884] RBP: 00007f301bb84ca0 R08: 0000000000000000 R09: 0000000000000000 [ 496.351863][ T9884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 496.359923][ T9884] R13: 000000000169fb6f R14: 00007f301bb859c0 R15: 000000000118cf4c 19:36:15 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 19:36:15 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x0) 19:36:15 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x0) 19:36:15 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x0) 19:36:16 executing program 1 (fault-call:3 fault-nth:0): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:16 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:36:16 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x0) [ 497.326306][ T9899] FAULT_INJECTION: forcing a failure. [ 497.326306][ T9899] name failslab, interval 1, probability 0, space 0, times 0 [ 497.339197][ T9899] CPU: 0 PID: 9899 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 497.347861][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 497.357989][ T9899] Call Trace: [ 497.361397][ T9899] dump_stack+0x21c/0x280 [ 497.365848][ T9899] should_fail+0x8b7/0x9e0 [ 497.370386][ T9899] __should_failslab+0x1f6/0x290 [ 497.375424][ T9899] should_failslab+0x29/0x70 [ 497.380124][ T9899] __kmalloc+0xae/0x410 [ 497.384377][ T9899] ? kmsan_get_metadata+0x116/0x180 [ 497.389666][ T9899] ? tomoyo_realpath_from_path+0x15a/0xcb0 [ 497.395579][ T9899] tomoyo_realpath_from_path+0x15a/0xcb0 [ 497.401330][ T9899] tomoyo_path_number_perm+0x2a4/0xaf0 [ 497.406911][ T9899] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 497.412860][ T9899] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 497.419041][ T9899] tomoyo_file_ioctl+0x74/0x90 [ 497.423906][ T9899] ? tomoyo_inode_getattr+0x60/0x60 [ 497.429195][ T9899] security_file_ioctl+0x10a/0x210 [ 497.434419][ T9899] __se_sys_ioctl+0x143/0x4d0 [ 497.439203][ T9899] __x64_sys_ioctl+0x4a/0x70 [ 497.443899][ T9899] do_syscall_64+0xad/0x160 [ 497.448517][ T9899] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 497.454485][ T9899] RIP: 0033:0x45d5b9 [ 497.458418][ T9899] Code: Bad RIP value. [ 497.462550][ T9899] RSP: 002b:00007f31f0224c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.471079][ T9899] RAX: ffffffffffffffda RBX: 00000000000126c0 RCX: 000000000045d5b9 [ 497.479122][ T9899] RDX: 000000000008636d RSI: 0000000000009204 RDI: 0000000000000003 [ 497.487164][ T9899] RBP: 00007f31f0224ca0 R08: 0000000000000000 R09: 0000000000000000 [ 497.495223][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.503271][ T9899] R13: 000000000169fb6f R14: 00007f31f02259c0 R15: 000000000118cf4c [ 497.511797][ T9899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.874749][ T9910] IPVS: ftp: loaded support on port[0] = 21 [ 498.622580][ T9910] chnl_net:caif_netlink_parms(): no params data found [ 498.865185][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.872634][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.921200][ T9910] device bridge_slave_0 entered promiscuous mode [ 498.943746][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.951999][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.961823][ T9910] device bridge_slave_1 entered promiscuous mode [ 499.085611][ T9910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.216013][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.384729][ T9910] team0: Port device team_slave_0 added [ 499.426141][ T9910] team0: Port device team_slave_1 added [ 499.543089][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.553456][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.579734][ T9910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.601401][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.609727][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.635884][ T9910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.713993][ T9910] device hsr_slave_0 entered promiscuous mode [ 499.719558][ T8705] Bluetooth: hci3: command 0x0409 tx timeout [ 499.728967][ T9910] device hsr_slave_1 entered promiscuous mode [ 499.739965][ T9910] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.748001][ T9910] Cannot create hsr debugfs directory [ 500.050712][ T9910] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 500.080080][ T9910] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 500.118470][ T9910] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 500.167776][ T9910] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 500.521805][ T9910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.572979][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.582943][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.611889][ T9910] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.643792][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.657127][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.658572][ T8709] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.672578][ T8709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.693997][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.717686][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 500.728052][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 500.737708][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.744949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.814582][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 500.826029][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 500.837709][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 500.848658][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 500.866462][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 500.889153][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 500.900174][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 500.942142][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 500.952165][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 500.990125][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 501.000825][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.014400][ T9910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.104423][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 501.112828][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 501.154235][ T9910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.241254][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 501.252174][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 501.330594][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 501.340478][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 501.358451][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 501.367878][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 501.404088][ T9910] device veth0_vlan entered promiscuous mode [ 501.451926][ T9910] device veth1_vlan entered promiscuous mode [ 501.544514][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 501.554492][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 501.603800][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 501.616478][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 501.631277][ T9910] device veth0_macvtap entered promiscuous mode [ 501.675009][ T9910] device veth1_macvtap entered promiscuous mode [ 501.765206][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.776536][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.787285][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.797950][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.808002][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 501.818689][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.833390][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.847270][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 501.857427][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 501.867295][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.878810][ T9534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.902277][ T29] Bluetooth: hci3: command 0x041b tx timeout [ 501.968953][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 501.979528][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.989615][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 502.000357][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.010464][ T9910] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 502.021095][ T9910] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.033894][ T9910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.041889][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 502.052372][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:36:21 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x2, 0x288e) 19:36:21 executing program 1 (fault-call:3 fault-nth:1): set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:21 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x0) 19:36:21 executing program 3: ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, &(0x7f0000000280)={0x3, "606fff30c195ba58ba333978d2e27dbc9d7b4e25d4053f2c381dec7239c22e3648aeba392db95fa09464924a2a62bdad6e9972f839c2e6fa7f14c1bffb106d38"}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x100000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff2484ce8f1640077512ab4a068079f59df9984432f8f020ed198902367"}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x8004) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000000000eaa97fa3a72dcf98900000020000000800090002fd101f"], 0x1c}}, 0x0) close(r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb2}}]}]}}]}, 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000025c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002580)={&(0x7f00000003c0)={0x1e0, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x80c5}, 0x4000000) [ 502.980783][T10134] FAULT_INJECTION: forcing a failure. [ 502.980783][T10134] name failslab, interval 1, probability 0, space 0, times 0 [ 502.993854][T10134] CPU: 0 PID: 10134 Comm: syz-executor.1 Not tainted 5.8.0-rc5-syzkaller #0 [ 503.002609][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 503.012721][T10134] Call Trace: [ 503.016127][T10134] dump_stack+0x21c/0x280 [ 503.020553][T10134] should_fail+0x8b7/0x9e0 [ 503.025075][T10134] __should_failslab+0x1f6/0x290 [ 503.030123][T10134] should_failslab+0x29/0x70 [ 503.034808][T10134] __kmalloc+0xae/0x410 [ 503.039054][T10134] ? kmsan_get_metadata+0x116/0x180 [ 503.044338][T10134] ? tomoyo_encode2+0x5b1/0xab0 [ 503.049274][T10134] tomoyo_encode2+0x5b1/0xab0 [ 503.054058][T10134] tomoyo_realpath_from_path+0xba0/0xcb0 [ 503.059797][T10134] tomoyo_path_number_perm+0x2a4/0xaf0 [ 503.065386][T10134] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 503.071307][T10134] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 503.077468][T10134] tomoyo_file_ioctl+0x74/0x90 [ 503.082321][T10134] ? tomoyo_inode_getattr+0x60/0x60 [ 503.087599][T10134] security_file_ioctl+0x10a/0x210 [ 503.092797][T10134] __se_sys_ioctl+0x143/0x4d0 [ 503.097562][T10134] __x64_sys_ioctl+0x4a/0x70 [ 503.102257][T10134] do_syscall_64+0xad/0x160 [ 503.106851][T10134] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 503.112801][T10134] RIP: 0033:0x45d5b9 [ 503.116732][T10134] Code: Bad RIP value. [ 503.120865][T10134] RSP: 002b:00007f31f0224c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.129364][T10134] RAX: ffffffffffffffda RBX: 00000000000126c0 RCX: 000000000045d5b9 [ 503.137393][T10134] RDX: 000000000008636d RSI: 0000000000009204 RDI: 0000000000000003 [ 503.145429][T10134] RBP: 00007f31f0224ca0 R08: 0000000000000000 R09: 0000000000000000 [ 503.153461][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.161497][T10134] R13: 000000000169fb6f R14: 00007f31f02259c0 R15: 000000000118cf4c [ 503.170519][T10134] ERROR: Out of memory at tomoyo_realpath_from_path. 19:36:22 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x10, 0x288e) 19:36:22 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x0) 19:36:22 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x4c01, 0x288e) 19:36:22 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xa, 0x0) [ 503.960232][ T29] Bluetooth: hci3: command 0x040f tx timeout 19:36:23 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x541b, 0x288e) 19:36:23 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:36:23 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xb, 0x0) 19:36:23 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x200000c, 0x10032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000180)=""/4096) r3 = dup2(r2, r2) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000000c0)=0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080), 0x14) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000100)={0x7ff, 0x10, [0x0, 0x8, 0x80000000, 0x5]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = dup2(r4, r1) dup3(r6, r0, 0x0) 19:36:23 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x5421, 0x288e) 19:36:23 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x2, 0x8636d) 19:36:23 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xc, 0x0) 19:36:24 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000001040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="c9ca0c5de8653214c10838a97edb0a0d47b30cb5fdb6b60f58933dafe5d516ce36e94ffb86d078d443304e4797f6772b77b5b9985a51dc4028fb24a06f4113781b68f6c1e3d02c1fe1e3c50848923e6b030f76802a60f6a36132ca413c36fb6d2102303a512352719705a3bf91482fa46eb7d4d4340af60458d04a811961c133a28b382d8b141477fa07a61cf6c0fccbac20ac66965821a29975f78ded68b95464ae365de3552a37d1c11cf70cdf6ef97c548c6eaf7b10858637a6aa499e7e3a1d10e2d16026bef74bd7f610bdde71f523e3f5bded3c9f1530c21d5d3836273fbb63a3b11681a273671dfb18068b7cceb72da8b4fbb45fa7", 0xf8}, {&(0x7f0000000080)="6d096ef9a28f94628d65a9985e2c82a7b956d6e0dc753e43ff5180047bb31d25c394833a9e495f5bf6635ba1c58a082cb5aaa4847c03fec4ebdd51ebf8e667234dfa77f79726feca444a21d8c634004a40c7420a582315ff7b794d681ec180c26eedbd63ff0922e8f5cd454b7753856376e3da0f36688b688021adcab091dcd20cfee8a1b7f0556cc723", 0x8a}, {&(0x7f0000000540)="9bb838229a8dd7df08f48d59fd4d9f7110e315e50f6079fdea5e33bca827cef97b35068c4329d14c5b0ea4d1ce6f678c7bf6e93f0284d26fd1bfde654dac5a60b8e7b690d7161109df5a651601832899788a859a7a78cd7ee82f9376f176beaa0d327da1b14741c0e61a4d3f431aaa0081e27c8f5a26629c6997004a5b423afd0bd365cbce4e339935ef5199820ee0e0236903751419000000000000", 0x9c}, {&(0x7f00000004c0)="8980e5b7fcd8d873f26c9499b584ef279b62001210a02d470a7b2a343ed1f5ea5e4041620c25c356da3cec41f6d623a90e9a90a1035f5b8df426e5194d770d3cd3212d5b3ad3222f73e7e1ab622927f92a4149f7cbabb316d8e6", 0x5a}], 0x4}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000007380), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="48000000000000000000000000000000b2b6a77f06ddcb33a8fac63016b69944fbc6b2c7a0a923cbd4c6aeb00ae99a70317fb463be0080139e79abe8fa8aac7f0700000000000000"], 0x48}}], 0x2, 0x40080) open$dir(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) dup3(r2, r0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) 19:36:24 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x5450, 0x288e) 19:36:24 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x10, 0x8636d) 19:36:24 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xd, 0x0) 19:36:24 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x5451, 0x288e) 19:36:24 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x4c01, 0x8636d) 19:36:24 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x4}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb2}}]}]}}]}, 0x44}}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1, r7, 