0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:15:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:15:36 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 19:15:36 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) 19:15:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 761.416361][T15319] FAT-fs (loop3): bogus number of reserved sectors [ 761.423322][T15319] FAT-fs (loop3): Can't find a valid FAT filesystem [ 761.534993][ T32] audit: type=1804 audit(1604085336.942:45): pid=15323 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/226/file1/file0" dev="sda1" ino=16378 res=1 errno=0 19:15:37 executing program 0: ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) 19:15:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 762.390574][T15335] FAT-fs (loop3): bogus number of reserved sectors [ 762.397601][T15335] FAT-fs (loop3): Can't find a valid FAT filesystem [ 762.518371][ T32] audit: type=1804 audit(1604085337.922:46): pid=15335 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/227/file1/file0" dev="sda1" ino=15887 res=1 errno=0 19:15:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:15:38 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) 19:15:38 executing program 0: ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) 19:15:38 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:15:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="040005090000000066617400", 0xc}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 763.219113][T15352] FAT-fs (loop3): bogus number of reserved sectors [ 763.226411][T15352] FAT-fs (loop3): Can't find a valid FAT filesystem [ 763.338412][ T32] audit: type=1804 audit(1604085338.742:47): pid=15354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/228/file1/file0" dev="sda1" ino=15887 res=1 errno=0 19:15:38 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:15:38 executing program 0: ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) 19:15:38 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) [ 763.451344][ T8791] usb 6-1: new high-speed USB device number 25 using dummy_hcd 19:15:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 763.690982][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 763.812542][ T8791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.823849][ T8791] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 763.833436][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 763.842742][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:39 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 19:15:39 executing program 1: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x883713, 0x0) [ 764.066034][ T8791] usb 6-1: config 0 descriptor?? [ 764.089264][T15367] FAT-fs (loop3): invalid media value (0x00) [ 764.095874][T15367] FAT-fs (loop3): Can't find a valid FAT filesystem [ 764.155110][ T32] audit: type=1804 audit(1604085339.562:48): pid=15370 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/229/file1/file0" dev="sda1" ino=15865 res=1 errno=0 19:15:39 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) 19:15:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:15:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:15:41 executing program 1: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x883713, 0x0) 19:15:41 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 19:15:41 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) 19:15:41 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 766.271382][T11112] usb 6-1: USB disconnect, device number 25 [ 766.593990][T15401] FAT-fs (loop3): invalid media value (0x00) [ 766.600225][T15401] FAT-fs (loop3): Can't find a valid FAT filesystem [ 766.715498][ T32] audit: type=1804 audit(1604085342.122:49): pid=15406 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/230/file0" dev="sda1" ino=15836 res=1 errno=0 19:15:42 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 19:15:42 executing program 1: sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x883713, 0x0) 19:15:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200", 0x12}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 767.211106][ T8474] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 767.470981][ T8474] usb 6-1: Using ep0 maxpacket: 16 19:15:43 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) [ 767.613477][ T8474] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.623847][ T8474] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 767.633355][ T8474] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 767.642639][ T8474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.738302][T15420] FAT-fs (loop3): invalid media value (0x00) [ 767.744767][T15420] FAT-fs (loop3): Can't find a valid FAT filesystem 19:15:43 executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) [ 767.798818][ T8474] usb 6-1: config 0 descriptor?? [ 767.804613][ T32] audit: type=1804 audit(1604085343.202:50): pid=15422 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/231/file1/file0" dev="sda1" ino=16376 res=1 errno=0 19:15:43 executing program 1: pipe(0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x883713, 0x0) [ 769.149972][ C0] not chained 150000 origins [ 769.154606][ C0] CPU: 0 PID: 8492 Comm: kworker/u4:2 Not tainted 5.9.0-rc8-syzkaller #0 [ 769.163015][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 769.173096][ C0] Workqueue: krdsd rds_connect_worker [ 769.178469][ C0] Call Trace: [ 769.181751][ C0] [ 769.184615][ C0] dump_stack+0x21c/0x280 [ 769.188976][ C0] kmsan_internal_chain_origin+0x6f/0x130 [ 769.194711][ C0] ? should_failslab+0x29/0x70 [ 769.199570][ C0] ? slab_pre_alloc_hook+0xd5/0x590 [ 769.204781][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.209994][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 769.215814][ C0] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 769.221989][ C0] ? tcp_parse_options+0x20b4/0x2150 [ 769.227287][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.232495][ C0] __msan_chain_origin+0x57/0xa0 [ 769.237447][ C0] tcp_conn_request+0x19da/0x4b80 [ 769.242484][ C0] ? rds_tcp_accept_worker+0x60/0x180 [ 769.247866][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.253079][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.258290][ C0] tcp_v4_conn_request+0x201/0x290 [ 769.263408][ C0] tcp_v6_conn_request+0xeb/0x330 [ 769.268439][ C0] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 769.273731][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 769.279110][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 769.284925][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.290129][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 769.295974][ C0] ? kmsan_memcpy_memmove_metadata+0x110/0x2d0 [ 769.302145][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.307360][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 769.311957][ C0] ? tcp_v4_fill_cb+0x565/0x5e0 [ 769.316824][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 769.321342][ C0] ? tcp_filter+0xf0/0xf0 [ 769.325670][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 769.331133][ C0] ip_local_deliver+0x583/0x8c0 [ 769.335992][ C0] ? ip_local_deliver+0x8c0/0x8c0 [ 769.341022][ C0] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 769.346744][ C0] ip_rcv+0x5c0/0x830 [ 769.350729][ C0] ? ip_rcv_core+0x14b0/0x14b0 [ 769.355502][ C0] __netif_receive_skb+0x1ec/0x640 [ 769.360620][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 769.366257][ C0] ? ip_local_deliver_finish+0x370/0x370 [ 769.371899][ C0] process_backlog+0x523/0xc10 [ 769.376673][ C0] napi_poll+0x4aa/0x1090 [ 769.381008][ C0] ? rps_trigger_softirq+0x2e0/0x2e0 [ 769.386299][ C0] net_rx_action+0x35c/0xd40 [ 769.390901][ C0] ? net_tx_action+0xdb0/0xdb0 [ 769.395668][ C0] __do_softirq+0x1b9/0x7ed [ 769.400184][ C0] ? __sysvec_apic_timer_interrupt+0x125/0x550 [ 769.406346][ C0] asm_call_irq_on_stack+0xf/0x20 [ 769.411363][ C0] [ 769.414311][ C0] do_softirq_own_stack+0x6e/0x90 [ 769.419344][ C0] __local_bh_enable_ip+0x184/0x1d0 [ 769.424552][ C0] local_bh_enable+0x36/0x40 [ 769.429146][ C0] ip_finish_output2+0x2408/0x28e0 [ 769.434265][ C0] ? ctnetlink_net_exit_batch+0x180/0x180 [ 769.440168][ C0] ? nf_ct_deliver_cached_events+0x531/0x7e0 [ 769.446160][ C0] __ip_finish_output+0xeb5/0xfd0 [ 769.451192][ C0] ip_finish_output+0x143/0x4a0 [ 769.456052][ C0] ip_output+0x32e/0x6c0 [ 769.460302][ C0] ? ip_mc_finish_output+0x770/0x770 [ 769.465592][ C0] ? ip_finish_output+0x4a0/0x4a0 [ 769.470619][ C0] __ip_queue_xmit+0x1edd/0x2410 [ 769.475569][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 769.481401][ C0] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 769.487503][ C0] ? ipv4_default_advmss+0x70a/0x7d0 [ 769.492806][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.498021][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.503230][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.508441][ C0] ip_queue_xmit+0xcc/0xf0 [ 769.512869][ C0] ? __ip_queue_xmit+0x2410/0x2410 [ 769.517987][ C0] __tcp_transmit_skb+0x4ac5/0x5d50 [ 769.523196][ C0] ? kmsan_internal_set_origin+0x85/0xc0 [ 769.528854][ C0] tcp_connect+0x1022/0x3bd0 [ 769.533456][ C0] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 769.539273][ C0] ? tcp_fastopen_defer_connect+0x106/0xa80 [ 769.545178][ C0] tcp_v4_connect+0x2558/0x26f0 [ 769.550049][ C0] ? tcp_twsk_unique+0xd40/0xd40 [ 769.555001][ C0] __inet_stream_connect+0xaa8/0x16c0 [ 769.560384][ C0] ? __local_bh_enable_ip+0x97/0x1d0 [ 769.565679][ C0] ? local_bh_enable+0x36/0x40 [ 769.570449][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.575683][ C0] inet_stream_connect+0x101/0x180 [ 769.580978][ C0] ? __inet_stream_connect+0x16c0/0x16c0 [ 769.586643][ C0] rds_tcp_conn_path_connect+0x9d9/0xd30 [ 769.592371][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.597583][ C0] ? rds_tcp_state_change+0x400/0x400 [ 769.602961][ C0] rds_connect_worker+0x36b/0x550 [ 769.607990][ C0] ? rds_addr_cmp+0x290/0x290 [ 769.612672][ C0] process_one_work+0x1224/0x20a0 [ 769.617708][ C0] worker_thread+0x10cc/0x2740 [ 769.622480][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.627944][ C0] ? kmsan_get_metadata+0x116/0x180 [ 769.633150][ C0] kthread+0x51c/0x560 [ 769.637223][ C0] ? process_one_work+0x20a0/0x20a0 [ 769.642424][ C0] ? kthread_blkcg+0x110/0x110 [ 769.647197][ C0] ret_from_fork+0x1f/0x30 [ 769.651606][ C0] Uninit was stored to memory at: [ 769.656667][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 769.662418][ C0] __msan_chain_origin+0x57/0xa0 [ 769.667357][ C0] tcp_conn_request+0x1b29/0x4b80 [ 769.672387][ C0] tcp_v4_conn_request+0x201/0x290 [ 769.677503][ C0] tcp_v6_conn_request+0xeb/0x330 [ 769.682537][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 769.687910][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 769.692503][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 769.697007][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 769.702469][ C0] ip_local_deliver+0x583/0x8c0 [ 769.707318][ C0] ip_rcv+0x5c0/0x830 [ 769.711306][ C0] __netif_receive_skb+0x1ec/0x640 [ 769.716423][ C0] process_backlog+0x523/0xc10 [ 769.721196][ C0] napi_poll+0x4aa/0x1090 [ 769.725535][ C0] net_rx_action+0x35c/0xd40 [ 769.730221][ C0] __do_softirq+0x1b9/0x7ed [ 769.734712][ C0] [ 769.737034][ C0] Uninit was stored to memory at: [ 769.742184][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 769.747917][ C0] __msan_chain_origin+0x57/0xa0 [ 769.752861][ C0] tcp_openreq_init_rwin+0xc79/0xf80 [ 769.758148][ C0] tcp_conn_request+0x3028/0x4b80 [ 769.763481][ C0] tcp_v4_conn_request+0x201/0x290 [ 769.768914][ C0] tcp_v6_conn_request+0xeb/0x330 [ 769.774522][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 769.779924][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 769.784722][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 769.789256][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 769.794721][ C0] ip_local_deliver+0x583/0x8c0 [ 769.799577][ C0] ip_rcv+0x5c0/0x830 [ 769.803658][ C0] __netif_receive_skb+0x1ec/0x640 [ 769.808784][ C0] process_backlog+0x523/0xc10 [ 769.813562][ C0] napi_poll+0x4aa/0x1090 [ 769.817900][ C0] net_rx_action+0x35c/0xd40 [ 769.822495][ C0] __do_softirq+0x1b9/0x7ed [ 769.826984][ C0] [ 769.829308][ C0] Uninit was stored to memory at: [ 769.834344][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 769.840088][ C0] __msan_chain_origin+0x57/0xa0 [ 769.845030][ C0] tcp_conn_request+0x1b29/0x4b80 [ 769.850059][ C0] tcp_v4_conn_request+0x201/0x290 [ 769.855177][ C0] tcp_v6_conn_request+0xeb/0x330 [ 769.860212][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 769.865591][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 769.870188][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 769.874702][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 769.880167][ C0] ip_local_deliver+0x583/0x8c0 [ 769.885021][ C0] ip_rcv+0x5c0/0x830 [ 769.889009][ C0] __netif_receive_skb+0x1ec/0x640 [ 769.894128][ C0] process_backlog+0x523/0xc10 [ 769.898900][ C0] napi_poll+0x4aa/0x1090 [ 769.903243][ C0] net_rx_action+0x35c/0xd40 [ 769.907839][ C0] __do_softirq+0x1b9/0x7ed [ 769.912337][ C0] [ 769.914657][ C0] Uninit was stored to memory at: [ 769.919693][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 769.925426][ C0] __msan_chain_origin+0x57/0xa0 [ 769.930371][ C0] tcp_openreq_init_rwin+0xc79/0xf80 [ 769.935658][ C0] tcp_conn_request+0x3028/0x4b80 [ 769.940689][ C0] tcp_v4_conn_request+0x201/0x290 [ 769.945806][ C0] tcp_v6_conn_request+0xeb/0x330 [ 769.950837][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 769.956302][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 769.960902][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 769.965408][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 769.970867][ C0] ip_local_deliver+0x583/0x8c0 [ 769.975727][ C0] ip_rcv+0x5c0/0x830 [ 769.979713][ C0] __netif_receive_skb+0x1ec/0x640 [ 769.984830][ C0] process_backlog+0x523/0xc10 [ 769.989597][ C0] napi_poll+0x4aa/0x1090 [ 769.994016][ C0] net_rx_action+0x35c/0xd40 [ 769.998609][ C0] __do_softirq+0x1b9/0x7ed [ 770.003445][ C0] [ 770.005766][ C0] Uninit was stored to memory at: [ 770.010804][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 770.016531][ C0] __msan_chain_origin+0x57/0xa0 [ 770.021471][ C0] tcp_conn_request+0x1b29/0x4b80 [ 770.026498][ C0] tcp_v4_conn_request+0x201/0x290 [ 770.031610][ C0] tcp_v6_conn_request+0xeb/0x330 [ 770.036641][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 770.042017][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 770.046609][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 770.051117][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 770.056574][ C0] ip_local_deliver+0x583/0x8c0 [ 770.061424][ C0] ip_rcv+0x5c0/0x830 [ 770.065404][ C0] __netif_receive_skb+0x1ec/0x640 [ 770.070515][ C0] process_backlog+0x523/0xc10 [ 770.075274][ C0] napi_poll+0x4aa/0x1090 [ 770.079603][ C0] net_rx_action+0x35c/0xd40 [ 770.084194][ C0] __do_softirq+0x1b9/0x7ed [ 770.088682][ C0] [ 770.091002][ C0] Uninit was stored to memory at: [ 770.096036][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 770.101766][ C0] __msan_chain_origin+0x57/0xa0 [ 770.106712][ C0] tcp_openreq_init_rwin+0xc79/0xf80 [ 770.111999][ C0] tcp_conn_request+0x3028/0x4b80 [ 770.117028][ C0] tcp_v4_conn_request+0x201/0x290 [ 770.122146][ C0] tcp_v6_conn_request+0xeb/0x330 [ 770.127176][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 770.132553][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 770.137148][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 770.141651][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 770.147106][ C0] ip_local_deliver+0x583/0x8c0 [ 770.151954][ C0] ip_rcv+0x5c0/0x830 [ 770.155954][ C0] __netif_receive_skb+0x1ec/0x640 [ 770.161064][ C0] process_backlog+0x523/0xc10 [ 770.165836][ C0] napi_poll+0x4aa/0x1090 [ 770.170171][ C0] net_rx_action+0x35c/0xd40 [ 770.174762][ C0] __do_softirq+0x1b9/0x7ed [ 770.179248][ C0] [ 770.181598][ C0] Uninit was stored to memory at: [ 770.186633][ C0] kmsan_internal_chain_origin+0xad/0x130 [ 770.192359][ C0] __msan_chain_origin+0x57/0xa0 [ 770.197296][ C0] tcp_conn_request+0x1b29/0x4b80 [ 770.202324][ C0] tcp_v4_conn_request+0x201/0x290 [ 770.207436][ C0] tcp_v6_conn_request+0xeb/0x330 [ 770.212465][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 770.217840][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 770.222437][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 770.226945][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 770.232402][ C0] ip_local_deliver+0x583/0x8c0 [ 770.237254][ C0] ip_rcv+0x5c0/0x830 [ 770.241241][ C0] __netif_receive_skb+0x1ec/0x640 [ 770.246359][ C0] process_backlog+0x523/0xc10 [ 770.251142][ C0] napi_poll+0x4aa/0x1090 [ 770.255558][ C0] net_rx_action+0x35c/0xd40 [ 770.260152][ C0] __do_softirq+0x1b9/0x7ed [ 770.264641][ C0] [ 770.266964][ C0] Uninit was created at: [ 770.271216][ C0] kmsan_save_stack_with_flags+0x3c/0x90 [ 770.276859][ C0] kmsan_alloc_page+0xd3/0x1f0 [ 770.281637][ C0] __alloc_pages_nodemask+0x84e/0x1040 [ 770.287116][ C0] alloc_pages_current+0x79b/0xb40 [ 770.292231][ C0] allocate_slab+0x34b/0x11c0 [ 770.296911][ C0] ___slab_alloc+0xd35/0x1940 [ 770.301589][ C0] kmem_cache_alloc+0x869/0xc70 [ 770.306458][ C0] inet_reqsk_alloc+0xaf/0x8b0 [ 770.311222][ C0] tcp_conn_request+0x9a8/0x4b80 [ 770.316166][ C0] tcp_v4_conn_request+0x201/0x290 [ 770.321291][ C0] tcp_rcv_state_process+0x2e0/0x45e0 [ 770.326667][ C0] tcp_v4_do_rcv+0xc36/0xff0 [ 770.331264][ C0] tcp_v4_rcv+0x4b33/0x5cc0 [ 770.335766][ C0] ip_protocol_deliver_rcu+0x572/0xc50 [ 770.341228][ C0] ip_local_deliver+0x583/0x8c0 [ 770.346080][ C0] ip_sublist_rcv+0x121b/0x1560 [ 770.350928][ C0] ip_list_rcv+0x914/0x980 [ 770.355347][ C0] __netif_receive_skb_list_core+0xeab/0x12a0 [ 770.361419][ C0] __netif_receive_skb_list+0x7e0/0x960 [ 770.366968][ C0] netif_receive_skb_list_internal+0x851/0xdc0 [ 770.373122][ C0] napi_complete_done+0x557/0xf80 [ 770.378161][ C0] virtqueue_napi_complete+0xb9/0x1f0 [ 770.383538][ C0] virtnet_poll+0x170f/0x1d10 [ 770.388219][ C0] napi_poll+0x4aa/0x1090 [ 770.392556][ C0] net_rx_action+0x35c/0xd40 [ 770.397149][ C0] __do_softirq+0x1b9/0x7ed 19:15:46 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:15:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:15:46 executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) 19:15:46 executing program 1: pipe(0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x883713, 0x0) 19:15:46 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) syz_open_pts(r0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) 19:15:46 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 771.017771][ T8474] usb 6-1: USB disconnect, device number 26 19:15:47 executing program 1: pipe(0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x883713, 0x0) 19:15:47 executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, 0x0) 19:15:47 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) syz_open_pts(r0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) [ 771.752336][ T32] audit: type=1804 audit(1604085347.162:51): pid=15465 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/232/file0" dev="sda1" ino=15861 res=1 errno=0 [ 771.769147][T15462] FAT-fs (loop3): invalid media value (0x00) [ 771.783956][T15462] FAT-fs (loop3): Can't find a valid FAT filesystem [ 772.001074][ T8475] usb 6-1: new high-speed USB device number 27 using dummy_hcd 19:15:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 772.241920][ T8475] usb 6-1: Using ep0 maxpacket: 16 [ 772.362324][ T8475] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 772.372827][ T8475] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 772.382282][ T8475] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 772.391696][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:47 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x89a0, &(0x7f0000000000)={0x0, 'syz1\x00'}) 19:15:48 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 772.763410][ T8475] usb 6-1: config 0 descriptor?? [ 772.915200][T15480] FAT-fs (loop3): invalid media value (0x00) [ 772.921753][T15480] FAT-fs (loop3): Can't find a valid FAT filesystem [ 773.020983][ T32] audit: type=1804 audit(1604085348.422:52): pid=15485 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/233/file1/file0" dev="sda1" ino=15811 res=1 errno=0 19:15:49 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:15:49 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) syz_open_pts(r0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000ff0700"}) 19:15:49 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:15:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8915, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) [ 774.241309][ T8471] usb 6-1: USB disconnect, device number 27 19:15:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400", 0x15}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:15:49 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 774.613345][T15510] FAT-fs (loop3): invalid media value (0x00) [ 774.619638][T15510] FAT-fs (loop3): Can't find a valid FAT filesystem [ 774.644696][ T32] audit: type=1804 audit(1604085350.052:53): pid=15514 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/234/file1/file0" dev="sda1" ino=16001 res=1 errno=0 19:15:50 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x8942, &(0x7f0000000180)={'tunl0\x00', 0x0}) 19:15:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 775.151193][ T8475] usb 6-1: new high-speed USB device number 28 using dummy_hcd 19:15:50 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) [ 775.392313][ T8475] usb 6-1: Using ep0 maxpacket: 16 19:15:50 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 775.514171][ T8475] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.524863][ T8475] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 775.538126][ T8475] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 775.547501][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.568168][ T8475] usb 6-1: config 0 descriptor?? [ 775.568253][T15526] FAT-fs (loop3): bogus number of FAT sectors [ 775.579791][T15526] FAT-fs (loop3): Can't find a valid FAT filesystem [ 775.629592][ T8475] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 775.635333][ T32] audit: type=1804 audit(1604085351.032:54): pid=15529 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/235/file1/file0" dev="sda1" ino=15913 res=1 errno=0 19:15:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "b15bfc", 0x9}) 19:15:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 776.559819][T15546] FAT-fs (loop3): bogus number of FAT sectors [ 776.566394][T15546] FAT-fs (loop3): Can't find a valid FAT filesystem [ 776.650891][ T32] audit: type=1804 audit(1604085352.052:55): pid=15548 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/236/file1/file0" dev="sda1" ino=15935 res=1 errno=0 19:15:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:15:53 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) 19:15:53 executing program 2: perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:15:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f8", 0x16}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:15:53 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:15:53 executing program 0: perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e000000120081aee4050cecff0e00fa078b25db4cb904e473730e55cff26d1b0e000900140000005e510befccd7", 0x2e}], 0x1, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) [ 777.922427][ T8471] usb 6-1: USB disconnect, device number 28 [ 778.188593][T15564] FAT-fs (loop3): bogus number of FAT sectors [ 778.195239][T15564] FAT-fs (loop3): Can't find a valid FAT filesystem [ 778.283272][ T32] audit: type=1804 audit(1604085353.693:56): pid=15571 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/237/file1/file0" dev="sda1" ino=16114 res=1 errno=0 [ 778.381189][ T8474] Bluetooth: hci0: command 0x0401 tx timeout 19:15:53 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xacc, &(0x7f0000000080)) [ 778.510881][ T8791] usb 6-1: new high-speed USB device number 29 using dummy_hcd 19:15:54 executing program 4: sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000200)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSW(r1, 0x5403, 0x0) 19:15:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 778.751067][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 778.873639][ T8791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.884127][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 778.897443][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 778.906822][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.150310][ T8791] usb 6-1: config 0 descriptor?? 19:15:54 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:15:54 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x42, 0x0, &(0x7f00000003c0)) [ 779.227682][ T8791] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 19:15:54 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x11, 0x0, &(0x7f00000003c0)) [ 779.417883][ T32] audit: type=1804 audit(1604085354.823:57): pid=15592 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/238/file1/file0" dev="sda1" ino=15946 res=1 errno=0 19:15:56 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:15:56 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x2e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 19:15:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:15:56 executing program 4: keyctl$chown(0x14, 0x0, 0x0, 0x0) 19:15:56 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:15:56 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 781.374134][ T8791] usb 6-1: USB disconnect, device number 29 [ 781.633410][ T32] audit: type=1804 audit(1604085357.043:58): pid=15622 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/239/file1/file0" dev="sda1" ino=15917 res=1 errno=0 19:15:57 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x4a, 0x0, &(0x7f00000003c0)) [ 781.922013][ T8791] usb 6-1: new high-speed USB device number 30 using dummy_hcd 19:15:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, 0x0) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 782.160741][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 782.282380][ T8791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.293055][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 782.306334][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 782.315682][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:15:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r0, 0x5421, &(0x7f0000000000)={0x0, 'syz1\x00'}) [ 782.701591][ T8791] usb 6-1: config 0 descriptor?? 19:15:58 executing program 0: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$chown(0x2, r2, 0x0, 0x0) [ 782.765845][ T8791] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 19:15:58 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 782.889063][ T32] audit: type=1804 audit(1604085358.293:59): pid=15641 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/240/file1/file0" dev="sda1" ino=15912 res=1 errno=0 19:15:58 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 784.485969][ T32] audit: type=1804 audit(1604085359.893:60): pid=15662 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/241/file0" dev="sda1" ino=15918 res=1 errno=0 19:16:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:00 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) 19:16:00 executing program 4: pipe(&(0x7f00000007c0)={0xffffffffffffffff}) ioctl$IMSETDEVNAME(r0, 0x5452, &(0x7f0000000000)={0x6, 'syz1\x00'}) 19:16:00 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:00 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:00 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 784.899643][ T8475] usb 6-1: USB disconnect, device number 30 19:16:00 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/dsp\x00', 0x8ce41, 0x0) 19:16:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$IMGETVERSION(r0, 0x8906, 0x0) [ 785.693797][ T5] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 785.950987][ T5] usb 6-1: Using ep0 maxpacket: 16 19:16:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='logon\x00', 0x0, &(0x7f00000001c0)="9f", 0x1, 0xfffffffffffffffc) [ 786.122301][ T5] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.132982][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 786.147956][ T5] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 786.157626][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:01 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:01 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 786.472771][ T5] usb 6-1: config 0 descriptor?? [ 786.520184][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 19:16:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x15555555555553d3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4dad, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 787.098515][ T32] audit: type=1804 audit(1604085362.503:61): pid=15705 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir480790054/syzkaller.UKOmuf/243/file0" dev="sda1" ino=16379 res=1 errno=0 [ 787.306010][T15713] kvm [15706]: vcpu0, guest rIP: 0x135 Hyper-V unhandled rdmsr: 0x40000007 [ 787.325128][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 787.336597][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 787.354341][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 787.364971][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 787.387632][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 787.408398][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 787.454320][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 787.534686][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 787.603087][T15713] kvm [15706]: vcpu0, guest rIP: 0x145 Hyper-V unhandled rdmsr: 0x40000007 [ 788.375279][ T8471] usb 6-1: USB disconnect, device number 31 19:16:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:03 executing program 4: setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000200), 0x4) getresuid(&(0x7f00000007c0), &(0x7f0000000800), 0x0) 19:16:03 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(0x0, 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:03 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x15555555555553d3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4dad, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:04 executing program 4: add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0xe, 0x0, 0x0, 0x0) 19:16:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd0f0f6300bfc7442402c43a727fc7442406000000000f011424f30f090f013a360f0666b8c0008ec066baa100ed", 0x4e}], 0x15555555555553d3, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4dad, 0x3f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:16:04 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(0x0, 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 789.441309][ T8791] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 789.681058][ T8791] usb 6-1: Using ep0 maxpacket: 16 19:16:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:05 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 789.802122][ T8791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.812578][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 789.825848][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 789.835967][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000e00)={0x0, 0x0, 0x0}, 0x0) [ 789.938812][ T8791] usb 6-1: config 0 descriptor?? [ 789.988125][ T8791] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 790.109717][ C1] not chained 160000 origins [ 790.114367][ C1] CPU: 1 PID: 831 Comm: kworker/u4:16 Not tainted 5.9.0-rc8-syzkaller #0 [ 790.127901][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 790.137994][ C1] Workqueue: krdsd rds_connect_worker [ 790.143357][ C1] Call Trace: [ 790.146631][ C1] [ 790.149476][ C1] dump_stack+0x21c/0x280 [ 790.153799][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 790.159514][ C1] ? ip_route_output_key_hash_rcu+0x1d7f/0x1f90 [ 790.165750][ C1] ? xfrm_lookup_route+0x2db/0x390 [ 790.170852][ C1] ? ip_route_output_flow+0x3aa/0x420 [ 790.176209][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.181477][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 790.187290][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 790.193434][ C1] ? tcp_select_initial_window+0x918/0x9e0 [ 790.199243][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.204432][ C1] __msan_chain_origin+0x57/0xa0 [ 790.209359][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 790.214646][ C1] tcp_conn_request+0x3028/0x4b80 [ 790.219668][ C1] ? __msan_get_context_state+0x9/0x20 [ 790.225114][ C1] ? cache_from_obj+0x1c/0x7f0 [ 790.229867][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.235415][ C1] tcp_v4_conn_request+0x201/0x290 [ 790.240516][ C1] tcp_v6_conn_request+0xeb/0x330 [ 790.245527][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 790.250802][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 790.256161][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 790.261971][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.267157][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 790.272955][ C1] ? kmsan_memcpy_memmove_metadata+0x110/0x2d0 [ 790.279103][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.284291][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 790.288869][ C1] ? tcp_v4_fill_cb+0x565/0x5e0 [ 790.293706][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 790.298393][ C1] ? tcp_filter+0xf0/0xf0 [ 790.302708][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 790.308158][ C1] ip_local_deliver+0x583/0x8c0 [ 790.313098][ C1] ? ip_local_deliver+0x8c0/0x8c0 [ 790.318107][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 790.323723][ C1] ip_rcv+0x5c0/0x830 [ 790.327694][ C1] ? ip_rcv_core+0x14b0/0x14b0 [ 790.332466][ C1] __netif_receive_skb+0x1ec/0x640 [ 790.337570][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 790.343190][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 790.348811][ C1] process_backlog+0x523/0xc10 [ 790.353571][ C1] napi_poll+0x4aa/0x1090 [ 790.357892][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 790.363165][ C1] net_rx_action+0x35c/0xd40 [ 