0x1, 0x1, 0x6, @local}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00000000000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c0012000b00010062726964676500000c0002000500070005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000001000080000000007830956d517cc19eda886f5f0bb57968886c000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x10) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 19:36:24 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe, 0x0) [ 506.040101][ T29] Bluetooth: hci3: command 0x0419 tx timeout 19:36:25 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x5452, 0x288e) 19:36:25 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x541b, 0x8636d) 19:36:25 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x5460, 0x288e) 19:36:25 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10, 0x0) 19:36:25 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x5421, 0x8636d) 19:36:25 executing program 3: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x4c01, 0x8636d) 19:36:25 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x5501, 0x288e) 19:36:25 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x11, 0x0) 19:36:26 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x5423, 0x8636d) 19:36:26 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20}, {0x5}, {0x6, 0x0, 0x0, 0x50000}]}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) 19:36:26 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x5509, 0x288e) 19:36:26 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x5450, 0x8636d) 19:36:26 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x12, 0x0) 19:36:26 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x1d, r0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000200)={0x1, 0xff, 0x1, 0x0, 0x6, 0x0, 0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000, 0x40, 0x0, 0x41, 0x7, 0x0, [], 0x0, 0x1}) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000100)='^,]:@!:-\x00', &(0x7f0000000140)) socket$inet_smc(0x2b, 0x1, 0x0) ptrace$cont(0x420e, 0x0, 0x2, 0x73c000) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0xa}, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$binfmt_misc(r1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4cdfe80812d274014ae40b8ae4f2a88b9fbea75e16a61fd063f026ed7360627ec60cb274e00da971f7ee096d74c92fad7e35bd5522d45cc36c2442eac2d224609aba9e6000000000000000000000000000000f390d71cd043e880c915daffae64d73dce7ab616c6092c1f00b049f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e99e377e9e1da90b088fb092fb3c47ab72b53a7b0ee0ce30e80600cff8ca2996e518e3e69051f6d24317f9ebfeb82ee2469fb31bdbb2768d25f196ab6f2dc045421b94d878d0d9c2a5c74633a687a135308e49ce118c81517ac7bb2994cc008dd3deaafaab51143f7ef00f000013942de4d2be61610000000000000000000000009a583b79ab00f70d85463c57c5bb1f1084530d0000fc2c8b8a38b7ee57afa01aea88fb413e1ee8ebbdf1fa9155bf6409b065a980528827de08737cf643db6de62f253b1304780753de6634bf57fbe29a7eb84cae7f0000008868cd2e693a9b71080d1588bb30abcbfecb4e10d4067a02736f08914faa037346191241c88ea4601124cd58ec82518bc8bac2ef0f6e8bfd9ad94599c3f6c754f2781bccc42e6ef592a1fc36a03c8a0328b63ed42db18137f243d01a67ea9fe8e34b25676f9816cdae263897bbb3aaa1148cb80e7aa12869a052b3ea1dfa17ce754e76f57ed0868864d66429c3d951c1bc1d9e8c430deeb6331c152d637740b4efbe95880a2f28902b3358519f08f638235a295a63eb1c8f9460e5d7b22ceb4c2c5504a2012c2c8f47fd9152910bc908e41e38ba60cbdffefadbe92a7ed8ce5760db387c2f625067eec438180f282d638ac72b92ec020d66863827f5ab6189075ebf22d92ecafe4eb1fb9c6b2b88eb965af65c3d0b178a439cf1840d00466796c04a4baa0500000000000000d1a9e60dd7da5c5b437be20ffcdd62a20b6ba534ed9dc198fc041c003bc1340d124062352ad8e3ce63546ded69d5fcaafcffed51ab1b1f4ff88615446fe96983cabf08c3e7ccc1d4e8bdf884b5e9b6705c58dc1cedd2e7d38fbdef12d569db367978805652e36f5ccaa6b3bae177839d2b7525f2ffacc5d4504bba2410fc9448ab6c3b9fea9f2287e2a0b83beee2c77a6bb5c3ca050000002f9b5324b98680e6ecf240abdeee92ecd6c972701c39c3e7a77d8dcd1ed368eaf557ad34b0c1cb8eec9c963001f3905cba6c67b6128d13f7bca39c2e5ea79555cf4b99dde454d6acf46357e0860f72c09a4fd2bcbf331bb7fa7344d5f9affec93c8b06a262e8907a868a0899596fc67d50a544f236f27d83d73166c2772b5d50848e8d00207530479e7a21ead4577bb3d4fb55baaa9eb28b3867545363e298c45745ca1d542573a9a8bacc669a1c3b323e6368d75dfe42b1c99034f6abc99172fe60be626ee5316e44c19376568bb8d762b5c6a0af2265a59928692a031330065da0a98b84972f36e8f7a5313be76f25a4a500b05df43d0ab1e62caf968b2593c654fcb6be39e620268986e613c55e68b44ff16753b80e782b7157761c18530cf497bfa41095d2a358b13ee0dfb9fec7e2b6770f051a4fa410e7fbf8e6889f8d7ab71a062845485d3d408ba9b77f78a67ae837dd19bfb6ad3d224cb81a9dfe10ed128d0741dee45ccd8451e398ba770000690000000000000000000000940b9e2643bf7ec4eb61b42ebe0dcca8b32694116b1f24170143bc02029500"], 0x1c2) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ptype\x00') r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) io_setup(0x6, &(0x7f00000000c0)) socket$inet(0x2b, 0x1, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 19:36:26 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x6364, 0x288e) 19:36:26 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x25, 0x0) 19:36:26 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x5451, 0x8636d) [ 508.174553][ C0] sd 0:0:1:0: [sg0] tag#6989 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 508.185263][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB: Test Unit Ready [ 508.192104][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.202012][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.211914][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.221863][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.231761][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.241654][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.251629][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.261605][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.271482][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.281367][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.291257][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.301417][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 508.311322][ C0] sd 0:0:1:0: [sg0] tag#6989 CDB[c0]: 00 00 00 00 00 00 00 00 19:36:27 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x890b, 0x288e) 19:36:27 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x5452, 0x8636d) 19:36:27 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2f, 0x0) 19:36:27 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x5460, 0x8636d) 19:36:28 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b056f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e9e2237f267b0ee0ce30e80600cff8ca2996e518e3e69051"], 0x155) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000080)={0x0, 0x6, [0x7, 0x1000, 0xf3b, 0x5, 0x46f, 0x80000000]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) 19:36:28 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5c, 0x0) 19:36:28 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x8912, 0x288e) 19:36:28 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x6364, 0x8636d) [ 509.460475][ T28] audit: type=1326 audit(1598470588.367:2): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10277 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 [ 509.533806][ C0] sd 0:0:1:0: [sg0] tag#6990 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 509.544617][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB: Test Unit Ready [ 509.551470][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.561342][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.571218][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.581260][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.591151][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.601086][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.611029][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.621014][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.630967][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.640897][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.650854][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.660835][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 509.670764][ C0] sd 0:0:1:0: [sg0] tag#6990 CDB[c0]: 00 00 00 00 00 00 00 00 19:36:28 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x8914, 0x288e) 19:36:28 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x300, 0x0) 19:36:28 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x8912, 0x8636d) 19:36:29 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x8933, 0x288e) 19:36:29 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x500, 0x0) [ 510.253448][ T28] audit: type=1326 audit(1598470589.157:3): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10277 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 19:36:29 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x8914, 0x8636d) 19:36:29 executing program 3: dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) write$binfmt_misc(r0, &(0x7f0000000b00)=ANY=[@ANYBLOB="5300000044a6aeabc81e1520000000000000001000fff64017db9820000000000000d403ffff633b27e59aa146175dd106736d173f0fc7ec6e26560000000049d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdfe80812d274014ae40b8ae4f2a88d2fbea75e16af8ffffffffffffff0627ec60cb274e00da971f7ee096d74c92fad7e34bd5522d45cc36c2442eac2d224609aba9e6000000000200000000000000000000f390d71cc6092cddd3b056f3fc65d61c2b3c65f2f80a61ea6e457ebc93981b20e03b86d4e9e2237f267b0ee0ce30e80600cff8ca2996e518e3e69051"], 0x155) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r1, r2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000080)={0x0, 0x6, [0x7, 0x1000, 0xf3b, 0x5, 0x46f, 0x80000000]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) pwrite64(r4, 0x0, 0x0, 0x0) 19:36:29 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x600, 0x0) 19:36:29 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x89f1, 0x288e) [ 510.834959][ T28] audit: type=1326 audit(1598470589.737:4): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=10313 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0 19:36:29 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x8933, 0x8636d) [ 510.916809][ C0] sd 0:0:1:0: [sg0] tag#6991 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 510.927507][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB: Test Unit Ready [ 510.934175][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.944211][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.954109][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.964013][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.973891][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.983772][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 510.993648][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.003549][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.013473][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.023416][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.033355][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.043251][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 511.053208][ C0] sd 0:0:1:0: [sg0] tag#6991 CDB[c0]: 00 00 00 00 00 00 00 00 19:36:30 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x89f2, 0x288e) 19:36:30 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x700, 0x0) 19:36:30 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x8946, 0x8636d) 19:36:30 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x900, 0x0) 19:36:30 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x89f8, 0x288e) 19:36:30 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@broadcast}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 19:36:30 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xa00, 0x0) 19:36:30 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9201, 0x288e) 19:36:31 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9201, 0x8636d) 19:36:31 executing program 3: r0 = socket$inet6(0xa, 0x80000, 0xffdffffe) sendmmsg$inet6(r0, &(0x7f0000001680)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e1d, 0x49d5, @mcast1, 0x80}, 0x1c, 0x0}}], 0x2, 0x20000000) 19:36:31 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9202, 0x288e) 19:36:31 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9202, 0x8636d) 19:36:31 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xb00, 0x0) 19:36:31 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x3, 0x0, 0x7, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xf3, &(0x7f00001a7f05)=""/243, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000080)={0x8000000}, 0x10}, 0x78) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000100)=0xfffffff8, 0x4) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000040)) 19:36:31 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9203, 0x288e) 19:36:31 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xc00, 0x0) 19:36:31 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9203, 0x8636d) 19:36:32 executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008e32f720f00a873c0000000a00000000c03f0000000904000005ff0000"], 0x0) 19:36:32 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9205, 0x288e) 19:36:32 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xd00, 0x0) 19:36:32 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9205, 0x8636d) 19:36:32 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe00, 0x0) [ 513.747393][ T8709] usb 4-1: new high-speed USB device number 2 using dummy_hcd 19:36:32 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9206, 0x288e) 19:36:32 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9206, 0x8636d) [ 513.987594][ T8709] usb 4-1: Using ep0 maxpacket: 32 [ 514.028175][ T8709] usb 4-1: no configurations [ 514.033056][ T8709] usb 4-1: can't read configurations, error -22 19:36:33 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1100, 0x0) 19:36:33 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9207, 0x288e) [ 514.227203][ T8709] usb 4-1: new high-speed USB device number 3 using dummy_hcd 19:36:33 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9207, 0x8636d) [ 514.466910][ T8709] usb 4-1: Using ep0 maxpacket: 32 19:36:33 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1200, 0x0) [ 514.518760][ T8709] usb 4-1: no configurations [ 514.523686][ T8709] usb 4-1: can't read configurations, error -22 [ 514.590292][ T8709] usb usb4-port1: attempt power cycle 19:36:33 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9208, 0x288e) [ 515.317876][ T8709] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 515.407980][ T8709] usb 4-1: Using ep0 maxpacket: 32 [ 515.448076][ T8709] usb 4-1: no configurations [ 515.452842][ T8709] usb 4-1: can't read configurations, error -22 [ 515.637166][ T8709] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 515.738453][ T8709] usb 4-1: Using ep0 maxpacket: 32 [ 515.783583][ T8709] usb 4-1: no configurations [ 515.788446][ T8709] usb 4-1: can't read configurations, error -22 [ 515.817203][ T8709] usb usb4-port1: unable to enumerate USB device 19:36:35 executing program 3: setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000040)={0x5e, 0xc, [], [@calipso={0x7, 0x50, {0x2, 0x12, 0x3f, 0x3ff, [0x6, 0x101, 0x0, 0x80, 0x480000, 0x40, 0x4000000000000000, 0x1, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x80}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x100}, @jumbo={0xc2, 0x4, 0x5}]}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000003000000009500"/32], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xff06, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe4e}, 0x48) 19:36:35 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9208, 0x8636d) 19:36:35 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1f00, 0x0) 19:36:35 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9209, 0x288e) 19:36:35 executing program 4: ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @raw_data=[0xae7, 0x8, 0x8000, 0x1, 0xd7, 0x8, 0xfffffff9, 0x7, 0x8000, 0x9, 0xce, 0x1, 0x400, 0x1fe00, 0xca18, 0x5, 0x2, 0x3, 0x7f, 0x4, 0x7fff, 0x6, 0x100, 0x1ff, 0x4, 0xffffffff, 0x80, 0xb5, 0x7ff, 0x80, 0x2, 0x89e]}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000100)={0x33, 0x0, [], [@pad1]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0) ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000180)) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000580)={[0x53]}, 0x8) ioctl$FIONCLEX(r0, 0x5450) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000005c0)) r1 = fsmount(r0, 0x0, 0xf4) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000600)) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000640)={0x80000000, [0xc7, 0x400, 0x1f], [{0x7, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x5, 0xb7b, 0x0, 0x0, 0x1}, {0x3ff, 0x0, 0x0, 0x1}, {0xfffffeff, 0x7ff, 0x0, 0x1, 0x1, 0x1}, {0x1f, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x40, 0x7, 0x0, 0x1}, {0x40, 0x81, 0x1, 0x1, 0x1, 0x1}, {0x3f, 0x2}, {0x6, 0x5, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x13, 0x101, 0x1}], 0x7}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000740)={0x0, 0xea, "31ac619eb383ce1c42487ed885eac79c5bfd3fcdda10160a9b097adb12b218a930ae91a7c27e8bfe84a8317f4bc5baa42e9aa342b2a2e4127c4ed9673da7ecfa436766ba4b7d1f310c2640f483383140347c36ec64e3c798e6feaaadf6fda1f26d94db74f5c23056587db6f86dd17384bc8f3a245b6bb58458613e849a1cbd938d32357120fb3048c7041f78e8a969e7bd12ece2954ff1fa132bddc17f0071a6950e0646fb91602da08fd9c3bab7a9269c61a904b501c830dd7fa10842773b1387603b96eee951691b08ddf2a4228b02e93c76a3ccc67090b31d0c5fdd993cc7d95b6e7bb7198a8e5343"}, &(0x7f0000000840)=0xf2) r2 = accept$packet(r1, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000008c0)=0x14) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000900)={{r0}, "9238cb9ce17468d5999509e898061ca459cbe25fafc6d9c6ac5f71d5a4c7dbad739265bdbbdf7585f952d7deaa62ed7f08ce96886f73a5b417747c4a7e7ce9f9a3851208c06400093af602480124bf57740347252fe606d903e952516a2b589208bd5b3e2878d71726cbff7cf421b2bb0326c729b2779c519a2bb1cb73e42f958bb4ac8966c32134bfa7e7413bb94420fad87869963cc10bdf419b1b377d787b415308859643b136cbdb33b90757c1931e389e02f82a2115f4e10a822c90ce07390fa9b899484a6340bdcd58444b305bba1203cc9fca165f679182f09023801c0a672ed93d2208aacb9b7a027ef143070bfbcbd2fdc86e0c09aa8542526999d4c94ea87abe594fcc08ebe60fb06b94e3165ea441604695e03d44aebdee44e9377a464145debbb96646f436baf59f91137cf8a05f7a61f24936f9a5d25cbbbf7bce54384b89bc959fae95eafded1bd8424367904def9adc0fd9d8e133f563c272da431f896daebe8bc4ca85ae4ea9f833a31fc8f748a254eac93f75302a86c975398f254cd1e3f7e81755d0e0661626e1376fc729d83f2b5edcaba12aa9a2738f9e1a0a8490d63045441181cf976d6adc5f08ebee8341f1a8346ccda14de2cbb6564e8ff67faf238fe76866c71266b42a72ef930119d7cde480fe505a8a79bc5157eb5acbd0be43ff08d07840027c05156bfb6241051ae388ab3d420f1185383f996b286c62d68c29c4b3d021a3fb6e4fd6917e86f95f62914443ff6e70eb0282cd68c8c04a3e393903c84698fa64e7b5feebd7f462ea1a970083bb1016641b482c0686f4a2cdb002df6be5564db6b3bfab694f264f66689e9523378538cc196b7a0e0372c1576f76a5e2c0793a12071c3ebda3cf5046746aeb359f297529576bc609dc83d6bd284d3da01e20931805d243d01794c076980e5d949f4f5d5010ca664a77878dd8496555def3a34e68f9e892e5403a6b96b0342e9662ecfbf000729aba4713665b58187434e9c2c3009dcfdd1e77416e1c00bdbb9934d9ab41fc3fdf1f78fac53b0b8c8b67408c14ce9ab72ad054f00792ca2240a4ecafbd7bf747687480f885b651af63def64967d3195778376d219683ec800bcf35fdb17103a85e7f4917ce43c3a24f119b43b9a047bc94d035678b609da1ca85b8d7bb7a81f21d2cc414176b95e6327a853a02596c2644f8d984bc11dabaad64ad38c0e68b7c0d53e40e809f33708a7c33e7f1ccaf30ca1f5064b95638acba53a0afbe244982637f02828a0aadbb5f22f095c8063cd463676957e4c8065e47e2737adc5293d4277c1ba150551647a447918d6b36925331f79867216ae7233d3612e80611dbd42cb26fade8292274feb444b196f324a39162b290b6bb452157ea6413488d76d75e026a4925650417138b7a9bf0d12233afa6485039f09ae7382d92e92f875d38d13455e5c738d80e34c274841d2758565054620439765f851c3180442b328a6fa5072dedd0b912d3e871964764669c7697f28162ee9b2844a19f6c25bc76f29fa7ef9c0626ce5fa67143c5bb53c18feded7f6dca2ffbf34023758a97bf3a9905916d643b5a493b9e6d7e8651342e35610d8bd9dd6ee23177b489eaa3d3f34f7d9892df9aa2f3903b7501ec9a14a6da486d3a74656da5a1ad3e1a3206fae44f69dbea5b0c2495cbe6ca2d39c0318f113e3e77a36b07b9f4ab6adbcdca5984a20c62346a59bf91e18c05feaf4dfa0d2e1991cf82bff45d940eaa9eddb9dbee5feaad6de5884dde0882c2750af82c4e60b9a876972abfbe7361acb3dbd7eb019b897e272ed6298355efc52bd0e051286ff01e116fc07b776c07a497af6f741d9af2119868c95f918fd3b906f34445c902688d1d499c09d177cd6d1d4b418960a67b9510ec479efa28b4ace12c80f3562d1c6ffcdfa399f0f1a04b5ef383364b09f7616e77f28181ab571f1abef16bd891113dff8efbbf47c9466ea37b37c337d794e156a3a821318580894fcca4441bafe44dcefa6afb40945ac12dd8a8149598f774324e8cd0028bd428c455345f660a9361b46e181dff4f794b7865f9a7bc0c1e922285230a3a297e289dc3be9709b46c2cb39924b0f83e9be0a5ad6d714490919894510dc9a218f3309a34a6c018c2c35216c4ca51543d506435f0e74ac0228736c317e87fd60517a93e40460e7d54cd81168e4f4110a69325d814d6f22cfd9ba38dbf58e99eec6bbbe848456398c12b55c3281e84a4b3e6bd1e1a3cd1bba1616bf8676f010ee98b59e7b83b13ac945521de60263838e160e13eca5b08518fff51c4e1a6db71fe2563bfe210aa8ea2594cc373b169e006c889a05fea24f54837196bec5fb5d21bb2b804eadf9d5fae6e8663b991434976261ff675891a36ba57d3ead420395be6069e87e92c69a4828676e1fc7e87c442af49b25b146ff96c9c01c5f0c961599ebdf7d1ca9928dc1d19aa6bfff3053bb1de07124097b1e7864dff0b4e3b174034b39dcd40c1134c8cfecb0df9beb26b50560e63a02e8a0f819dadad22e95f1c3a087e9df621765cfe61ffd92f1fa1738170f3760899cab08ab701eb704ee1229dac92d4250fe420458e6a254db4b67dac960998a22433c2836e993b4c75fd8d27755cc816468a327549d80223272e7470953e34bfa33daf36127c4fb489a98d27a78cb21f1c837742ad11c0845d1e4879a3bd122f562d4481b4f2b48cd242f8b4c0ce7ce4a4b3275ed6556207f5302ca088cf0446744044da447e73aa578b6cfe22084b7769e048522953b38d6e112afc3264910a1f78739ce4f4eed47dff331c62c907a4c7ed010aa99b90c0af112ba00c6072098dd1ff71ff704d1321258abb3b2dd3b784b260cbd31cf976497bab9bf5e176755557ac4301301a99c9c13d3f781a6398009594a3e2521cc540e9af958580e3979dde827b908384fc3959cbf2a90db635a0a27f1db66a9a0f20461fbe7e523f42975474b2de23bc321757ce71dd303e3f633cf586d5845e059dc93bdd8bab4daf6106adbaac0cefeba3fd338c1ad37e7acd21917cb7290b9ff69a4f214d7fa18911498112e53bd0196dfc0ab3358b065793efef70d6771bd31077f6df71dfe8b9b6605488c9cfbcd208041ab8f96f88405921d499fb22df99e2906dccdf61d3a77fba7047a3ee355a69e0105060f246a1b4ae1acde8a7689f3d5e06fba50228f1c8bc3539231487ef75812cdd58114b52a7ed7f6ef8622adf576a9cb1db31a35dd2bb6cb89fbdf019afa562b1397ccaa2dff9da32bae32d98218e03ed892a767807f90130a5a742e62799876c8c574a7dbf7afc9c25fc837802750ba9f9bc4e4de68728cc1cc2b8d626607ad35b4b920156e3e1737eec1c7be582a7257f40d16cc973bd933383a74865ba04445b29a26f26bd050eb9853c0f8c177fa37f91dc18457eab497ea39959801838fbb321a4b16d328f0f7d0b8885cfeba9a1bdce2e2a8b56735d0a12c390d09d9e6b3c3af52e43e8d59d60cbf2e3007d74aff62e2e2b7d0957e7164bd7684370b714599280ef2af6fc1d5864729278b159b30d73219dcff92fcebf9c343ae23612c6c922e6cda5ef1a0c8f861c7d20a221b5ad5d57bf92ebc8c3ec6b0c826bc368beb927a80c3d1a0d960c524b5f2bdaa19515ca86ea1a5295be27a9b7ab9854aa66b690cf3d650903abcb3568f1f8523a93ccff60d84fbfebfb0d7310a49d8c3046d7cd74d3ff4753fce815390252d2fb70b4d1c1e7580227e2a39886e63c23c21f3fe3d9d1015e169fe55049e73114508ac53fc1404da93996913d827568580928b136c67dbac49c62b319b2b99fa0d6b64df3643c05e2e46d333a3da0dc9e5d86d2fb0d916681dc49e26817605a0c7b291789ea5735f0a281aa50b795e133098f8374a9fc4c0e850e1022eacd0393920494fa1b9239ab09e259297ee08e83648e3f13cbb48cbe6a0646da6f45b1d81584a5b1db9d2dfa78e4db4b5824813a5a1b25359db0e06685c4e6cb05ef12d89048208dce27c6ad61b18441acb43f3b2a02875c6c3b98351f7d668f48f5099e4f4f68df8298fa9b4227bf5324de72242f93a4185107c6ce2de35d3852680f3a3e0c787a2a468e6cfff3bad92fe8a7b58434ec7f74a0e03235e2c5d131a77440104b4ab65be1ca038fbc4727377081b881dde110bd81ba49465f9214b584ea740102e5ff83ac05e391b8246befd91a1a733202e0f4bb1fe755625a4fb5222283c3ddc7a368d604241410cc8ab17d1b5f50d753baf810143aff5b07e65f43ad60d78920608def7af85804b1aa7b6ae53b8f452639ab89c4c8bb87ede1ae4dcc3824225d6d3d560b001c74180a6b40e34f4451be9be01f850397d8afcd2f58a2f6ea504954611aba374e9b0fbd344860caede9dba07df91dc3cbba16f7d4256699ee3775a8f93b34c703df1a9ac92a2b1c6419724fac288715a8d1addbd0458094daddf0fcd7e3f28e921a4f6ababd2c77f8f733208668619c030b4606385bc2494a9aff73698ef276f05c8b7d7dc9fc1fa6c7dc19f3c1eaceae5bf1af192fc2bb4c4edc42e80c40a64453d2a3b953111bbbd9cf5ad383f358e07ace5d6d42ac158a2804c3c74dbd47c9f9fbe036f145e5a302c0a07469341bc4fa601672e2916be9151714fa46b94ed09099895cc89cb68988bfe7de48b3165a0b1d64641b0bbcf2dc398b75b16ba935eec12b818bec29bef61d6affa4d7e749ffdd306bc64d5e795bdba9f21510278542286663108cac856ec5f350ad293f465ebdf98a38dcf2cf81e4f633b6a527a524e395d763a8cb272d4b405d86fa9fce4ab98adf7b0341a00aca4decda2200f9831d05005180dbafff138dadb84a785278e5545acd96bcc0188502474d16c34e884df3bb7896ed4bd1f66baf01c312f356ebd47286684c6f0ea65fb1ed5d2cf56eae168d8c54f24ef1662e49aedb6e89a28b250bc88d4f273353faa162f0f34b9a53fe4615f7304a77a77864a87ff3298fca2d88aa315630edb81c813f6cc4d70b219886f39b1348cb25d496b48fffad63a54e0e463c9db96e884393e32b45cf7f770d3e7e357eeff5bd2d469498c00c903e764ea40faf068699854104c9ecf716898ead86269d36cd16d4b9074f0f838c2988aa11716335a6cf52e2cba68144f809396470746b38f6ba907ff77e61ae920691e3a49bcded849b899668861613e65425cac3ca47935fa5aa6c71ddbad8a9514d5ea2486b2cf95374a767f0981361361a9dba9783a69bb902fb6511e17d657f211821118424c07aefa7e4c9c7f10ef1b5fe9ea2cc65e15d5387390205fea3497e5b0e202ed03fee3e113c3d6d88d90d46e3374086475b54da6302fef3ff92a18c59095e42ca4aeb1107571e704fb40c47f785cad71d0d06acde6c0d1a1fc9bb3ac749afe862240d0ee0d65ad4537f075fa21f62f87789c95cc6873b0bbf9edce44fea93c0a7f3b8857b04db62ba087074679489b2b2c7260eef761f8de6582cfb713ff110b34de2101a735520a01c16855046c7faecf58dad9a96e2008c615d6d556f2d664871812f41eba1b4506fbe881dcfcd59c30bef9a2d6e50d015f117bfec172244a36e0898bf7c9963fc0110b55eea4ecedaf1eca422d1a737f7d15bc05279ac66048b92ecb8a18db70660fa5784c1ec39b26f01d775a1839812ab98d13002df43d72f2e492da939fc891ca94ad0dce9d02de3cc9bf65cb48fe66e2e681379f4009fcc5d9c2879c64d7b4c855c05eff6a913c0b69a13cb6912c73b887ece5fd139e6c36c"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000001940)={0x1, [0x1]}, &(0x7f0000001980)=0x6) write$binfmt_aout(r2, &(0x7f00000019c0)={{0xcc, 0x8, 0x4, 0x186, 0x131, 0x5, 0x337, 0x2}, "0284466b24cc8de4816875382190c6dbb27f036f9beb8bee1c5b059fc8c4daacad448ee60c2d2c7ed4df5d90309ef75a47e69f7fc44612b55811b942c19f0f8c1df0258abac6cf4e8474a944cf6fc852eb2f000bc031c7e5e55cbe1b12e436023b4a0df2ddfb1f8ed9be4df89840fcb8977f67"}, 0x93) prctl$PR_CAPBSET_DROP(0x18, 0x13) 19:36:35 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9209, 0x8636d) 19:36:35 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2500, 0x0) 19:36:35 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x920a, 0x288e) 19:36:36 executing program 3: r0 = syz_usb_connect(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x9d, 0xd9, 0x40, 0x6d6, 0x41, 0x6532, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa3, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0x0, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0}) 19:36:36 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x920a, 0x8636d) 19:36:36 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2f00, 0x0) 19:36:36 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x920b, 0x288e) [ 517.767043][ T3470] usb 4-1: new high-speed USB device number 6 using dummy_hcd 19:36:36 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x920b, 0x8636d) 19:36:37 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x920c, 0x288e) 19:36:37 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4000, 0x0) [ 518.139948][ T3470] usb 4-1: New USB device found, idVendor=06d6, idProduct=0041, bcdDevice=65.32 [ 518.149471][ T3470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.261312][ T3470] usb 4-1: config 0 descriptor?? [ 518.326867][ T3470] gspca_main: sunplus-2.14.0 probing 06d6:0041 19:36:37 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5c00, 0x0) [ 519.663239][T10473] IPVS: ftp: loaded support on port[0] = 21 [ 520.068300][ T3470] gspca_sunplus: reg_r err -71 [ 520.073927][ T3470] sunplus: probe of 4-1:0.0 failed with error -71 [ 520.151701][ T3470] usb 4-1: USB disconnect, device number 6 [ 520.419692][T10473] chnl_net:caif_netlink_parms(): no params data found [ 520.610752][T10473] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.618182][T10473] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.628585][T10473] device bridge_slave_0 entered promiscuous mode [ 520.642992][T10473] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.650392][T10473] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.661120][T10473] device bridge_slave_1 entered promiscuous mode [ 520.715841][T10473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.738360][T10473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.833446][T10473] team0: Port device team_slave_0 added [ 520.849972][ T3470] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 520.877853][T10473] team0: Port device team_slave_1 added [ 520.972685][T10473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.979984][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.006223][T10473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.026571][T10473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.033939][T10473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.061532][T10473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.277333][ T3470] usb 4-1: New USB device found, idVendor=06d6, idProduct=0041, bcdDevice=65.32 [ 521.286559][ T3470] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.375076][ T3470] usb 4-1: config 0 descriptor?? [ 521.404266][T10473] device hsr_slave_0 entered promiscuous mode [ 521.429201][ T3470] gspca_main: sunplus-2.14.0 probing 06d6:0041 [ 521.477169][ T8709] Bluetooth: hci4: command 0x0409 tx timeout [ 521.498470][T10473] device hsr_slave_1 entered promiscuous mode [ 521.552552][T10473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.561191][T10473] Cannot create hsr debugfs directory [ 521.677852][ T3470] gspca_sunplus: reg_w_riv err -71 [ 521.683385][ T3470] sunplus: probe of 4-1:0.0 failed with error -71 [ 521.756630][ T3470] usb 4-1: USB disconnect, device number 7 [ 522.353500][T10473] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 522.398197][T10473] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 522.439891][T10473] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 522.468856][T10473] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 522.904231][T10473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.950342][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.959726][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.988865][T10473] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.018700][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.030376][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.040115][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.047571][ T8705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.103005][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.113245][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.123519][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.133208][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.140624][ T8705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.150171][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 523.161537][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.239889][T10473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.250497][T10473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.273180][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 523.285227][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.296057][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.307607][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.318168][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.328005][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.338639][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.348395][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.363662][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.373858][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.436465][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 523.445750][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 523.491165][T10473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.556946][ T3470] Bluetooth: hci4: command 0x041b tx timeout [ 523.588333][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 523.598851][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 523.706165][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 523.716254][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 523.742213][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 523.752330][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 523.775352][T10473] device veth0_vlan entered promiscuous mode [ 523.831785][T10473] device veth1_vlan entered promiscuous mode [ 523.933565][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 523.946131][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 523.955792][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 523.968662][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 524.012012][T10473] device veth0_macvtap entered promiscuous mode [ 524.032565][T10473] device veth1_macvtap entered promiscuous mode [ 524.113908][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.124706][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.134866][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.145445][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.155469][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.166017][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.176221][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 524.187009][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.201518][T10473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.212799][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 524.222763][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 524.232377][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.242512][ T8709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.282875][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.296943][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.307176][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.320107][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.330201][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.340857][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.350953][T10473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 524.361636][T10473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.376221][T10473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.386499][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.397493][ T3470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:36:43 executing program 4: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="12011003000000086b1d410140000102030109025f0003010000000904000000010100000a240100000002010201040100000000008000000000010200000905010c0000000000072501000000000904020000010200000904020101010200000905820900000000000725010000000000"], &(0x7f0000000500)={0x0, 0x0, 0xc, &(0x7f0000000340)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7}]}}) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000040)=0x8, 0x2) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) 19:36:43 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x920c, 0x8636d) 19:36:43 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1000000, 0x0) 19:36:43 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x920d, 0x288e) 19:36:43 executing program 3: r0 = syz_usb_connect(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x9e, 0x9d, 0xd9, 0x40, 0x6d6, 0x41, 0x6532, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa3, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0x0, 0x1, "d7"}, 0x0, 0x0, 0x0, 0x0}) 19:36:44 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x920d, 0x8636d) 19:36:44 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x920e, 0x288e) 19:36:44 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2000000, 0x0) [ 525.487018][ T3219] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 525.638571][ T8709] Bluetooth: hci4: command 0x040f tx timeout [ 525.686985][ T3470] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 525.848409][ T3219] usb 4-1: New USB device found, idVendor=06d6, idProduct=0041, bcdDevice=65.32 [ 525.857960][ T3219] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.936134][ T3219] usb 4-1: config 0 descriptor?? [ 525.947534][ T3470] usb 5-1: Using ep0 maxpacket: 8 19:36:44 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3000000, 0x0) 19:36:44 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x920e, 0x8636d) 19:36:44 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9210, 0x288e) [ 526.001717][ T3219] gspca_main: sunplus-2.14.0 probing 06d6:0041 [ 526.161215][ T3470] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 526.170493][ T3470] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.180995][ T3470] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 526.548296][ T3470] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0141, bcdDevice= 0.40 [ 526.557682][ T3470] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.565822][ T3470] usb 5-1: Product: syz [ 526.570392][ T3470] usb 5-1: Manufacturer: syz [ 526.575123][ T3470] usb 5-1: SerialNumber: syz 19:36:45 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4000000, 0x0) [ 527.128884][ T3470] usb 5-1: 0:2 : does not exist [ 527.182492][ T3470] usb 5-1: USB disconnect, device number 2 [ 527.718123][ T3219] gspca_sunplus: reg_r err -71 [ 527.720114][ T9534] Bluetooth: hci4: command 0x0419 tx timeout [ 527.723341][ T3219] sunplus: probe of 4-1:0.0 failed with error -71 [ 527.773057][ T3219] usb 4-1: USB disconnect, device number 8 [ 527.846919][ T12] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 528.087361][ T12] usb 5-1: Using ep0 maxpacket: 8 [ 528.307973][ T12] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 528.316978][ T12] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.327806][ T12] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 19:36:47 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9211, 0x288e) 19:36:47 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9210, 0x8636d) 19:36:47 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5000000, 0x0) 19:36:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r3, @ANYBLOB="00000016010000001800120008000100736974000c00020008000300", @ANYRES32=r3], 0x38}}, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x3}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x2c}}, 0x0) 19:36:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005070100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000014009ff300000000000000000a000200", @ANYRES32=r4, @ANYBLOB="140001000080000000000000000000000000000014000200fe82"], 0x40}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) r8 = dup3(r5, r6, 0x0) ioctl$VIDIOC_ENUMAUDIO(r8, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x5921, 0x1, 0x1000}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) [ 528.637199][ T12] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0141, bcdDevice= 0.40 [ 528.646535][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.654915][ T12] usb 5-1: Product: syz [ 528.747819][ T12] usb 5-1: can't set config #1, error -71 [ 528.798501][ T12] usb 5-1: USB disconnect, device number 3 19:36:47 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6000000, 0x0) 19:36:47 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9211, 0x8636d) [ 528.979776][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:36:47 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9212, 0x288e) 19:36:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4f7eec21) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000200900010073797a300000000048000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000010000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c"], 0xec}}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x9) close(r0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00') [ 529.112390][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:36:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005070100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000014009ff300000000000000000a000200", @ANYRES32=r4, @ANYBLOB="140001000080000000000000000000000000000014000200fe82"], 0x40}}, 0x0) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) r8 = dup3(r5, r6, 0x0) ioctl$VIDIOC_ENUMAUDIO(r8, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f00000000c0)={0x0, 0x0, 0x5921, 0x1, 0x1000}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 19:36:48 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xae01, 0x288e) 19:36:48 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7000000, 0x0) 19:36:48 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9212, 0x8636d) 19:36:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x21, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYRESOCT], 0x3c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@remote, 0x81, 0x2, 0x1, 0x4, 0x8, 0x8}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010003b0dfff30000000000000000e1ff3cfab7a8932188fa42873381d85eb1ebff97a9771499868cf1f734da162fafe153626bb95a6d89d7d62003d75953e801c319fdfc4c0f939180db49c4dbe2b365c6ff7b8d023c77216c4e57639d31cbdf7152dc850cf4e7bdd82f0911afd48623b9ae38d94817364ded0086232703120402a60bc1811dacdb633551bbf2422c3e00651ff6a093908fce8a629fbf2af1dd4a0000000000000000", @ANYRES32=0x0, @ANYBLOB="00010001000008000a0037364ec728f6315d78d2898a9a1bc6d44d46246c8ea6e1014e1b90cfbcbb57475c4f0d1d7c221f5158f3bb560c4e63f5322a5b2e9110", @ANYRES32=r3, @ANYBLOB="140012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) arch_prctl$ARCH_GET_CPUID(0x1011) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) accept$packet(r5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newlink={0x394, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r6, 0x14301, 0x3085}, [@IFLA_VFINFO_LIST={0x270, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x200}}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xfde, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x8}}, @IFLA_VF_RATE={0x10, 0x6, {0x4cbc, 0x7, 0xbd8}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0xffffffffffff6672}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7c1d}}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0xe2, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x400, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0xfff, 0x5, 0x2}}, @IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x828, 0x3, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0xffffffff, 0x9, 0x15000000}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0xbe}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10000, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1000, 0xfffffffd}}]}, {0xc0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x0, 0x358, 0x7fff, 0x88a8}}, {0x14, 0x1, {0x67, 0xd6e, 0x3, 0x8100}}, {0x14, 0x1, {0xffffff89, 0x269, 0x5, 0x8100}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x10000}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @dev={[], 0xf}}}, @IFLA_VF_VLAN={0x10, 0x2, {0x6, 0xcc6, 0x103}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xff, 0xf9}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7fff, 0xeb}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x80000001, 0x3}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xe9f, @broadcast}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xdcec, 0xffffffff}}, @IFLA_VF_RATE={0x10, 0x6, {0x3, 0x40, 0x3}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x7}}, @IFLA_VF_VLAN={0x10, 0x2, {0x8, 0x91c, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0xffff}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x5, 0x4}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x401}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8000, 0x6}}]}]}, @IFLA_MTU={0x8, 0x4, 0x3f}, @IFLA_PROP_LIST={0xcc, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_bond\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'xfrm0\x00'}, {0x14, 0x35, 'wg0\x00'}, {0x14, 0x35, 'lo\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'vcan0\x00'}, {0x14, 0x35, 'veth1_to_batadv\x00'}]}, @IFLA_OPERSTATE={0x5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb98}, @IFLA_PHYS_PORT_ID={0x1d, 0x22, "79ad1157ce57f11fca0b50fc814749caaabbb0406312533fe5"}]}, 0x394}}, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0xe, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x8005) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) [ 529.698271][T10807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 19:36:48 executing program 4: read$midi(0xffffffffffffffff, &(0x7f0000000480)=""/208, 0xd0) r0 = getpgid(0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000000080), 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4008af25, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000440)={'L+'}, 0x16, 0x1) socket$caif_seqpacket(0x25, 0x5, 0x5) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x41, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, r3) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0) 19:36:48 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8000000, 0x0) 19:36:48 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x400448c9, 0x288e) [ 530.071668][T10817] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 19:36:49 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xae01, 0x8636d) [ 530.146122][T10819] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 19:36:49 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2f42f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x8000, 0x0, 0x40000000001, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x2011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x105201, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xfc, 0x8, 0x34, @private0={0xfc, 0x0, [], 0x1}, @ipv4={[], [], @multicast1}, 0x8781, 0x10, 0x8000}}) r6 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$VIDIOC_ENUMAUDIO(r8, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044001}, 0x84) preadv2(r4, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/153, 0x99}, {&(0x7f0000000480)=""/20, 0x14}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f00000005c0)=""/243, 