790.367749][ C1] ? net_tx_action+0xdb0/0xdb0 [ 790.372503][ C1] __do_softirq+0x1b9/0x7ed [ 790.376997][ C1] ? __sysvec_apic_timer_interrupt+0x125/0x550 [ 790.383137][ C1] ? __sysvec_call_function_single+0x77/0x290 [ 790.389191][ C1] asm_call_irq_on_stack+0xf/0x20 [ 790.394194][ C1] [ 790.397119][ C1] do_softirq_own_stack+0x6e/0x90 [ 790.402131][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 790.407318][ C1] local_bh_enable+0x36/0x40 [ 790.411897][ C1] ip_finish_output2+0x2408/0x28e0 [ 790.416998][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 790.422703][ C1] ? nf_ct_deliver_cached_events+0x531/0x7e0 [ 790.428675][ C1] __ip_finish_output+0xeb5/0xfd0 [ 790.433689][ C1] ip_finish_output+0x143/0x4a0 [ 790.438526][ C1] ip_output+0x32e/0x6c0 [ 790.442762][ C1] ? ip_mc_finish_output+0x770/0x770 [ 790.448034][ C1] ? ip_finish_output+0x4a0/0x4a0 [ 790.453042][ C1] __ip_queue_xmit+0x1edd/0x2410 [ 790.457967][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 790.463769][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 790.469824][ C1] ? ipv4_default_advmss+0x70a/0x7d0 [ 790.475095][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.480305][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.485493][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.490678][ C1] ip_queue_xmit+0xcc/0xf0 [ 790.495078][ C1] ? __ip_queue_xmit+0x2410/0x2410 [ 790.500174][ C1] __tcp_transmit_skb+0x4ac5/0x5d50 [ 790.505362][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 790.510991][ C1] tcp_connect+0x1022/0x3bd0 [ 790.515570][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 790.521367][ C1] ? tcp_fastopen_defer_connect+0x106/0xa80 [ 790.527251][ C1] tcp_v4_connect+0x2558/0x26f0 [ 790.532097][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 790.537025][ C1] __inet_stream_connect+0xaa8/0x16c0 [ 790.542385][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 790.547659][ C1] ? local_bh_enable+0x36/0x40 [ 790.552409][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.557596][ C1] inet_stream_connect+0x101/0x180 [ 790.562697][ C1] ? __inet_stream_connect+0x16c0/0x16c0 [ 790.568326][ C1] rds_tcp_conn_path_connect+0x9d9/0xd30 [ 790.573952][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.579137][ C1] ? rds_tcp_state_change+0x400/0x400 [ 790.584491][ C1] rds_connect_worker+0x36b/0x550 [ 790.589500][ C1] ? rds_addr_cmp+0x290/0x290 [ 790.594164][ C1] process_one_work+0x1224/0x20a0 [ 790.599184][ C1] worker_thread+0x10cc/0x2740 [ 790.603953][ C1] ? kmsan_get_metadata+0x116/0x180 [ 790.609140][ C1] kthread+0x51c/0x560 [ 790.613201][ C1] ? process_one_work+0x20a0/0x20a0 [ 790.618386][ C1] ? kthread_blkcg+0x110/0x110 [ 790.623136][ C1] ret_from_fork+0x1f/0x30 [ 790.627532][ C1] Uninit was stored to memory at: [ 790.632548][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 790.638255][ C1] __msan_chain_origin+0x57/0xa0 [ 790.643176][ C1] tcp_conn_request+0x1b29/0x4b80 [ 790.648187][ C1] tcp_v4_conn_request+0x201/0x290 [ 790.653282][ C1] tcp_v6_conn_request+0xeb/0x330 [ 790.658294][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 790.663650][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 790.668224][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 790.672724][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 790.678168][ C1] ip_local_deliver+0x583/0x8c0 [ 790.683001][ C1] ip_rcv+0x5c0/0x830 [ 790.686970][ C1] __netif_receive_skb+0x1ec/0x640 [ 790.692083][ C1] process_backlog+0x523/0xc10 [ 790.696833][ C1] napi_poll+0x4aa/0x1090 [ 790.701149][ C1] net_rx_action+0x35c/0xd40 [ 790.705811][ C1] __do_softirq+0x1b9/0x7ed [ 790.710288][ C1] [ 790.712593][ C1] Uninit was stored to memory at: [ 790.717613][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 790.723510][ C1] __msan_chain_origin+0x57/0xa0 [ 790.728433][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 790.733713][ C1] tcp_conn_request+0x3028/0x4b80 [ 790.738726][ C1] tcp_v4_conn_request+0x201/0x290 [ 790.743827][ C1] tcp_v6_conn_request+0xeb/0x330 [ 790.748854][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 790.754227][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 790.758839][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 790.763435][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 790.770368][ C1] ip_local_deliver+0x583/0x8c0 [ 790.775406][ C1] ip_rcv+0x5c0/0x830 [ 790.779407][ C1] __netif_receive_skb+0x1ec/0x640 [ 790.784534][ C1] process_backlog+0x523/0xc10 [ 790.789795][ C1] napi_poll+0x4aa/0x1090 [ 790.794143][ C1] net_rx_action+0x35c/0xd40 [ 790.798736][ C1] __do_softirq+0x1b9/0x7ed [ 790.803219][ C1] [ 790.805530][ C1] Uninit was stored to memory at: [ 790.810547][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 790.816254][ C1] __msan_chain_origin+0x57/0xa0 [ 790.821177][ C1] tcp_conn_request+0x1b29/0x4b80 [ 790.826186][ C1] tcp_v4_conn_request+0x201/0x290 [ 790.831284][ C1] tcp_v6_conn_request+0xeb/0x330 [ 790.836309][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 790.841669][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 790.846245][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 790.850737][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 790.856179][ C1] ip_local_deliver+0x583/0x8c0 [ 790.861011][ C1] ip_rcv+0x5c0/0x830 [ 790.864983][ C1] __netif_receive_skb+0x1ec/0x640 [ 790.870081][ C1] process_backlog+0x523/0xc10 [ 790.874835][ C1] napi_poll+0x4aa/0x1090 [ 790.879148][ C1] net_rx_action+0x35c/0xd40 [ 790.883727][ C1] __do_softirq+0x1b9/0x7ed [ 790.888220][ C1] [ 790.890529][ C1] Uninit was stored to memory at: [ 790.895554][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 790.901277][ C1] __msan_chain_origin+0x57/0xa0 [ 790.906214][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 790.911484][ C1] tcp_conn_request+0x3028/0x4b80 [ 790.916493][ C1] tcp_v4_conn_request+0x201/0x290 [ 790.921609][ C1] tcp_v6_conn_request+0xeb/0x330 [ 790.926660][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 790.932027][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 790.936603][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 790.941091][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 790.946543][ C1] ip_local_deliver+0x583/0x8c0 [ 790.951377][ C1] ip_rcv+0x5c0/0x830 [ 790.955362][ C1] __netif_receive_skb+0x1ec/0x640 [ 790.960459][ C1] process_backlog+0x523/0xc10 [ 790.965207][ C1] napi_poll+0x4aa/0x1090 [ 790.969537][ C1] net_rx_action+0x35c/0xd40 [ 790.974130][ C1] __do_softirq+0x1b9/0x7ed [ 790.978606][ C1] [ 790.980914][ C1] Uninit was stored to memory at: [ 790.985931][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 790.991644][ C1] __msan_chain_origin+0x57/0xa0 [ 790.996564][ C1] tcp_conn_request+0x1b29/0x4b80 [ 791.001574][ C1] tcp_v4_conn_request+0x201/0x290 [ 791.006671][ C1] tcp_v6_conn_request+0xeb/0x330 [ 791.011683][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 791.017039][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 791.021612][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 791.026098][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 791.031540][ C1] ip_local_deliver+0x583/0x8c0 [ 791.036373][ C1] ip_rcv+0x5c0/0x830 [ 791.040343][ C1] __netif_receive_skb+0x1ec/0x640 [ 791.045438][ C1] process_backlog+0x523/0xc10 [ 791.050205][ C1] napi_poll+0x4aa/0x1090 [ 791.054520][ C1] net_rx_action+0x35c/0xd40 [ 791.059097][ C1] __do_softirq+0x1b9/0x7ed [ 791.063576][ C1] [ 791.065882][ C1] Uninit was stored to memory at: [ 791.070899][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 791.076612][ C1] __msan_chain_origin+0x57/0xa0 [ 791.081537][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 791.086899][ C1] tcp_conn_request+0x3028/0x4b80 [ 791.091908][ C1] tcp_v4_conn_request+0x201/0x290 [ 791.097005][ C1] tcp_v6_conn_request+0xeb/0x330 [ 791.102019][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 791.107376][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 791.111951][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 791.116439][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 791.121882][ C1] ip_local_deliver+0x583/0x8c0 [ 791.126719][ C1] ip_rcv+0x5c0/0x830 [ 791.130687][ C1] __netif_receive_skb+0x1ec/0x640 [ 791.135873][ C1] process_backlog+0x523/0xc10 [ 791.140621][ C1] napi_poll+0x4aa/0x1090 [ 791.144935][ C1] net_rx_action+0x35c/0xd40 [ 791.149512][ C1] __do_softirq+0x1b9/0x7ed [ 791.153991][ C1] [ 791.156301][ C1] Uninit was stored to memory at: [ 791.161317][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 791.167023][ C1] __msan_chain_origin+0x57/0xa0 [ 791.171947][ C1] tcp_conn_request+0x1b29/0x4b80 [ 791.176962][ C1] tcp_v4_conn_request+0x201/0x290 [ 791.182061][ C1] tcp_v6_conn_request+0xeb/0x330 [ 791.187075][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 791.192445][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 791.197030][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 791.201517][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 791.207494][ C1] ip_local_deliver+0x583/0x8c0 [ 791.212417][ C1] ip_rcv+0x5c0/0x830 [ 791.216388][ C1] __netif_receive_skb+0x1ec/0x640 [ 791.221486][ C1] process_backlog+0x523/0xc10 [ 791.226236][ C1] napi_poll+0x4aa/0x1090 [ 791.230556][ C1] net_rx_action+0x35c/0xd40 [ 791.235140][ C1] __do_softirq+0x1b9/0x7ed [ 791.239623][ C1] [ 791.241935][ C1] Uninit was created at: [ 791.246166][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 791.251781][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 791.256534][ C1] __alloc_pages_nodemask+0x84e/0x1040 [ 791.261984][ C1] alloc_pages_current+0x79b/0xb40 [ 791.267089][ C1] allocate_slab+0x34b/0x11c0 [ 791.271768][ C1] ___slab_alloc+0xd35/0x1940 [ 791.276439][ C1] kmem_cache_alloc+0x869/0xc70 [ 791.281284][ C1] inet_reqsk_alloc+0xaf/0x8b0 [ 791.286032][ C1] tcp_conn_request+0x9a8/0x4b80 [ 791.290988][ C1] tcp_v4_conn_request+0x201/0x290 [ 791.296088][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 791.301449][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 791.306027][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 791.310529][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 791.315976][ C1] ip_local_deliver+0x583/0x8c0 [ 791.320825][ C1] ip_sublist_rcv+0x121b/0x1560 [ 791.325660][ C1] ip_list_rcv+0x914/0x980 [ 791.330082][ C1] __netif_receive_skb_list_core+0xeab/0x12a0 [ 791.336137][ C1] __netif_receive_skb_list+0x7e0/0x960 [ 791.341667][ C1] netif_receive_skb_list_internal+0x851/0xdc0 [ 791.347895][ C1] napi_complete_done+0x557/0xf80 [ 791.354565][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 791.359923][ C1] virtnet_poll+0x170f/0x1d10 [ 791.364617][ C1] napi_poll+0x4aa/0x1090 [ 791.368952][ C1] net_rx_action+0x35c/0xd40 [ 791.373531][ C1] __do_softirq+0x1b9/0x7ed 19:16:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:08 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(0x0, 0x1070c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:08 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x1a, 0x0, &(0x7f00000003c0)) [ 792.632003][ T8471] usb 6-1: USB disconnect, device number 32 [ 793.380878][ T8791] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 793.631435][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 793.752013][ T8791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.762909][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 793.777390][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 793.787577][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.807182][ T8791] usb 6-1: config 0 descriptor?? [ 793.857904][ T8791] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 19:16:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000b9aff0)={0x2, 0x4e20}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x8084, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) sendmmsg$sock(r1, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000004c0)=@l2tp, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f00000007c0)=""/129, 0x81}, {&(0x7f0000000880)=""/213, 0xd5}], 0x4, &(0x7f0000000a40)=""/4096, 0x1000}}, {{&(0x7f0000001a40)=@ipx, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/178, 0xb2}, {&(0x7f0000001c80)=""/229, 0xe5}, {&(0x7f0000001d80)=""/235, 0xeb}], 0x4, &(0x7f0000001ec0)=""/179, 0xb3}}, {{&(0x7f0000001f80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000240)=[{&(0x7f0000002000)=""/164, 0xa4}, {&(0x7f00000020c0)=""/78, 0x4e}, {&(0x7f0000002140)=""/86, 0x56}], 0x3, &(0x7f0000002200)=""/51, 0x33}}], 0x4, 0x43, 0x0) 19:16:09 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:09 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x8) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:16:10 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:10 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 19:16:10 executing program 0: 19:16:10 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 796.310798][ T8475] usb 6-1: USB disconnect, device number 33 19:16:11 executing program 4: 19:16:11 executing program 0: 19:16:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) [ 797.490432][ T8791] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 797.742935][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 797.861732][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 797.875091][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 797.884765][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.135317][ T8791] usb 6-1: config 0 descriptor?? [ 798.187821][ T8791] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 800.362645][ T8471] usb 6-1: USB disconnect, device number 34 19:16:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:19 executing program 0: 19:16:19 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:19 executing program 4: 19:16:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:19 executing program 4: 19:16:19 executing program 0: [ 804.120322][ T2980] usb 6-1: new high-speed USB device number 35 using dummy_hcd 19:16:19 executing program 4: 19:16:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 804.360317][ T2980] usb 6-1: Using ep0 maxpacket: 16 [ 804.481696][ T2980] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 804.494957][ T2980] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 804.504389][ T2980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.759560][ T2980] usb 6-1: config 0 descriptor?? [ 804.849860][ T2980] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 19:16:20 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 806.843297][ T8474] usb 6-1: USB disconnect, device number 35 19:16:23 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:23 executing program 4: 19:16:23 executing program 0: 19:16:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:23 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:23 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) [ 807.777439][ C1] not chained 170000 origins [ 807.782091][ C1] CPU: 1 PID: 8320 Comm: kworker/u4:0 Not tainted 5.9.0-rc8-syzkaller #0 [ 807.791512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 807.801875][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 807.807509][ C1] Call Trace: [ 807.810793][ C1] [ 807.813658][ C1] dump_stack+0x21c/0x280 [ 807.818010][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 807.823740][ C1] ? inet_twsk_alloc+0xa7f/0xb90 [ 807.828693][ C1] ? tcp_time_wait+0xd1/0x1160 [ 807.833477][ C1] ? tcp_fin+0x23a/0x9f0 [ 807.837722][ C1] ? tcp_data_queue+0x2ce5/0xa8d0 [ 807.842756][ C1] ? tcp_rcv_state_process+0x3b0a/0x45e0 [ 807.848393][ C1] ? tcp_v4_do_rcv+0xc36/0xff0 [ 807.853147][ C1] ? tcp_v4_rcv+0x588d/0x5cc0 [ 807.857817][ C1] ? ip_protocol_deliver_rcu+0x572/0xc50 [ 807.863450][ C1] ? ip_local_deliver+0x583/0x8c0 [ 807.868486][ C1] ? ip_rcv+0x5c0/0x830 [ 807.872662][ C1] ? __netif_receive_skb+0x1ec/0x640 [ 807.877971][ C1] ? process_backlog+0x523/0xc10 [ 807.882909][ C1] ? napi_poll+0x4aa/0x1090 [ 807.887419][ C1] ? net_rx_action+0x35c/0xd40 [ 807.892191][ C1] ? kmsan_internal_chain_origin+0x30/0x130 [ 807.898109][ C1] ? do_softirq_own_stack+0x6e/0x90 [ 807.903305][ C1] ? __local_bh_enable_ip+0x184/0x1d0 [ 807.908670][ C1] ? local_bh_enable+0x36/0x40 [ 807.913424][ C1] ? ip_finish_output2+0x2408/0x28e0 [ 807.918696][ C1] ? __ip_finish_output+0xeb5/0xfd0 [ 807.923880][ C1] ? ip_finish_output+0x143/0x4a0 [ 807.928890][ C1] ? ip_output+0x32e/0x6c0 [ 807.933301][ C1] ? __ip_queue_xmit+0x1edd/0x2410 [ 807.938422][ C1] ? ip_queue_xmit+0xcc/0xf0 [ 807.943023][ C1] ? __tcp_transmit_skb+0x4ac5/0x5d50 [ 807.948911][ C1] ? tcp_write_xmit+0x4d9b/0xe710 [ 807.956188][ C1] ? __tcp_push_pending_frames+0x150/0x5c0 [ 807.962000][ C1] ? tcp_send_fin+0x1678/0x1b30 [ 807.966843][ C1] ? tcp_shutdown+0x1f7/0x270 [ 807.971524][ C1] ? inet_shutdown+0x44f/0x6d0 [ 807.976274][ C1] ? kernel_sock_shutdown+0x98/0xc0 [ 807.981472][ C1] ? rds_tcp_accept_one+0x107f/0x12e0 [ 807.986855][ C1] ? rds_tcp_accept_worker+0x60/0x180 [ 807.992224][ C1] ? process_one_work+0x1224/0x20a0 [ 807.997410][ C1] ? worker_thread+0x10cc/0x2740 [ 808.002332][ C1] ? kthread+0x51c/0x560 [ 808.006559][ C1] ? ret_from_fork+0x1f/0x30 [ 808.011135][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 808.016958][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 808.023015][ C1] ? kmem_cache_alloc+0x6e8/0xc70 [ 808.028029][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.033216][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 808.039038][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 808.045181][ C1] ? __msan_get_context_state+0x9/0x20 [ 808.050716][ C1] ? __module_get+0x19/0x1e0 [ 808.055305][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.060631][ C1] __msan_chain_origin+0x57/0xa0 [ 808.065580][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 808.070784][ C1] tcp_time_wait+0xdfa/0x1160 [ 808.075459][ C1] tcp_fin+0x23a/0x9f0 [ 808.079526][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 808.084373][ C1] ? tcp_urg+0xba5/0x10b0 [ 808.088699][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 808.094143][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 808.099963][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.105151][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.110341][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 808.114927][ C1] ? kmsan_set_origin_checked+0x20/0x60 [ 808.120477][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 808.124983][ C1] ? tcp_v4_rcv+0x1991/0x5cc0 [ 808.129658][ C1] ? tcp_filter+0xf0/0xf0 [ 808.133997][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 808.139447][ C1] ip_local_deliver+0x583/0x8c0 [ 808.144286][ C1] ? ip_local_deliver+0x8c0/0x8c0 [ 808.149296][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 808.155053][ C1] ip_rcv+0x5c0/0x830 [ 808.159024][ C1] ? ip_rcv_core+0x14b0/0x14b0 [ 808.163780][ C1] __netif_receive_skb+0x1ec/0x640 [ 808.169238][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 808.174854][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 808.180480][ C1] process_backlog+0x523/0xc10 [ 808.185236][ C1] napi_poll+0x4aa/0x1090 [ 808.189556][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 808.194847][ C1] net_rx_action+0x35c/0xd40 [ 808.199844][ C1] ? net_tx_action+0xdb0/0xdb0 [ 808.204609][ C1] __do_softirq+0x1b9/0x7ed [ 808.209455][ C1] ? __sysvec_apic_timer_interrupt+0x125/0x550 [ 808.215595][ C1] asm_call_irq_on_stack+0xf/0x20 [ 808.220609][ C1] [ 808.223556][ C1] do_softirq_own_stack+0x6e/0x90 [ 808.228583][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 808.233776][ C1] local_bh_enable+0x36/0x40 [ 808.238352][ C1] ip_finish_output2+0x2408/0x28e0 [ 808.243453][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 808.249160][ C1] ? nf_ct_deliver_cached_events+0x531/0x7e0 [ 808.255131][ C1] __ip_finish_output+0xeb5/0xfd0 [ 808.260146][ C1] ip_finish_output+0x143/0x4a0 [ 808.264984][ C1] ip_output+0x32e/0x6c0 [ 808.269217][ C1] ? ip_mc_finish_output+0x770/0x770 [ 808.274488][ C1] ? ip_finish_output+0x4a0/0x4a0 [ 808.279497][ C1] __ip_queue_xmit+0x1edd/0x2410 [ 808.284427][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 808.290048][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.295232][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.300417][ C1] ip_queue_xmit+0xcc/0xf0 [ 808.304921][ C1] ? __ip_queue_xmit+0x2410/0x2410 [ 808.310020][ C1] __tcp_transmit_skb+0x4ac5/0x5d50 [ 808.315214][ C1] tcp_write_xmit+0x4d9b/0xe710 [ 808.328752][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.333948][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.339131][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.344320][ C1] __tcp_push_pending_frames+0x150/0x5c0 [ 808.349960][ C1] tcp_send_fin+0x1678/0x1b30 [ 808.354627][ C1] ? tcp_set_state+0x84f/0xb50 [ 808.359377][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.364564][ C1] tcp_shutdown+0x1f7/0x270 [ 808.369057][ C1] ? tcp_set_state+0xb50/0xb50 [ 808.373810][ C1] inet_shutdown+0x44f/0x6d0 [ 808.378391][ C1] ? inet_recvmsg+0x6b0/0x6b0 [ 808.383056][ C1] kernel_sock_shutdown+0x98/0xc0 [ 808.388069][ C1] rds_tcp_accept_one+0x107f/0x12e0 [ 808.393259][ C1] rds_tcp_accept_worker+0x60/0x180 [ 808.398465][ C1] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 808.403486][ C1] process_one_work+0x1224/0x20a0 [ 808.408503][ C1] worker_thread+0x10cc/0x2740 [ 808.413863][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.419048][ C1] ? kmsan_get_metadata+0x116/0x180 [ 808.424240][ C1] kthread+0x51c/0x560 [ 808.428294][ C1] ? process_one_work+0x20a0/0x20a0 [ 808.433477][ C1] ? kthread_blkcg+0x110/0x110 [ 808.438488][ C1] ret_from_fork+0x1f/0x30 [ 808.442978][ C1] Uninit was stored to memory at: [ 808.447995][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 808.453979][ C1] __msan_chain_origin+0x57/0xa0 [ 808.458903][ C1] inet_twsk_alloc+0xaab/0xb90 [ 808.463657][ C1] tcp_time_wait+0xd1/0x1160 [ 808.468249][ C1] tcp_fin+0x23a/0x9f0 [ 808.472317][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 808.477155][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 808.482685][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 808.487262][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 808.491753][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 808.497214][ C1] ip_local_deliver+0x583/0x8c0 [ 808.502049][ C1] ip_rcv+0x5c0/0x830 [ 808.506023][ C1] __netif_receive_skb+0x1ec/0x640 [ 808.511118][ C1] process_backlog+0x523/0xc10 [ 808.515865][ C1] napi_poll+0x4aa/0x1090 [ 808.520199][ C1] net_rx_action+0x35c/0xd40 [ 808.524778][ C1] __do_softirq+0x1b9/0x7ed [ 808.529255][ C1] [ 808.531561][ C1] Uninit was stored to memory at: [ 808.536575][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 808.542283][ C1] __msan_chain_origin+0x57/0xa0 [ 808.547208][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 808.552391][ C1] tcp_time_wait+0xdfa/0x1160 [ 808.557062][ C1] tcp_fin+0x23a/0x9f0 [ 808.561120][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 808.565959][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 808.572011][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 808.576584][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 808.581071][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 808.586686][ C1] ip_local_deliver+0x583/0x8c0 [ 808.591518][ C1] ip_rcv+0x5c0/0x830 [ 808.595489][ C1] __netif_receive_skb+0x1ec/0x640 [ 808.600585][ C1] process_backlog+0x523/0xc10 [ 808.605334][ C1] napi_poll+0x4aa/0x1090 [ 808.609651][ C1] net_rx_action+0x35c/0xd40 [ 808.614229][ C1] __do_softirq+0x1b9/0x7ed [ 808.618704][ C1] [ 808.621016][ C1] Uninit was stored to memory at: [ 808.626031][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 808.631740][ C1] __msan_chain_origin+0x57/0xa0 [ 808.636665][ C1] tcp_time_wait+0x808/0x1160 [ 808.641337][ C1] tcp_fin+0x23a/0x9f0 [ 808.645400][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 808.650240][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 808.655697][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 808.660272][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 808.664761][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 808.670204][ C1] ip_local_deliver+0x583/0x8c0 [ 808.675035][ C1] ip_rcv+0x5c0/0x830 [ 808.679004][ C1] __netif_receive_skb+0x1ec/0x640 [ 808.684118][ C1] process_backlog+0x523/0xc10 [ 808.688892][ C1] napi_poll+0x4aa/0x1090 [ 808.693222][ C1] net_rx_action+0x35c/0xd40 [ 808.697810][ C1] __do_softirq+0x1b9/0x7ed [ 808.702292][ C1] [ 808.704603][ C1] Uninit was stored to memory at: [ 808.709617][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 808.715328][ C1] __msan_chain_origin+0x57/0xa0 [ 808.720267][ C1] inet_twsk_alloc+0xaab/0xb90 [ 808.725022][ C1] tcp_time_wait+0xd1/0x1160 [ 808.729617][ C1] tcp_fin+0x23a/0x9f0 [ 808.733681][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 808.738526][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 808.743987][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 808.748563][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 808.753052][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 808.758498][ C1] ip_local_deliver+0x583/0x8c0 [ 808.763386][ C1] ip_rcv+0x5c0/0x830 [ 808.767561][ C1] __netif_receive_skb+0x1ec/0x640 [ 808.774066][ C1] process_backlog+0x523/0xc10 [ 808.778831][ C1] napi_poll+0x4aa/0x1090 [ 808.783274][ C1] net_rx_action+0x35c/0xd40 [ 808.787875][ C1] __do_softirq+0x1b9/0x7ed [ 808.792366][ C1] [ 808.794694][ C1] Uninit was stored to memory at: [ 808.799728][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 808.805439][ C1] __msan_chain_origin+0x57/0xa0 [ 808.810368][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 808.815555][ C1] tcp_time_wait+0xdfa/0x1160 [ 808.820221][ C1] tcp_fin+0x23a/0x9f0 [ 808.824280][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 808.829127][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 808.834579][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 808.839167][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 808.843664][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 808.849112][ C1] ip_local_deliver+0x583/0x8c0 [ 808.853951][ C1] ip_rcv+0x5c0/0x830 [ 808.857925][ C1] __netif_receive_skb+0x1ec/0x640 [ 808.863047][ C1] process_backlog+0x523/0xc10 [ 808.867828][ C1] napi_poll+0x4aa/0x1090 [ 808.872165][ C1] net_rx_action+0x35c/0xd40 [ 808.876754][ C1] __do_softirq+0x1b9/0x7ed [ 808.881239][ C1] [ 808.883547][ C1] Uninit was stored to memory at: [ 808.888564][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 808.894270][ C1] __msan_chain_origin+0x57/0xa0 [ 808.899197][ C1] tcp_time_wait+0x808/0x1160 [ 808.903880][ C1] tcp_fin+0x23a/0x9f0 [ 808.907941][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 808.912788][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 808.918263][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 808.922860][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 808.927360][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 808.932807][ C1] ip_local_deliver+0x583/0x8c0 [ 808.937643][ C1] ip_rcv+0x5c0/0x830 [ 808.941614][ C1] __netif_receive_skb+0x1ec/0x640 [ 808.946713][ C1] process_backlog+0x523/0xc10 [ 808.951465][ C1] napi_poll+0x4aa/0x1090 [ 808.955781][ C1] net_rx_action+0x35c/0xd40 [ 808.960378][ C1] __do_softirq+0x1b9/0x7ed [ 808.964858][ C1] [ 808.967175][ C1] Uninit was stored to memory at: [ 808.972195][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 808.977902][ C1] __msan_chain_origin+0x57/0xa0 [ 808.982828][ C1] inet_twsk_alloc+0xaab/0xb90 [ 808.987578][ C1] tcp_time_wait+0xd1/0x1160 [ 808.992162][ C1] tcp_fin+0x23a/0x9f0 [ 808.996219][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 809.001063][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 809.006529][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 809.011111][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 809.015601][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 809.021045][ C1] ip_local_deliver+0x583/0x8c0 [ 809.025886][ C1] ip_rcv+0x5c0/0x830 [ 809.029856][ C1] __netif_receive_skb+0x1ec/0x640 [ 809.034953][ C1] process_backlog+0x523/0xc10 [ 809.039705][ C1] napi_poll+0x4aa/0x1090 [ 809.044021][ C1] net_rx_action+0x35c/0xd40 [ 809.048596][ C1] __do_softirq+0x1b9/0x7ed [ 809.053073][ C1] [ 809.055381][ C1] Uninit was created at: [ 809.059615][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 809.065242][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 809.069999][ C1] __alloc_pages_nodemask+0x84e/0x1040 [ 809.075448][ C1] alloc_pages_current+0x79b/0xb40 [ 809.080548][ C1] allocate_slab+0x34b/0x11c0 [ 809.085214][ C1] ___slab_alloc+0xd35/0x1940 [ 809.089884][ C1] kmem_cache_alloc+0x869/0xc70 [ 809.094730][ C1] inet_twsk_alloc+0x15b/0xb90 [ 809.099491][ C1] tcp_time_wait+0xd1/0x1160 [ 809.104070][ C1] tcp_fin+0x23a/0x9f0 [ 809.108128][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 809.112970][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 809.118436][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 809.123038][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 809.127538][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 809.132984][ C1] ip_local_deliver+0x583/0x8c0 [ 809.137818][ C1] ip_rcv+0x5c0/0x830 [ 809.141790][ C1] __netif_receive_skb+0x1ec/0x640 [ 809.146890][ C1] process_backlog+0x523/0xc10 [ 809.151648][ C1] napi_poll+0x4aa/0x1090 [ 809.155968][ C1] net_rx_action+0x35c/0xd40 [ 809.160550][ C1] __do_softirq+0x1b9/0x7ed [ 809.478776][T15910] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 809.487246][T15910] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.533416][ T5] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 809.800568][ T5] usb 6-1: Using ep0 maxpacket: 16 19:16:25 executing program 0: 19:16:25 executing program 4: [ 809.932698][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 809.945953][ T5] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 809.955361][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) [ 810.149976][ T5] usb 6-1: config 0 descriptor?? [ 810.209027][ T5] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 19:16:25 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000001400)="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", 0x3e1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:26 executing program 0: [ 811.038910][T15931] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 811.047597][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 811.720853][ T5] usb 6-1: USB disconnect, device number 36 19:16:28 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:28 executing program 4: 19:16:28 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e040000000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:28 executing program 0: 19:16:28 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c575) [ 812.883901][T15957] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 812.892667][T15957] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:28 executing program 4: 19:16:28 executing program 0: [ 813.129922][ T2980] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 813.423296][ T2980] usb 6-1: Using ep0 maxpacket: 16 19:16:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c575) [ 813.541296][ T2980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.551377][ T2980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 813.564569][ T2980] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 813.573965][ T2980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.830291][ T2980] usb 6-1: config 0 descriptor?? 19:16:29 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b4005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 813.877965][ T2980] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 19:16:29 executing program 0: 19:16:29 executing program 0: [ 814.466066][T15982] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 814.474576][T15982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:30 executing program 4: 19:16:31 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e040000000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1c575) 19:16:31 executing program 0: 19:16:31 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b4005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:31 executing program 4: [ 815.868215][ T8471] usb 6-1: USB disconnect, device number 37 [ 816.353070][T16009] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 816.361438][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:32 executing program 4: 19:16:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400), 0x0) sendfile(r0, r1, 0x0, 0x1c575) [ 816.560178][ T8471] usb 6-1: new high-speed USB device number 38 using dummy_hcd 19:16:32 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:32 executing program 0: [ 816.831449][ T8471] usb 6-1: Using ep0 maxpacket: 16 [ 816.971671][ T8471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.981754][ T8471] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 816.994945][ T8471] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 817.004380][ T8471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:32 executing program 0: [ 817.360582][ T8471] usb 6-1: config 0 descriptor?? 19:16:32 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b4005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:32 executing program 4: [ 817.465383][ T8471] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 817.947002][T16034] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 817.955545][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:34 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e040000000000000001090224000100000000090400000903000000092100000001222200090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400), 0x0) sendfile(r0, r1, 0x0, 0x1c575) 19:16:34 executing program 4: 19:16:34 executing program 0: 19:16:34 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db14500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:34 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 819.264597][ T8791] usb 6-1: USB disconnect, device number 38 [ 819.494758][T16052] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 819.503317][T16052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:35 executing program 0: 19:16:35 executing program 4: [ 820.061043][ T8791] usb 6-1: new high-speed USB device number 39 using dummy_hcd 19:16:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400), 0x0) sendfile(r0, r1, 0x0, 0x1c575) [ 820.300694][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 820.421954][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.432194][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 820.446588][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 820.456072][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:36 executing program 0: 19:16:36 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db14500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:36 executing program 4: [ 820.705819][ T8791] usb 6-1: config 0 descriptor?? [ 820.770891][ T8791] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 821.050608][T16077] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 821.058968][T16077] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:38 executing program 4: 19:16:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x1f1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:38 executing program 0: 19:16:38 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:38 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db14500"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 822.871763][ T2980] usb 6-1: USB disconnect, device number 39 19:16:38 executing program 0: [ 823.266668][T16102] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 823.275267][T16102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:16:38 executing program 4: 19:16:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x1f1) sendfile(r0, r1, 0x0, 0x1c575) [ 823.589579][ T8791] usb 6-1: new high-speed USB device number 40 using dummy_hcd 19:16:39 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) 19:16:39 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 823.829865][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 823.951061][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.962612][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.972758][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 823.985848][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 823.995260][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:39 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 824.317716][ T8791] usb 6-1: config 0 descriptor?? [ 824.616958][T16130] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 824.625527][T16130] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 824.861784][ T8791] usbhid 6-1:0.0: can't add hid device: -71 [ 824.868089][ T8791] usbhid: probe of 6-1:0.0 failed with error -71 [ 824.914053][ T8791] usb 6-1: USB disconnect, device number 40 19:16:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:40 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000180)=""/387, 0x183) 19:16:40 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:40 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_targets\x00') perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x802, 0x0) sendfile(r1, r0, 0x0, 0xff) 19:16:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x1f1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:41 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(r0, r1, 0x0, 0x1c575) 19:16:41 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000180)=""/387, 0x183) 19:16:41 executing program 4: signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffb]}, 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1}}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r0, &(0x7f00000017c0), 0x333, 0x0, 0x0) [ 826.306291][T16161] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 826.315048][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 826.329624][ T8791] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 826.620401][ T8791] usb 6-1: Using ep0 maxpacket: 16 19:16:42 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 826.741362][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.752974][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.763147][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 826.776582][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 826.786015][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400), 0x0) sendfile(r0, r1, 0x0, 0x1c575) 19:16:42 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000180)=""/387, 0x183) [ 827.267079][ T8791] usb 6-1: config 0 descriptor?? [ 827.809802][ T8791] usbhid 6-1:0.0: can't add hid device: -71 [ 827.816179][ T8791] usbhid: probe of 6-1:0.0 failed with error -71 [ 827.908266][ T8791] usb 6-1: USB disconnect, device number 41 19:16:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:43 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:43 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x2020, &(0x7f0000000040)=@abs, 0x6e) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) 19:16:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400), 0x0) sendfile(r0, r1, 0x0, 0x1c575) 19:16:43 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r3, &(0x7f0000000180)=""/387, 0x183) [ 828.523433][T16200] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 828.532155][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 828.912774][ C1] not chained 180000 origins [ 828.917423][ C1] CPU: 1 PID: 8492 Comm: kworker/u4:2 Not tainted 5.9.0-rc8-syzkaller #0 [ 828.925838][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 828.935942][ C1] Workqueue: krdsd rds_connect_worker [ 828.941322][ C1] Call Trace: [ 828.944608][ C1] [ 828.947470][ C1] dump_stack+0x21c/0x280 [ 828.951818][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 828.957549][ C1] ? should_failslab+0x29/0x70 [ 828.962326][ C1] ? slab_pre_alloc_hook+0xd5/0x590 [ 828.967536][ C1] ? kmsan_get_metadata+0x116/0x180 [ 828.972742][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 828.978565][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 828.984733][ C1] ? tcp_parse_options+0x20b4/0x2150 [ 828.990032][ C1] ? kmsan_get_metadata+0x116/0x180 [ 828.995247][ C1] __msan_chain_origin+0x57/0xa0 [ 829.000192][ C1] tcp_conn_request+0x19da/0x4b80 [ 829.005242][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 829.011064][ C1] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 829.017142][ C1] ? rb_insert_color+0xb0/0x1180 [ 829.022093][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.027308][ C1] tcp_v4_conn_request+0x201/0x290 [ 829.032430][ C1] tcp_v6_conn_request+0xeb/0x330 [ 829.037465][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 829.042765][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 829.048145][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 829.053964][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.059174][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 829.064996][ C1] ? kmsan_memcpy_memmove_metadata+0x110/0x2d0 [ 829.071140][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.076328][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 829.080912][ C1] ? tcp_v4_fill_cb+0x565/0x5e0 [ 829.085755][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 829.090257][ C1] ? tcp_filter+0xf0/0xf0 [ 829.094573][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 829.100023][ C1] ip_local_deliver+0x583/0x8c0 [ 829.104866][ C1] ? ip_local_deliver+0x8c0/0x8c0 [ 829.109877][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 829.115517][ C1] ip_rcv+0x5c0/0x830 [ 829.119487][ C1] ? ip_rcv_core+0x14b0/0x14b0 [ 829.124241][ C1] __netif_receive_skb+0x1ec/0x640 [ 829.129345][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 829.134967][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 829.140591][ C1] process_backlog+0x523/0xc10 [ 829.145350][ C1] napi_poll+0x4aa/0x1090 [ 829.149679][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 829.154963][ C1] net_rx_action+0x35c/0xd40 [ 829.159546][ C1] ? net_tx_action+0xdb0/0xdb0 [ 829.164297][ C1] __do_softirq+0x1b9/0x7ed [ 829.168799][ C1] ? __sysvec_apic_timer_interrupt+0x125/0x550 [ 829.174945][ C1] ? __sysvec_call_function_single+0x77/0x290 [ 829.181000][ C1] asm_call_irq_on_stack+0xf/0x20 [ 829.186003][ C1] [ 829.188933][ C1] do_softirq_own_stack+0x6e/0x90 [ 829.193951][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 829.199142][ C1] local_bh_enable+0x36/0x40 [ 829.203718][ C1] ip_finish_output2+0x2408/0x28e0 [ 829.210211][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 829.215932][ C1] ? nf_ct_deliver_cached_events+0x531/0x7e0 [ 829.221906][ C1] __ip_finish_output+0xeb5/0xfd0 [ 829.226920][ C1] ip_finish_output+0x143/0x4a0 [ 829.231757][ C1] ip_output+0x32e/0x6c0 [ 829.235991][ C1] ? ip_mc_finish_output+0x770/0x770 [ 829.241262][ C1] ? ip_finish_output+0x4a0/0x4a0 [ 829.246274][ C1] __ip_queue_xmit+0x1edd/0x2410 [ 829.251206][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 829.257033][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 829.263093][ C1] ? ipv4_default_advmss+0x70a/0x7d0 [ 829.268366][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.273554][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.278742][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.283931][ C1] ip_queue_xmit+0xcc/0xf0 [ 829.288337][ C1] ? __ip_queue_xmit+0x2410/0x2410 [ 829.293439][ C1] __tcp_transmit_skb+0x4ac5/0x5d50 [ 829.298631][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 829.304269][ C1] tcp_connect+0x1022/0x3bd0 [ 829.308860][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 829.314660][ C1] ? tcp_fastopen_defer_connect+0x106/0xa80 [ 829.320547][ C1] tcp_v4_connect+0x2558/0x26f0 [ 829.325392][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 829.330321][ C1] __inet_stream_connect+0xaa8/0x16c0 [ 829.335684][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 829.340959][ C1] ? local_bh_enable+0x36/0x40 [ 829.345710][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.350900][ C1] inet_stream_connect+0x101/0x180 [ 829.356006][ C1] ? __inet_stream_connect+0x16c0/0x16c0 [ 829.361630][ C1] rds_tcp_conn_path_connect+0x9d9/0xd30 [ 829.367253][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.372441][ C1] ? rds_tcp_state_change+0x400/0x400 [ 829.377800][ C1] rds_connect_worker+0x36b/0x550 [ 829.382814][ C1] ? rds_addr_cmp+0x290/0x290 [ 829.387479][ C1] process_one_work+0x1224/0x20a0 [ 829.392498][ C1] worker_thread+0x10cc/0x2740 [ 829.397252][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.402440][ C1] ? kmsan_get_metadata+0x116/0x180 [ 829.407628][ C1] kthread+0x51c/0x560 [ 829.411685][ C1] ? process_one_work+0x20a0/0x20a0 [ 829.416870][ C1] ? kthread_blkcg+0x110/0x110 [ 829.421623][ C1] ret_from_fork+0x1f/0x30 [ 829.426021][ C1] Uninit was stored to memory at: [ 829.431040][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 829.436753][ C1] __msan_chain_origin+0x57/0xa0 [ 829.441696][ C1] tcp_conn_request+0x1b29/0x4b80 [ 829.446708][ C1] tcp_v4_conn_request+0x201/0x290 [ 829.451808][ C1] tcp_v6_conn_request+0xeb/0x330 [ 829.456822][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 829.462181][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 829.466766][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 829.471255][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 829.476699][ C1] ip_local_deliver+0x583/0x8c0 [ 829.481535][ C1] ip_rcv+0x5c0/0x830 [ 829.485505][ C1] __netif_receive_skb+0x1ec/0x640 [ 829.490604][ C1] process_backlog+0x523/0xc10 [ 829.495353][ C1] napi_poll+0x4aa/0x1090 [ 829.499668][ C1] net_rx_action+0x35c/0xd40 [ 829.504249][ C1] __do_softirq+0x1b9/0x7ed [ 829.508727][ C1] [ 829.511035][ C1] Uninit was stored to memory at: [ 829.516051][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 829.521759][ C1] __msan_chain_origin+0x57/0xa0 [ 829.526685][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 829.531955][ C1] tcp_conn_request+0x3028/0x4b80 [ 829.536966][ C1] tcp_v4_conn_request+0x201/0x290 [ 829.542063][ C1] tcp_v6_conn_request+0xeb/0x330 [ 829.547079][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 829.552437][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 829.557014][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 829.561503][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 829.567380][ C1] ip_local_deliver+0x583/0x8c0 [ 829.572218][ C1] ip_rcv+0x5c0/0x830 [ 829.576189][ C1] __netif_receive_skb+0x1ec/0x640 [ 829.581294][ C1] process_backlog+0x523/0xc10 [ 829.586049][ C1] napi_poll+0x4aa/0x1090 [ 829.590366][ C1] net_rx_action+0x35c/0xd40 [ 829.594943][ C1] __do_softirq+0x1b9/0x7ed [ 829.599422][ C1] [ 829.601730][ C1] Uninit was stored to memory at: [ 829.606746][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 829.612454][ C1] __msan_chain_origin+0x57/0xa0 [ 829.617377][ C1] tcp_conn_request+0x1b29/0x4b80 [ 829.622390][ C1] tcp_v4_conn_request+0x201/0x290 [ 829.627486][ C1] tcp_v6_conn_request+0xeb/0x330 [ 829.632499][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 829.637859][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 829.642437][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 829.646927][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 829.652373][ C1] ip_local_deliver+0x583/0x8c0 [ 829.657209][ C1] ip_rcv+0x5c0/0x830 [ 829.661178][ C1] __netif_receive_skb+0x1ec/0x640 [ 829.666284][ C1] process_backlog+0x523/0xc10 [ 829.671049][ C1] napi_poll+0x4aa/0x1090 [ 829.675367][ C1] net_rx_action+0x35c/0xd40 [ 829.679959][ C1] __do_softirq+0x1b9/0x7ed [ 829.684436][ C1] [ 829.686752][ C1] Uninit was stored to memory at: [ 829.691768][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 829.697477][ C1] __msan_chain_origin+0x57/0xa0 [ 829.702401][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 829.707670][ C1] tcp_conn_request+0x3028/0x4b80 [ 829.712682][ C1] tcp_v4_conn_request+0x201/0x290 [ 829.717781][ C1] tcp_v6_conn_request+0xeb/0x330 [ 829.722796][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 829.728157][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 829.732738][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 829.737230][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 829.742674][ C1] ip_local_deliver+0x583/0x8c0 [ 829.747509][ C1] ip_rcv+0x5c0/0x830 [ 829.751477][ C1] __netif_receive_skb+0x1ec/0x640 [ 829.756697][ C1] process_backlog+0x523/0xc10 [ 829.761482][ C1] napi_poll+0x4aa/0x1090 [ 829.765817][ C1] net_rx_action+0x35c/0xd40 [ 829.770413][ C1] __do_softirq+0x1b9/0x7ed [ 829.774898][ C1] [ 829.777223][ C1] Uninit was stored to memory at: [ 829.782266][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 829.787993][ C1] __msan_chain_origin+0x57/0xa0 [ 829.792959][ C1] tcp_conn_request+0x1b29/0x4b80 [ 829.798066][ C1] tcp_v4_conn_request+0x201/0x290 [ 829.803168][ C1] tcp_v6_conn_request+0xeb/0x330 [ 829.808181][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 829.813557][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 829.818151][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 829.822658][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 829.828109][ C1] ip_local_deliver+0x583/0x8c0 [ 829.832944][ C1] ip_rcv+0x5c0/0x830 [ 829.836912][ C1] __netif_receive_skb+0x1ec/0x640 [ 829.842009][ C1] process_backlog+0x523/0xc10 [ 829.846866][ C1] napi_poll+0x4aa/0x1090 [ 829.851270][ C1] net_rx_action+0x35c/0xd40 [ 829.855846][ C1] __do_softirq+0x1b9/0x7ed [ 829.860325][ C1] [ 829.862634][ C1] Uninit was stored to memory at: [ 829.867649][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 829.873359][ C1] __msan_chain_origin+0x57/0xa0 [ 829.878283][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 829.883553][ C1] tcp_conn_request+0x3028/0x4b80 [ 829.888564][ C1] tcp_v4_conn_request+0x201/0x290 [ 829.893662][ C1] tcp_v6_conn_request+0xeb/0x330 [ 829.898679][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 829.904043][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 829.908824][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 829.913320][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 829.918764][ C1] ip_local_deliver+0x583/0x8c0 [ 829.923617][ C1] ip_rcv+0x5c0/0x830 [ 829.927734][ C1] __netif_receive_skb+0x1ec/0x640 [ 829.932845][ C1] process_backlog+0x523/0xc10 [ 829.937613][ C1] napi_poll+0x4aa/0x1090 [ 829.941942][ C1] net_rx_action+0x35c/0xd40 [ 829.946526][ C1] __do_softirq+0x1b9/0x7ed [ 829.951009][ C1] [ 829.953322][ C1] Uninit was stored to memory at: [ 829.958340][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 829.964047][ C1] __msan_chain_origin+0x57/0xa0 [ 829.968970][ C1] tcp_conn_request+0x1b29/0x4b80 [ 829.973982][ C1] tcp_v4_conn_request+0x201/0x290 [ 829.979085][ C1] tcp_v6_conn_request+0xeb/0x330 [ 829.984102][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 829.989459][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 829.994035][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 829.998528][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 830.003977][ C1] ip_local_deliver+0x583/0x8c0 [ 830.008812][ C1] ip_rcv+0x5c0/0x830 [ 830.012781][ C1] __netif_receive_skb+0x1ec/0x640 [ 830.017878][ C1] process_backlog+0x523/0xc10 [ 830.022629][ C1] napi_poll+0x4aa/0x1090 [ 830.026945][ C1] net_rx_action+0x35c/0xd40 [ 830.031608][ C1] __do_softirq+0x1b9/0x7ed [ 830.036086][ C1] [ 830.038394][ C1] Uninit was created at: [ 830.042633][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 830.048250][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 830.053003][ C1] __alloc_pages_nodemask+0x84e/0x1040 [ 830.058452][ C1] alloc_pages_current+0x79b/0xb40 [ 830.063550][ C1] allocate_slab+0x34b/0x11c0 [ 830.068211][ C1] ___slab_alloc+0xd35/0x1940 [ 830.072877][ C1] kmem_cache_alloc+0x869/0xc70 [ 830.077716][ C1] inet_reqsk_alloc+0xaf/0x8b0 [ 830.082471][ C1] tcp_conn_request+0x9a8/0x4b80 [ 830.087396][ C1] tcp_v4_conn_request+0x201/0x290 [ 830.092501][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 830.097863][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 830.102439][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 830.106926][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 830.112370][ C1] ip_local_deliver+0x583/0x8c0 [ 830.117206][ C1] ip_sublist_rcv+0x121b/0x1560 [ 830.122048][ C1] ip_list_rcv+0x914/0x980 [ 830.126457][ C1] __netif_receive_skb_list_core+0xeab/0x12a0 [ 830.132513][ C1] __netif_receive_skb_list+0x7e0/0x960 [ 830.138047][ C1] netif_receive_skb_list_internal+0x851/0xdc0 [ 830.144189][ C1] napi_complete_done+0x557/0xf80 [ 830.149203][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 830.154562][ C1] virtnet_poll+0x170f/0x1d10 [ 830.159230][ C1] napi_poll+0x4aa/0x1090 [ 830.163548][ C1] net_rx_action+0x35c/0xd40 19:16:45 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x40002022, 0x0, 0x0) 19:16:45 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/387, 0x183) [ 830.168123][ C1] __do_softirq+0x1b9/0x7ed [ 830.359624][ T8791] usb 6-1: new high-speed USB device number 42 using dummy_hcd 19:16:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400), 0x0) sendfile(r0, r1, 0x0, 0x1c575) 19:16:45 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 830.603066][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 830.730892][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.742321][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.752436][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 830.765568][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 830.775420][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.001392][ T8791] usb 6-1: config 0 descriptor?? [ 831.060711][T16222] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 831.068893][T16222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 831.540137][ T8791] usbhid 6-1:0.0: can't add hid device: -71 [ 831.546436][ T8791] usbhid: probe of 6-1:0.0 failed with error -71 [ 831.584247][ T8791] usb 6-1: USB disconnect, device number 42 19:16:47 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:47 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/387, 0x183) 19:16:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) 19:16:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) r1 = open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(0xffffffffffffffff, r1, 0x0, 0x1c575) 19:16:47 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) [ 832.716500][T16247] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 832.725147][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 832.909438][T11112] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 833.149513][T11112] usb 6-1: Using ep0 maxpacket: 16 19:16:48 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) read(0xffffffffffffffff, &(0x7f0000000180)=""/387, 0x183) [ 833.271362][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.282763][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.292968][T11112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 833.306078][T11112] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:16:48 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x48, 0x6f}, [@ldst={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}]}, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffea2}, 0x48) 19:16:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1c575) [ 833.315426][T11112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.515236][T11112] usb 6-1: config 0 descriptor?? 19:16:48 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:49 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 834.197199][T11112] usbhid 6-1:0.0: can't add hid device: -71 [ 834.203582][T11112] usbhid: probe of 6-1:0.0 failed with error -71 [ 834.273249][T11112] usb 6-1: USB disconnect, device number 43 19:16:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) [ 835.129476][T16275] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 835.137673][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 835.709655][T11112] usb 6-1: new high-speed USB device number 44 using dummy_hcd 19:16:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001800010000000000000000000a0000000000000000000000060015000400000008000400", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000ffffac141cbb08000f"], 0x58}}, 0x0) 19:16:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:16:51 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:51 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 835.969644][T11112] usb 6-1: Using ep0 maxpacket: 16 19:16:51 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d09"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 836.015323][T16288] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 836.091300][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 836.102488][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 836.112613][T11112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 836.125753][T11112] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 836.135155][T11112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:16:51 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000000a060b0000000000002300000000000005000400000000000900020073797a3000000000050001000600021f060005000a0000000c000780"], 0x54}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x47fe3, 0x0) 19:16:51 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() gettid() r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000180)=""/387, 0x183) [ 836.590429][T11112] usb 6-1: config 0 descriptor?? 19:16:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) [ 836.682731][T16304] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 836.958085][T16309] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 837.119734][T11112] usbhid 6-1:0.0: can't add hid device: -71 [ 837.126167][T11112] usbhid: probe of 6-1:0.0 failed with error -71 [ 837.276953][T11112] usb 6-1: USB disconnect, device number 44 19:16:53 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d09"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:16:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0xffffffff, 0x1, &(0x7f0000000400)=[{&(0x7f00000000c0)="0400050900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f00000004c0)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x0) open$dir(0x0, 0x0, 0x0) write$9p(r0, &(0x7f0000001400)=';', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 19:16:53 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() gettid() r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000180)=""/387, 0x183) 19:16:53 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5a) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0x0, 0xb0, 0x98, 0xb0, 0x138, 0x1a8, 0x1a8, 0x138, 0x1a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x6}, {0x0, 0x3}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) [ 838.353563][T16333] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 838.480522][ T2980] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 838.719534][ T2980] usb 6-1: Using ep0 maxpacket: 16 [ 838.841502][ T2980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.852701][ T2980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.862930][ T2980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 838.876226][ T2980] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:16:54 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000000)="d4", 0x1, 0x0, 0x0, 0x0) [ 838.885641][ T2980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.156722][ T2980] usb 6-1: config 0 descriptor?? [ 839.700197][ T2980] usbhid 6-1:0.0: can't add hid device: -71 [ 839.706582][ T2980] usbhid: probe of 6-1:0.0 failed with error -71 [ 839.744834][ T2980] usb 6-1: USB disconnect, device number 45 19:16:55 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:55 executing program 3: 19:16:55 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() gettid() r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r0, &(0x7f0000000180)=""/387, 0x183) 19:16:55 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d09"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:55 executing program 4: [ 840.145854][T16358] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:16:55 executing program 4: 19:16:55 executing program 3: 19:16:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:16:56 executing program 4: 19:16:56 executing program 3: [ 841.089979][ T8473] usb 6-1: new high-speed USB device number 46 using dummy_hcd 19:16:56 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d0900"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:56 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) [ 841.363283][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 841.490728][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.502474][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.512598][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 841.525817][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 841.535285][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.700296][T16374] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 841.854820][ T8473] usb 6-1: config 0 descriptor?? [ 842.402723][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 842.409301][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 842.460224][ T8473] usb 6-1: USB disconnect, device number 46 19:16:58 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:16:58 executing program 3: 19:16:58 executing program 4: 19:16:58 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) 19:16:58 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d0900"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) [ 842.927781][T16391] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 19:16:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:16:58 executing program 4: 19:16:58 executing program 3: 19:16:59 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d0900"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:16:59 executing program 4: 19:16:59 executing program 3: [ 844.003143][ T8473] usb 6-1: new high-speed USB device number 47 using dummy_hcd 19:16:59 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) [ 844.259409][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 844.390907][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.402455][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.412569][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 844.425650][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 844.435004][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.536319][T16410] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 844.761872][ T8473] usb 6-1: config 0 descriptor?? 19:17:00 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:00 executing program 4: 19:17:00 executing program 3: [ 845.338255][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 845.344884][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 845.434934][ T8473] usb 6-1: USB disconnect, device number 47 19:17:00 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r1, 0x0, 0x883713, 0x0) 19:17:01 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) 19:17:01 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 19:17:01 executing program 4: 19:17:01 executing program 3: 19:17:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:02 executing program 4: 19:17:02 executing program 3: [ 846.888956][ T8474] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 847.228928][ T8474] usb 6-1: Using ep0 maxpacket: 16 [ 847.351291][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.362819][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.372952][ T8474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 847.387847][ T8474] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:17:02 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r1, 0x0, 0x883713, 0x0) [ 847.397643][ T8474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:02 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:02 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) 19:17:03 executing program 4: 19:17:03 executing program 3: [ 847.812677][ T8474] usb 6-1: config 0 descriptor?? [ 848.340831][ T8474] usbhid 6-1:0.0: can't add hid device: -71 [ 848.347472][ T8474] usbhid: probe of 6-1:0.0 failed with error -71 [ 848.448486][ T8474] usb 6-1: USB disconnect, device number 48 19:17:04 executing program 3: 19:17:04 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 19:17:04 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:04 executing program 4: 19:17:04 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r1, 0x0, 0x883713, 0x0) 19:17:04 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) 19:17:04 executing program 3: 19:17:05 executing program 4: 19:17:05 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 849.849127][ T2980] usb 6-1: new high-speed USB device number 49 using dummy_hcd 19:17:05 executing program 4: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x5f11d1ebdccfe444) [ 850.089006][ T2980] usb 6-1: Using ep0 maxpacket: 16 [ 850.211480][ T2980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 850.223435][ T2980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 850.233549][ T2980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 850.246727][ T2980] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 850.256873][ T2980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0xffffffffffffffba}, 0x0) 19:17:06 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, 0x0, 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:17:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 850.735339][ T2980] usb 6-1: config 0 descriptor?? [ 851.279853][ T2980] usbhid 6-1:0.0: can't add hid device: -71 [ 851.286162][ T2980] usbhid: probe of 6-1:0.0 failed with error -71 [ 851.337056][ T2980] usb 6-1: USB disconnect, device number 49 [ 851.560847][ C1] not chained 190000 origins [ 851.565486][ C1] CPU: 1 PID: 8820 Comm: kworker/u4:3 Not tainted 5.9.0-rc8-syzkaller #0 [ 851.573893][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 851.583963][ C1] Workqueue: krdsd rds_connect_worker [ 851.589335][ C1] Call Trace: [ 851.592619][ C1] [ 851.595478][ C1] dump_stack+0x21c/0x280 [ 851.599822][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 851.605553][ C1] ? should_failslab+0x29/0x70 [ 851.610324][ C1] ? slab_pre_alloc_hook+0xd5/0x590 [ 851.615526][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.620731][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 851.626552][ C1] ? __msan_metadata_ptr_for_store_2+0x13/0x20 [ 851.632712][ C1] ? tcp_parse_options+0x20b4/0x2150 [ 851.638007][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.643214][ C1] __msan_chain_origin+0x57/0xa0 [ 851.648158][ C1] tcp_conn_request+0x1b29/0x4b80 [ 851.653192][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.658403][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 851.664037][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.669245][ C1] tcp_v4_conn_request+0x201/0x290 [ 851.674365][ C1] tcp_v6_conn_request+0xeb/0x330 [ 851.679398][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 851.684693][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 851.690070][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 851.695880][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.701100][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 851.706918][ C1] ? kmsan_memcpy_memmove_metadata+0x110/0x2d0 [ 851.713083][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.718301][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 851.722908][ C1] ? tcp_v4_fill_cb+0x565/0x5e0 [ 851.727774][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 851.732299][ C1] ? tcp_filter+0xf0/0xf0 [ 851.736634][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 851.742102][ C1] ip_local_deliver+0x583/0x8c0 [ 851.747046][ C1] ? ip_local_deliver+0x8c0/0x8c0 [ 851.752076][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 851.757713][ C1] ip_rcv+0x5c0/0x830 [ 851.761714][ C1] ? ip_rcv_core+0x14b0/0x14b0 [ 851.766499][ C1] __netif_receive_skb+0x1ec/0x640 [ 851.771632][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 851.777281][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 851.782934][ C1] process_backlog+0x523/0xc10 [ 851.787713][ C1] napi_poll+0x4aa/0x1090 [ 851.792065][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 851.797363][ C1] net_rx_action+0x35c/0xd40 [ 851.801965][ C1] ? net_tx_action+0xdb0/0xdb0 [ 851.806735][ C1] __do_softirq+0x1b9/0x7ed [ 851.811248][ C1] ? __sysvec_apic_timer_interrupt+0x125/0x550 [ 851.817410][ C1] asm_call_irq_on_stack+0xf/0x20 [ 851.822428][ C1] [ 