0xf3}], 0x4, 0x41b3966c, 0x1, 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f00000002c0)="beafd7baed26c0c02cb5af6c2d3d94bc438d442285dcc57fe94b3468627b72107dad5a016100ce9659dedf65edb48aae2b56b084bfc7bcc49f70121f77377f1ba9a04fc1af7e0f8c9ce349eeb8a7c9edb12d842d6c60203a3374bc730e5c7b7bc143afbf5ff3b421839a9c39fa077289a32d59470c24d5303f81d6b718567f7d95e28662a65fe2c7e4804b089b2e08138c31bdc4604a9f964a1d29d2a1c3fd9c25edd7f80d5269ec5630234897d173375763164cde3d8354e20448938355884b88af01512ebc4278d476c5550681fccb5dc8ed29f2473552d2addf5274f3419bbcf431e86e5a0c4ad5a34700de28ef6cea9b0f4edefa2cffa4cc4712e60061ff") syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406b1d0101400001020301090230829fd18cc7a8579a285eb990c6d2dad34fb507ec2c7013b19aebb2b308e6e1"], 0x0) 19:36:49 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9000000, 0x0) 19:36:49 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x400448dd, 0x288e) 19:36:49 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010400507800000000000000000e2ff00", @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c57c260b486d8550000004007a2a3e2864db100411581a8e14270b41dd99db2a7b6071995ba2e4b17d7cfb103000a1b100bb8f735d83ce825621df2bb283876e62d57a21bb727f9fabeb280b77244697dd513f3af71a6c2a7c4e31be9e8626134e0beeda64c668287e0d643948bef561baaef45dfa17346be83e4fdfa7489362ed0eab0ab", @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r4, 0x89fb, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x4, 0x14, 0x40, 0x0, 0xc, @private2={0xfc, 0x2, [], 0x1}, @empty, 0x28, 0x84f, 0x10001, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@deltclass={0x44, 0x29, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xe, 0xffe0}, {0x5, 0x2}, {0x9, 0xe}}, [@tclass_kind_options=@c_cake={0x9, 0x1, 'cake\x00'}, @TCA_RATE={0x6, 0x5, {0x4, 0x5}}, @tclass_kind_options=@c_ingress={0xc, 0x1, 'ingress\x00'}]}, 0x44}}, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x4924924924926d3, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, 0x1, 0x4, 0x500, 0x0, 0x0, {0x5, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x820) 19:36:49 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xae41, 0x8636d) 19:36:50 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xa000000, 0x0) [ 531.139782][ T12] usb 4-1: new high-speed USB device number 9 using dummy_hcd 19:36:50 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x400454ca, 0x288e) 19:36:50 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000500)={0x1, 0x10, 0xfa00, {&(0x7f00000004c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000180)=[{0x1c, 0x0, [0x4, 0x80, 0xeb91, 0x1ff, 0xff, 0x8000, 0x6, 0xfd, 0x3, 0x8fdb, 0x7d9, 0x45, 0x1, 0x6, 0x7, 0x1]}, {0x2, 0x0, [0x9, 0x4, 0x4, 0x4, 0x1, 0x2, 0x5, 0x401, 0x3, 0x93a9, 0x9, 0x7ff, 0x6, 0x1, 0x2, 0x936b]}, {0x0, 0x0, [0x7, 0x0, 0x5, 0x2, 0x7, 0x9, 0x7, 0x7, 0x448b41b0, 0x6, 0x1, 0x6, 0x8000, 0xffffffcf, 0x101, 0x2]}, {0x20, 0x0, [0x5, 0x3, 0x7ff, 0x7, 0x1e40, 0x800, 0xa8, 0x8, 0x2, 0x80000000, 0x5e1, 0x80000000, 0x401, 0xabc9, 0xfff, 0x518a]}, {0x32, 0x0, [0x1, 0x800, 0x1f, 0x8001, 0x9, 0xffffff7f, 0x0, 0x9, 0x200, 0x1000, 0x8, 0x7fff, 0x2981, 0x2, 0x5, 0x6c99c64b]}], r2, 0x1, 0x1, 0x168}}, 0x20) 19:36:50 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xae60, 0x8636d) 19:36:50 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xb000000, 0x0) [ 531.507935][ T12] usb 4-1: config index 0 descriptor too short (expected 33328, got 95) [ 531.516489][ T12] usb 4-1: config 209 has too many interfaces: 159, using maximum allowed: 32 [ 531.526593][ T12] usb 4-1: config 209 has an invalid descriptor of length 87, skipping remainder of the config [ 531.537369][ T12] usb 4-1: config 209 has 0 interfaces, different from the descriptor's value: 159 19:36:50 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x40045506, 0x288e) 19:36:50 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xae80, 0x8636d) [ 531.857981][ T12] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.867703][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.875831][ T12] usb 4-1: Product: syz [ 531.880350][ T12] usb 4-1: Manufacturer: syz [ 531.885095][ T12] usb 4-1: SerialNumber: syz [ 532.303025][ T12] usb 4-1: USB disconnect, device number 9 [ 533.092700][ T8709] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 533.490586][ T8709] usb 4-1: config index 0 descriptor too short (expected 33328, got 95) [ 533.499210][ T8709] usb 4-1: config 209 has too many interfaces: 159, using maximum allowed: 32 [ 533.508514][ T8709] usb 4-1: config 209 has an invalid descriptor of length 87, skipping remainder of the config [ 533.519180][ T8709] usb 4-1: config 209 has 0 interfaces, different from the descriptor's value: 159 19:36:52 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000440)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x7, @win={{0xfff, 0x9, 0x4, 0x8}, 0x8, 0x5, &(0x7f0000000100)={{0x0, 0x0, 0xf4, 0xa04}, &(0x7f00000000c0)={{0x80, 0x5}, &(0x7f0000000080)={{0x3, 0x5, 0xfffffffb, 0x68000000}}}}, 0xd8, &(0x7f0000000140)="a729d9403d4fc9e6995de50f96ef2197aff146b04109faa2d5d7a0b95ba84afc3a06a85b7c474e77e5edf78c92c6cdcd6cf332b68a9a011bebe026dd01dfae5e28003b228edea3cfbc09af871e815d3fb0f1ed2f83d6bf6848b9f7d0b6e5626665f46e77d02747b1780fccbd96d96873ef8610e96725a7523a3ec9428a6bbe04c697f151ab1baf87884a2c242e14baead3ee1829ccdb25b199feb51bcc0d3ab1a942451e77737dbf4c88a4", 0xdc}}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0xfb0, 0xcc10}) r1 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x5, 0x1) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000240)={0x0, 0x1}) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/75) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$VIDIOC_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0xe83, 0x7, 0x0, 0x2, 0x3, 0x7f, 0x81, 0x101, 0xfff, 0x200, 0x6, 0x3, 0x0, 0x4, 0x1, 0x22, {}, 0x6, 0x4}}) 19:36:52 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xc000000, 0x0) 19:36:52 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x86, 0xea, 0x66, 0x8, 0x98a, 0xcdc2, 0xd010, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe0, 0x1, 0x3}}]}}]}}, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x60a80, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010028bd70f1fedbdf25010000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x860}, 0x800) 19:36:52 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x4004550a, 0x288e) 19:36:52 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x400448c9, 0x8636d) [ 533.827625][ T8709] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 533.837481][ T8709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.845615][ T8709] usb 4-1: Product: syz [ 533.850169][ T8709] usb 4-1: Manufacturer: syz [ 534.010219][ T8709] usb 4-1: can't set config #209, error -71 [ 534.045806][ T8709] usb 4-1: USB disconnect, device number 10 19:36:53 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xd000000, 0x0) [ 534.247447][ T9534] usb 5-1: new high-speed USB device number 4 using dummy_hcd 19:36:53 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x40049409, 0x288e) 19:36:53 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x400448dd, 0x8636d) 19:36:53 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) shutdown(r0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 534.501120][ T9534] usb 5-1: Using ep0 maxpacket: 8 [ 534.620297][ T9534] usb 5-1: New USB device found, idVendor=098a, idProduct=cdc2, bcdDevice=d0.10 [ 534.629582][ T9534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.751742][ T9534] usb 5-1: config 0 descriptor?? [ 534.863395][ T9534] usb 5-1: bad CDC descriptors 19:36:53 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x40085503, 0x288e) 19:36:53 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x400454ca, 0x8636d) 19:36:53 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe000000, 0x0) [ 535.008716][ T9534] usb 5-1: USB disconnect, device number 4 19:36:54 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) clock_gettime(0x3, &(0x7f00000000c0)={0x0, 0x0}) shutdown(r0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, r2+10000000}, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:36:54 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x400454cd, 0x8636d) [ 535.797206][ T9534] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 536.042252][ T9534] usb 5-1: Using ep0 maxpacket: 8 [ 536.168584][ T9534] usb 5-1: New USB device found, idVendor=098a, idProduct=cdc2, bcdDevice=d0.10 [ 536.177946][ T9534] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.217661][ T9534] usb 5-1: config 0 descriptor?? [ 536.260124][ T9534] usb 5-1: bad CDC descriptors [ 536.472085][ T8705] usb 5-1: USB disconnect, device number 5 19:36:55 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x40095505, 0x288e) 19:36:55 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[], 0x2bcf) sendto$inet(r0, &(0x7f0000000400)='N', 0x1, 0x20004005, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3f2, 0x1) ioctl$KDDELIO(r2, 0x4b35, 0xfffffffffffffffe) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r3, 0x800455d1, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x9, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100) 19:36:55 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x10000000, 0x0) 19:36:55 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x40047459, 0x8636d) 19:36:55 executing program 3: syz_usb_connect(0x5, 0xc83, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x8, 0xc9, 0xce, 0x40, 0x1b3d, 0x142, 0xc060, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc71, 0x4, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x9, 0xd, 0xfc, 0x3e, 0x70, 0x1f, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x9, 0x3f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x1000}]}}, {{0x9, 0x5, 0x3, 0x10, 0x400, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x3, 0x40, 0x80}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0xc2, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x0, 0xdd, 0x0, [@generic={0x72, 0x31, "96ffa4bb4cae8418a5af9af0dc9eb29187a4fcb77f19d84f3a1e8a170a3f20462916d356be70676dee2cd3d9c0ee992fdcddb672fbfe5a14481f65ddda8ac27fd961c0e8eb19cb694e60c684df2791059e768010f34fbbe0abf291930e144d397018c3eca8ba3a88873bbab0be2d6f48"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x10, 0x6, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x6}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x0, 0x7, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}]}}, {{0x9, 0x5, 0xf, 0x3, 0x40, 0x2, 0x1f, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xba, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x0, 0x2, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x8, 0x1, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x40}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x87, 0x5, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x7, 0x4}, @generic={0xff, 0x1, "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"}]}}, {{0x9, 0x5, 0x1, 0x2, 0xee60ccbe50def062, 0x1, 0x5, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x80, 0x7f, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}]}}, {{0x9, 0x4, 0x6a, 0x33, 0xb, 0x5f, 0x3f, 0x18, 0x40, [@uac_as={[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xf3, 0x7fff, 0x1, "07af911bdc2a8681"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x2, 0xc0}, @as_header={0x7, 0x24, 0x1, 0x3, 0x5}]}, @hid_hid={0x9, 0x21, 0xe55, 0x80, 0x1, {0x22, 0x1dc}}], [{{0x9, 0x5, 0xc, 0x10, 0x400, 0x4, 0x8, 0x3f, [@generic={0x33, 0xb, "f9b791e0c76519fc3198d7d2e2d233870c17566dac76f5b1a34e8002f74dd538969bfdaeecb0c9584f47864f9902419cc3"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x7, 0xd2, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x9}]}}, {{0x9, 0x5, 0x7, 0x1, 0x20, 0x80, 0x3c, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x3}, @generic={0x7a, 0x3, "b464bb623b8c885c37d61b1829b2562174ef9cba26fc9de8b0e5645abd8113df34448b9ea5617728a039264625083db0121e75aebbbd4b7cd58c46612b08daf93e4dbda656d4749159766ade92777d94a4504692598c7779b3e184ec90cceeedc457aabf3f8745253a471cc4fc1c4eed1ef162aa8843fbb3"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x8, 0x9, 0x3, [@generic={0xce, 0x22, "84490405b1bbc85d19739d5d479b671908198ccbdf5086105c349ea8aac9ee8bcee1f1474c1c817e4d02039459a4dc0d6c35384c219e65aaa78607f11b45f0cda6e04b97b3a7d3a21930c0118584ed60eee0aed50f5b82e03fedeabae59357b685c862094653443036229059d23a0ba983e8fa8ef8b6462c615bf811e74720c5025d4f3e47470d2c70604bfa54a3e9382a1b55e0f805b5c1dde1bea60cbd2f5142674be789ad819ebb01cc26cee242e0f1415c6d3274c0359ed40204fcc7365abc5e1669420a5fd826d54d42"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x7}]}}, {{0x9, 0x5, 0x0, 0x78481d8008b31978, 0x8, 0x2, 0x81, 0x9}}, {{0x9, 0x5, 0x83, 0x8, 0x40, 0x0, 0x1, 0x5, [@generic={0x44, 0x5, "2a9cec48a777848672d20eb2357dafe6dad5772cd8641a838ba6f89793174df60709e8691b286441defa8363702bf161b710ab87c589230d6e35e205ddd48e710c70"}, @generic={0xfb, 0xa, "2958306ee908f8d7a81cfe90d7a22b9e1ad46a0f19c15171ded53c9d9739d25e4ad12638c86fd13ff463611dc1fe60df2042c920cfaf8c69312250be6879be14756df8c881d4748b9c6a89ab6562def4e4072824f000108e8c59ff0c76d588c9c0647f4e74e0fb4ae0d3583a089420bf325a7c3cb7bb369cc212bdaa9b15ca09bdc262070b521d65c21c89c36e82c3b441c9258a01cc133f9177e739af256924dcf96c85c5e9d728fd36d7f0fe6fc5a5b960473603324caca04f3867f2841b584df3b0d51921606e97a0d2c239e3413f1a025904a6f21d3706bee4e2892c5637fc3d4b313cb77ae8a6d6649f7269468fb54cc18a9f8fbffeac"}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0xfc, 0xe1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x40, 0x4, 0x4, [@generic={0xda, 0x2f, "90efafc0da4feec90b83555e7418c4e81c5a1e7561435af263ff12e7fc54b63f601e08d778eb4805fc7b05caeff62901fec35f03d11006c7d2a498c68eac2e3cd1925a132cc2d151da11533c8f41edb18c64c63f7e35c811c5070cf2042da835895337c1980022cec7f35ae549112657467fc1100e02c5c9032bb9368abbff31bda2aed93c370bb550e8d44b34b91294a53497c3eae9fccbe861ecdfafdfdf6a1f8c1232c906ffe274eb54a78a7b0bbb2887644bc2147f55e845ee51b6e7e4cf97cc089c2a9bd6d1f607245cdd54e9764a65a11f992ddf88"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0xb2, 0x3, 0x8, [@generic={0x79, 0x24, "ffcfb34fe7cd81b53d945a8e08eb09aadf9265aab0cc78d0fc72c2af07e2f37d631456d1b162dee3bfd4fd5126efc370925d6a05d3487a218f4e10ae8a4672565e0c95298be2a573fcc19c6aee441ffddc414786bc601dd7fbc1ef0b3d94a554265b1cac9235751e998ada4be2484cd550a07aad02b350"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x9}]}}, {{0x9, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, [@generic={0x1c, 0x5, "b2242f01d4838285d1723b7069706bec92a0ab00e9f5611e453f"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x200, 0x94, 0x40, 0x6}}]}}, {{0x9, 0x4, 0xe5, 0x3f, 0xf, 0xb7, 0x12, 0x89, 0x3, [], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x5, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x3f, 0x7f, 0xf7}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0x4, 0x35, 0x5}}, {{0x9, 0x5, 0x7, 0x10, 0x8140ab407d9256df, 0x1, 0x5, 0x5}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x0, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x4, 0x58, 0x1}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x1, 0x1, 0xb4, [@generic={0x21, 0x30, "e1d2b0adc0b99086c32345b4a425ff2746df98addf4a1b1128e143ed461799"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x96}]}}, {{0x9, 0x5, 0x1e, 0x0, 0x400, 0x0, 0x59, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}, @generic={0x5, 0x4, 