851.825374][ C1] do_softirq_own_stack+0x6e/0x90 [ 851.830401][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 851.835603][ C1] local_bh_enable+0x36/0x40 [ 851.840200][ C1] ip_finish_output2+0x2408/0x28e0 [ 851.845318][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 851.851041][ C1] ? nf_ct_deliver_cached_events+0x531/0x7e0 [ 851.857042][ C1] __ip_finish_output+0xeb5/0xfd0 [ 851.862075][ C1] ip_finish_output+0x143/0x4a0 [ 851.866936][ C1] ip_output+0x32e/0x6c0 [ 851.871204][ C1] ? ip_mc_finish_output+0x770/0x770 [ 851.876497][ C1] ? ip_finish_output+0x4a0/0x4a0 [ 851.881525][ C1] __ip_queue_xmit+0x1edd/0x2410 [ 851.886470][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 851.892290][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 851.898371][ C1] ? ipv4_default_advmss+0x70a/0x7d0 [ 851.903664][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.908869][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.914073][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.919275][ C1] ip_queue_xmit+0xcc/0xf0 [ 851.923695][ C1] ? __ip_queue_xmit+0x2410/0x2410 [ 851.928814][ C1] __tcp_transmit_skb+0x4ac5/0x5d50 [ 851.934025][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 851.939678][ C1] tcp_connect+0x1022/0x3bd0 [ 851.944280][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 851.950097][ C1] ? tcp_fastopen_defer_connect+0x106/0xa80 [ 851.956004][ C1] tcp_v4_connect+0x2558/0x26f0 [ 851.960873][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 851.965821][ C1] __inet_stream_connect+0xaa8/0x16c0 [ 851.971204][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 851.976499][ C1] ? local_bh_enable+0x36/0x40 [ 851.981278][ C1] ? kmsan_get_metadata+0x116/0x180 [ 851.986491][ C1] inet_stream_connect+0x101/0x180 [ 851.991620][ C1] ? __inet_stream_connect+0x16c0/0x16c0 [ 851.997263][ C1] rds_tcp_conn_path_connect+0x9d9/0xd30 [ 852.002907][ C1] ? kmsan_get_metadata+0x116/0x180 [ 852.008117][ C1] ? rds_tcp_state_change+0x400/0x400 [ 852.013499][ C1] rds_connect_worker+0x36b/0x550 [ 852.018527][ C1] ? rds_addr_cmp+0x290/0x290 [ 852.023218][ C1] process_one_work+0x1224/0x20a0 [ 852.028257][ C1] worker_thread+0x10cc/0x2740 [ 852.033023][ C1] ? kmsan_get_metadata+0x116/0x180 [ 852.038229][ C1] kthread+0x51c/0x560 [ 852.042304][ C1] ? process_one_work+0x20a0/0x20a0 [ 852.047507][ C1] ? kthread_blkcg+0x110/0x110 [ 852.052273][ C1] ret_from_fork+0x1f/0x30 [ 852.056682][ C1] Uninit was stored to memory at: [ 852.061721][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 852.067450][ C1] __msan_chain_origin+0x57/0xa0 [ 852.072393][ C1] tcp_conn_request+0x1b29/0x4b80 [ 852.077420][ C1] tcp_v4_conn_request+0x201/0x290 [ 852.082538][ C1] tcp_v6_conn_request+0xeb/0x330 [ 852.087574][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 852.092955][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 852.097548][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 852.102056][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 852.107517][ C1] ip_local_deliver+0x583/0x8c0 [ 852.112369][ C1] ip_rcv+0x5c0/0x830 [ 852.116356][ C1] __netif_receive_skb+0x1ec/0x640 [ 852.121476][ C1] process_backlog+0x523/0xc10 [ 852.126248][ C1] napi_poll+0x4aa/0x1090 [ 852.130581][ C1] net_rx_action+0x35c/0xd40 [ 852.135177][ C1] __do_softirq+0x1b9/0x7ed [ 852.139669][ C1] [ 852.141989][ C1] Uninit was stored to memory at: [ 852.147028][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 852.152929][ C1] __msan_chain_origin+0x57/0xa0 [ 852.157871][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 852.163161][ C1] tcp_conn_request+0x3028/0x4b80 [ 852.168190][ C1] tcp_v4_conn_request+0x201/0x290 [ 852.173305][ C1] tcp_v6_conn_request+0xeb/0x330 [ 852.178337][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 852.183732][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 852.188323][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 852.192831][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 852.198291][ C1] ip_local_deliver+0x583/0x8c0 [ 852.203255][ C1] ip_rcv+0x5c0/0x830 [ 852.207241][ C1] __netif_receive_skb+0x1ec/0x640 [ 852.212357][ C1] process_backlog+0x523/0xc10 [ 852.217125][ C1] napi_poll+0x4aa/0x1090 [ 852.221456][ C1] net_rx_action+0x35c/0xd40 [ 852.226049][ C1] __do_softirq+0x1b9/0x7ed [ 852.230536][ C1] [ 852.232857][ C1] Uninit was stored to memory at: [ 852.237896][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 852.243624][ C1] __msan_chain_origin+0x57/0xa0 [ 852.248566][ C1] tcp_conn_request+0x1b29/0x4b80 [ 852.253596][ C1] tcp_v4_conn_request+0x201/0x290 [ 852.258720][ C1] tcp_v6_conn_request+0xeb/0x330 [ 852.263753][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 852.269133][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 852.273728][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 852.278235][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 852.283695][ C1] ip_local_deliver+0x583/0x8c0 [ 852.288546][ C1] ip_rcv+0x5c0/0x830 [ 852.292536][ C1] __netif_receive_skb+0x1ec/0x640 [ 852.297654][ C1] process_backlog+0x523/0xc10 [ 852.302423][ C1] napi_poll+0x4aa/0x1090 [ 852.306759][ C1] net_rx_action+0x35c/0xd40 [ 852.311357][ C1] __do_softirq+0x1b9/0x7ed [ 852.315850][ C1] [ 852.318169][ C1] Uninit was stored to memory at: [ 852.323207][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 852.328936][ C1] __msan_chain_origin+0x57/0xa0 [ 852.333884][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 852.339175][ C1] tcp_conn_request+0x3028/0x4b80 [ 852.344205][ C1] tcp_v4_conn_request+0x201/0x290 [ 852.349319][ C1] tcp_v6_conn_request+0xeb/0x330 [ 852.354354][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 852.359734][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 852.364329][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 852.368835][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 852.374295][ C1] ip_local_deliver+0x583/0x8c0 [ 852.379145][ C1] ip_rcv+0x5c0/0x830 [ 852.383131][ C1] __netif_receive_skb+0x1ec/0x640 [ 852.388243][ C1] process_backlog+0x523/0xc10 [ 852.393006][ C1] napi_poll+0x4aa/0x1090 [ 852.397339][ C1] net_rx_action+0x35c/0xd40 [ 852.401932][ C1] __do_softirq+0x1b9/0x7ed [ 852.406420][ C1] [ 852.408738][ C1] Uninit was stored to memory at: [ 852.413769][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 852.419496][ C1] __msan_chain_origin+0x57/0xa0 [ 852.424431][ C1] tcp_conn_request+0x1b29/0x4b80 [ 852.429459][ C1] tcp_v4_conn_request+0x201/0x290 [ 852.434571][ C1] tcp_v6_conn_request+0xeb/0x330 [ 852.439605][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 852.444983][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 852.449579][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 852.454085][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 852.459545][ C1] ip_local_deliver+0x583/0x8c0 [ 852.464393][ C1] ip_rcv+0x5c0/0x830 [ 852.468378][ C1] __netif_receive_skb+0x1ec/0x640 [ 852.473489][ C1] process_backlog+0x523/0xc10 [ 852.478255][ C1] napi_poll+0x4aa/0x1090 [ 852.482589][ C1] net_rx_action+0x35c/0xd40 [ 852.487179][ C1] __do_softirq+0x1b9/0x7ed [ 852.491668][ C1] [ 852.493990][ C1] Uninit was stored to memory at: [ 852.499026][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 852.504750][ C1] __msan_chain_origin+0x57/0xa0 [ 852.509693][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 852.514978][ C1] tcp_conn_request+0x3028/0x4b80 [ 852.520158][ C1] tcp_v4_conn_request+0x201/0x290 [ 852.525276][ C1] tcp_v6_conn_request+0xeb/0x330 [ 852.530308][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 852.535683][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 852.540285][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 852.544792][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 852.550251][ C1] ip_local_deliver+0x583/0x8c0 [ 852.555099][ C1] ip_rcv+0x5c0/0x830 [ 852.559085][ C1] __netif_receive_skb+0x1ec/0x640 [ 852.564201][ C1] process_backlog+0x523/0xc10 [ 852.568969][ C1] napi_poll+0x4aa/0x1090 [ 852.573301][ C1] net_rx_action+0x35c/0xd40 [ 852.577896][ C1] __do_softirq+0x1b9/0x7ed [ 852.582384][ C1] [ 852.584706][ C1] Uninit was stored to memory at: [ 852.589743][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 852.595471][ C1] __msan_chain_origin+0x57/0xa0 [ 852.600413][ C1] tcp_conn_request+0x1b29/0x4b80 [ 852.605441][ C1] tcp_v4_conn_request+0x201/0x290 [ 852.610560][ C1] tcp_v6_conn_request+0xeb/0x330 [ 852.615591][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 852.620984][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 852.625584][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 852.630089][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 852.635549][ C1] ip_local_deliver+0x583/0x8c0 [ 852.640403][ C1] ip_rcv+0x5c0/0x830 [ 852.644392][ C1] __netif_receive_skb+0x1ec/0x640 [ 852.649508][ C1] process_backlog+0x523/0xc10 [ 852.654278][ C1] napi_poll+0x4aa/0x1090 [ 852.658615][ C1] net_rx_action+0x35c/0xd40 [ 852.663214][ C1] __do_softirq+0x1b9/0x7ed [ 852.667705][ C1] [ 852.670023][ C1] Uninit was created at: [ 852.674276][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 852.679910][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 852.684678][ C1] __alloc_pages_nodemask+0x84e/0x1040 [ 852.690145][ C1] alloc_pages_current+0x79b/0xb40 [ 852.695262][ C1] allocate_slab+0x34b/0x11c0 [ 852.699944][ C1] ___slab_alloc+0xd35/0x1940 [ 852.704625][ C1] kmem_cache_alloc+0x869/0xc70 [ 852.709476][ C1] inet_reqsk_alloc+0xaf/0x8b0 [ 852.714244][ C1] tcp_conn_request+0x9a8/0x4b80 [ 852.719186][ C1] tcp_v4_conn_request+0x201/0x290 [ 852.724303][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 852.729684][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 852.734308][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 852.738813][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 852.744274][ C1] ip_local_deliver+0x583/0x8c0 [ 852.749136][ C1] ip_sublist_rcv+0x121b/0x1560 [ 852.753993][ C1] ip_list_rcv+0x914/0x980 [ 852.758421][ C1] __netif_receive_skb_list_core+0xeab/0x12a0 [ 852.764495][ C1] __netif_receive_skb_list+0x7e0/0x960 [ 852.770050][ C1] netif_receive_skb_list_internal+0x851/0xdc0 [ 852.776216][ C1] napi_complete_done+0x557/0xf80 [ 852.781265][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 852.786646][ C1] virtnet_poll+0x170f/0x1d10 [ 852.791328][ C1] napi_poll+0x4aa/0x1090 [ 852.795667][ C1] net_rx_action+0x35c/0xd40 [ 852.800265][ C1] __do_softirq+0x1b9/0x7ed 19:17:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 19:17:08 executing program 0: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/120, &(0x7f0000000100)=0x78) 19:17:08 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) 19:17:08 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, 0x0, 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:17:08 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 853.938994][ T8474] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 854.219427][ T8474] usb 6-1: Using ep0 maxpacket: 16 [ 854.342237][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.353434][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.363564][ T8474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 854.376678][ T8474] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 854.386113][ T8474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:09 executing program 0: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:09 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, 0x0, 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x883713, 0x0) 19:17:09 executing program 3: 19:17:09 executing program 4: [ 854.866376][ T8474] usb 6-1: config 0 descriptor?? 19:17:10 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:10 executing program 3: socketpair(0x2, 0x80002, 0x0, 0x0) [ 855.428996][ T8474] usbhid 6-1:0.0: can't add hid device: -71 [ 855.435421][ T8474] usbhid: probe of 6-1:0.0 failed with error -71 [ 855.502083][ T8474] usb 6-1: USB disconnect, device number 50 19:17:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0) 19:17:11 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x883713, 0x0) 19:17:11 executing program 0: r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:11 executing program 4: syz_emit_ethernet(0x38, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7b1eb6", 0x2, 0x33, 0x0, @private0, @dev, {[], "d876"}}}}}, 0x0) 19:17:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2, 0x0, &(0x7f0000000140)) 19:17:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000000)) 19:17:12 executing program 0: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 856.748915][ T8473] usb 6-1: new high-speed USB device number 51 using dummy_hcd 19:17:12 executing program 3: modify_ldt$write(0x1, &(0x7f00000000c0), 0x10) 19:17:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 857.003057][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 857.182082][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.193223][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.203301][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 857.216360][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 857.225771][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:12 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x883713, 0x0) 19:17:12 executing program 0: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:12 executing program 4: clock_gettime(0x69a3a39872365d13, 0x0) [ 857.639222][ T8473] usb 6-1: config 0 descriptor?? [ 858.194429][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 858.200783][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 858.273663][ T8473] usb 6-1: USB disconnect, device number 51 19:17:14 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}]}}, 0x0}, 0x0) 19:17:14 executing program 3: r0 = socket(0xa, 0x80003, 0x3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 19:17:14 executing program 0: rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:14 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0xd0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'bond_slave_1\x00', 'bridge0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, "5eba"}}]}, @common=@unspec=@STANDARD={0x28}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) 19:17:14 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:14 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x883713, 0x0) 19:17:14 executing program 4: r0 = socket(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @private0, [], [], 'veth1_vlan\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) 19:17:14 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:14 executing program 3: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) [ 859.769346][ T8791] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 860.009297][ T8791] usb 6-1: Using ep0 maxpacket: 16 19:17:15 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000980)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) [ 860.130771][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.142274][ T8791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.152482][ T8791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 860.165609][ T8791] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:17:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@nested={0x5, 0x1, 0x0, 0x1, [@generic='\n']}]}, 0x1c}}, 0x0) [ 860.175022][ T8791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:15 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 860.487563][ T8791] usb 6-1: config 0 descriptor?? [ 861.220448][ T8791] usbhid 6-1:0.0: can't add hid device: -71 [ 861.226726][ T8791] usbhid: probe of 6-1:0.0 failed with error -71 [ 861.308851][ T8791] usb 6-1: USB disconnect, device number 52 19:17:17 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}]}}, 0x0}, 0x0) 19:17:17 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x883713, 0x0) 19:17:17 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f00000000c0)=@hat={'permhat ', 0x0, 0x5e, ['/p\xe2\x82\x19\x9broc/tvread-s_\x05f/attr/c\xd8\xed\x00\x00ft\x00']}, 0x3e) 19:17:17 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x4, 0x4) 19:17:17 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000), 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:17 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 862.023484][ T32] audit: type=1400 audit(1604085437.435:62): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16636 comm="syz-executor.4" 19:17:17 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') 19:17:17 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) 19:17:17 executing program 3: syz_emit_ethernet(0x6e, &(0x7f0000000140)={@local, @random="1c6f899eb7cf", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@lsrr={0x83, 0x3, 0xe3}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:17:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 862.718501][ T8473] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 862.958547][ T8473] usb 6-1: Using ep0 maxpacket: 16 19:17:18 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(r0, &(0x7f0000000900)=[{&(0x7f0000000080)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}], 0x1, 0x0) [ 863.091052][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.102470][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.112604][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 863.125713][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:17:18 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x883713, 0x0) [ 863.135046][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.209514][ T8473] usb 6-1: config 0 descriptor?? [ 863.980101][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 863.986389][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 864.063241][ T8473] usb 6-1: USB disconnect, device number 53 19:17:19 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}]}}, 0x0}, 0x0) 19:17:19 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="afbc", 0x2, 0x0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 19:17:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:19 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0x4}}]}, 0x30}}, 0x0) 19:17:19 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) 19:17:19 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x883713, 0x0) 19:17:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)=@getlink={0x38, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x8, 0x18, 0x0, 0x1, [{0x4}]}, @IFLA_NET_NS_FD={0x8}, @IFLA_GSO_MAX_SIZE={0x8}]}, 0x38}}, 0x0) 19:17:20 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 19:17:20 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) [ 865.428523][ T8475] usb 6-1: new high-speed USB device number 54 using dummy_hcd 19:17:21 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) [ 865.678565][ T8475] usb 6-1: Using ep0 maxpacket: 16 19:17:21 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0xc}, &(0x7f0000000140)={0x0, 0x2710}) [ 865.800058][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.812355][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.823327][ T8475] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 865.836486][ T8475] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 865.845813][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:21 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 866.040138][ T8475] usb 6-1: config 0 descriptor?? [ 866.780057][ T8475] usbhid 6-1:0.0: can't add hid device: -71 [ 866.786615][ T8475] usbhid: probe of 6-1:0.0 failed with error -71 [ 866.862265][ T8475] usb 6-1: USB disconnect, device number 54 19:17:22 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:22 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x189c01, 0x0) write$ppp(r0, 0x0, 0x0) 19:17:22 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') 19:17:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:22 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() gettid() rt_tgsigqueueinfo(r0, 0x0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) 19:17:22 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 19:17:23 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x20000194, &(0x7f0000000b80)=[{}]}) 19:17:23 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003a80)={&(0x7f0000000280), 0xc, &(0x7f0000003a40)={0x0}}, 0x0) [ 868.318374][ T8473] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 868.568492][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 868.690139][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.701548][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.711706][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 868.724804][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:17:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000000b06f10000eb0000010bfdff1d000400070001000600f2ff9b000780180001808008000000010000ff0000000000020000001c0006000465000000000c00090000000020000014aa140017007665746800008000616e00000000800005000700880000001400040000000000000000000000001b020100000900120000007a32000000000c001b400500f77b001980000c00148008200191edfbed879db145000006028aab86000000001a00000032040000003d090002"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2c6) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 19:17:24 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@private}}]}, 0x50}}, 0x0) 19:17:24 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() gettid() rt_tgsigqueueinfo(r0, 0x0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) [ 868.734184][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:24 executing program 4: r0 = socket(0x1, 0x1, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) [ 868.937202][ T8473] usb 6-1: config 0 descriptor?? [ 869.672489][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 869.678840][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 869.755305][ T8473] usb 6-1: USB disconnect, device number 55 19:17:25 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:25 executing program 3: r0 = socket(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0xffffffff, 0x0, 0x0, 0x240, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'sit0\x00'}}, @common=@dst={{0x48, 'dst\x00'}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @private0, [], [], 'veth1_vlan\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 19:17:25 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3ff, 0x4) 19:17:25 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() gettid() rt_tgsigqueueinfo(r0, 0x0, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r1, &(0x7f0000000180)=""/387, 0x183) 19:17:25 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:25 executing program 1: timer_create(0x59bbbbd27a0b549d, 0x0, 0x0) 19:17:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000d40)={0x10, 0x0, 0x0, 0x10000}, 0xc) 19:17:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x401}, 0x14}}, 0x0) [ 870.838628][ T8473] usb 6-1: new high-speed USB device number 56 using dummy_hcd 19:17:26 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000000)=0x40) [ 871.088217][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 871.220126][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.231393][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.243414][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 871.256856][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 871.266147][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:26 executing program 4: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{0x0, r0/1000+60000}}, &(0x7f0000000100)) [ 871.470695][ T8473] usb 6-1: config 0 descriptor?? 19:17:26 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8949, &(0x7f0000000000)={'lo\x00', @ifru_map}) 19:17:27 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@security={'security\x00', 0xe, 0x4, 0x528, 0xffffffff, 0x0, 0x108, 0x0, 0xffffffff, 0xffffffff, 0x458, 0x458, 0x458, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @loopback, [], [], 'netdevsim0\x00', 'wg1\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "80cba7317ce65f152311f97585a7c8fe098e1867b0286d0838030546cfaf511cd18e0179f5e23d664900009b067b2cc4918fc1a12cfe031be5ad6cc2f07c310e"}}}, {{@ipv6={@remote, @loopback, [], [], 'syzkaller0\x00', 'macsec0\x00'}, 0x0, 0x210, 0x238, 0x0, {}, [@common=@rt={{0x138, 'rt\x00'}, {0x0, [], 0x0, 0x0, 0x0, [@mcast2, @local, @ipv4={[], [], @multicast2}, @dev, @empty, @mcast1, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, @mcast2, @mcast2, @loopback, @ipv4={[], [], @broadcast}, @private0, @dev, @mcast2, @empty]}}, @common=@srh={{0x30, 'srh\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x588) [ 872.151728][ C1] not chained 200000 origins [ 872.156378][ C1] CPU: 1 PID: 8492 Comm: kworker/u4:2 Not tainted 5.9.0-rc8-syzkaller #0 [ 872.164778][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 872.174838][ C1] Workqueue: krdsd rds_connect_worker [ 872.180194][ C1] Call Trace: [ 872.183479][ C1] [ 872.186325][ C1] dump_stack+0x21c/0x280 [ 872.190648][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 872.196360][ C1] ? ip_route_output_key_hash_rcu+0x1d7f/0x1f90 [ 872.202599][ C1] ? xfrm_lookup_route+0x2db/0x390 [ 872.207702][ C1] ? ip_route_output_flow+0x3aa/0x420 [ 872.213059][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.218245][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 872.224045][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 872.230188][ C1] ? tcp_select_initial_window+0x918/0x9e0 [ 872.236004][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.241196][ C1] __msan_chain_origin+0x57/0xa0 [ 872.246131][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 872.251409][ C1] tcp_conn_request+0x3028/0x4b80 [ 872.256431][ C1] ? __msan_get_context_state+0x9/0x20 [ 872.261878][ C1] ? cache_from_obj+0x1c/0x7f0 [ 872.266627][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.271823][ C1] tcp_v4_conn_request+0x201/0x290 [ 872.276925][ C1] tcp_v6_conn_request+0xeb/0x330 [ 872.281938][ C1] ? inet6_sk_rx_dst_set+0x4d0/0x4d0 [ 872.287213][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 872.292588][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 872.298380][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.303567][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 872.309366][ C1] ? kmsan_memcpy_memmove_metadata+0x110/0x2d0 [ 872.315507][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.320693][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 872.325269][ C1] ? tcp_v4_fill_cb+0x565/0x5e0 [ 872.330111][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 872.334611][ C1] ? tcp_filter+0xf0/0xf0 [ 872.338937][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 872.344385][ C1] ip_local_deliver+0x583/0x8c0 [ 872.349227][ C1] ? ip_local_deliver+0x8c0/0x8c0 [ 872.354241][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 872.359861][ C1] ip_rcv+0x5c0/0x830 [ 872.363830][ C1] ? ip_rcv_core+0x14b0/0x14b0 [ 872.368582][ C1] __netif_receive_skb+0x1ec/0x640 [ 872.373684][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 872.379305][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 872.384928][ C1] process_backlog+0x523/0xc10 [ 872.389683][ C1] napi_poll+0x4aa/0x1090 [ 872.394002][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 872.399274][ C1] net_rx_action+0x35c/0xd40 [ 872.403855][ C1] ? net_tx_action+0xdb0/0xdb0 [ 872.408607][ C1] __do_softirq+0x1b9/0x7ed [ 872.413102][ C1] ? __sysvec_call_function_single+0x77/0x290 [ 872.419155][ C1] asm_call_irq_on_stack+0xf/0x20 [ 872.424159][ C1] [ 872.427089][ C1] do_softirq_own_stack+0x6e/0x90 [ 872.432106][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 872.437294][ C1] local_bh_enable+0x36/0x40 [ 872.441873][ C1] ip_finish_output2+0x2408/0x28e0 [ 872.446974][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 872.452684][ C1] ? nf_ct_deliver_cached_events+0x531/0x7e0 [ 872.458657][ C1] __ip_finish_output+0xeb5/0xfd0 [ 872.464109][ C1] ip_finish_output+0x143/0x4a0 [ 872.468950][ C1] ip_output+0x32e/0x6c0 [ 872.473185][ C1] ? ip_mc_finish_output+0x770/0x770 [ 872.478458][ C1] ? ip_finish_output+0x4a0/0x4a0 [ 872.483471][ C1] __ip_queue_xmit+0x1edd/0x2410 [ 872.488395][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 872.494202][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 872.500259][ C1] ? ipv4_default_advmss+0x70a/0x7d0 [ 872.505531][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.510715][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.515917][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.521107][ C1] ip_queue_xmit+0xcc/0xf0 [ 872.525515][ C1] ? __ip_queue_xmit+0x2410/0x2410 [ 872.530613][ C1] __tcp_transmit_skb+0x4ac5/0x5d50 [ 872.535805][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 872.541435][ C1] tcp_connect+0x1022/0x3bd0 [ 872.546014][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 872.551811][ C1] ? tcp_fastopen_defer_connect+0x106/0xa80 [ 872.557695][ C1] tcp_v4_connect+0x2558/0x26f0 [ 872.562543][ C1] ? tcp_twsk_unique+0xd40/0xd40 [ 872.567470][ C1] __inet_stream_connect+0xaa8/0x16c0 [ 872.572832][ C1] ? __local_bh_enable_ip+0x97/0x1d0 [ 872.578109][ C1] ? local_bh_enable+0x36/0x40 [ 872.582865][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.588079][ C1] inet_stream_connect+0x101/0x180 [ 872.593182][ C1] ? __inet_stream_connect+0x16c0/0x16c0 [ 872.598811][ C1] rds_tcp_conn_path_connect+0x9d9/0xd30 [ 872.604435][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.609715][ C1] ? rds_tcp_state_change+0x400/0x400 [ 872.615077][ C1] rds_connect_worker+0x36b/0x550 [ 872.620093][ C1] ? rds_addr_cmp+0x290/0x290 [ 872.624757][ C1] process_one_work+0x1224/0x20a0 [ 872.629779][ C1] worker_thread+0x10cc/0x2740 [ 872.634533][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.639720][ C1] ? kmsan_get_metadata+0x116/0x180 [ 872.644908][ C1] kthread+0x51c/0x560 [ 872.648966][ C1] ? process_one_work+0x20a0/0x20a0 [ 872.654151][ C1] ? kthread_blkcg+0x110/0x110 [ 872.658903][ C1] ret_from_fork+0x1f/0x30 [ 872.663301][ C1] Uninit was stored to memory at: [ 872.668322][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 872.674029][ C1] __msan_chain_origin+0x57/0xa0 [ 872.678956][ C1] tcp_conn_request+0x1b29/0x4b80 [ 872.683968][ C1] tcp_v4_conn_request+0x201/0x290 [ 872.689071][ C1] tcp_v6_conn_request+0xeb/0x330 [ 872.694096][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 872.699457][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 872.704043][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 872.708533][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 872.713978][ C1] ip_local_deliver+0x583/0x8c0 [ 872.718826][ C1] ip_rcv+0x5c0/0x830 [ 872.722823][ C1] __netif_receive_skb+0x1ec/0x640 [ 872.727936][ C1] process_backlog+0x523/0xc10 [ 872.732706][ C1] napi_poll+0x4aa/0x1090 [ 872.737028][ C1] net_rx_action+0x35c/0xd40 [ 872.741615][ C1] __do_softirq+0x1b9/0x7ed [ 872.746112][ C1] [ 872.748429][ C1] Uninit was stored to memory at: [ 872.753449][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 872.759157][ C1] __msan_chain_origin+0x57/0xa0 [ 872.764085][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 872.769361][ C1] tcp_conn_request+0x3028/0x4b80 [ 872.774375][ C1] tcp_v4_conn_request+0x201/0x290 [ 872.779473][ C1] tcp_v6_conn_request+0xeb/0x330 [ 872.784485][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 872.789844][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 872.794421][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 872.798931][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 872.804393][ C1] ip_local_deliver+0x583/0x8c0 [ 872.809243][ C1] ip_rcv+0x5c0/0x830 [ 872.813221][ C1] __netif_receive_skb+0x1ec/0x640 [ 872.818323][ C1] process_backlog+0x523/0xc10 [ 872.823091][ C1] napi_poll+0x4aa/0x1090 [ 872.827425][ C1] net_rx_action+0x35c/0xd40 [ 872.832016][ C1] __do_softirq+0x1b9/0x7ed [ 872.836500][ C1] [ 872.838812][ C1] Uninit was stored to memory at: [ 872.843831][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 872.849538][ C1] __msan_chain_origin+0x57/0xa0 [ 872.854459][ C1] tcp_conn_request+0x1b29/0x4b80 [ 872.859471][ C1] tcp_v4_conn_request+0x201/0x290 [ 872.864581][ C1] tcp_v6_conn_request+0xeb/0x330 [ 872.869604][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 872.874982][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 872.879568][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 872.884061][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 872.889504][ C1] ip_local_deliver+0x583/0x8c0 [ 872.894337][ C1] ip_rcv+0x5c0/0x830 [ 872.898308][ C1] __netif_receive_skb+0x1ec/0x640 [ 872.903408][ C1] process_backlog+0x523/0xc10 [ 872.908159][ C1] napi_poll+0x4aa/0x1090 [ 872.912474][ C1] net_rx_action+0x35c/0xd40 [ 872.917052][ C1] __do_softirq+0x1b9/0x7ed [ 872.921532][ C1] [ 872.923842][ C1] Uninit was stored to memory at: [ 872.928857][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 872.934698][ C1] __msan_chain_origin+0x57/0xa0 [ 872.939655][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 872.944939][ C1] tcp_conn_request+0x3028/0x4b80 [ 872.949953][ C1] tcp_v4_conn_request+0x201/0x290 [ 872.955056][ C1] tcp_v6_conn_request+0xeb/0x330 [ 872.960076][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 872.965522][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 872.970098][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 872.974589][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 872.980033][ C1] ip_local_deliver+0x583/0x8c0 [ 872.984868][ C1] ip_rcv+0x5c0/0x830 [ 872.988838][ C1] __netif_receive_skb+0x1ec/0x640 [ 872.993935][ C1] process_backlog+0x523/0xc10 [ 872.998690][ C1] napi_poll+0x4aa/0x1090 [ 873.003006][ C1] net_rx_action+0x35c/0xd40 [ 873.007610][ C1] __do_softirq+0x1b9/0x7ed [ 873.012090][ C1] [ 873.014400][ C1] Uninit was stored to memory at: [ 873.019415][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 873.025141][ C1] __msan_chain_origin+0x57/0xa0 [ 873.030062][ C1] tcp_conn_request+0x1b29/0x4b80 [ 873.035073][ C1] tcp_v4_conn_request+0x201/0x290 [ 873.040170][ C1] tcp_v6_conn_request+0xeb/0x330 [ 873.045183][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 873.050542][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 873.055118][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 873.059607][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 873.065048][ C1] ip_local_deliver+0x583/0x8c0 [ 873.069883][ C1] ip_rcv+0x5c0/0x830 [ 873.073851][ C1] __netif_receive_skb+0x1ec/0x640 [ 873.078952][ C1] process_backlog+0x523/0xc10 [ 873.083707][ C1] napi_poll+0x4aa/0x1090 [ 873.088026][ C1] net_rx_action+0x35c/0xd40 [ 873.092602][ C1] __do_softirq+0x1b9/0x7ed [ 873.097080][ C1] [ 873.099392][ C1] Uninit was stored to memory at: [ 873.104408][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 873.110118][ C1] __msan_chain_origin+0x57/0xa0 [ 873.115043][ C1] tcp_openreq_init_rwin+0xc79/0xf80 [ 873.120314][ C1] tcp_conn_request+0x3028/0x4b80 [ 873.125324][ C1] tcp_v4_conn_request+0x201/0x290 [ 873.130423][ C1] tcp_v6_conn_request+0xeb/0x330 [ 873.135435][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 873.140793][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 873.145370][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 873.149861][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 873.155305][ C1] ip_local_deliver+0x583/0x8c0 [ 873.160139][ C1] ip_rcv+0x5c0/0x830 [ 873.164110][ C1] __netif_receive_skb+0x1ec/0x640 [ 873.169207][ C1] process_backlog+0x523/0xc10 [ 873.173958][ C1] napi_poll+0x4aa/0x1090 [ 873.178273][ C1] net_rx_action+0x35c/0xd40 [ 873.182850][ C1] __do_softirq+0x1b9/0x7ed [ 873.187329][ C1] [ 873.189640][ C1] Uninit was stored to memory at: [ 873.194677][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 873.200477][ C1] __msan_chain_origin+0x57/0xa0 [ 873.205401][ C1] tcp_conn_request+0x1b29/0x4b80 [ 873.210414][ C1] tcp_v4_conn_request+0x201/0x290 [ 873.215514][ C1] tcp_v6_conn_request+0xeb/0x330 [ 873.220527][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 873.225885][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 873.230463][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 873.234952][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 873.240399][ C1] ip_local_deliver+0x583/0x8c0 [ 873.245238][ C1] ip_rcv+0x5c0/0x830 [ 873.249211][ C1] __netif_receive_skb+0x1ec/0x640 [ 873.254311][ C1] process_backlog+0x523/0xc10 [ 873.259090][ C1] napi_poll+0x4aa/0x1090 [ 873.263407][ C1] net_rx_action+0x35c/0xd40 [ 873.267985][ C1] __do_softirq+0x1b9/0x7ed [ 873.272466][ C1] [ 873.274776][ C1] Uninit was created at: [ 873.279011][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 873.284629][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 873.289383][ C1] __alloc_pages_nodemask+0x84e/0x1040 [ 873.294861][ C1] alloc_pages_current+0x79b/0xb40 [ 873.299962][ C1] allocate_slab+0x34b/0x11c0 [ 873.304629][ C1] ___slab_alloc+0xd35/0x1940 [ 873.309295][ C1] kmem_cache_alloc+0x869/0xc70 [ 873.314130][ C1] inet_reqsk_alloc+0xaf/0x8b0 [ 873.318878][ C1] tcp_conn_request+0x9a8/0x4b80 [ 873.323800][ C1] tcp_v4_conn_request+0x201/0x290 [ 873.328902][ C1] tcp_rcv_state_process+0x2e0/0x45e0 [ 873.334266][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 873.338876][ C1] tcp_v4_rcv+0x4b33/0x5cc0 [ 873.343369][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 873.348815][ C1] ip_local_deliver+0x583/0x8c0 [ 873.353668][ C1] ip_sublist_rcv+0x121b/0x1560 [ 873.358541][ C1] ip_list_rcv+0x914/0x980 [ 873.362946][ C1] __netif_receive_skb_list_core+0xeab/0x12a0 [ 873.369007][ C1] __netif_receive_skb_list+0x7e0/0x960 [ 873.374545][ C1] netif_receive_skb_list_internal+0x851/0xdc0 [ 873.380696][ C1] napi_complete_done+0x557/0xf80 [ 873.385713][ C1] virtqueue_napi_complete+0xb9/0x1f0 [ 873.391072][ C1] virtnet_poll+0x170f/0x1d10 [ 873.395733][ C1] napi_poll+0x4aa/0x1090 [ 873.400048][ C1] net_rx_action+0x35c/0xd40 [ 873.404626][ C1] __do_softirq+0x1b9/0x7ed [ 873.548462][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 873.554738][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 873.615968][ T8473] usb 6-1: USB disconnect, device number 56 19:17:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:29 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:29 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x298, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@mark={{0x30, 'mark\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 19:17:29 executing program 4: setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0xffffffffffffffc0) [ 877.789294][ T8475] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 878.039060][ T8475] usb 6-1: Using ep0 maxpacket: 16 [ 878.159442][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.170613][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.180740][ T8475] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 878.193832][ T8475] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 878.203135][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.301440][ T8475] usb 6-1: config 0 descriptor?? [ 879.028690][ T8475] usbhid 6-1:0.0: can't add hid device: -71 [ 879.035056][ T8475] usbhid: probe of 6-1:0.0 failed with error -71 [ 879.094861][ T8475] usb 6-1: USB disconnect, device number 57 19:17:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:35 executing program 1: r0 = socket(0x11, 0xa, 0x0) bind$packet(r0, 0x0, 0x0) 19:17:35 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000600)=0x7, 0x4) bind$netlink(r0, &(0x7f0000000dc0), 0xc) 19:17:35 executing program 3: r0 = socket(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)={0x0, 0xfe, [], [@generic={0x0, 0x7ef, "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"}]}, 0x800) 19:17:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x16}, 0x14}}, 0x0) select(0x40, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) 19:17:35 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 19:17:35 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000300), 0xfffffe4d) [ 880.518280][ T8471] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 880.888337][ T8471] usb 6-1: Using ep0 maxpacket: 16 [ 881.019548][ T8471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.030708][ T8471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.040881][ T8471] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 881.053991][ T8471] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 881.063406][ T8471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:36 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003900)={0x14}, 0x14}}, 0x0) 19:17:36 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 881.412266][ T8471] usb 6-1: config 0 descriptor?? 19:17:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00000002c0), 0x4) 19:17:37 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:37 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x1, &(0x7f0000000b80)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) 19:17:37 executing program 3: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setitimer(0x1, &(0x7f00000000c0)={{}, {0x0, r0/1000+60000}}, &(0x7f0000000100)) [ 882.158688][ T8471] usbhid 6-1:0.0: can't add hid device: -71 [ 882.164952][ T8471] usbhid: probe of 6-1:0.0 failed with error -71 [ 882.272141][ T8471] usb 6-1: USB disconnect, device number 58 19:17:37 executing program 1: r0 = socket(0x1, 0x1, 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000040)=@profile={'changeprofile ', '\x00'}, 0xf) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 882.724123][ T32] audit: type=1326 audit(1604085458.135:63): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16876 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f67549 code=0xffff0000 19:17:38 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:38 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, 0x0, &(0x7f0000000140)) 19:17:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000c40)={0x1, &(0x7f0000000b80)=[{0x6, 0x0, 0x0, 0xfffffffc}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) 19:17:39 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, 0x1, 0x5, 0x5}, 0x14}}, 0x0) [ 883.830486][ T8475] usb 6-1: new high-speed USB device number 59 using dummy_hcd 19:17:39 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) select(0x40, &(0x7f0000000040), &(0x7f0000000080)={0x9}, 0x0, &(0x7f0000000140)={0x0, 0x2710}) [ 884.060091][ T32] audit: type=1326 audit(1604085459.475:64): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16893 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f92549 code=0xffff0000 [ 884.084688][ T8475] usb 6-1: Using ep0 maxpacket: 16 [ 884.209283][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.220637][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.230792][ T8475] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 884.244712][ T8475] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 884.254542][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:40 executing program 4: syz_emit_ethernet(0x86, &(0x7f0000000180)={@multicast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f1b178", 0x50, 0x11, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local, {[@routing], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "21d34d2e3d79a3da51ba4542d0c559a6b87ff67e4394dcd6", "72ef83d8864e38edffbb9a39d2be3b25c064a0f1a264a21764d8296ff63c480b"}}}}}}}, 0x0) [ 884.670138][ T8475] usb 6-1: config 0 descriptor?? 19:17:40 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 884.842422][ T32] audit: type=1326 audit(1604085460.255:65): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16893 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f92549 code=0xffff0000 [ 885.408579][ T8475] usbhid 6-1:0.0: can't add hid device: -71 [ 885.414870][ T8475] usbhid: probe of 6-1:0.0 failed with error -71 [ 885.512927][ T8475] usb 6-1: USB disconnect, device number 59 19:17:41 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'bridge0\x00', @ifru_map}) 19:17:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f000000d9c0)=[{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0}], 0x1, 0x24000010) 19:17:41 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2040, 0x0) 19:17:41 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:41 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 886.773025][T16923] bridge0: mtu less than device minimum 19:17:42 executing program 1: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x190, 0xd0, 0xffffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@ip={@private, @dev, 0x0, 0x0, '\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'dummy0\x00', @ifru_hwaddr=@random}) 19:17:42 executing program 4: ioprio_set$uid(0x0, 0x0, 0x2004) [ 887.097905][ T8475] usb 6-1: new high-speed USB device number 60 using dummy_hcd 19:17:42 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @rand_addr, @link_local, @broadcast}}}}, 0x0) [ 887.338037][ T8475] usb 6-1: Using ep0 maxpacket: 16 [ 887.457984][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.469453][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 887.479563][ T8475] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 887.492723][ T8475] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 887.502130][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:43 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)=ANY=[@ANYBLOB="38000000120001"], 0x38}}, 0x0) [ 887.914796][ T8475] usb 6-1: config 0 descriptor?? 19:17:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) sendmmsg$unix(r0, &(0x7f0000000680)=[{0x0, 0x0, 0x0}], 0x1, 0x4004044) [ 888.422606][T16949] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 888.658191][ T8475] usbhid 6-1:0.0: can't add hid device: -71 [ 888.664597][ T8475] usbhid: probe of 6-1:0.0 failed with error -71 [ 888.711059][ T8475] usb 6-1: USB disconnect, device number 60 19:17:44 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:44 executing program 1: syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @random="1c6f899eb7cf", @void, {@ipv4={0x800, @gre={{0xe, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0x22, 0x3, 0x0, [{@local}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}]}]}}}}}}, 0x0) 19:17:44 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:44 executing program 3: r0 = socket(0xa, 0x80003, 0x3) sendmmsg$unix(r0, &(0x7f0000001d00)=[{&(0x7f00000006c0)=@abs, 0x6e, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}], 0x2, 0x0) 19:17:44 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:44 executing program 4: sysfs$2(0x2, 0x8, &(0x7f0000000040)=""/164) 19:17:44 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x9, 0x3, 0x360, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x290, 0xffffffff, 0xffffffff, 0x290, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @private2, [], [], 'veth0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@ipv6={@empty, @loopback, [], [], 'hsr0\x00', 'veth0\x00'}, 0x0, 0x160, 0x1c8, 0x0, {}, [@common=@srh1={{0x90, 'srh\x00'}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @mcast2, @dev}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 19:17:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="10000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 19:17:45 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:45 executing program 4: sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 890.228676][T11112] usb 6-1: new high-speed USB device number 61 using dummy_hcd 19:17:45 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x4000) read$FUSE(r0, 0x0, 0x0) 19:17:45 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 890.468608][T11112] usb 6-1: Using ep0 maxpacket: 16 [ 890.710323][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.721798][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.731929][T11112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 890.745020][T11112] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 890.754359][T11112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.021453][T11112] usb 6-1: config 0 descriptor?? 19:17:46 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:46 executing program 1: socket(0x0, 0x80d, 0x0) 19:17:46 executing program 4: setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080), 0x4) r0 = socket$inet(0x2, 0x3, 0x9) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 19:17:46 executing program 3: syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x7, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) [ 891.797912][T11112] usbhid 6-1:0.0: can't add hid device: -71 [ 891.798198][T11112] usbhid: probe of 6-1:0.0 failed with error -71 [ 891.867309][T11112] usb 6-1: USB disconnect, device number 61 19:17:47 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:47 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000021c0)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback}, 0x2, @in=@dev}}, 0xe8) 19:17:47 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4720, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 19:17:47 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x101842, 0x0) 19:17:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@unspec=@pkttype={{0x28, 'pkttype\x00'}}, @common=@inet=@socket3={{0x28, 'socket\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00'}, 0x0, 0xc0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@icmp={{0x28, 'icmp\x00'}, {0x0, 'B\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 19:17:48 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, 0x0, 0x0) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:48 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x18, 0x4, @tid=r0}, &(0x7f0000000440)) [ 893.438602][T11112] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 893.679005][T11112] usb 6-1: Using ep0 maxpacket: 16 [ 893.799869][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 893.811266][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 893.821534][T11112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 893.834644][T11112] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 893.843978][T11112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.176804][T11112] usb 6-1: config 0 descriptor?? 19:17:49 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:49 executing program 1: 19:17:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000a00)={0x14, 0x0, 0x5, 0x301}, 0x14}}, 0x0) 19:17:49 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 894.534363][ C1] not chained 210000 origins [ 894.539001][ C1] CPU: 1 PID: 8492 Comm: kworker/u4:2 Not tainted 5.9.0-rc8-syzkaller #0 [ 894.547415][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 894.557497][ C1] Workqueue: krdsd rds_tcp_accept_worker [ 894.563143][ C1] Call Trace: [ 894.566429][ C1] [ 894.569296][ C1] dump_stack+0x21c/0x280 [ 894.573646][ C1] kmsan_internal_chain_origin+0x6f/0x130 [ 894.579376][ C1] ? inet_twsk_alloc+0xaab/0xb90 [ 894.584323][ C1] ? tcp_time_wait+0xd1/0x1160 [ 894.589100][ C1] ? tcp_fin+0x23a/0x9f0 [ 894.593352][ C1] ? tcp_data_queue+0x2ce5/0xa8d0 [ 894.598391][ C1] ? tcp_rcv_state_process+0x3b0a/0x45e0 [ 894.604037][ C1] ? tcp_v4_do_rcv+0xc36/0xff0 [ 894.608811][ C1] ? tcp_v4_rcv+0x588d/0x5cc0 [ 894.613495][ C1] ? ip_protocol_deliver_rcu+0x572/0xc50 [ 894.619136][ C1] ? ip_local_deliver+0x583/0x8c0 [ 894.624164][ C1] ? ip_rcv+0x5c0/0x830 [ 894.628334][ C1] ? __netif_receive_skb+0x1ec/0x640 [ 894.633622][ C1] ? process_backlog+0x523/0xc10 [ 894.638564][ C1] ? napi_poll+0x4aa/0x1090 [ 894.643247][ C1] ? net_rx_action+0x35c/0xd40 [ 894.648020][ C1] ? kmsan_internal_chain_origin+0x30/0x130 [ 894.653923][ C1] ? do_softirq_own_stack+0x6e/0x90 [ 894.659131][ C1] ? __local_bh_enable_ip+0x184/0x1d0 [ 894.664515][ C1] ? local_bh_enable+0x36/0x40 [ 894.669296][ C1] ? ip_finish_output2+0x2408/0x28e0 [ 894.674597][ C1] ? __ip_finish_output+0xeb5/0xfd0 [ 894.679798][ C1] ? ip_finish_output+0x143/0x4a0 [ 894.684831][ C1] ? ip_output+0x32e/0x6c0 [ 894.689259][ C1] ? __ip_queue_xmit+0x1edd/0x2410 [ 894.694386][ C1] ? ip_queue_xmit+0xcc/0xf0 [ 894.699005][ C1] ? __tcp_transmit_skb+0x4ac5/0x5d50 [ 894.704389][ C1] ? tcp_write_xmit+0x4d9b/0xe710 [ 894.709432][ C1] ? __tcp_push_pending_frames+0x150/0x5c0 [ 894.715254][ C1] ? tcp_send_fin+0x1678/0x1b30 [ 894.720807][ C1] ? tcp_shutdown+0x1f7/0x270 [ 894.725505][ C1] ? inet_shutdown+0x44f/0x6d0 [ 894.730282][ C1] ? kernel_sock_shutdown+0x98/0xc0 [ 894.735480][ C1] ? rds_tcp_accept_one+0x107f/0x12e0 [ 894.740849][ C1] ? rds_tcp_accept_worker+0x60/0x180 [ 894.746211][ C1] ? process_one_work+0x1224/0x20a0 [ 894.751398][ C1] ? worker_thread+0x10cc/0x2740 [ 894.756341][ C1] ? kthread+0x51c/0x560 [ 894.760584][ C1] ? ret_from_fork+0x1f/0x30 [ 894.765176][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 894.770983][ C1] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 894.777041][ C1] ? kmem_cache_alloc+0x6e8/0xc70 [ 894.782050][ C1] ? kmsan_get_metadata+0x116/0x180 [ 894.787239][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 894.793049][ C1] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 894.799197][ C1] ? __msan_get_context_state+0x9/0x20 [ 894.804653][ C1] ? __module_get+0x19/0x1e0 [ 894.809231][ C1] ? kmsan_get_metadata+0x116/0x180 [ 894.814417][ C1] __msan_chain_origin+0x57/0xa0 [ 894.819347][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 894.824535][ C1] tcp_time_wait+0xdfa/0x1160 [ 894.829210][ C1] tcp_fin+0x23a/0x9f0 [ 894.833279][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 894.838122][ C1] ? tcp_urg+0xba5/0x10b0 [ 894.842446][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 894.847892][ C1] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 894.853683][ C1] ? kmsan_get_metadata+0x116/0x180 [ 894.858871][ C1] ? kmsan_get_metadata+0x116/0x180 [ 894.864057][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 894.868662][ C1] ? kmsan_set_origin_checked+0x20/0x60 [ 894.874200][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 894.878706][ C1] ? tcp_v4_rcv+0x1991/0x5cc0 [ 894.883373][ C1] ? tcp_filter+0xf0/0xf0 [ 894.887693][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 894.893143][ C1] ip_local_deliver+0x583/0x8c0 [ 894.897984][ C1] ? ip_local_deliver+0x8c0/0x8c0 [ 894.902999][ C1] ? ip_protocol_deliver_rcu+0xc50/0xc50 [ 894.908622][ C1] ip_rcv+0x5c0/0x830 [ 894.912596][ C1] ? ip_rcv_core+0x14b0/0x14b0 [ 894.917350][ C1] __netif_receive_skb+0x1ec/0x640 [ 894.922467][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 894.928098][ C1] ? ip_local_deliver_finish+0x370/0x370 [ 894.935739][ C1] process_backlog+0x523/0xc10 [ 894.940505][ C1] napi_poll+0x4aa/0x1090 [ 894.944830][ C1] ? rps_trigger_softirq+0x2e0/0x2e0 [ 894.950105][ C1] net_rx_action+0x35c/0xd40 [ 894.954687][ C1] ? net_tx_action+0xdb0/0xdb0 [ 894.959440][ C1] __do_softirq+0x1b9/0x7ed [ 894.963937][ C1] ? __sysvec_apic_timer_interrupt+0x125/0x550 [ 894.970083][ C1] asm_call_irq_on_stack+0xf/0x20 [ 894.975086][ C1] [ 894.978015][ C1] do_softirq_own_stack+0x6e/0x90 [ 894.983052][ C1] __local_bh_enable_ip+0x184/0x1d0 [ 894.988252][ C1] local_bh_enable+0x36/0x40 [ 894.992838][ C1] ip_finish_output2+0x2408/0x28e0 [ 894.997945][ C1] ? ctnetlink_net_exit_batch+0x180/0x180 [ 895.005565][ C1] ? nf_ct_deliver_cached_events+0x531/0x7e0 [ 895.011540][ C1] __ip_finish_output+0xeb5/0xfd0 [ 895.016555][ C1] ip_finish_output+0x143/0x4a0 [ 895.021396][ C1] ip_output+0x32e/0x6c0 [ 895.025649][ C1] ? ip_mc_finish_output+0x770/0x770 [ 895.030921][ C1] ? ip_finish_output+0x4a0/0x4a0 [ 895.035943][ C1] __ip_queue_xmit+0x1edd/0x2410 [ 895.040871][ C1] ? kmsan_internal_set_origin+0x85/0xc0 [ 895.046487][ C1] ? kmsan_get_metadata+0x116/0x180 [ 895.051675][ C1] ? kmsan_get_metadata+0x116/0x180 [ 895.056860][ C1] ip_queue_xmit+0xcc/0xf0 [ 895.061270][ C1] ? __ip_queue_xmit+0x2410/0x2410 [ 895.066369][ C1] __tcp_transmit_skb+0x4ac5/0x5d50 [ 895.071565][ C1] tcp_write_xmit+0x4d9b/0xe710 [ 895.076422][ C1] ? kmsan_get_metadata+0x116/0x180 [ 895.081609][ C1] ? kmsan_get_metadata+0x116/0x180 [ 895.086795][ C1] ? kmsan_get_metadata+0x116/0x180 [ 895.091981][ C1] __tcp_push_pending_frames+0x150/0x5c0 [ 895.097604][ C1] tcp_send_fin+0x1678/0x1b30 [ 895.102280][ C1] ? tcp_set_state+0x84f/0xb50 [ 895.107032][ C1] ? kmsan_get_metadata+0x116/0x180 [ 895.112219][ C1] tcp_shutdown+0x1f7/0x270 [ 895.116714][ C1] ? tcp_set_state+0xb50/0xb50 [ 895.121468][ C1] inet_shutdown+0x44f/0x6d0 [ 895.126049][ C1] ? inet_recvmsg+0x6b0/0x6b0 [ 895.130714][ C1] kernel_sock_shutdown+0x98/0xc0 [ 895.135731][ C1] rds_tcp_accept_one+0x107f/0x12e0 [ 895.140924][ C1] rds_tcp_accept_worker+0x60/0x180 [ 895.146111][ C1] ? rds_tcp_exit_net+0xcc0/0xcc0 [ 895.151125][ C1] process_one_work+0x1224/0x20a0 [ 895.156144][ C1] worker_thread+0x10cc/0x2740 [ 895.160935][ C1] ? kmsan_get_metadata+0x116/0x180 [ 895.166119][ C1] ? kmsan_get_metadata+0x116/0x180 [ 895.171307][ C1] kthread+0x51c/0x560 [ 895.175365][ C1] ? process_one_work+0x20a0/0x20a0 [ 895.180550][ C1] ? kthread_blkcg+0x110/0x110 [ 895.185304][ C1] ret_from_fork+0x1f/0x30 [ 895.189705][ C1] Uninit was stored to memory at: [ 895.194722][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 895.200429][ C1] __msan_chain_origin+0x57/0xa0 [ 895.205353][ C1] inet_twsk_alloc+0xaab/0xb90 [ 895.210105][ C1] tcp_time_wait+0xd1/0x1160 [ 895.214685][ C1] tcp_fin+0x23a/0x9f0 [ 895.218744][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 895.223584][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 895.229030][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 895.233607][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 895.238097][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 895.243542][ C1] ip_local_deliver+0x583/0x8c0 [ 895.248379][ C1] ip_rcv+0x5c0/0x830 [ 895.252352][ C1] __netif_receive_skb+0x1ec/0x640 [ 895.257449][ C1] process_backlog+0x523/0xc10 [ 895.262199][ C1] napi_poll+0x4aa/0x1090 [ 895.266513][ C1] net_rx_action+0x35c/0xd40 [ 895.271089][ C1] __do_softirq+0x1b9/0x7ed [ 895.275568][ C1] [ 895.277877][ C1] Uninit was stored to memory at: [ 895.282891][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 895.288603][ C1] __msan_chain_origin+0x57/0xa0 [ 895.293529][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 895.298719][ C1] tcp_time_wait+0xdfa/0x1160 [ 895.303384][ C1] tcp_fin+0x23a/0x9f0 [ 895.307440][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 895.312282][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 895.317726][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 895.322303][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 895.326791][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 895.332234][ C1] ip_local_deliver+0x583/0x8c0 [ 895.337072][ C1] ip_rcv+0x5c0/0x830 [ 895.341042][ C1] __netif_receive_skb+0x1ec/0x640 [ 895.346140][ C1] process_backlog+0x523/0xc10 [ 895.350891][ C1] napi_poll+0x4aa/0x1090 [ 895.355207][ C1] net_rx_action+0x35c/0xd40 [ 895.359786][ C1] __do_softirq+0x1b9/0x7ed [ 895.364265][ C1] [ 895.366574][ C1] Uninit was stored to memory at: [ 895.371592][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 895.377305][ C1] __msan_chain_origin+0x57/0xa0 [ 895.382229][ C1] tcp_time_wait+0x808/0x1160 [ 895.386895][ C1] tcp_fin+0x23a/0x9f0 [ 895.390954][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 895.395794][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 895.401245][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 895.405819][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 895.410307][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 895.415752][ C1] ip_local_deliver+0x583/0x8c0 [ 895.420586][ C1] ip_rcv+0x5c0/0x830 [ 895.424585][ C1] __netif_receive_skb+0x1ec/0x640 [ 895.429686][ C1] process_backlog+0x523/0xc10 [ 895.434438][ C1] napi_poll+0x4aa/0x1090 [ 895.438785][ C1] net_rx_action+0x35c/0xd40 [ 895.443362][ C1] __do_softirq+0x1b9/0x7ed [ 895.447840][ C1] [ 895.450148][ C1] Uninit was stored to memory at: [ 895.455163][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 895.460873][ C1] __msan_chain_origin+0x57/0xa0 [ 895.465797][ C1] inet_twsk_alloc+0xaab/0xb90 [ 895.470561][ C1] tcp_time_wait+0xd1/0x1160 [ 895.475154][ C1] tcp_fin+0x23a/0x9f0 [ 895.479214][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 895.484070][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 895.489520][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 895.494109][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 895.498599][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 895.504041][ C1] ip_local_deliver+0x583/0x8c0 [ 895.508875][ C1] ip_rcv+0x5c0/0x830 [ 895.512844][ C1] __netif_receive_skb+0x1ec/0x640 [ 895.517942][ C1] process_backlog+0x523/0xc10 [ 895.522691][ C1] napi_poll+0x4aa/0x1090 [ 895.527006][ C1] net_rx_action+0x35c/0xd40 [ 895.531584][ C1] __do_softirq+0x1b9/0x7ed [ 895.536069][ C1] [ 895.538377][ C1] Uninit was stored to memory at: [ 895.543390][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 895.549096][ C1] __msan_chain_origin+0x57/0xa0 [ 895.554022][ C1] __inet_twsk_schedule+0x289/0x2f0 [ 895.559225][ C1] tcp_time_wait+0xdfa/0x1160 [ 895.563893][ C1] tcp_fin+0x23a/0x9f0 [ 895.567951][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 895.572789][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 895.578234][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 895.582814][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 895.587302][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 895.592745][ C1] ip_local_deliver+0x583/0x8c0 [ 895.597592][ C1] ip_rcv+0x5c0/0x830 [ 895.601560][ C1] __netif_receive_skb+0x1ec/0x640 [ 895.606658][ C1] process_backlog+0x523/0xc10 [ 895.611410][ C1] napi_poll+0x4aa/0x1090 [ 895.615725][ C1] net_rx_action+0x35c/0xd40 [ 895.620304][ C1] __do_softirq+0x1b9/0x7ed [ 895.624782][ C1] [ 895.627094][ C1] Uninit was stored to memory at: [ 895.632107][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 895.637814][ C1] __msan_chain_origin+0x57/0xa0 [ 895.642736][ C1] tcp_time_wait+0x808/0x1160 [ 895.647400][ C1] tcp_fin+0x23a/0x9f0 [ 895.651458][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 895.656300][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 895.661747][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 895.666323][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 895.670822][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 895.676264][ C1] ip_local_deliver+0x583/0x8c0 [ 895.681100][ C1] ip_rcv+0x5c0/0x830 [ 895.685067][ C1] __netif_receive_skb+0x1ec/0x640 [ 895.690163][ C1] process_backlog+0x523/0xc10 [ 895.694910][ C1] napi_poll+0x4aa/0x1090 [ 895.699225][ C1] net_rx_action+0x35c/0xd40 [ 895.703805][ C1] __do_softirq+0x1b9/0x7ed [ 895.708286][ C1] [ 895.710615][ C1] Uninit was stored to memory at: [ 895.715627][ C1] kmsan_internal_chain_origin+0xad/0x130 [ 895.721337][ C1] __msan_chain_origin+0x57/0xa0 [ 895.726263][ C1] inet_twsk_alloc+0xaab/0xb90 [ 895.731013][ C1] tcp_time_wait+0xd1/0x1160 [ 895.735587][ C1] tcp_fin+0x23a/0x9f0 [ 895.739643][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 895.744501][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 895.749957][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 895.754541][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 895.759035][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 895.764485][ C1] ip_local_deliver+0x583/0x8c0 [ 895.769320][ C1] ip_rcv+0x5c0/0x830 [ 895.773291][ C1] __netif_receive_skb+0x1ec/0x640 [ 895.778390][ C1] process_backlog+0x523/0xc10 [ 895.783140][ C1] napi_poll+0x4aa/0x1090 [ 895.787457][ C1] net_rx_action+0x35c/0xd40 [ 895.792205][ C1] __do_softirq+0x1b9/0x7ed [ 895.796683][ C1] [ 895.798991][ C1] Uninit was created at: [ 895.803240][ C1] kmsan_save_stack_with_flags+0x3c/0x90 [ 895.808856][ C1] kmsan_alloc_page+0xd3/0x1f0 [ 895.813610][ C1] __alloc_pages_nodemask+0x84e/0x1040 [ 895.819056][ C1] alloc_pages_current+0x79b/0xb40 [ 895.824153][ C1] allocate_slab+0x34b/0x11c0 [ 895.828843][ C1] ___slab_alloc+0xd35/0x1940 [ 895.833509][ C1] kmem_cache_alloc+0x869/0xc70 [ 895.838345][ C1] inet_twsk_alloc+0x15b/0xb90 [ 895.843095][ C1] tcp_time_wait+0xd1/0x1160 [ 895.847671][ C1] tcp_fin+0x23a/0x9f0 [ 895.851729][ C1] tcp_data_queue+0x2ce5/0xa8d0 [ 895.856569][ C1] tcp_rcv_state_process+0x3b0a/0x45e0 [ 895.862015][ C1] tcp_v4_do_rcv+0xc36/0xff0 [ 895.867584][ C1] tcp_v4_rcv+0x588d/0x5cc0 [ 895.872096][ C1] ip_protocol_deliver_rcu+0x572/0xc50 [ 895.877556][ C1] ip_local_deliver+0x583/0x8c0 [ 895.882411][ C1] ip_rcv+0x5c0/0x830 [ 895.886402][ C1] __netif_receive_skb+0x1ec/0x640 [ 895.891512][ C1] process_backlog+0x523/0xc10 [ 895.896269][ C1] napi_poll+0x4aa/0x1090 [ 895.900586][ C1] net_rx_action+0x35c/0xd40 [ 895.905162][ C1] __do_softirq+0x1b9/0x7ed 19:17:51 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:51 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000005c00)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}], 0x1, 0x0) 19:17:51 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 896.267745][T11112] usbhid 6-1:0.0: can't add hid device: -71 [ 896.274104][T11112] usbhid: probe of 6-1:0.0 failed with error -71 19:17:51 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdf8, 0x0}, 0x2140) [ 896.361838][T11112] usb 6-1: USB disconnect, device number 62 19:17:52 executing program 4: syz_emit_ethernet(0x72, &(0x7f0000000140)={@local, @random="1c6f899eb7cf", @void, {@ipv4={0x800, @gre={{0x8, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0xe3, [@loopback]}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:17:52 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) read$char_usb(r0, 0x0, 0x0) 19:17:52 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$inet_mreqsrc(r0, 0x0, 0x29, 0x0, 0x0) 19:17:52 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) [ 897.077438][T11112] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 897.317667][T11112] usb 6-1: Using ep0 maxpacket: 16 [ 897.439110][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 897.451198][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 897.461550][T11112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 897.474646][T11112] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 897.483972][T11112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.814362][T11112] usb 6-1: config 0 descriptor?? [ 898.548149][T11112] usbhid 6-1:0.0: can't add hid device: -71 [ 898.554450][T11112] usbhid: probe of 6-1:0.0 failed with error -71 [ 898.595964][T11112] usb 6-1: USB disconnect, device number 63 19:17:54 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:54 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x40, 0x0) 19:17:54 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in6=@mcast1, 0x0, 0x2b}, 0x2, @in=@private, 0x0, 0x1}}, 0xe8) 19:17:54 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/igmp6\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000007c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r2 = socket(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000006800)=@nat={'nat\x00', 0x1b, 0x5, 0x340, 0x210, 0x0, 0x140, 0x0, 0x210, 0x2a8, 0x2a8, 0x280, 0x2a8, 0x2a8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x3, @local, @broadcast, @port, @gre_key}}}}, {{@ip={@dev, @private, 0x0, 0x0, 'ip_vti0\x00', 'batadv_slave_0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @loopback, @multicast2, @gre_key, @gre_key}}}}, {{@ip={@empty, @multicast1, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x40004007fff, 0x32fe3cf2}, 0x14) sendfile(r1, r0, 0x0, 0x10000edbe) 19:17:54 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:54 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r2, &(0x7f0000000180)=""/387, 0x183) 19:17:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newnexthop={0x28, 0x68, 0x0, 0x0, 0x0, {}, [@NHA_GROUP={0x4}, @NHA_OIF={0x8}, @NHA_BLACKHOLE]}, 0x45}}, 0x0) 19:17:55 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) 19:17:55 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001280)='/dev/zero\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001c00)={0x2020}, 0xffffffffffffff5c) [ 900.042088][T15495] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 900.288616][T15495] usb 6-1: Using ep0 maxpacket: 16 19:17:55 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES64], 0x2c}}, 0x0) [ 900.409198][T15495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.421351][T15495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.431731][T15495] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 900.444884][T15495] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:17:55 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(0xffffffffffffffff, &(0x7f0000000180)=""/387, 0x183) [ 900.454197][T15495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:17:55 