'zU@'}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x4, 0x2, 0x0, [@generic={0x49, 0x21, "9f448cee6108331dc3cf339740127a057bbf391214b1c8d2b2de7b505c3b94cdbc092edf382ecc7168f4c4ddfc1629996e87a978498eebdd8ec32661be595e5a17c9ac25ed6ef0"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x28, 0x5, 0x5d, 0x4e, [@generic={0xad, 0xd, "3f59f1ee467c1c6b83504403c74b2642e929d577c6d852073fa0eb976cb49d88615c364e35fe69ffbb1af2b64464d965a8200df77bb2f1690d51541ee786110a0257a1b1707babc04d37a22cf5350a0d2a27e42c0da4fe36631aa40837e5b687026714f05bea0d4454b51df2522910fe6591a709eb27b84583a76f1dda513c5d6ba9508fdade93cacfd03ca2ab84bcf7e665e6c74942d2752fe4621a0efa74a9b84f3ffc274087f9ef021e"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x258, 0x3f, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xffff}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0x40, 0x9, 0x1}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x1, 0x5, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x32, 0x42f}, @generic={0x57, 0x23, "cd7d4cb9c2bf1ac9aefd822390d692d3c4ff98893c4105ad010b8889d77683c1ce29381e8a4252b2e8fe32246a1d55eb4b16ed2e39f38d9058899394f7f61a303a4e26c3dfe4dba4a6a60e3655d30539aee7e358aa"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x0, 0x8, 0x5}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x6, 0x98, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xfffa}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x800}]}}]}}, {{0x9, 0x4, 0xd7, 0x1, 0xb, 0x3c, 0xd3, 0xd0, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x8001, 0x8}, [@selector_unit={0x5, 0x24, 0x5, 0x2}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0x6, "64a31a57"}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0xb6, "7bbc4817177a"}]}], [{{0x9, 0x5, 0xa, 0x1, 0x400, 0x9, 0x40, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa8, 0x3}, @generic={0x76, 0x23, "40a0e494e5c8163982b919236ffe9bba7f6dbfa19bf4509355f22efac59b62a60ebafe9240e14a8d6405d6abd36dff142f527cac408a1bf0f830f9f5f92e32b5e9d3fb54b2b7a5ab3718fb995e4bdf4a477ecd1f1f24b3a0593d57923c3b94b9811db2d075ff26cba6ee6e5f720a8d1086f538c5"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x2, 0xcb, 0xa6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xfffa}, @generic={0xaa, 0x5, "858dc148e376ceee571e4adcf2aa554a93e96673d6bcff5e457f5536fe52d182a60ea84cd0c5c9a49c4b92b247f27cdac651136d46f42bd4540eabd20828514ceaff1711f1232187d5b00e057eb5e013d72541f5eadd9f95172993bb658dfd77da42e5ab8fe9af9b9e335fbba23f22bfb79d56d9c2cee00eb5ee158e4a6029324ad52414a54926ed4118b1816e0a9db829f3300159452917ba3b47ac1730e80e3e18aa9e03bc9966"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x3f, 0x2c, 0xf6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1f, 0x3}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x1, 0x4, 0x7f, [@generic={0x5e, 0xc, "c64110c11ac9f4c8a5bc2459167c4a365aa358c58bd4c641af03432b39a0b9df5dafa8d741d055589761dba4616bcd13a477b8a8fa44e428a98c37e6f1593bd6b271dfe4c348cdeb7d735c64d2ae0a8c85bef75cfe94984a3d12cd14"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x49, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x7}, @generic={0x3d, 0x0, "b8b95594fa8bd815b6a4833b76bbe1331dd790221dbdb35b1ed179c2801ecb8fa36157d0cca323e1c1d78575b289c1ecc3a823d69d7d12b889e3b4"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0x4, 0x20}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0xff, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x1, 0x7, 0x44}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8, 0x0, 0x80, [@generic={0x9d, 0x21, "404001dbc9a005785256439ddd8d66bd4b9d750e82bad06e497f53d946150883058cd2dffe54e00ba17ff9a3e907d9c60a1126cae7b1d3b7a4f943fea846fb700edaa9b186f4315fcfab0e88ce70ab862114e5e97d8e02cbe38d3bd3eb7a57c3c3a9e42c712131b1233e9c6ec80c6a6200549d5beea768d290b3f32550eefc69502961bd977cbc58d34bb8bec27c19442976b98a4e11304195fbf6"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x0, 0x5d, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0xffff}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x2, 0xeb, 0x1}}]}}]}}]}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) r2 = signalfd(r1, &(0x7f0000000040)={[0x10001]}, 0x8) ioctl$SNDCTL_SEQ_THRESHOLD(r2, 0x4004510d, &(0x7f0000000080)=0xb8) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e80)={0x1, 0x0, [{0x3000, 0xbb, &(0x7f0000000dc0)=""/187}]}) ioctl$SNDCTL_TMR_METRONOME(r2, 0x40045407) [ 536.926954][ T3219] usb 4-1: new high-speed USB device number 11 using dummy_hcd 19:36:55 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x40049409, 0x8636d) 19:36:55 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x40186366, 0x288e) 19:36:55 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x11000000, 0x0) [ 537.287102][ T3219] usb 4-1: config 252 has an invalid interface number: 168 but max is 3 [ 537.295629][ T3219] usb 4-1: config 252 contains an unexpected descriptor of type 0x1, skipping [ 537.304988][ T3219] usb 4-1: config 252 has an invalid interface number: 106 but max is 3 [ 537.313768][ T3219] usb 4-1: config 252 has an invalid interface number: 229 but max is 3 [ 537.324351][ T3219] usb 4-1: config 252 has an invalid interface descriptor of length 5, skipping [ 537.333659][ T3219] usb 4-1: config 252 has an invalid interface number: 215 but max is 3 [ 537.342264][ T3219] usb 4-1: config 252 has an invalid descriptor of length 1, skipping remainder of the config [ 537.352770][ T3219] usb 4-1: config 252 has no interface number 0 [ 537.359280][ T3219] usb 4-1: config 252 has no interface number 1 [ 537.365686][ T3219] usb 4-1: config 252 has no interface number 2 [ 537.372186][ T3219] usb 4-1: config 252 has no interface number 3 [ 537.378743][ T3219] usb 4-1: config 252 interface 168 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 537.390235][ T3219] usb 4-1: config 252 interface 168 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 537.401391][ T3219] usb 4-1: config 252 interface 168 altsetting 9 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 537.412789][ T3219] usb 4-1: config 252 interface 168 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 537.423947][ T3219] usb 4-1: config 252 interface 168 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 537.435116][ T3219] usb 4-1: config 252 interface 168 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 537.446297][ T3219] usb 4-1: config 252 interface 168 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 537.457441][ T3219] usb 4-1: config 252 interface 168 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 537.468609][ T3219] usb 4-1: config 252 interface 106 altsetting 51 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 537.480125][ T3219] usb 4-1: config 252 interface 106 altsetting 51 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 537.491644][ T3219] usb 4-1: config 252 interface 106 altsetting 51 endpoint 0x7 has an invalid bInterval 128, changing to 7 [ 537.503334][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has a duplicate endpoint with address 0xF, skipping [ 537.514604][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has an invalid endpoint with address 0x0, skipping [ 537.525761][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has a duplicate endpoint with address 0x83, skipping [ 537.537089][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has an invalid endpoint with address 0x2A, skipping [ 537.548333][ T3219] usb 4-1: config 252 interface 106 altsetting 51 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 537.559887][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has a duplicate endpoint with address 0x9, skipping [ 537.571160][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has an invalid endpoint with address 0x0, skipping [ 537.582297][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has an invalid endpoint with address 0xB2, skipping [ 537.593489][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has a duplicate endpoint with address 0x6, skipping [ 537.604716][ T3219] usb 4-1: config 252 interface 106 altsetting 51 has 13 endpoint descriptors, different from the interface descriptor's value: 11 [ 537.618493][ T3219] usb 4-1: config 252 interface 229 altsetting 63 has a duplicate endpoint with address 0xB, skipping [ 537.629720][ T3219] usb 4-1: config 252 interface 229 altsetting 63 has a duplicate endpoint with address 0x3, skipping [ 537.640975][ T3219] usb 4-1: config 252 interface 229 altsetting 63 has a duplicate endpoint with address 0xA, skipping [ 537.652189][ T3219] usb 4-1: config 252 interface 229 altsetting 63 has a duplicate endpoint with address 0x7, skipping [ 537.663404][ T3219] usb 4-1: config 252 interface 229 altsetting 63 has a duplicate endpoint with address 0x9, skipping [ 537.674640][ T3219] usb 4-1: config 252 interface 229 altsetting 63 has a duplicate endpoint with address 0x6, skipping [ 537.685881][ T3219] usb 4-1: config 252 interface 229 altsetting 63 has an invalid endpoint with address 0x1E, skipping [ 537.697134][ T3219] usb 4-1: config 252 interface 229 altsetting 63 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 537.710815][ T3219] usb 4-1: config 252 interface 215 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 537.721973][ T3219] usb 4-1: config 252 interface 215 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 11 19:36:56 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x12000000, 0x0) 19:36:56 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x40186366, 0x8636d) 19:36:56 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x40189206, 0x288e) [ 537.735441][ T3219] usb 4-1: config 252 interface 168 has no altsetting 0 [ 537.742623][ T3219] usb 4-1: config 252 interface 106 has no altsetting 0 [ 537.749801][ T3219] usb 4-1: config 252 interface 229 has no altsetting 0 [ 537.756975][ T3219] usb 4-1: config 252 interface 215 has no altsetting 0 19:36:56 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1f000000, 0x0) 19:36:56 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241b00000009"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, &(0x7f0000000100)={0x8c89256ba57b8415, 0x23, 0xad, {0xad, 0xc, "204e329e21b49a19ba68f260875af97492b560e2d395ba874ee834c5ad24946a05d49588ecf0f13961349b3cc05819d05fe108a511349660f9cafdf12e728e47da3031395ac28d7a4b5fc656964044a807949a24b95b9f009b2738c49097f8692ee134e840abf1962b6462d063a1339ddeab9f5fe6a4a0c507a821afa0c4ae376fa90cb2ef9a88de29ee018627fdac35d47fd2bba0d0c5eede242bad375d41fd6a69d08aa2d77f952e9dda"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x44, &(0x7f00000001c0)={0x0, 0x31, 0x1, 'b'}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x3, 0x5, 0x8857, 0x3, 0x9, 0xff7f, 0x0, 0x8, 0x9, 0x0, 0x9}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000300)={0x20, 0x83, 0x2}, &(0x7f0000000340)={0x20, 0x87, 0x2}, &(0x7f0000000380)={0x20, 0x89, 0x2, 0x1}}) [ 538.027435][ T3219] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0142, bcdDevice=c0.60 [ 538.036840][ T3219] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.044976][ T3219] usb 4-1: Product: syz [ 538.049904][ T3219] usb 4-1: Manufacturer: syz [ 538.054643][ T3219] usb 4-1: SerialNumber: syz [ 538.196100][T10959] raw-gadget gadget: fail, usb_ep_enable returned -22 19:36:57 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x40189206, 0x8636d) 19:36:57 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x4018920a, 0x288e) 19:36:57 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x25000000, 0x0) [ 538.550618][ T3219] ftdi_sio 4-1:252.168: FTDI USB Serial Device converter detected [ 538.560621][ T3219] usb 4-1: Detected FT2232C [ 538.594976][ T3219] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 538.627239][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 538.654972][ T3219] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 538.697991][ T3219] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 538.801088][ T3219] ftdi_sio 4-1:252.106: FTDI USB Serial Device converter detected [ 538.810686][ T3219] usb 4-1: Detected FT2232C [ 538.870780][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 538.890331][ T3219] ftdi_sio ttyUSB1: Unable to read latency timer: -71 [ 538.940295][ T3219] ftdi_sio ttyUSB1: Unable to write latency timer: -71 [ 538.985997][ T3219] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB1 [ 538.998644][ T29] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.009021][ T29] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 539.018230][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.060749][ T3219] ftdi_sio 4-1:252.229: FTDI USB Serial Device converter detected [ 539.070532][ T3219] usb 4-1: Detected FT2232C [ 539.093261][ T3219] ftdi_sio ttyUSB2: Unable to read latency timer: -71 [ 539.125867][ T3219] ftdi_sio ttyUSB2: Unable to write latency timer: -71 [ 539.154272][ T3219] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB2 [ 539.231747][ T3219] ftdi_sio 4-1:252.215: FTDI USB Serial Device converter detected [ 539.264384][ T3219] usb 4-1: Detected FT2232C [ 539.278377][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.287747][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.290211][ T3219] ftdi_sio ttyUSB3: Unable to read latency timer: -71 [ 539.295860][ T29] usb 5-1: Product: syz [ 539.295985][ T29] usb 5-1: Manufacturer: syz [ 539.311908][ T29] usb 5-1: SerialNumber: syz [ 539.346833][ T3219] ftdi_sio ttyUSB3: Unable to write latency timer: -71 [ 539.375166][ T3219] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB3 [ 539.436581][ T3219] usb 4-1: USB disconnect, device number 11 [ 539.460305][ T29] cdc_ncm 5-1:1.0: skipping garbage [ 539.465782][ T29] cdc_ncm 5-1:1.0: bind() failure [ 539.494014][ T3219] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 539.505147][ T3219] ftdi_sio 4-1:252.168: device disconnected [ 539.605905][ T3219] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 539.617006][ T3219] ftdi_sio 4-1:252.106: device disconnected [ 539.668648][ T3219] ftdi_sio ttyUSB2: FTDI USB Serial Device converter now disconnected from ttyUSB2 [ 539.680913][ T3219] ftdi_sio 4-1:252.229: device disconnected [ 539.766144][ T3219] ftdi_sio ttyUSB3: FTDI USB Serial Device converter now disconnected from ttyUSB3 [ 539.777602][ T3219] ftdi_sio 4-1:252.215: device disconnected 19:36:59 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x2) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000080)=0x4, 0x4) 19:36:59 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x4020940d, 0x288e) 19:36:59 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2f000000, 0x0) 19:36:59 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x4018920a, 0x8636d) 19:36:59 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x88140, 0x0) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x12, 0x8, 0x70bd29, 0x25dfdbfd, {0xb, 0xf8, 0x0, 0x9a, {0x4e22, 0x4e21, [0x101, 0x8, 0xfffffff9, 0x4], [0x3, 0x0, 0x8], 0x0, [0xcb3, 0xffffb041]}, 0x8001, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40840}, 0x2001) fcntl$getown(r0, 0x9) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000180)='trusted.overlay.origin\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x92000, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x281) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000240)={0x2, 0x9, 0x4, 0x8001}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000280)={{r0}, "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"}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x28, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vsock\x00', 