executing program 1: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@hat={'permhat ', 0x4}, 0x1b) [ 900.597406][T15495] usb 6-1: config 0 descriptor?? [ 900.960527][ T32] audit: type=1400 audit(1604085476.376:66): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=17108 comm="syz-executor.1" [ 901.337975][T15495] usbhid 6-1:0.0: can't add hid device: -71 [ 901.345399][T15495] usbhid: probe of 6-1:0.0 failed with error -71 [ 901.409335][T15495] usb 6-1: USB disconnect, device number 64 19:17:57 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:17:57 executing program 4: syz_emit_ethernet(0x4f, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7b1eb6", 0x19, 0x33, 0x0, @private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@srh={0x2c, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast1]}], "d8"}}}}}, 0x0) 19:17:57 executing program 1: openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x84040, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00'}, 0x10) 19:17:57 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(0xffffffffffffffff, &(0x7f0000000180)=""/387, 0x183) [ 901.941207][ T32] audit: type=1800 audit(1604085477.356:67): pid=17126 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16369 res=0 errno=0 [ 902.024603][ T32] audit: type=1800 audit(1604085477.416:68): pid=17126 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16369 res=0 errno=0 19:17:57 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:17:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="00022bbd7000fedbdf251800000000000000000006"], 0x2c}}, 0x0) 19:17:57 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8, 0x1, 'hhf\x00'}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 19:17:57 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(0xffffffffffffffff, &(0x7f0000000180)=""/387, 0x183) 19:17:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000040)={'syz_tun\x00', @ifru_hwaddr=@dev}) 19:17:58 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="1c6f899eb7cf", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'r?U', 0x8, 0x3a, 0x0, @private0, @private2, {[], @echo_request}}}}}, 0x0) [ 902.967519][T15495] usb 6-1: new high-speed USB device number 65 using dummy_hcd 19:17:58 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, 0x0, 0x0) [ 903.207391][T15495] usb 6-1: Using ep0 maxpacket: 16 19:17:58 executing program 4: r0 = socket$inet(0x2, 0x3, 0x3) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/121, 0x79}}, {{&(0x7f0000000140)=@tipc=@id, 0xfffffffffffffd49, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/118, 0x76}, {&(0x7f0000000340)=""/228, 0xffffffffffffff43}, {&(0x7f0000000440)=""/93, 0x5d}, {&(0x7f00000004c0)=""/15, 0xf}], 0x6, &(0x7f0000000580)=""/81, 0x51}}, {{&(0x7f0000000600)=@pppol2tpv3, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/148, 0x94}, {&(0x7f0000000800)=""/200, 0xc8}, {&(0x7f0000000900)=""/109, 0x6d}, {&(0x7f0000000080)=""/17, 0x11}, {&(0x7f00000009c0)=""/246, 0xf6}], 0x6, &(0x7f0000000b40)=""/161, 0xa1}}, {{&(0x7f0000000c00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @empty}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000c80)=""/126, 0x7e}, {&(0x7f0000000d00)=""/116, 0x74}, {&(0x7f0000000d80)=""/255, 0xff}, {&(0x7f0000000e80)=""/126, 0x7e}, {&(0x7f0000000f00)=""/111, 0x6f}, {&(0x7f0000000f80)=""/50, 0x32}, {&(0x7f0000000fc0)=""/138, 0x8a}], 0x7}}, {{0x0, 0x0, &(0x7f0000001200), 0x1, &(0x7f0000001240)=""/189, 0xbd}}], 0x6, 0x0, 0x0) shutdown(r0, 0x0) [ 903.329121][T15495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.340588][T15495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.350707][T15495] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 903.363940][T15495] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 903.373221][T15495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.678917][T15495] usb 6-1: config 0 descriptor?? [ 904.462503][T15495] usbhid 6-1:0.0: can't add hid device: -71 [ 904.468954][T15495] usbhid: probe of 6-1:0.0 failed with error -71 [ 904.501691][T15495] usb 6-1: USB disconnect, device number 65 19:18:00 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:18:00 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000001200)=ANY=[], 0x1b) 19:18:00 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, 0x0, 0x0) 19:18:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:00 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd3}], 0x1, 0x0) 19:18:00 executing program 0: rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x1a, &(0x7f0000000100)={0x0, 0x0, 0x2}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, 0x0, 0x0) 19:18:00 executing program 3: mq_unlink(&(0x7f0000000000)) 19:18:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)=ANY=[@ANYBLOB="3800000012000100"/20, @ANYBLOB="000000eeabd82e0008001880040001"], 0x38}}, 0x0) 19:18:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x200000}, 0xc) 19:18:01 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') [ 905.927312][ T8474] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 906.104741][T17196] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 906.180862][ T8474] usb 6-1: Using ep0 maxpacket: 16 [ 906.312609][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.324522][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.334629][ T8474] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 906.347690][ T8474] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:18:01 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:18:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:01 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000400)={@local, @random="1c6f899eb7cf", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, 'r?U', 0x30, 0x3a, 0x0, @private0, @private2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "fc2db7", 0x0, 0x0, 0x0, @private0, @local}}}}}}}, 0x0) 19:18:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)=@getlink={0x38, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x6, 0x18, 0x0, 0x1, [{0x4}]}, @IFLA_NET_NS_FD={0x8}, @IFLA_GSO_MAX_SIZE={0x8}]}, 0x38}}, 0x0) [ 906.356913][ T8474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.551228][ T8474] usb 6-1: config 0 descriptor?? [ 907.347875][ T8474] usbhid 6-1:0.0: can't add hid device: -71 [ 907.354224][ T8474] usbhid: probe of 6-1:0.0 failed with error -71 [ 907.400822][ T8474] usb 6-1: USB disconnect, device number 66 19:18:03 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x891d, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 19:18:03 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) 19:18:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x0, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:03 executing program 3: rt_sigpending(&(0x7f0000000080), 0x8f) 19:18:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:18:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="13"], 0x2c}}, 0x0) 19:18:03 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:04 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(0x0) write$char_usb(r0, &(0x7f0000000300)="7dad7d1d20eac1", 0x7) 19:18:04 executing program 4: r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) [ 908.713970][ T8830] usb 6-1: new high-speed USB device number 67 using dummy_hcd 19:18:04 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) [ 909.117518][ T8830] usb 6-1: Using ep0 maxpacket: 16 [ 909.237986][ T8830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.249361][ T8830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.259628][ T8830] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 909.272839][ T8830] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 909.282290][ T8830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:04 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x28}], 0x1, 0x0) 19:18:04 executing program 3: r0 = socket(0xa, 0x80003, 0x3) sendmmsg$unix(r0, &(0x7f0000002100)=[{&(0x7f00000006c0)=@abs={0x1}, 0x6e, 0x0}], 0x1, 0x0) 19:18:04 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x1, 0x0) write$ppp(r0, 0x0, 0x0) [ 909.610149][ T8830] usb 6-1: config 0 descriptor?? [ 910.091443][ T8830] hid-generic 0003:045E:0000.0009: unknown main item tag 0x0 [ 910.099315][ T8830] hid-generic 0003:045E:0000.0009: unknown main item tag 0x0 [ 910.138044][ T8830] hid-generic 0003:045E:0000.0009: hidraw0: USB HID v0.00 Device [HID 045e:0000] on usb-dummy_hcd.5-1/input0 [ 910.294553][ T8474] usb 6-1: USB disconnect, device number 67 19:18:06 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x0, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:06 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:06 executing program 4: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x9c}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:18:06 executing program 3: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='permhat 0'], 0x1b) 19:18:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000080)=@newlinkprop={0x20, 0x6c, 0x3}, 0x20}}, 0x0) 19:18:06 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:18:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0xfffffffffffffdc6, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:07 executing program 4: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x9c}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:18:07 executing program 0: r0 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) 19:18:07 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) [ 911.294622][T17283] AppArmor: change_hat: Invalid input '0' [ 912.097147][ T5] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 912.387550][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 912.518682][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.529986][ T5] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.541538][ T5] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 912.554749][ T5] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 912.564215][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.634646][ T5] usb 6-1: config 0 descriptor?? 19:18:08 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:08 executing program 4: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x9c}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) [ 913.192661][ T5] hid-generic 0003:045E:0000.000A: unknown main item tag 0x0 [ 913.200982][ T5] hid-generic 0003:045E:0000.000A: unknown main item tag 0x0 [ 913.382700][ T5] hid-generic 0003:045E:0000.000A: hidraw0: USB HID v0.00 Device [HID 045e:0000] on usb-dummy_hcd.5-1/input0 [ 913.501157][ T5] usb 6-1: USB disconnect, device number 68 19:18:09 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x0, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:09 executing program 3: r0 = socket(0xa, 0x2, 0x0) bind$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x3d) 19:18:09 executing program 0: syz_open_procfs$namespace(0x0, 0x0) 19:18:09 executing program 1: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:09 executing program 4: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x9c}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:18:09 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:18:09 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 19:18:09 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000040)) r0 = shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x5000) shmdt(r0) 19:18:10 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 19:18:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 914.994989][T11112] usb 6-1: new high-speed USB device number 69 using dummy_hcd 19:18:10 executing program 3: r0 = socket(0xa, 0x80003, 0x3) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) 19:18:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) [ 915.231151][T11112] usb 6-1: Using ep0 maxpacket: 16 [ 915.348561][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.359901][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.370838][T11112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 915.384157][T11112] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 915.393500][T11112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.518582][T11112] usb 6-1: config 0 descriptor?? [ 916.183417][T11112] hid-generic 0003:045E:0000.000B: unknown main item tag 0x0 [ 916.192628][T11112] hid-generic 0003:045E:0000.000B: unknown main item tag 0x0 [ 916.252431][T11112] hid-generic 0003:045E:0000.000B: hidraw0: USB HID v0.00 Device [HID 045e:0000] on usb-dummy_hcd.5-1/input0 [ 916.381956][T11112] usb 6-1: USB disconnect, device number 69 19:18:12 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:12 executing program 0: r0 = socket(0xa, 0x80003, 0x3) sendmmsg$unix(r0, &(0x7f0000002100)=[{&(0x7f00000006c0)=@abs, 0x6e, 0x0}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 19:18:12 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008060001080006040001aaaaaaaaaaaa640101000180c200fa120a"], 0x0) 19:18:12 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 19:18:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 19:18:12 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:18:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$packet(r0, 0x0, 0xfffffffffffffdc2) 19:18:13 executing program 4: syz_emit_ethernet(0x0, 0x0, 0x0) 19:18:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 19:18:13 executing program 0: syz_emit_ethernet(0x50, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7b1eb6", 0x1a, 0x33, 0x0, @private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@srh={0x2c, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast1]}], "d876"}}}}}, 0x0) [ 917.908016][ T8473] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 918.166800][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 918.288406][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.299638][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 918.309767][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 918.322838][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 918.332213][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:13 executing program 0: r0 = socket(0xa, 0x80003, 0x3) sendmmsg$unix(r0, &(0x7f0000001d00)=[{&(0x7f00000006c0)=@abs, 0x6e, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x2, 0x0) 19:18:13 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=@abs={0x1}, 0x6e, 0x0}], 0x1, 0x4008040) [ 918.599841][ T8473] usb 6-1: config 0 descriptor?? [ 919.327932][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 919.334077][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 919.358977][ T8473] usb 6-1: USB disconnect, device number 70 19:18:15 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:15 executing program 4: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr, {[@rr={0x7, 0x3, 0x9c}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:18:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 19:18:15 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000), 0x4) 19:18:15 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:18:15 executing program 0: setxattr(&(0x7f0000000140)='\x00', 0x0, 0x0, 0x0, 0x0) 19:18:15 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xffffffffffffffec}}], 0x2, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 19:18:15 executing program 3: syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7b1eb6", 0x18, 0x33, 0x0, @private0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, {[@srh={0x2c, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@mcast1]}]}}}}}, 0x0) 19:18:15 executing program 4: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr, {[@rr={0x7, 0x3, 0x9c}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:18:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) [ 920.866776][ T8473] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 921.117557][ T8473] usb 6-1: Using ep0 maxpacket: 16 19:18:16 executing program 4: syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x7, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr, {[@rr={0x7, 0x3, 0x9c}, @timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:18:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001e00)=ANY=[@ANYBLOB="3800000012000100"/20], 0x38}}, 0x0) [ 921.248362][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.259788][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 921.269893][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 921.282965][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 921.292249][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.482968][T17454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 921.525733][ T8473] usb 6-1: config 0 descriptor?? [ 922.287410][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 922.293687][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 922.322162][ T8473] usb 6-1: USB disconnect, device number 71 19:18:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x0, 0x1, 0x3}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:18 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 19:18:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 19:18:18 executing program 4: syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x9c}]}}}}}}, 0x0) 19:18:18 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8946, &(0x7f0000000040)={'veth0\x00', @ifru_map}) 19:18:18 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000ac0)=[{0x0}, {0x0}, {&(0x7f0000000380)=""/74, 0x200003ca}], 0x3) 19:18:18 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000009c0)) 19:18:18 executing program 0: r0 = socket(0xa, 0x80003, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0xffffffff, 0x0, 0xd0, 0x0, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'veth1_to_hsr\x00', 'ip6gretap0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hwclock_exec_t:s0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) 19:18:18 executing program 4: syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x9c}]}}}}}}, 0x0) 19:18:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 923.574273][T17486] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 923.659931][ T8471] usb 6-1: new high-speed USB device number 72 using dummy_hcd 19:18:19 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001580)=[{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000000200)="06", 0x1}], 0x1}], 0x1, 0x0) [ 923.936704][ T8471] usb 6-1: Using ep0 maxpacket: 16 [ 924.068083][ T8471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.081118][ T8471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.091632][ T8471] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 924.104796][ T8471] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 924.114183][ T8471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) [ 924.399212][ T8471] usb 6-1: config 0 descriptor?? [ 925.136944][ T8471] usbhid 6-1:0.0: can't add hid device: -71 [ 925.143309][ T8471] usbhid: probe of 6-1:0.0 failed with error -71 [ 925.177481][ T8471] usb 6-1: USB disconnect, device number 72 19:18:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x1, 0x1, 0x3, "10"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:21 executing program 4: syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@rr={0x7, 0x3, 0x9c}]}}}}}}, 0x0) 19:18:21 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) 19:18:21 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 19:18:21 executing program 3: r0 = socket(0xa, 0x80003, 0x3) sendmmsg$unix(r0, &(0x7f0000002100)=[{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)='a', 0x1}], 0x1}], 0x1, 0x0) 19:18:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:21 executing program 0: select(0x38, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) 19:18:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:21 executing program 4: syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @random="020073e45507", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x4}]}}}}}}, 0x0) 19:18:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000240)=""/106, &(0x7f00000002c0)=0x6a) [ 926.548357][ T8473] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 926.806545][ T8473] usb 6-1: Using ep0 maxpacket: 16 19:18:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) [ 926.940210][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.951664][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.961833][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 926.974923][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 926.984234][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x3) getsockopt(r0, 0x0, 0x7, 0x0, &(0x7f0000000000)) [ 927.133621][ T8473] usb 6-1: config 0 descriptor?? [ 927.897830][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 927.904118][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 927.950108][ T8473] usb 6-1: USB disconnect, device number 73 19:18:24 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x1, 0x1, 0x3, "10"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x368, 0xffffffff, 0x0, 0x1c8, 0x1c8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}, {{@ipv6={@remote, @private0, [], [], 'veth1_vlan\x00', 'gretap0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) 19:18:24 executing program 0: semget(0x2, 0xcbeac90a768c49b4, 0x0) 19:18:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0) 19:18:24 executing program 3: ustat(0x3, 0x0) 19:18:24 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 19:18:24 executing program 4: socket$inet(0x2, 0x3, 0x1) select(0x38, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) 19:18:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0) 19:18:24 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={0x0}}, 0x0) [ 929.359235][ T8473] usb 6-1: new high-speed USB device number 74 using dummy_hcd 19:18:24 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x61) 19:18:25 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000180)=""/159, 0x26, 0x9f, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003a00)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f00000002c0)=""/139, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000039c0)={0x3}, 0x10}, 0x78) [ 929.609794][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 929.738507][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.749665][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 929.759935][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 929.773121][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:18:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x1}, 0x14}}, 0x0) [ 929.782520][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.045016][ T8473] usb 6-1: config 0 descriptor?? [ 930.776895][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 930.783229][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 930.808865][ T8473] usb 6-1: USB disconnect, device number 74 19:18:26 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x1, 0x1, 0x3, "10"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:26 executing program 3: r0 = socket$kcm(0x10, 0x100000000000003, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1600000016008105e00f80e045e4b37c4cb33fab463c", 0x16}], 0x1, 0x0, 0x0, 0xa00}, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, 0x0) 19:18:26 executing program 0: r0 = socket$inet(0x2, 0x3, 0x3) shutdown(r0, 0x0) select(0x40, &(0x7f00000000c0)={0xc}, 0x0, 0x0, 0x0) 19:18:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 19:18:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 19:18:26 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000080)="660f010aa81bd604d604d1c4c38d0a970400000000f6b9817411833ef32e360f09260f01c5f30f090f3226f33e0f32c4c16df37300", 0x35}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 19:18:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getpolicy={0x50, 0x15, 0x0, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) 19:18:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000000)={'lo\x00', @ifru_map}) 19:18:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 19:18:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f00000000c0)=@framed={{}, [], {0x95, 0x4c}}, &(0x7f0000000000)='GPL\x00', 0x7, 0xf9, &(0x7f0000000140)=""/249, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 932.196351][ T8473] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 932.447254][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 932.566882][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.579882][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.590347][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 932.603402][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:18:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x18, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) [ 932.612689][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:28 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x100, 0x18}, 0xc) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)="17ad5cae737c5ae471cf20c51a850bdd16909bee02d9", 0x16}, {&(0x7f00000003c0)="1b38f39d2316f97c9ab21ab0ef4f57258aa57bc66ce48f64ab251ac46d072bf9b42ed4c0e3a1144cb0eab221c3a5ef9f12447c7a9418b5f849a7f3159a7a45a2b303e4bca50c95ad4811bb8f152ab7a2dc4ec82ea69df0e4fbbdaa33ed481a36f6ee6b17478af341c0eea24b98656870acd2f76d0111fd447b8e8b0cbd65d49f0f4624f6308208f8d50705b1b8e870490d44734378449672", 0x98}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}, 0x20000010) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000100)="d6b1a7", &(0x7f00000001c0)=""/49}, 0x20) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x79, 0x0, 0x1, 0x3, 0x0, 0x7, 0x44408, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x1, 0x7, 0xbbe, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0xa) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 932.824070][ T8473] usb 6-1: config 0 descriptor?? [ 933.586730][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 933.593093][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 933.655761][ T8473] usb 6-1: USB disconnect, device number 75 [ 933.718726][T17636] device wlan1 entered promiscuous mode [ 933.771025][T17645] device wlan1 left promiscuous mode [ 933.939197][T17638] device wlan1 entered promiscuous mode 19:18:29 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:29 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 19:18:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3f33, 0x12) write$cgroup_int(r3, &(0x7f00000001c0), 0x12) close(r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r5 = openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r5, 0x1b}, 0x10) 19:18:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:29 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x1, r0, 0x0) 19:18:29 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x100, 0x18}, 0xc) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)="17ad5cae737c5ae471cf20c51a850bdd16909bee02d9", 0x16}, {&(0x7f00000003c0)="1b38f39d2316f97c9ab21ab0ef4f57258aa57bc66ce48f64ab251ac46d072bf9b42ed4c0e3a1144cb0eab221c3a5ef9f12447c7a9418b5f849a7f3159a7a45a2b303e4bca50c95ad4811bb8f152ab7a2dc4ec82ea69df0e4fbbdaa33ed481a36f6ee6b17478af341c0eea24b98656870acd2f76d0111fd447b8e8b0cbd65d49f0f4624f6308208f8d50705b1b8e870490d44734378449672", 0x98}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}, 0x20000010) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000100)="d6b1a7", &(0x7f00000001c0)=""/49}, 0x20) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x79, 0x0, 0x1, 0x3, 0x0, 0x7, 0x44408, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x1, 0x7, 0xbbe, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0xa) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') [ 934.297281][T17657] device wlan1 left promiscuous mode 19:18:29 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x100, 0x18}, 0xc) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000280)="17ad5cae737c5ae471cf20c51a850bdd16909bee02d9", 0x16}, {&(0x7f00000003c0)="1b38f39d2316f97c9ab21ab0ef4f57258aa57bc66ce48f64ab251ac46d072bf9b42ed4c0e3a1144cb0eab221c3a5ef9f12447c7a9418b5f849a7f3159a7a45a2b303e4bca50c95ad4811bb8f152ab7a2dc4ec82ea69df0e4fbbdaa33ed481a36f6ee6b17478af341c0eea24b98656870acd2f76d0111fd447b8e8b0cbd65d49f0f4624f6308208f8d50705b1b8e870490d44734378449672", 0x98}], 0x2, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}, 0x20000010) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000100)="d6b1a7", &(0x7f00000001c0)=""/49}, 0x20) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000340)='wlan1\x00\x1b\x1a\xec\xd8n\xff\xc3\x87\xe2\xa3\x80\x8a\xb2\xd9\xa8L\x06\xb5\x12\x03F\xd9\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\xea\x84\x13\xdf\xf7\xber\'\x8a\xd5W\xbb\xac%j\x9d\xeb\xba\xe6\xc4\xc4\xa9\xf5\xd5\xa1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5:f\xcb\xe8oOArYZ\xe1\xc9\x86\xfe') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) getpid() perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x79, 0x0, 0x1, 0x3, 0x0, 0x7, 0x44408, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x1, 0x7, 0xbbe, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0xa) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x29, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000040)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x1c\xc9%\x9b\xa0\xf5\xee\x16\x1f\xb9\xf2-\xda,C\xfdj\xe3\x8d\xe3\xd6\xe0|6L\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbb\xc18\x84\xb5\\f\xcb\xe8%OArYZ\xe1\xc9\x86\xfe\x88\x9d\xfa\xacJ\x1f\xebp\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xdd2') 19:18:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3f33, 0x12) write$cgroup_int(r3, &(0x7f00000001c0), 0x12) close(r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r5 = openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r5, 0x1b}, 0x10) 19:18:30 executing program 3: socketpair(0x0, 0xabb3f4cd3a488d3c, 0x0, 0x0) [ 934.747314][ T8473] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 934.948784][T17659] device wlan1 entered promiscuous mode [ 934.996430][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 935.147956][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.159264][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.169452][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 935.182588][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 935.192001][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:30 executing program 4: r0 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)) [ 935.402831][ T8473] usb 6-1: config 0 descriptor?? 19:18:30 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3f33, 0x12) write$cgroup_int(r3, &(0x7f00000001c0), 0x12) close(r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r5 = openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r5, 0x1b}, 0x10) [ 935.634004][T17671] device wlan1 entered promiscuous mode [ 936.136688][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 936.143322][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 936.190615][ T8473] usb 6-1: USB disconnect, device number 76 19:18:32 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:32 executing program 3: socketpair(0x1d, 0x0, 0x8d94, &(0x7f0000000180)) 19:18:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@gettaction={0x24, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) 19:18:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000cacbf0b9c4b88449c3a926042512e17ea67ae330584734691f1946f7071a463143fb42c20e017feec42107f2e6ddbe1150296c6a6db4afa7c81bb8f788d231d4168f72dd748af53f734eda889a174c066e08e267f222f8eaa2ccabe50567a5ceb5475c09d29e934a49d909e45276060f502d438f18257ff8212c4404f578e3494b7bb1b4c6f15be97ea13bb2195438b43ade9e84bb9ac33335c1d5c19ad99cbbdbbfc4668559ffdc25076687ed7c40842fae1b4e49520f48c28a66493f408e0b6580fdfbe0533397884333f795bc4b9d332108fe9073cc9ba6ad842c6a2f44380e359ba9f20a6772651008ba17787e632f391ce14dcbb11679ec237adb866eb8c0735f167607777a8e018488174ca40f03974daefd0f291ab7fb8ce2d60eded18369d5cfc287d54721dcd12815a540107799bd1b3f006a65200301feba0eee252c71b3824bc77f48e59890b2d4f5763db36d366631e77825a1fc802ba31c82b46937aafb835eaa4eb29da89b3c2933defdad590400edf2815a22e1c1e7b98e5544f92bffcae37c6410b7aba7c2c59c7bd805605c3460fca5ced768d55e8511235abb4a53bd7b1b62f142dbfd1e94b2393a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac1414330200000162079f4b4d2f87e5feca6aab840413f2325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x9, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000a80)=ANY=[@ANYBLOB="1eac8f1449fbffefffb531a7e932e6726a4d7266ca0e0bb1dd797f6a87b8d9879ce0a9d8f5c70588b311c2f3a980eabaf89ee1dcfb4efef70b915b1e0e60033e4c8379fe7420606bb78dba78fc753520b7c402298f918e07e8d12570377fca4416c792fc578549d43b", @ANYRESHEX, @ANYRESOCT, @ANYRESHEX]) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x88a8ffff00000000}, 0x0) recvmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000280)=@xdp, 0x80, &(0x7f00000003c0)}, 0x40012220) sendmsg$kcm(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, 0x0}, 0x200488c4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000016c40)={0x1a, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, @func]}, &(0x7f00000005c0)='syzkaller\x00', 0x7f, 0x21, &(0x7f0000000600)=""/33, 0x41100, 0x3, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000016c00)={0x0, 0xd, 0x101, 0x32f}, 0x10, 0xffffffffffffffff, r0}, 0x78) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000680)="4600c1e6113186b118a4ed0ae532dddbfb0d2a0d70589a21d6e25ffbd6b246dc6c30b305d8abfe6f668a520beb042516c1f4d8d2c7720b3620f6ba112c04ffc445b20bee2c51dccd9db74198c9589cba78e6d420b7ffa11e6868f25913f9a4bd8690e611e20848177be7b32ae03b02be67c2c48fb9d2d80faca5b772c249bbf62b3408b8f5d8ae9368", 0x89}], 0x1}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x5, &(0x7f00000010c0)=ANY=[@ANYBLOB, @ANYRESOCT=r0, @ANYBLOB="00000000d837e7fc181f6810c165ed3c668eb0", @ANYRES32, @ANYRESHEX], 0x0, 0x7fffffff, 0x6c, &(0x7f0000000440)=""/108, 0x41100, 0xa, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x0, 0x9, 0x2}, 0x10}, 0x78) 19:18:32 executing program 4: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x10001) 19:18:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3f33, 0x12) write$cgroup_int(r3, &(0x7f00000001c0), 0x12) close(r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r5 = openat$cgroup(r0, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r5, 0x1b}, 0x10) 19:18:32 executing program 1: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={0x0}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x10001) 19:18:32 executing program 3: perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5818, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:18:32 executing program 4: perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:18:32 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3f33, 0x12) write$cgroup_int(r3, &(0x7f00000001c0), 0x12) close(r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x1b}, 0x10) [ 937.606252][T11112] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 937.846136][T11112] usb 6-1: Using ep0 maxpacket: 16 19:18:33 executing program 2: perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 937.967606][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.978901][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.989111][T11112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 938.003292][T11112] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:18:33 executing program 1: perf_event_open(&(0x7f00000000c0)={0x8, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 938.012822][T11112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.312676][T11112] usb 6-1: config 0 descriptor?? [ 939.066346][T11112] usbhid 6-1:0.0: can't add hid device: -71 [ 939.072623][T11112] usbhid: probe of 6-1:0.0 failed with error -71 [ 939.110892][T11112] usb 6-1: USB disconnect, device number 77 19:18:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x7, &(0x7f0000000000)=@framed={{}, [@btf_id, @map={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xbe, &(0x7f0000000280)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:18:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0x6, 0xbe, &(0x7f0000000280)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:18:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3f33, 0x12) write$cgroup_int(r3, &(0x7f00000001c0), 0x12) close(r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:35 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x4}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) 19:18:35 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002100)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) 19:18:35 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:35 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0xf9, &(0x7f0000000140)=""/249, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:18:35 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x7, &(0x7f0000000000)=@framed={{}, [@initr0, @map={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xbe, &(0x7f0000000280)=""/190, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:18:35 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x3f33, 0x12) write$cgroup_int(r3, &(0x7f00000001c0), 0x12) close(r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:35 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{}, [], {0x95, 0x0, 0x0, 0x18}}, &(0x7f0000000000)='GPL\x00', 0x7, 0xf9, &(0x7f0000000140)=""/249, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:18:35 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000180)=""/159, 0x32, 0x9f, 0x8}, 0x20) [ 940.529465][T17681] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 940.776092][T17681] usb 6-1: Using ep0 maxpacket: 16 19:18:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xa, 0x7f, 0x904, 0x3, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x40) [ 940.917610][T17681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.928852][T17681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.939018][T17681] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 940.952155][T17681] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 19:18:36 executing program 1: [ 940.961483][T17681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:18:36 executing program 2: 19:18:36 executing program 3: 19:18:36 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x3f33, 0x12) write$cgroup_int(r2, &(0x7f00000001c0), 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) [ 941.237997][T17681] usb 6-1: config 0 descriptor?? 19:18:36 executing program 1: [ 942.046240][T17681] usbhid 6-1:0.0: can't add hid device: -71 [ 942.052394][T17681] usbhid: probe of 6-1:0.0 failed with error -71 [ 942.078278][T17681] usb 6-1: USB disconnect, device number 78 19:18:37 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:37 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000000)=0x3f33, 0x12) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:37 executing program 4: 19:18:37 executing program 3: 19:18:37 executing program 2: 19:18:37 executing program 1: 19:18:38 executing program 2: 19:18:38 executing program 4: 19:18:38 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cgroup.max.depth\x00', 0x2, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:38 executing program 1: 19:18:38 executing program 3: [ 943.221078][ T8471] usb 6-1: new high-speed USB device number 79 using dummy_hcd 19:18:38 executing program 2: [ 943.466242][ T8471] usb 6-1: Using ep0 maxpacket: 16 [ 943.596549][ T8471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.607766][ T8471] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.617954][ T8471] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 943.631905][ T8471] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 943.641381][ T8471] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.841485][ T8471] usb 6-1: config 0 descriptor?? [ 944.596186][ T8471] usbhid 6-1:0.0: can't add hid device: -71 [ 944.602559][ T8471] usbhid: probe of 6-1:0.0 failed with error -71 [ 944.681445][ T8471] usb 6-1: USB disconnect, device number 79 19:18:40 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:40 executing program 4: 19:18:40 executing program 3: 19:18:40 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:40 executing program 1: 19:18:40 executing program 2: 19:18:40 executing program 1: 19:18:40 executing program 2: 19:18:40 executing program 3: 19:18:41 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0}, 0x10) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x1ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:41 executing program 4: [ 945.946055][ T8830] usb 6-1: new high-speed USB device number 80 using dummy_hcd 19:18:41 executing program 3: [ 946.186042][ T8830] usb 6-1: Using ep0 maxpacket: 16 [ 946.306251][ T8830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.317814][ T8830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.327978][ T8830] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 946.341060][ T8830] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 946.350372][ T8830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.519956][ T8830] usb 6-1: config 0 descriptor?? [ 947.267162][ T8830] usbhid 6-1:0.0: can't add hid device: -71 [ 947.273458][ T8830] usbhid: probe of 6-1:0.0 failed with error -71 [ 947.303377][ T8830] usb 6-1: USB disconnect, device number 80 19:18:43 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:43 executing program 1: 19:18:43 executing program 2: 19:18:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:43 executing program 4: 19:18:43 executing program 3: 19:18:43 executing program 1: 19:18:43 executing program 2: 19:18:43 executing program 4: 19:18:43 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:43 executing program 3: [ 948.392294][T11112] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 948.636324][T11112] usb 6-1: Using ep0 maxpacket: 16 19:18:44 executing program 2: [ 948.767460][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.778710][T11112] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.788837][T11112] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 948.802028][T11112] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 948.811342][T11112] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.033465][T11112] usb 6-1: config 0 descriptor?? [ 949.756693][T11112] usbhid 6-1:0.0: can't add hid device: -71 [ 949.763010][T11112] usbhid: probe of 6-1:0.0 failed with error -71 [ 949.808474][T11112] usb 6-1: USB disconnect, device number 81 19:18:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:45 executing program 1: 19:18:45 executing program 3: 19:18:45 executing program 4: 19:18:45 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:45 executing program 2: 19:18:46 executing program 3: 19:18:46 executing program 4: 19:18:46 executing program 1: 19:18:46 executing program 2: 19:18:46 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) [ 950.995673][ T9935] usb 6-1: new high-speed USB device number 82 using dummy_hcd 19:18:46 executing program 2: [ 951.249499][ T9935] usb 6-1: Using ep0 maxpacket: 16 [ 951.378239][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.389490][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.399637][ T9935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 951.413639][ T9935] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 951.423187][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.502832][ T9935] usb 6-1: config 0 descriptor?? [ 952.241342][ T9935] usbhid 6-1:0.0: can't add hid device: -71 [ 952.247818][ T9935] usbhid: probe of 6-1:0.0 failed with error -71 [ 952.284883][ T9935] usb 6-1: USB disconnect, device number 82 19:18:48 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:48 executing program 1: 19:18:48 executing program 3: 19:18:48 executing program 4: 19:18:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:48 executing program 2: 19:18:48 executing program 3: 19:18:48 executing program 4: 19:18:48 executing program 1: 19:18:48 executing program 2: 19:18:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) [ 953.525694][ T9935] usb 6-1: new high-speed USB device number 83 using dummy_hcd 19:18:49 executing program 4: [ 953.775751][ T9935] usb 6-1: Using ep0 maxpacket: 16 [ 953.906457][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.917598][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.927713][ T9935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 953.940837][ T9935] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 953.950177][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.992979][ T9935] usb 6-1: config 0 descriptor?? [ 954.726027][ T9935] usbhid 6-1:0.0: can't add hid device: -71 [ 954.732202][ T9935] usbhid: probe of 6-1:0.0 failed with error -71 [ 954.758096][ T9935] usb 6-1: USB disconnect, device number 83 19:18:50 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:50 executing program 3: 19:18:50 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:50 executing program 2: 19:18:50 executing program 1: 19:18:50 executing program 4: 19:18:50 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1b}, 0x10) 19:18:51 executing program 4: 19:18:51 executing program 3: socketpair(0x15, 0x5, 0x1, &(0x7f0000000040)) 19:18:51 executing program 1: 19:18:51 executing program 2: [ 955.985558][ T9935] usb 6-1: new high-speed USB device number 84 using dummy_hcd 19:18:51 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) [ 956.256562][ T9935] usb 6-1: Using ep0 maxpacket: 16 [ 956.395870][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.407053][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.417388][ T9935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 956.431493][ T9935] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 956.441082][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.471082][ T9935] usb 6-1: config 0 descriptor?? [ 957.240714][ T9935] usbhid 6-1:0.0: can't add hid device: -71 [ 957.247065][ T9935] usbhid: probe of 6-1:0.0 failed with error -71 [ 957.267327][ T9935] usb 6-1: USB disconnect, device number 84 19:18:53 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x1, 0x0, 0x0, "bf"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:53 executing program 1: 19:18:53 executing program 4: 19:18:53 executing program 2: 19:18:53 executing program 3: 19:18:53 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 19:18:53 executing program 2: 19:18:53 executing program 4: 19:18:53 executing program 0: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 19:18:53 executing program 3: 19:18:53 executing program 1: 19:18:53 executing program 2: [ 958.505520][ T8475] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 958.745402][ T8475] usb 6-1: Using ep0 maxpacket: 16 [ 958.867860][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.879175][ T8475] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.890058][ T8475] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 958.903357][ T8475] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 958.912753][ T8475] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.038521][ T8475] usb 6-1: config 0 descriptor?? [ 959.776138][ T8475] usbhid 6-1:0.0: can't add hid device: -71 [ 959.782468][ T8475] usbhid: probe of 6-1:0.0 failed with error -71 [ 959.815094][ T8475] usb 6-1: USB disconnect, device number 85 19:18:55 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x1, 0x0, 0x0, "bf"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:55 executing program 4: 19:18:55 executing program 1: 19:18:55 executing program 3: 19:18:55 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240), 0x10) 19:18:55 executing program 2: 19:18:56 executing program 3: 19:18:56 executing program 2: 19:18:56 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240), 0x10) 19:18:56 executing program 4: 19:18:56 executing program 1: [ 960.955409][ T2980] usb 6-1: new high-speed USB device number 86 using dummy_hcd 19:18:56 executing program 0: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240), 0x10) [ 961.196013][ T2980] usb 6-1: Using ep0 maxpacket: 16 [ 961.316754][ T2980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.328255][ T2980] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 961.338418][ T2980] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 961.352102][ T2980] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 961.361496][ T2980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.586337][ T2980] usb 6-1: config 0 descriptor?? [ 962.327631][ T2980] usbhid 6-1:0.0: can't add hid device: -71 [ 962.333991][ T2980] usbhid: probe of 6-1:0.0 failed with error -71 [ 962.354605][ T2980] usb 6-1: USB disconnect, device number 86 19:18:58 executing program 2: 19:18:58 executing program 3: 19:18:58 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x2, 0x1, 0x0, "2313"}, @main=@item_012={0x1, 0x0, 0x0, "bf"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:18:58 executing program 4: 19:18:58 executing program 0: 19:18:58 executing program 1: 19:18:58 executing program 2: 19:18:58 executing program 0: 19:18:58 executing program 4: 19:18:58 executing program 3: 19:18:58 executing program 1: [ 963.519894][ T9935] usb 6-1: new high-speed USB device number 87 using dummy_hcd 19:18:59 executing program 2: 19:18:59 executing program 0: [ 963.765250][ T9935] usb 6-1: Using ep0 maxpacket: 16 19:18:59 executing program 3: [ 963.890456][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.901988][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.913081][ T9935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 963.926328][ T9935] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 963.935615][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.116684][ T9935] usb 6-1: config 0 descriptor?? [ 964.849096][ T9935] usbhid 6-1:0.0: can't add hid device: -71 [ 964.855762][ T9935] usbhid: probe of 6-1:0.0 failed with error -71 [ 964.882386][ T9935] usb 6-1: USB disconnect, device number 87 19:19:00 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:00 executing program 4: 19:19:00 executing program 1: 19:19:00 executing program 2: 19:19:00 executing program 0: 19:19:00 executing program 3: 19:19:01 executing program 2: 19:19:01 executing program 3: 19:19:01 executing program 4: 19:19:01 executing program 0: 19:19:01 executing program 1: 19:19:01 executing program 2: [ 966.080238][ T9935] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 966.335293][ T9935] usb 6-1: Using ep0 maxpacket: 16 [ 966.467413][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.478673][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.488876][ T9935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 966.501997][ T9935] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 966.511350][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.631220][ T9935] usb 6-1: config 0 descriptor?? [ 967.365674][ T9935] usbhid 6-1:0.0: can't add hid device: -71 [ 967.371959][ T9935] usbhid: probe of 6-1:0.0 failed with error -71 [ 967.388493][ T9935] usb 6-1: USB disconnect, device number 88 19:19:03 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:03 executing program 3: 19:19:03 executing program 1: 19:19:03 executing program 0: 19:19:03 executing program 4: 19:19:03 executing program 2: 19:19:03 executing program 1: 19:19:03 executing program 3: 19:19:03 executing program 0: 19:19:03 executing program 2: 19:19:03 executing program 4: [ 968.615742][ T8830] usb 6-1: new high-speed USB device number 89 using dummy_hcd 19:19:04 executing program 3: [ 968.855390][ T8830] usb 6-1: Using ep0 maxpacket: 16 [ 969.006821][ T8830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 969.017958][ T8830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.028043][ T8830] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 969.041169][ T8830] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 969.050539][ T8830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.156970][ T8830] usb 6-1: config 0 descriptor?? [ 969.908569][ T8830] usbhid 6-1:0.0: can't add hid device: -71 [ 969.915085][ T8830] usbhid: probe of 6-1:0.0 failed with error -71 [ 969.963991][ T8830] usb 6-1: USB disconnect, device number 89 19:19:05 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1f, {[@main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:05 executing program 1: 19:19:05 executing program 2: 19:19:05 executing program 0: 19:19:05 executing program 4: 19:19:05 executing program 3: 19:19:06 executing program 4: 19:19:06 executing program 0: 19:19:06 executing program 1: 19:19:06 executing program 2: 19:19:06 executing program 3: [ 971.065072][ T9935] usb 6-1: new high-speed USB device number 90 using dummy_hcd 19:19:06 executing program 4: [ 971.310453][ T9935] usb 6-1: Using ep0 maxpacket: 16 [ 971.436444][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.447684][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.457800][ T9935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 971.470889][ T9935] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 971.480207][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.688694][ T9935] usb 6-1: config 0 descriptor?? [ 972.425515][ T9935] usbhid 6-1:0.0: can't add hid device: -71 [ 972.431806][ T9935] usbhid: probe of 6-1:0.0 failed with error -71 [ 972.476204][ T9935] usb 6-1: USB disconnect, device number 90 19:19:08 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:08 executing program 0: 19:19:08 executing program 2: 19:19:08 executing program 1: 19:19:08 executing program 3: 19:19:08 executing program 4: 19:19:08 executing program 1: 19:19:08 executing program 2: 19:19:08 executing program 4: 19:19:08 executing program 3: 19:19:08 executing program 0: 19:19:09 executing program 1: [ 974.155138][ T9935] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 974.395448][ T9935] usb 6-1: Using ep0 maxpacket: 16 [ 974.516464][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 974.527655][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.537802][ T9935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 974.550915][ T9935] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 974.560241][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.646831][ T9935] usb 6-1: config 0 descriptor?? [ 975.376169][ T9935] usbhid 6-1:0.0: can't add hid device: -71 [ 975.382503][ T9935] usbhid: probe of 6-1:0.0 failed with error -71 [ 975.395964][ T9935] usb 6-1: USB disconnect, device number 91 19:19:11 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:11 executing program 3: 19:19:11 executing program 0: 19:19:11 executing program 2: 19:19:11 executing program 4: 19:19:11 executing program 1: 19:19:11 executing program 4: [ 976.195204][ T9935] usb 6-1: new high-speed USB device number 92 using dummy_hcd 19:19:11 executing program 0: 19:19:11 executing program 3: 19:19:11 executing program 2: 19:19:11 executing program 1: [ 976.434977][ T9935] usb 6-1: Using ep0 maxpacket: 16 [ 976.556468][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.567890][ T9935] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.578147][ T9935] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 976.591315][ T9935] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 976.601497][ T9935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 19:19:12 executing program 4: [ 976.912638][ T9935] usb 6-1: config 0 descriptor?? [ 977.648740][ T9935] usbhid 6-1:0.0: can't add hid device: -71 [ 977.655335][ T9935] usbhid: probe of 6-1:0.0 failed with error -71 [ 977.681772][ T9935] usb 6-1: USB disconnect, device number 92 19:19:13 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x20, {[@global, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:13 executing program 0: 19:19:13 executing program 2: 19:19:13 executing program 1: 19:19:13 executing program 3: 19:19:13 executing program 4: 19:19:13 executing program 2: 19:19:13 executing program 3: 19:19:14 executing program 1: 19:19:14 executing program 0: 19:19:14 executing program 4: [ 978.884960][ T8830] usb 6-1: new high-speed USB device number 93 using dummy_hcd 19:19:14 executing program 2: [ 979.144830][ T8830] usb 6-1: Using ep0 maxpacket: 16 [ 979.274301][ T8830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.285725][ T8830] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.295883][ T8830] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 979.309183][ T8830] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 979.318597][ T8830] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.391087][ T8830] usb 6-1: config 0 descriptor?? [ 980.125395][ T8830] usbhid 6-1:0.0: can't add hid device: -71 [ 980.131698][ T8830] usbhid: probe of 6-1:0.0 failed with error -71 [ 980.156486][ T8830] usb 6-1: USB disconnect, device number 93 19:19:16 executing program 1: 19:19:16 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, '#'}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:16 executing program 3: 19:19:16 executing program 4: 19:19:16 executing program 0: 19:19:16 executing program 2: 19:19:16 executing program 3: 19:19:16 executing program 1: 19:19:16 executing program 2: 19:19:16 executing program 0: 19:19:16 executing program 4: [ 981.354972][T15495] usb 6-1: new high-speed USB device number 94 using dummy_hcd 19:19:16 executing program 3: 19:19:16 executing program 1: [ 981.615945][T15495] usb 6-1: Using ep0 maxpacket: 16 [ 981.756898][T15495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.768104][T15495] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.778460][T15495] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 981.791564][T15495] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 981.800933][T15495] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.957111][T15495] usb 6-1: config 0 descriptor?? [ 982.695373][T15495] usbhid 6-1:0.0: can't add hid device: -71 [ 982.701737][T15495] usbhid: probe of 6-1:0.0 failed with error -71 [ 982.739283][T15495] usb 6-1: USB disconnect, device number 94 19:19:18 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, '#'}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:18 executing program 2: 19:19:18 executing program 4: 19:19:18 executing program 0: 19:19:18 executing program 3: 19:19:18 executing program 1: 19:19:18 executing program 1: 19:19:19 executing program 3: 19:19:19 executing program 0: 19:19:19 executing program 4: 19:19:19 executing program 2: [ 983.915010][ T8473] usb 6-1: new high-speed USB device number 95 using dummy_hcd 19:19:19 executing program 1: [ 984.154949][ T8473] usb 6-1: Using ep0 maxpacket: 16 [ 984.276357][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.288619][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.299196][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 984.312352][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 984.321678][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.521689][ T8473] usb 6-1: config 0 descriptor?? [ 985.265460][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 985.271762][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 985.310905][ T8473] usb 6-1: USB disconnect, device number 95 19:19:21 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04000000000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x21, {[@global=@item_012={0x1, 0x1, 0x0, '#'}, @main=@item_012={0x2, 0x0, 0x0, "bfc1"}, @global=@item_4={0x3, 0x1, 0x0, "0008ffee"}, @global=@item_012={0x2, 0x1, 0x3, "10d8"}, @main=@item_4, @global=@item_4={0x3, 0x1, 0x0, "a92cf191"}, @local=@item_4={0x3, 0x2, 0x0, "26abf650"}, @global=@item_4={0x3, 0x1, 0x0, "716aab48"}]}}, 0x0}, 0x0) 19:19:21 executing program 3: 19:19:21 executing program 0: 19:19:21 executing program 4: 19:19:21 executing program 2: 19:19:21 executing program 1: 19:19:21 executing program 2: 19:19:21 executing program 4: 19:19:21 executing program 1: 19:19:21 executing program 3: 19:19:21 executing program 0: [ 986.427017][ T8473] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 986.674646][ T8473] usb 6-1: Using ep0 maxpacket: 16 19:19:22 executing program 2: [ 986.797669][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.809106][ T8473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.819343][ T8473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.832468][ T8473] usb 6-1: New USB device found, idVendor=045e, idProduct=0000, bcdDevice= 0.00 [ 986.842745][ T8473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.022973][ T8473] usb 6-1: config 0 descriptor?? [ 987.765165][ T8473] usbhid 6-1:0.0: can't add hid device: -71 [ 987.771549][ T8473] usbhid: probe of 6-1:0.0 failed with error -71 [ 987.811573][ T8473] usb 6-1: USB disconnect, device number 96 19:19:23 executing program 0: 19:19:23 executing program 1: 19:19:23 executing program 3: 19:19:23 executing program 4: 19:19:23 executing program 2: 19:19:24 executing program 5: 19:19:24 executing program 3: 19:19:24 executing program 2: 19:19:24 executing program 4: 19:19:24 executing program 0: 19:19:24 executing program 1: 19:19:24 executing program 5: 19:19:24 executing program 3: 19:19:24 executing program 2: 19:19:24 executing program 4: 19:19:24 executing program 1: 19:19:24 executing program 0: 19:19:25 executing program 5: 19:19:25 executing program 3: 19:19:25 executing program 2: 19:19:25 executing program 4: 19:19:25 executing program 1: 19:19:25 executing program 0: 19:19:25 executing program 5: 19:19:25 executing program 4: 19:19:25 executing program 2: 19:19:25 executing program 3: 19:19:26 executing program 1: 19:19:26 executing program 0: 19:19:26 executing program 5: 19:19:26 executing program 4: 19:19:26 executing program 3: 19:19:26 executing program 2: 19:19:26 executing program 1: 19:19:26 executing program 0: 19:19:26 executing program 5: 19:19:27 executing program 4: 19:19:27 executing program 2: 19:19:27 executing program 3: 19:19:27 executing program 1: 19:19:27 executing program 0: 19:19:27 executing program 5: 19:19:27 executing program 4: 19:19:27 executing program 3: 19:19:27 executing program 2: 19:19:28 executing program 1: 19:19:28 executing program 0: 19:19:28 executing program 5: 19:19:28 executing program 4: 19:19:28 executing program 3: 19:19:28 executing program 2: 19:19:28 executing program 0: 19:19:28 executing program 1: 19:19:28 executing program 5: 19:19:28 executing program 4: 19:19:29 executing program 3: 19:19:29 executing program 2: 19:19:29 executing program 0: 19:19:29 executing program 4: 19:19:29 executing program 1: 19:19:29 executing program 5: 19:19:29 executing program 3: 19:19:29 executing program 2: 19:19:29 executing program 0: 19:19:30 executing program 1: 19:19:30 executing program 4: 19:19:30 executing program 5: 19:19:30 executing program 3: 19:19:30 executing program 2: 19:19:30 executing program 0: 19:19:30 executing program 5: 19:19:30 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/anycast6\x00') read$char_usb(r0, 0x0, 0x0) 19:19:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') read$char_usb(r0, 0x0, 0x0) 19:19:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@getlink={0x34, 0x12, 0x101, 0x0, 0x0, {}, [@IFLA_IFALIAS={0x14, 0x14, 'vlan1\x00'}]}, 0x34}}, 0x0) 19:19:31 executing program 0: openat$hwrng(0xffffff9c, &(0x7f0000002f40)='/dev/hwrng\x00', 0x18f6c1, 0x0) 19:19:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000038c0), 0x4000000000000a8, 0x0) 19:19:31 executing program 5: sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x3) 19:19:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='personality\x00') read$char_usb(r0, 0x0, 0x0) 19:19:31 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000007100)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000007100)='ns/pid_for_children\x00') 19:19:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 19:19:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0) 19:19:31 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, 0x0) 19:19:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, 0x0) 19:19:31 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 19:19:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 19:19:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001900)={&(0x7f0000000580)={0xec4, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@generic="d909bde9b3052b1b1616c5f6b919e3250fe301a8e02b9f519911f7f75d7731066bfb70221acec5dfbcf1727a2667169bfb1e7167a1bee60374dd0ce585e3c1cbcf62f82a39e8c288933095956b824a4d56da8561c4d643cb4f6d34fb0b352b51ac7d8181ba0fc61b415eefa3b20cf17bbc1220dcd448a6b0052b0b14b4cdeec2a2c3e8a50e4c6b0e3cee8f2e469e49cdbddddca550", @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@private0}, @nested={0xe01, 0x0, 0x0, 0x1, [@generic="85497184067f0480c0874a5a70bcadb9566e344c3422d665cbb5c05e4e1fa26b6f8e3aaf1b39d82da7ecd8f9f236d23132fbfbeb9c3d812f00199f52685792c750700f2aa4d7c8a99e875acb472c12944d839a2b922133f22d8160d5d0e90cbbbd8fe84200cca6c6fcece144907aafe19a4ff9361d26599fd7883a9197a168c889c2a5a21615e911c3600d5ec7c93773810eb68f202a9dcc3b666ca24f593366ae5bda2feb836cdab01186bdff654a30bc7187de5b6d184e0254cf22d97ad0c509637e9bcf58caf1", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev}, @generic="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"]}]}, 0xec4}}, 0x40) 19:19:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) 19:19:32 executing program 2: unshare(0x400) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 19:19:32 executing program 5: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 19:19:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8Z'], 0x38}}, 0x0) 19:19:32 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') read$char_usb(r0, 0x0, 0x0) [ 997.400237][T18536] netlink: 1236 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:33 executing program 2: openat$hwrng(0xffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x187800, 0x0) 19:19:33 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') write$char_usb(r0, 0x0, 0x0) 19:19:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') read$char_usb(r0, 0x0, 0x0) 19:19:33 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000180)=""/246) 19:19:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006ec0)=[{{&(0x7f0000000200)=@can, 0x80, &(0x7f00000014c0)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) 19:19:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000800000a3ddff000202574d0d723572160a00000004"], 0x24}}, 0x0) 19:19:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') read$char_usb(r0, 0x0, 0x0) 19:19:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff}, [@RTA_MULTIPATH={0x43}]}, 0x28}}, 0x0) 19:19:33 executing program 5: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 998.448127][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:33 executing program 0: r0 = getpgrp(0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000002840)=[{0x0}, {0x0}, {&(0x7f0000002280)=""/140, 0x8c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000003b80)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 19:19:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 998.789534][T18571] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:34 executing program 2: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x9}, 0x0, &(0x7f00000001c0)={0x0}) 19:19:34 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$char_usb(r0, &(0x7f0000000080)=""/237, 0xed) 19:19:34 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') read$char_usb(r0, 0x0, 0x0) 19:19:34 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x9, &(0x7f0000000000)) 19:19:34 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read$char_usb(r0, 0x0, 0x0) 19:19:35 executing program 1: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x4c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:35 executing program 5: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 19:19:35 executing program 0: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000200)='\x1f\x96$k\xc3\x87\xa6V:\x0ex\xafe\x80\xad~\xf8D\xe4M\xca\xb2E\x89\x00\x8ar5\xb7\xff\x91\xce\xa9\xe5\xda6\xd8\x9d\b\xe3bE\x9c\xdaDCZ\xfc\x84\n\xcc\x193\xf5h\x87\xb9\xe9B0\xd0F\xbf\x87\xaf\xe1\xa4\xcbq\x90F\x02\xccK\x8cr\f<\x99\xf5\x89q%\xc7\xa8\x99IyF0\x83a11 2o\xab\xcaC7\x87\x81\xbb\x02\x8f\xa4\x1c\xf3*Z9\xc4\x97\x92}\x90QYx\x14\xf0\x82t4\x8b\xfc\x00'/139, r0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r0) request_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='--{\x00', 0x0) 19:19:35 executing program 4: unshare(0x400) r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) 19:19:35 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time_for_children\x00') 19:19:35 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') unshare(0x400) read$char_usb(r0, 0x0, 0x0) 19:19:36 executing program 4: openat$tun(0xffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) 19:19:36 executing program 5: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 19:19:36 executing program 1: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) 19:19:36 executing program 3: openat$bsg(0xffffff9c, &(0x7f0000000140)='/dev/bsg\x00', 0x10400, 0x0) 19:19:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') read$char_usb(r0, 0x0, 0x0) 19:19:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000b06010100000000e700007d7804000005000100060000000900020073797a30000000003000078006000440000000000c0001"], 0x58}}, 0x0) 19:19:36 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') read$char_usb(r0, 0x0, 0x0) 19:19:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000580)={0xec4, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@generic="d909bde9b3052b1b1616c5f6b919e3250fe301a8e02b9f519911f7f75d7731066bfb70221acec5dfbcf1727a2667169bfb1e7167a1bee60374dd0ce585e3c1cbcf62f82a39e8c288933095956b824a4d56da8561c4d643cb4f6d34fb0b352b51ac7d8181ba0fc61b415eefa3b20cf17bbc1220dcd448a6b0052b0b14b4cdeec2a2c3e8a50e4c6b0e3cee8f2e469e49cdbddddca550", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private0}, @nested={0xe01, 0x0, 0x0, 0x1, [@generic="85497184067f0480c0874a5a70bcadb9566e344c3422d665cbb5c05e4e1fa26b6f8e3aaf1b39d82da7ecd8f9f236d23132fbfbeb9c3d812f00199f52685792c750700f2aa4d7c8a99e875acb472c12944d839a2b922133f22d8160d5d0e90cbbbd8fe84200cca6c6fcece144907aafe19a4ff9361d26599fd7883a9197a168c889c2a5a21615e911c3600d5ec7c93773810eb68f202a9dcc3b666ca24f593366ae5bda2feb836cdab01186bdff654a30bc7187de5b6d184e0254cf22d97ad0c509637e9bcf58caf1", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev}, @generic="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"]}]}, 0xec4}}, 0x40) 19:19:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3200}}, 0x1c}}, 0x0) 19:19:36 executing program 0: openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 19:19:37 executing program 1: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:37 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1001.853389][T18627] netlink: 1236 bytes leftover after parsing attributes in process `syz-executor.5'. 