0x6240c0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000001540)={0xc, 0x8, 0xfa00, {&(0x7f00000013c0)}}, 0x10) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000001580)={0x5, 0x0, [], {0x0, @reserved}}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001640)='/dev/vga_arbiter\x00', 0x101002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001680)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f00000016c0)) r4 = open_tree(r2, &(0x7f0000001700)='./file0\x00', 0x800) ioctl$HIDIOCSFEATURE(r4, 0xc0404806, &(0x7f0000001740)="2ca48294b64555b5e5a3177aa8501bb5d35c71100b5431f55a6bb23a323dcb7cbe5d1736fde66eb500e3857ac1354d958d95a409f307379bdf36413d288f504b204f7b0fc0207e9fb9e717f7325af40643ba99423c0f7cc0450a62b23779ba142908e9418e7e745b464857ad6275edada7899721b270405096251c581f673d7d339c39a489142a772bd86ddf0f859554d25cc4689f658345e7d98d0c55391ab19ff5d8a2a42cca0de1c33d972e6bda9490332b42de0372df26184b258d4816a5a8a732f7ade7997535f7f912f81a39bf9b9f2e821a5e27a118e0f8c8e17500b7da9847eafb1b49b889236704c110aa754568") ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000001840)) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001880)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f00000018c0)={0xfffffff7, 0x4, 0x4}) [ 540.191590][ T3219] usb 4-1: new high-speed USB device number 12 using dummy_hcd 19:36:59 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x40000000, 0x0) 19:36:59 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x4020940d, 0x8636d) 19:36:59 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x40305839, 0x288e) 19:37:00 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000080), 0x4) 19:37:00 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x5) 19:37:00 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5c000000, 0x0) 19:37:00 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x41015500, 0x288e) 19:37:00 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x4020ae46, 0x8636d) [ 541.352748][ T8709] usb 5-1: USB disconnect, device number 6 19:37:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000080)=0x700, 0x4) [ 542.696539][T11114] IPVS: ftp: loaded support on port[0] = 21 [ 543.139768][T11114] chnl_net:caif_netlink_parms(): no params data found [ 543.317022][T11114] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.324281][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.334092][T11114] device bridge_slave_0 entered promiscuous mode [ 543.362530][T11114] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.369920][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.379784][T11114] device bridge_slave_1 entered promiscuous mode [ 543.457130][T11114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.480172][T11114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.549643][T11114] team0: Port device team_slave_0 added [ 543.568494][T11114] team0: Port device team_slave_1 added [ 543.623747][T11114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.631016][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.657312][T11114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.742645][T11114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.750699][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.776968][T11114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.859603][T11114] device hsr_slave_0 entered promiscuous mode [ 543.874295][T11114] device hsr_slave_1 entered promiscuous mode [ 543.885438][T11114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.893648][T11114] Cannot create hsr debugfs directory [ 544.597466][ T8705] Bluetooth: hci5: command 0x0409 tx timeout [ 544.730727][T11114] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 544.878739][T11114] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 544.979329][T11114] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 545.056027][T11114] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 546.283110][T11114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.333658][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 546.343615][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 546.372033][T11114] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.406533][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 546.419491][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 546.429168][ T3219] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.436407][ T3219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.494203][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 546.560619][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 546.570511][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 546.580545][ T3219] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.587930][ T3219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.622978][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 546.648442][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 546.670994][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 546.677157][ T8705] Bluetooth: hci5: command 0x041b tx timeout [ 546.682868][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 546.696222][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 546.721981][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 546.732879][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 546.758786][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 546.768857][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 546.793317][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.802456][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.829082][T11114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 546.878976][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.887488][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.914159][T11114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.965971][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 546.975467][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.024444][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.034493][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.057370][T11114] device veth0_vlan entered promiscuous mode [ 547.065398][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.075522][ T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.105806][T11114] device veth1_vlan entered promiscuous mode [ 547.168388][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 547.177875][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 547.187694][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.197219][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.217542][T11114] device veth0_macvtap entered promiscuous mode [ 547.244280][T11114] device veth1_macvtap entered promiscuous mode [ 547.285442][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 547.296802][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.306889][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 547.317542][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.327628][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 547.338265][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.348288][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 547.358904][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.369014][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 547.379624][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.392913][T11114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.407174][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 547.417067][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 547.426474][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 547.437941][ T8705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 547.476102][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 547.487650][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.497811][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 547.508411][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.518501][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 547.529140][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.539188][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 547.549788][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.559874][T11114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 547.570468][T11114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.583349][T11114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.594639][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 547.604640][ T3219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 19:37:06 executing program 5: getpid() sched_setscheduler(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000000)="440f20c03505000000440f22c06467f3af3665660f388201400fc76e31f2ab66b85c008ed8b9800000c00f3235000800000f3066baa100ed0f78450d64470f0199b2300000", 0x45}], 0x1, 0x26, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:37:06 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x4090ae82, 0x8636d) 19:37:06 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xf6ffffff, 0x0) 19:37:06 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x4188aea7, 0x288e) 19:37:06 executing program 4: perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r1 = getpgrp(0x0) ptrace$poke(0xffffffffffffffff, r1, &(0x7f0000000040), 0x400) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_genetlink_get_family_id$devlink(0x0) futex(&(0x7f0000000240)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x0, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000780)={{r3}, 0x0, 0x1e, @unused=[0xb15, 0x4, 0xfe4f, 0x7], @name="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"}) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 19:37:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000080)=0x910, 0x4) 19:37:07 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x4400ae8f, 0x8636d) 19:37:07 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xfffffff6, 0x0) 19:37:07 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x80085502, 0x288e) 19:37:07 executing program 3: [ 548.757877][T11328] Bluetooth: hci5: command 0x040f tx timeout 19:37:07 executing program 5: 19:37:08 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x80086301, 0x8636d) 19:37:08 executing program 4: 19:37:08 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1000000000000, 0x0) 19:37:08 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x80086301, 0x288e) 19:37:08 executing program 3: 19:37:08 executing program 5: 19:37:08 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x8636d) 19:37:08 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100000000000000, 0x0) 19:37:08 executing program 4: 19:37:08 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x80089203, 0x288e) 19:37:08 executing program 3: 19:37:08 executing program 5: 19:37:09 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x800c6613, 0x8636d) 19:37:09 executing program 4: 19:37:09 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200000000000000, 0x0) 19:37:09 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x80189439, 0x288e) 19:37:09 executing program 3: 19:37:09 executing program 5: 19:37:09 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0045878, 0x8636d) [ 550.838575][ T8708] Bluetooth: hci5: command 0x0419 tx timeout 19:37:09 executing program 4: 19:37:09 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x300000000000000, 0x0) 19:37:09 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x805c4d65, 0x288e) 19:37:10 executing program 5: 19:37:10 executing program 3: 19:37:10 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x400000000000000, 0x0) 19:37:10 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0045878, 0x8636d) 19:37:10 executing program 4: 19:37:10 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0044d00, 0x288e) 19:37:10 executing program 3: 19:37:10 executing program 5: 19:37:10 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x500000000000000, 0x0) 19:37:11 executing program 4: 19:37:11 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0109207, 0x8636d) 19:37:11 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0045878, 0x288e) 19:37:11 executing program 3: 19:37:11 executing program 5: 19:37:11 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x600000000000000, 0x0) 19:37:11 executing program 4: 19:37:11 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0189436, 0x8636d) 19:37:11 executing program 3: 19:37:11 executing program 5: 19:37:11 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0045878, 0x288e) 19:37:12 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x700000000000000, 0x0) 19:37:12 executing program 4: 19:37:12 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc020660b, 0x8636d) 19:37:12 executing program 5: 19:37:12 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x800000000000000, 0x0) 19:37:12 executing program 3: 19:37:12 executing program 4: 19:37:12 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc02c5625, 0x8636d) 19:37:12 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0085504, 0x288e) 19:37:13 executing program 5: 19:37:13 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x900000000000000, 0x0) 19:37:13 executing program 3: 19:37:13 executing program 4: 19:37:13 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0109207, 0x288e) 19:37:13 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0345641, 0x8636d) 19:37:13 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xa00000000000000, 0x0) 19:37:13 executing program 5: 19:37:13 executing program 3: 19:37:13 executing program 4: 19:37:13 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0189436, 0x288e) 19:37:13 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0389423, 0x8636d) 19:37:14 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xb00000000000000, 0x0) 19:37:14 executing program 5: 19:37:14 executing program 3: 19:37:14 executing program 4: 19:37:14 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc020660b, 0x288e) 19:37:14 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0585611, 0x8636d) 19:37:14 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xc00000000000000, 0x0) 19:37:14 executing program 3: 19:37:14 executing program 5: 19:37:14 executing program 4: 19:37:15 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0345641, 0x288e) 19:37:15 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xd00000000000000, 0x0) 19:37:15 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8635c) 19:37:15 executing program 3: 19:37:15 executing program 4: 19:37:15 executing program 5: 19:37:15 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc050561a, 0x288e) 19:37:15 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe00000000000000, 0x0) 19:37:15 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x1567e5c22391cf43, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x31a2b) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:37:15 executing program 3: 19:37:15 executing program 5: 19:37:16 executing program 4: 19:37:16 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1000000000000000, 0x0) 19:37:16 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0xc0a85352, 0x288e) 19:37:16 executing program 3: 19:37:16 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 19:37:16 executing program 5: 19:37:16 executing program 4: 19:37:16 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1100000000000000, 0x0) 19:37:16 executing program 0: ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x288e) 19:37:17 executing program 4: 19:37:17 executing program 5: 19:37:17 executing program 3: 19:37:17 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000040)={0x1b, 0x81, 0xd2, 0x0, 0x401, 0x6, 0x7, 0x2, 0xa3, 0xc4, 0x7, 0x5, 0x0, 0x9, 0x9e, 0xe0, 0xfb, 0x86, 0x9, [], 0x9, 0x8}) 19:37:17 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000000180)=0x7f) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r6 = dup3(r4, r5, 0x0) ioctl$VIDIOC_ENUMAUDIO(r6, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x20, 0x70bd2d, 0x25dfdbfe, {0x0, 0x1}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048010) 19:37:17 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1200000000000000, 0x0) 19:37:17 executing program 4: 19:37:17 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x43b0c0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:37:17 executing program 5: 19:37:17 executing program 3: 19:37:17 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000040)={0x4000000, 0x2, {0x3, 0x0, 0xffffffe8, 0x1, 0x8}, 0x7}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) 19:37:18 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1f00000000000000, 0x0) 19:37:18 executing program 4: 19:37:18 executing program 5: 19:37:18 executing program 3: 19:37:18 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1000, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x82000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x5, 0x3, 0x5, 0x58, @private1={0xfc, 0x1, [], 0x1}, @ipv4={[], [], @broadcast}, 0x20, 0x0, 0xff, 0x79e}}) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) write$binfmt_aout(r0, &(0x7f0000000180)={{0x107, 0x5, 0x1, 0x190, 0x1c5, 0x1, 0x1f9, 0x6}, "474ee548adfffe98066c9809", [[]]}, 0x12c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') socket$nl_audit(0x10, 0x3, 0x9) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010102}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc7d6b571a17b4ab9}, 0x90) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qrtr-tun\x00', 0x22100) 19:37:18 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x50200, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000080)=""/3) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x212800) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x288e) 19:37:18 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2500000000000000, 0x0) 19:37:18 executing program 3: 19:37:18 executing program 4: 19:37:18 executing program 5: 19:37:19 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000100)={0x7, 0x1, 0x9, 0x1f}) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x10ca35) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) accept4$packet(r5, 0x0, &(0x7f00000000c0), 0x80800) 19:37:19 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2f00000000000000, 0x0) 19:37:19 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c4) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x1) 19:37:19 executing program 3: r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000039542f108c07021047e6000000010902240001000000000904db00010a04c80009210300000000810009050a"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x81}, {0x6, 0x24, 0x1a, 0xfffe}}}}}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000810000008100836f642d7e6a2fd00104815aefd738524f86"], 0x0, 0x0, 0x0, 0x0}, 0x0) 19:37:19 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0x1de5}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000140)={0x2c, 0x6, 0x0, 0x0, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @mcast1, @empty]}, 0x38) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x8, 0x1}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='stack\x00') preadv(r4, &(0x7f00000017c0), 0x375, 0x0, 0x0) 19:37:19 executing program 4: 19:37:19 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f0000000040)=0x8311, 0x4) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:37:19 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4000000000000000, 0x0) 19:37:19 executing program 0: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000300)={0x2, 0x1, @start={0x2, 0x1}}) r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r3, 0xc0285628, &(0x7f0000000280)={0x0, 0xffff, 0x9, [], &(0x7f0000000200)=0x40}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="e896872fb36a0c77a5f91d05ed24a41c81ba3cc18ad55640b304fbe09019d085ca3c44e141e578ef571624550fba22ce3011ff3c72eaad65"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x158, r4, 0x300, 0x71bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x7f}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xa166}, {0x6, 0x11, 0xdd5e}}]}, 0x158}, 0x1, 0x0, 0x0, 0x4094}, 0x20000000) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) [ 561.048429][ T8709] usb 4-1: new high-speed USB device number 13 using dummy_hcd 19:37:20 executing program 4: 19:37:20 executing program 5: [ 561.296955][ T8709] usb 4-1: Using ep0 maxpacket: 16 19:37:20 executing program 1: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000040)=0x6, 0x4) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x288e) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x8636d) 19:37:20 executing program 2: set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5c00000000000000, 0x0) [ 561.427318][ T8709] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 561.435759][ T8709] usb 4-1: config 0 has no interface number 0 [ 561.442756][ T8709] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 561.452831][ T8709] usb 4-1: New USB device found, idVendor=078c, idProduct=1002, bcdDevice=e6.47 [ 561.462088][ T8709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.601862][ T8709] usb 4-1: config 0 descriptor?? 19:37:20 executing program 4: 19:37:20 executing program 0: ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000080)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r1 = getpid() r2 = getpid() rt_tgsigqueueinfo(r1, r2, 0x16, &(0x7f0000000000)) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x201, &(0x7f00000005c0)={0x0}) setpgid(r0, r1) set_mempolicy(0x4003, &(0x7f0000000140)=0x1000000000dd5, 0x61c2) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[@ANYBLOB="340000000003010100000000000000000100020a180002801400018008000110ac1414bb08000200ac14f82641fd854efba4143308fe2913b300000223b879891372df1d912500000000fc3994a34e3ef741e41b2be77711a0562ca6a3c0772c14ecd32d7727365e4706e712d7f0c007036fda8319a005760221f49696ece99a7912c41ac05a18f520e7a655a012db17544000c7d33f0a53526bda97c27444bdfd83c3ee0d63fda1b8bbab0d88f445a0860fb7e354400c53567b95f31615e8a2000000", @ANYRESDEC], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x5) r6 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0x288e) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENUMAUDIO(r7, 0xc0345641, &(0x7f0000000000)={0x0, "e925dff0484ae8e2aab323dfee8ee623079f59279984432f8f3a802f23902367"}) preadv2(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/104, 0x68}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000400)=""/148, 0x94}], 0x4, 0xc4f, 0x3, 0x11) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000280)={0x5, 0x1}) [ 561.868257][T11609] udc-core: couldn't find an available UDC or it's busy [ 561.875340][T11609] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 561.988059][ T8709] ===================================================== [ 561.995111][ T8709] BUG: KMSAN: uninit-value in gtco_probe+0x1c62/0x39b0 [ 562.001990][ T8709] CPU: 1 PID: 8709 Comm: kworker/1:3 Not tainted 5.8.0-rc5-syzkaller #0 [ 562.010323][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.020466][ T8709] Workqueue: usb_hub_wq hub_event [ 562.025501][ T8709] Call Trace: [ 562.028816][ T8709] dump_stack+0x21c/0x280 [ 562.033187][ T8709] kmsan_report+0xf7/0x1e0 [ 562.037640][ T8709] __msan_warning+0x58/0xa0 [ 562.042174][ T8709] gtco_probe+0x1c62/0x39b0 [ 562.046759][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.051970][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.057190][ T8709] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.063019][ T8709] ? store_tabletExecute+0x150/0x150 [ 562.068397][ T8709] usb_probe_interface+0xece/0x1550 [ 562.073643][ T8709] ? usb_register_driver+0x900/0x900 [ 562.079024][ T8709] really_probe+0xf20/0x20b0 [ 562.083640][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.088866][ T8709] driver_probe_device+0x293/0x390 [ 562.094008][ T8709] __device_attach_driver+0x63f/0x830 [ 562.099431][ T8709] bus_for_each_drv+0x2ca/0x3f0 [ 562.104294][ T8709] ? coredump_store+0xf0/0xf0 [ 562.109005][ T8709] __device_attach+0x4e2/0x7f0 [ 562.113817][ T8709] device_initial_probe+0x4a/0x60 [ 562.118860][ T8709] bus_probe_device+0x177/0x3d0 [ 562.123748][ T8709] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.129569][ T8709] device_add+0x3b0e/0x40d0 [ 562.134121][ T8709] usb_set_configuration+0x380f/0x3f10 [ 562.139604][ T8709] ? usb_set_configuration+0xb41/0x3f10 [ 562.145211][ T8709] usb_generic_driver_probe+0x138/0x300 [ 562.150778][ T8709] ? usb_choose_configuration+0xe70/0xe70 [ 562.156510][ T8709] usb_probe_device+0x311/0x490 [ 562.161384][ T8709] ? usb_register_device_driver+0x540/0x540 [ 562.167293][ T8709] really_probe+0xf20/0x20b0 [ 562.171907][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.177132][ T8709] driver_probe_device+0x293/0x390 [ 562.182271][ T8709] __device_attach_driver+0x63f/0x830 [ 562.187677][ T8709] bus_for_each_drv+0x2ca/0x3f0 [ 562.192537][ T8709] ? coredump_store+0xf0/0xf0 [ 562.197242][ T8709] __device_attach+0x4e2/0x7f0 [ 562.202044][ T8709] device_initial_probe+0x4a/0x60 [ 562.207091][ T8709] bus_probe_device+0x177/0x3d0 [ 562.211969][ T8709] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.217804][ T8709] device_add+0x3b0e/0x40d0 [ 562.222358][ T8709] usb_new_device+0x1bd4/0x2a30 [ 562.227249][ T8709] hub_event+0x5e7b/0x8a70 [ 562.231741][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.236961][ T8709] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.242792][ T8709] ? led_work+0x7c0/0x7c0 [ 562.247227][ T8709] process_one_work+0x1688/0x2140 [ 562.252299][ T8709] worker_thread+0x10bc/0x2730 [ 562.257083][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.262324][ T8709] kthread+0x551/0x590 [ 562.266406][ T8709] ? process_one_work+0x2140/0x2140 [ 562.271622][ T8709] ? kthread_blkcg+0x110/0x110 [ 562.276425][ T8709] ret_from_fork+0x1f/0x30 [ 562.280861][ T8709] [ 562.283197][ T8709] Uninit was stored to memory at: [ 562.288267][ T8709] kmsan_internal_chain_origin+0xad/0x130 [ 562.293996][ T8709] __msan_chain_origin+0x50/0x90 [ 562.298941][ T8709] gtco_probe+0x1e77/0x39b0 [ 562.303546][ T8709] usb_probe_interface+0xece/0x1550 [ 562.308757][ T8709] really_probe+0xf20/0x20b0 [ 562.313353][ T8709] driver_probe_device+0x293/0x390 [ 562.318483][ T8709] __device_attach_driver+0x63f/0x830 [ 562.323857][ T8709] bus_for_each_drv+0x2ca/0x3f0 [ 562.328714][ T8709] __device_attach+0x4e2/0x7f0 [ 562.333480][ T8709] device_initial_probe+0x4a/0x60 [ 562.338513][ T8709] bus_probe_device+0x177/0x3d0 [ 562.343367][ T8709] device_add+0x3b0e/0x40d0 [ 562.347876][ T8709] usb_set_configuration+0x380f/0x3f10 [ 562.353338][ T8709] usb_generic_driver_probe+0x138/0x300 [ 562.358890][ T8709] usb_probe_device+0x311/0x490 [ 562.363746][ T8709] really_probe+0xf20/0x20b0 [ 562.368356][ T8709] driver_probe_device+0x293/0x390 [ 562.373474][ T8709] __device_attach_driver+0x63f/0x830 [ 562.378850][ T8709] bus_for_each_drv+0x2ca/0x3f0 [ 562.383709][ T8709] __device_attach+0x4e2/0x7f0 [ 562.388489][ T8709] device_initial_probe+0x4a/0x60 [ 562.393523][ T8709] bus_probe_device+0x177/0x3d0 [ 562.398382][ T8709] device_add+0x3b0e/0x40d0 [ 562.402901][ T8709] usb_new_device+0x1bd4/0x2a30 [ 562.407757][ T8709] hub_event+0x5e7b/0x8a70 [ 562.412180][ T8709] process_one_work+0x1688/0x2140 [ 562.417211][ T8709] worker_thread+0x10bc/0x2730 [ 562.421985][ T8709] kthread+0x551/0x590 [ 562.426057][ T8709] ret_from_fork+0x1f/0x30 [ 562.430474][ T8709] [ 562.432814][ T8709] Local variable ----globalval.i@gtco_probe created at: [ 562.439759][ T8709] gtco_probe+0xda0/0x39b0 [ 562.444178][ T8709] gtco_probe+0xda0/0x39b0 [ 562.448585][ T8709] ===================================================== [ 562.455512][ T8709] Disabling lock debugging due to kernel taint [ 562.461673][ T8709] Kernel panic - not syncing: panic_on_warn set ... [ 562.468274][ T8709] CPU: 1 PID: 8709 Comm: kworker/1:3 Tainted: G B 5.8.0-rc5-syzkaller #0 [ 562.477993][ T8709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.488064][ T8709] Workqueue: usb_hub_wq hub_event [ 562.493084][ T8709] Call Trace: [ 562.496386][ T8709] dump_stack+0x21c/0x280 [ 562.500797][ T8709] panic+0x4d7/0xef7 [ 562.504729][ T8709] ? add_taint+0x17c/0x210 [ 562.509174][ T8709] kmsan_report+0x1df/0x1e0 [ 562.513704][ T8709] __msan_warning+0x58/0xa0 [ 562.518263][ T8709] gtco_probe+0x1c62/0x39b0 [ 562.522842][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.528056][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.533281][ T8709] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.539102][ T8709] ? store_tabletExecute+0x150/0x150 [ 562.544401][ T8709] usb_probe_interface+0xece/0x1550 [ 562.549636][ T8709] ? usb_register_driver+0x900/0x900 [ 562.554958][ T8709] really_probe+0xf20/0x20b0 [ 562.559598][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.564820][ T8709] driver_probe_device+0x293/0x390 [ 562.569959][ T8709] __device_attach_driver+0x63f/0x830 [ 562.575365][ T8709] bus_for_each_drv+0x2ca/0x3f0 [ 562.580244][ T8709] ? coredump_store+0xf0/0xf0 [ 562.584943][ T8709] __device_attach+0x4e2/0x7f0 [ 562.589753][ T8709] device_initial_probe+0x4a/0x60 [ 562.594793][ T8709] bus_probe_device+0x177/0x3d0 [ 562.599671][ T8709] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.605509][ T8709] device_add+0x3b0e/0x40d0 [ 562.610059][ T8709] usb_set_configuration+0x380f/0x3f10 [ 562.615539][ T8709] ? usb_set_configuration+0xb41/0x3f10 [ 562.621144][ T8709] usb_generic_driver_probe+0x138/0x300 [ 562.626705][ T8709] ? usb_choose_configuration+0xe70/0xe70 [ 562.632435][ T8709] usb_probe_device+0x311/0x490 [ 562.637304][ T8709] ? usb_register_device_driver+0x540/0x540 [ 562.643205][ T8709] really_probe+0xf20/0x20b0 [ 562.647814][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.653030][ T8709] driver_probe_device+0x293/0x390 [ 562.658163][ T8709] __device_attach_driver+0x63f/0x830 [ 562.663559][ T8709] bus_for_each_drv+0x2ca/0x3f0 [ 562.668423][ T8709] ? coredump_store+0xf0/0xf0 [ 562.673124][ T8709] __device_attach+0x4e2/0x7f0 [ 562.677929][ T8709] device_initial_probe+0x4a/0x60 [ 562.682984][ T8709] bus_probe_device+0x177/0x3d0 [ 562.687859][ T8709] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.693676][ T8709] device_add+0x3b0e/0x40d0 [ 562.698230][ T8709] usb_new_device+0x1bd4/0x2a30 [ 562.703123][ T8709] hub_event+0x5e7b/0x8a70 [ 562.707616][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.712831][ T8709] ? kmsan_get_shadow_origin_ptr+0x81/0xb0 [ 562.718656][ T8709] ? led_work+0x7c0/0x7c0 [ 562.723018][ T8709] process_one_work+0x1688/0x2140 [ 562.728088][ T8709] worker_thread+0x10bc/0x2730 [ 562.732863][ T8709] ? kmsan_get_metadata+0x116/0x180 [ 562.738108][ T8709] kthread+0x551/0x590 [ 562.742205][ T8709] ? process_one_work+0x2140/0x2140 [ 562.747423][ T8709] ? kthread_blkcg+0x110/0x110 [ 562.752199][ T8709] ret_from_fork+0x1f/0x30 [ 562.757753][ T8709] Kernel Offset: disabled [ 562.762131][ T8709] Rebooting in 86400 seconds..