19:19:37 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') read$char_usb(r0, 0x0, 0x0) 19:19:37 executing program 0: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) 19:19:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x6c}}, 0x0) 19:19:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, &(0x7f0000000000)=@generic, &(0x7f00000000c0)=0x80) 19:19:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x83ac282514e850a, 0x0, &(0x7f0000006fc0)) 19:19:38 executing program 4: r0 = openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) 19:19:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}, @RTA_EXPIRES={0x8}]}, 0x2c}}, 0x0) 19:19:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:38 executing program 5: sysfs$1(0x1, &(0x7f0000000000)='\x83\x00') 19:19:38 executing program 2: openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x181002, 0x0) 19:19:38 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, 0x0, 0x0) 19:19:38 executing program 4: process_vm_writev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 19:19:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001900010000000000000000000a000000000000000000000004"], 0x28}}, 0x0) 19:19:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000006fc0)={0x0, 0x989680}) 19:19:39 executing program 5: r0 = getpgrp(0xffffffffffffffff) process_vm_writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f00000004c0)=""/228, 0xe4}], 0x2, &(0x7f0000000880)=[{&(0x7f0000000600)=""/207, 0xcf}, {&(0x7f0000000700)=""/88, 0x58}], 0x2, 0x0) 19:19:39 executing program 1: openat$bsg(0xffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x40100, 0x0) [ 1003.867840][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:39 executing program 4: unshare(0x400) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000040)="65cf", 0x2, 0x0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 19:19:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000007100)='ns/pid_for_children\x00') 19:19:39 executing program 3: r0 = getpgrp(0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000002840)=[{&(0x7f0000002280)=""/140, 0x8c}], 0x1, &(0x7f0000003b80)=[{&(0x7f00000028c0)=""/4096, 0x1000}, {0x0}], 0x2, 0x0) 19:19:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') read$char_usb(r0, &(0x7f0000000a80)=""/99, 0x63) 19:19:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001900010000000000000000000a00000000000000000000000c000902"], 0x28}}, 0x0) 19:19:40 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b800000004060101000000002100800053f2c3560500010006"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff99) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) 19:19:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:40 executing program 2: syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x0) 19:19:40 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00') read$char_usb(r0, 0x0, 0x0) 19:19:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') read$char_usb(r0, 0x0, 0x0) 19:19:40 executing program 5: sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0xcd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 1005.264520][T18690] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:40 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) [ 1005.461876][T18697] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001900010000000000000000000a"], 0x28}}, 0x0) 19:19:41 executing program 2: pselect6(0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) 19:19:41 executing program 3: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0xfa}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 19:19:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') read$char_usb(r0, &(0x7f0000000080)=""/237, 0xed) 19:19:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) [ 1006.001626][T18708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 19:19:41 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:41 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') 19:19:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 19:19:41 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 19:19:41 executing program 3: openat$autofs(0xffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x6d2101, 0x0) 19:19:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000300)='gid_map\x00') write$char_usb(r0, 0x0, 0x0) 19:19:42 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:42 executing program 5: openat$ttyS3(0xffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x441, 0x0) 19:19:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r0, 0x0, &(0x7f00000000c0)) 19:19:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') read$char_usb(r0, &(0x7f0000000a80)=""/99, 0x63) 19:19:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001900)={&(0x7f0000000580)={0xec4, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@generic="d909bde9b3052b1b1616c5f6b919e3250fe301a8e02b9f519911f7f75d7731066bfb70221acec5dfbcf1727a2667169bfb1e7167a1bee60374dd0ce585e3c1cbcf62f82a39e8c288933095956b824a4d56da8561c4d643cb4f6d34fb0b352b51ac7d8181ba0fc61b415eefa3b20cf17bbc1220dcd448a6b0052b0b14b4cdeec2a2c3e8a50e4c6b0e3cee8f2e469e49cdbddddca550", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private0}, @nested={0xe01, 0x0, 0x0, 0x1, [@generic="85497184067f0480c0874a5a70bcadb9566e344c3422d665cbb5c05e4e1fa26b6f8e3aaf1b39d82da7ecd8f9f236d23132fbfbeb9c3d812f00199f52685792c750700f2aa4d7c8a99e875acb472c12944d839a2b922133f22d8160d5d0e90cbbbd8fe84200cca6c6fcece144907aafe19a4ff9361d26599fd7883a9197a168c889c2a5a21615e911c3600d5ec7c93773810eb68f202a9dcc3b666ca24f593366ae5bda2feb836cdab01186bdff654a30bc7187de5b6d184e0254cf22d97ad0c509637e9bcf58caf1", @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev}, @generic="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"]}]}, 0xec4}}, 0x0) 19:19:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000190001000000dc3c000000a582"], 0x1c}}, 0x0) 19:19:42 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) [ 1007.330581][T18734] netlink: 1236 bytes leftover after parsing attributes in process `syz-executor.3'. 19:19:42 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 19:19:43 executing program 5: openat$fuse(0xffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 19:19:43 executing program 2: r0 = openat$bsg(0xffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) 19:19:43 executing program 3: creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) 19:19:43 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 19:19:43 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:43 executing program 3: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) 19:19:43 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2282}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:43 executing program 1: sync_file_range(0xffffffffffffffff, 0x0, 0x80000000, 0x0) 19:19:43 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) 19:19:43 executing program 4: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:44 executing program 0: socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:44 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) 19:19:44 executing program 3: r0 = openat$bsg(0xffffff9c, &(0x7f0000000800)='/dev/bsg\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x4) 19:19:44 executing program 1: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/nfsfs\x00') socket$inet(0x2, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, 0x0, 0x0) 19:19:44 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffff9c, 0x0, 0x18f6c1, 0x0) creat(0x0, 0x0) 19:19:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 19:19:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') read$char_usb(r0, 0x0, 0x0) 19:19:44 executing program 5: r0 = openat$bsg(0xffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) 19:19:44 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') read$char_usb(r0, 0x0, 0x0) 19:19:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 19:19:45 executing program 2: pselect6(0x0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 19:19:45 executing program 4: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/nfsfs\x00') write$char_usb(r0, 0x0, 0x0) 19:19:45 executing program 1: unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x0) 19:19:45 executing program 5: lchown(&(0x7f0000007000)='./file0\x00', 0xee00, 0x0) 19:19:45 executing program 3: unshare(0x14060280) 19:19:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 19:19:46 executing program 1: lchown(0x0, 0xee00, 0x0) 19:19:46 executing program 2: io_setup(0x478d, &(0x7f0000000000)) 19:19:46 executing program 4: 19:19:46 executing program 5: openat$bsg(0xffffff9c, &(0x7f0000000200)='/dev/bsg\x00', 0x4000, 0x0) 19:19:46 executing program 3: creat(&(0x7f00000000c0)='./file0\x00', 0x0) 19:19:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 19:19:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 19:19:46 executing program 4: semget$private(0x0, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="b8000000040601010000000021000000060000000500010006"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xff99) perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) 19:19:46 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x10}, 0x10) 19:19:46 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000100)) 19:19:46 executing program 2: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 19:19:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) [ 1011.731867][T18824] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:47 executing program 1: getresgid(&(0x7f0000007040), &(0x7f0000007080), &(0x7f00000070c0)) [ 1011.858178][T18829] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 19:19:47 executing program 2: syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd601b673a000833"], 0x0) 19:19:47 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sockstat6\x00') read$char_usb(r0, 0x0, 0x0) 19:19:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 19:19:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 19:19:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @remote}]}, 0x30}}, 0x0) 19:19:47 executing program 1: openat$cachefiles(0xffffff9c, &(0x7f0000000840)='/dev/cachefiles\x00', 0x0, 0x0) 19:19:48 executing program 2: openat$autofs(0xffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) 19:19:48 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10) 19:19:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 19:19:48 executing program 5: creat(0x0, 0x0) io_setup(0x478d, &(0x7f0000000000)) 19:19:48 executing program 4: unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/nfsfs\x00') openat$cgroup_procs(r0, &(0x7f00000011c0)='cgroup.procs\x00', 0x2, 0x0) 19:19:48 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f00000016c0)) 19:19:48 executing program 2: unshare(0x400) syz_open_procfs(0x0, &(0x7f0000000c40)='status\x00') bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 19:19:48 executing program 4: unshare(0x400) r0 = openat$urandom(0xffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) 19:19:49 executing program 3: r0 = openat$bsg(0xffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x200000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) 19:19:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 19:19:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8}, @RTA_PREF={0x5}]}, 0x2c}}, 0x0) 19:19:49 executing program 1: r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x81000401) 19:19:49 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f00000000c0)) 19:19:49 executing program 3: unshare(0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x3c}}, 0x0) 19:19:49 executing program 4: unshare(0x400) r0 = openat$urandom(0xffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) 19:19:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 19:19:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}, @RTA_MULTIPATH={0xc, 0x9, {0x1ff}}]}, 0x30}}, 0x0) 19:19:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 19:19:50 executing program 2: sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) 19:19:50 executing program 3: sched_setparam(0x0, &(0x7f0000000000)) 19:19:50 executing program 4: unshare(0x400) r0 = openat$urandom(0xffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) 19:19:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:50 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/config\x00') read$char_usb(r0, &(0x7f0000000a80)=""/99, 0x63) 19:19:50 executing program 1: io_setup(0x9, &(0x7f0000000000)) 19:19:51 executing program 3: creat(&(0x7f00000008c0)='./file0\x00', 0x0) 19:19:51 executing program 4: unshare(0x400) r0 = openat$urandom(0xffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) 19:19:51 executing program 2: perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) 19:19:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001900010000800000a3ddff0002"], 0x24}}, 0x0) 19:19:51 executing program 1: syz_open_procfs(0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x9, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:51 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_vif\x00') read$char_usb(r0, 0x0, 0x0) [ 1016.484638][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:19:52 executing program 5: socket$inet(0x2, 0x0, 0xad90) 19:19:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x0, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:52 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x13, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffff80}, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x2, 0x11d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000740], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x20b) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000400)={0x5, 0x4501, [0x6, 0x0, 0xe4f1, 0x0, 0x3], 0x40}) mkdir(0x0, 0x18) r1 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x86) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'nr0\x00', 0xf0}) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000140)) eventfd2(0x201, 0x80001) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x20000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) getsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f00000036c0)=""/4109, &(0x7f00000000c0)=0x100d) rmdir(&(0x7f0000000040)='./file0\x00') 19:19:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x3f7}]}, 0x24}}, 0x0) 19:19:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@local, @random="0982e32fef90", @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4, 0x0, 0x3}]}}}}}}, 0x0) 19:19:52 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') read$char_usb(r0, &(0x7f0000000100)=""/128, 0x80) 19:19:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:52 executing program 5: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10908, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40028}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:19:52 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$char_usb(r0, 0x0, 0x0) 19:19:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='uid_map\x00') write$cgroup_subtree(r0, 0x0, 0x0) 19:19:53 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0xe, 0x4, 0x4b0, 0x1d8, 0x108, 0x320, 0x0, 0x1d8, 0x2d4, 0x3e8, 0x3e8, 0x3e8, 0x2d4, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@limit={{0x3c, 'limit\x00'}, {0x0, 0x8}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00'}}, {{@uncond, 0x0, 0x1f4, 0x218, 0x0, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x7d9, 0xc, 0x0, 0x0, 0xdbe, 0x8}}}]}, @common=@unspec=@NFQUEUE0={0x24, 'NFQUEUE\x00'}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 19:19:53 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000007100)='ns/pid_for_children\x00') ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 19:19:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') read$char_usb(r0, 0x0, 0x31) 19:19:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}]}, 0x24}}, 0x0) 19:19:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001900010000f800000000000003"], 0x28}}, 0x0) [ 1018.172773][T18949] x_tables: duplicate underflow at hook 2 19:19:53 executing program 3: openat$bsg(0xffffff9c, &(0x7f0000000240)='/dev/bsg\x00', 0x9a840, 0x0) 19:19:53 executing program 1: openat$autofs(0xffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20100, 0x0) 19:19:54 executing program 5: r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 19:19:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x30}}, 0x0) 19:19:54 executing program 4: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 19:19:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={0x0}}, 0x81) 19:19:54 executing program 1: r0 = openat$hwrng(0xffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, r0, 0x0) 19:19:54 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}}, 0x0) 19:19:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x20, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 19:19:54 executing program 5: ioprio_set$uid(0x0, 0xee01, 0x4004) 19:19:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}}, 0x0) 19:19:55 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000004680)) 19:19:55 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='cpuset\x00') read$char_usb(r0, 0x0, 0x0) 19:19:55 executing program 3: r0 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) 19:19:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x80}}, 0x1c}}, 0x0) 19:19:55 executing program 5: unshare(0x400) syz_open_procfs(0x0, &(0x7f0000000300)='net/nfsfs\x00') bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 19:19:55 executing program 4: time(&(0x7f0000000100)) 19:19:55 executing program 2: openat$hwrng(0xffffff9c, 0x0, 0x549002, 0x0) 19:19:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x28, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x1ff}}]}, 0x28}}, 0x0) 19:19:55 executing program 3: mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 19:19:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=@ipv6_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}, @RTA_MULTIPATH={0xc}]}, 0x30}}, 0x0) 19:19:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@ipv6_delroute={0x20, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) 19:19:56 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='auxv\x00') read$char_usb(r0, 0x0, 0x0) 19:19:56 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='statm\x00') read$char_usb(r0, 0x0, 0x0) 19:19:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') read$char_usb(r0, 0x0, 0x0) 19:19:56 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x5452, &(0x7f0000000140)) 19:19:56 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x5451, 0x0) 19:19:57 executing program 5: r0 = epoll_create(0x7fff) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000000)) 19:19:57 executing program 0: socketpair(0x1, 0x1, 0x3, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'veth0_to_batadv\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="11000000ffffffff000000000333000059fcffff00017e13722a8a6867e7aca9bbbfb6412eed000044f70000ffff000002000000"]}) r3 = fcntl$dupfd(r0, 0x0, r2) getsockopt$sock_int(r3, 0x1, 0x27, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$P9_RLOPEN(r3, &(0x7f0000000200)={0x18, 0xd, 0x0, {{0x10, 0x0, 0x1}, 0xd6}}, 0x18) socket$inet_tcp(0x2, 0x1, 0x0) r4 = semget(0xffffffffffffffff, 0x8, 0x0) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000300)=""/25) 19:19:57 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x5421, &(0x7f0000000000)) 19:19:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x5450, 0x0) 19:19:57 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001300), 0x7, 0x0, 0x0) 19:19:57 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 19:19:57 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) listen(r1, 0x0) 19:19:57 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000040)=""/248, 0xf8}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2, 0x0, 0x0) 19:19:57 executing program 3: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5450, 0x0) 19:19:58 executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$FICLONERANGE(r0, 0x5452, &(0x7f0000000080)) 19:19:58 executing program 1: shmget(0x1, 0x4000, 0x641, &(0x7f0000ffc000/0x4000)=nil) 19:19:58 executing program 4: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 19:19:58 executing program 5: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 19:19:58 executing program 0: pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000001200)=[{0x0}], 0x1) 19:19:58 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="f2fb3190b52bd67c967c72a867642d9fe5fb8ff9f2a40bcc56d4ed70f655d6e4b142b38298faf6d3106ded547b6a3a0610524105be824224f0e2a5e34706e25bd37b9a1724e97aabc8c6784ecf62a16a2b7ed38e3450d1924be68765211cf90bfc9aa550797e9b7f686c1a67d20dae1229945c052a6371f109cc99fa7f4a262a5114dfe6bfbc8bc545d3e5aee0a02ec4f0", 0x91, 0x408, 0x0, 0x0) 19:19:58 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0) dup2(r1, r0) 19:19:58 executing program 4: mprotect(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0) mlock(&(0x7f0000ff0000/0x3000)=nil, 0x3000) 19:19:58 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x800, 0x0, 0x0) 19:19:59 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) fcntl$setown(r0, 0x6, 0x0) 19:19:59 executing program 0: acct(&(0x7f0000000040)='.\x00') 19:19:59 executing program 4: open(&(0x7f0000000140)='./file0\x00', 0xaa936738801aa7c2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10, 0x0) open(&(0x7f0000001900)='./file0\x00', 0x10, 0x0) 19:19:59 executing program 2: setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 19:19:59 executing program 1: open(&(0x7f0000000140)='./file0\x00', 0xaa936738801aa7c2, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0x0) 19:19:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 19:19:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000001040), &(0x7f0000001080)=0x4) [ 1024.460516][ T32] audit: type=1804 audit(1604085599.870:69): pid=19076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir306445575/syzkaller.2YQabS/538/file0" dev="sda1" ino=16382 res=1 errno=0 19:19:59 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)=""/85, 0x55}], 0x10000002, 0x0, 0x0) [ 1024.639613][ T32] audit: type=1804 audit(1604085599.910:70): pid=19076 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir306445575/syzkaller.2YQabS/538/file0" dev="sda1" ino=16382 res=1 errno=0 [ 1024.664177][ T32] audit: type=1804 audit(1604085599.980:71): pid=19079 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir383965445/syzkaller.PCqcvd/586/file0" dev="sda1" ino=16227 res=1 errno=0 19:20:00 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8dfe82fe418ed648, 0x10, 0xffffffffffffffff, 0x0) 19:20:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f00000000c0)=""/84, 0xffffffffffffff34, 0x0, 0x0, 0x0) 19:20:00 executing program 3: recvfrom$unix(0xffffffffffffffff, &(0x7f0000000000)=""/84, 0xffffffffffffff8d, 0x0, 0x0, 0xffffffffffffff45) 19:20:00 executing program 1: setuid(0xffffffffffffffff) socket$inet(0x2, 0x3, 0x0) 19:20:00 executing program 0: socketpair(0x1, 0x3, 0x9, 0x0) 19:20:00 executing program 5: mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 19:20:00 executing program 2: r0 = socket$inet6(0x18, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:20:01 executing program 3: mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) 19:20:01 executing program 0: writev(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) 19:20:01 executing program 5: ftruncate(0xffffffffffffffff, 0x0) 19:20:01 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)="0690fc9793ca19ad88eeb8cf6cbbbc513ca26e6eaed879061aefb954cc00aeb981894dd895385b953ad8689ad2e97a775dd5416d9f7dfa56bfe58594bf8c9392cbc0b4386e74f9c9d8f032377282367ad8d57311612d4c7b62b014032b446a3aa88cae0e3e074ea1ba114be2c42795961dca002ca9df953dd3519bcb79c661ba0decfd37d51233aac5294e565f80931b9c426359908c3dc1b2aeef7d526a645ba6bc6bcd6cc21acfa73b1d8382fa1dff35562bc6f80733fcedec094968a5cdd080859c3b70918a78897c0e494f934b31bb7377b26bb7b8c90f9dd47617c50e4fb6b74b4a934cc071c3f885", 0xeb}, {&(0x7f0000000100)="db27c45f78b2a4aef886a85a5e1b6e9d61f66a6193efaf0add5c2b25e5301df41862ba82ffaddb88b9264e185cebb026360ab387740f54c1a824d155f8d7d8d105c955029f0bf4603e5f65719db4d021c40867addb0d630dee8bab127b2bd7b4abbca0d511c27ec9997cf7b769b0bc1cf9788f460869b5fa802b4bf2006a62e8f3b3965535a521a681d722c3c80ecfb3ab50c3fad868cb4a4b65731bbd0cc2d75ba92c950838907aa2ed80a03609b76ef46f54be568094577b5b40819622b1a02d8445459c68db0f4f", 0xc9}, {&(0x7f0000000200)="5613edda080280bd31fb285cf66007e996980655eb2be1571197d2c5d49eecebdc4db410412f931dbb6bf3b72f5f55fde49ff3115702da18a605405326cd0c9bf75bdd5283a7224de973da95", 0x4c}, {0x0}, {&(0x7f00000013c0)="17", 0x1}], 0x5) 19:20:01 executing program 4: semget(0x3, 0x5, 0x0) 19:20:01 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) dup2(r0, r1) 19:20:01 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000240)=""/238, 0xee}, {&(0x7f0000000140)=""/167, 0xffffffffffffff78}], 0x2, 0x0, 0x0) 19:20:01 executing program 0: 19:20:01 executing program 5: 19:20:02 executing program 1: 19:20:02 executing program 2: 19:20:02 executing program 4: 19:20:02 executing program 3: chown(&(0x7f0000000100)='.\x00', 0x0, 0x0) 19:20:02 executing program 0: 19:20:02 executing program 5: 19:20:02 executing program 1: 19:20:02 executing program 2: 19:20:02 executing program 4: 19:20:02 executing program 3: 19:20:03 executing program 0: 19:20:03 executing program 1: 19:20:03 executing program 5: 19:20:03 executing program 4: 19:20:03 executing program 2: 19:20:03 executing program 3: 19:20:03 executing program 0: 19:20:03 executing program 5: 19:20:03 executing program 1: 19:20:04 executing program 3: 19:20:04 executing program 4: 19:20:04 executing program 2: 19:20:04 executing program 0: 19:20:04 executing program 1: 19:20:04 executing program 5: 19:20:04 executing program 3: 19:20:04 executing program 2: 19:20:04 executing program 4: 19:20:04 executing program 0: 19:20:05 executing program 1: 19:20:05 executing program 5: 19:20:05 executing program 3: 19:20:05 executing program 4: 19:20:05 executing program 2: 19:20:05 executing program 0: 19:20:05 executing program 1: 19:20:05 executing program 5: 19:20:05 executing program 3: 19:20:05 executing program 4: 19:20:06 executing program 2: 19:20:06 executing program 1: 19:20:06 executing program 0: 19:20:06 executing program 5: 19:20:06 executing program 3: 19:20:06 executing program 2: 19:20:06 executing program 4: 19:20:06 executing program 1: 19:20:06 executing program 0: 19:20:07 executing program 5: 19:20:07 executing program 3: 19:20:07 executing program 1: 19:20:07 executing program 0: 19:20:07 executing program 2: 19:20:07 executing program 4: 19:20:07 executing program 5: 19:20:07 executing program 3: 19:20:07 executing program 1: 19:20:07 executing program 0: 19:20:08 executing program 4: 19:20:08 executing program 2: 19:20:08 executing program 3: 19:20:08 executing program 5: 19:20:08 executing program 0: 19:20:08 executing program 1: 19:20:08 executing program 4: 19:20:08 executing program 2: 19:20:08 executing program 3: 19:20:08 executing program 5: 19:20:09 executing program 1: 19:20:09 executing program 0: 19:20:09 executing program 4: 19:20:09 executing program 2: 19:20:09 executing program 5: 19:20:09 executing program 3: 19:20:09 executing program 1: 19:20:09 executing program 0: 19:20:09 executing program 4: 19:20:10 executing program 2: 19:20:10 executing program 5: 19:20:10 executing program 3: 19:20:10 executing program 1: 19:20:10 executing program 0: 19:20:10 executing program 4: 19:20:10 executing program 2: 19:20:10 executing program 5: 19:20:10 executing program 1: 19:20:10 executing program 0: 19:20:11 executing program 3: 19:20:11 executing program 4: 19:20:11 executing program 2: 19:20:11 executing program 5: 19:20:11 executing program 0: 19:20:11 executing program 1: 19:20:11 executing program 3: 19:20:11 executing program 4: 19:20:11 executing program 2: 19:20:12 executing program 5: 19:20:12 executing program 0: 19:20:12 executing program 1: 19:20:12 executing program 3: 19:20:12 executing program 4: 19:20:12 executing program 2: 19:20:12 executing program 5: 19:20:12 executing program 0: 19:20:12 executing program 1: 19:20:12 executing program 4: 19:20:12 executing program 3: 19:20:13 executing program 2: 19:20:13 executing program 5: 19:20:13 executing program 0: 19:20:13 executing program 4: 19:20:13 executing program 1: 19:20:13 executing program 3: 19:20:13 executing program 2: 19:20:14 executing program 5: 19:20:14 executing program 4: 19:20:14 executing program 0: 19:20:14 executing program 1: 19:20:14 executing program 3: 19:20:14 executing program 2: 19:20:14 executing program 0: 19:20:14 executing program 5: 19:20:14 executing program 4: 19:20:14 executing program 1: 19:20:14 executing program 2: 19:20:14 executing program 3: 19:20:15 executing program 0: 19:20:15 executing program 5: 19:20:15 executing program 2: 19:20:15 executing program 1: 19:20:15 executing program 4: 19:20:16 executing program 1: 19:20:16 executing program 4: 19:20:16 executing program 3: 19:20:16 executing program 5: 19:20:16 executing program 0: 19:20:16 executing program 2: 19:20:16 executing program 1: 19:20:16 executing program 3: 19:20:16 executing program 0: 19:20:16 executing program 4: 19:20:16 executing program 5: 19:20:16 executing program 2: 19:20:17 executing program 1: 19:20:17 executing program 3: 19:20:17 executing program 5: 19:20:17 executing program 4: 19:20:17 executing program 2: 19:20:17 executing program 0: 19:20:17 executing program 1: 19:20:17 executing program 3: 19:20:17 executing program 5: 19:20:18 executing program 4: 19:20:18 executing program 2: 19:20:18 executing program 0: 19:20:18 executing program 5: 19:20:18 executing program 3: 19:20:18 executing program 1: 19:20:18 executing program 4: 19:20:18 executing program 0: 19:20:18 executing program 2: 19:20:18 executing program 5: 19:20:19 executing program 1: 19:20:19 executing program 3: 19:20:19 executing program 0: 19:20:19 executing program 4: 19:20:19 executing program 2: 19:20:19 executing program 5: 19:20:19 executing program 3: 19:20:19 executing program 1: 19:20:19 executing program 4: 19:20:20 executing program 0: 19:20:20 executing program 2: 19:20:20 executing program 5: 19:20:20 executing program 1: 19:20:20 executing program 4: 19:20:20 executing program 3: 19:20:20 executing program 0: 19:20:20 executing program 2: 19:20:20 executing program 5: 19:20:21 executing program 3: 19:20:21 executing program 4: 19:20:21 executing program 1: 19:20:21 executing program 0: 19:20:21 executing program 2: 19:20:21 executing program 5: 19:20:21 executing program 1: 19:20:21 executing program 3: 19:20:21 executing program 4: 19:20:21 executing program 5: 19:20:21 executing program 0: 19:20:22 executing program 2: 19:20:22 executing program 1: 19:20:22 executing program 3: 19:20:22 executing program 4: 19:20:22 executing program 0: 19:20:22 executing program 5: 19:20:22 executing program 2: 19:20:22 executing program 1: 19:20:22 executing program 4: 19:20:22 executing program 3: 19:20:23 executing program 0: 19:20:23 executing program 5: 19:20:23 executing program 2: 19:20:23 executing program 1: 19:20:23 executing program 4: 19:20:23 executing program 3: 19:20:23 executing program 0: 19:20:23 executing program 5: 19:20:23 executing program 1: 19:20:24 executing program 3: 19:20:24 executing program 4: 19:20:24 executing program 2: 19:20:24 executing program 5: 19:20:24 executing program 1: 19:20:24 executing program 0: 19:20:24 executing program 3: 19:20:24 executing program 4: 19:20:24 executing program 2: 19:20:24 executing program 5: 19:20:24 executing program 0: 19:20:25 executing program 1: 19:20:25 executing program 3: 19:20:25 executing program 4: 19:20:25 executing program 2: 19:20:25 executing program 5: 19:20:25 executing program 0: 19:20:25 executing program 1: 19:20:25 executing program 2: 19:20:25 executing program 3: 19:20:25 executing program 4: 19:20:26 executing program 5: 19:20:26 executing program 0: socketpair(0xf57088420000000a, 0x3, 0x0, &(0x7f0000000200)) 19:20:26 executing program 1: socketpair(0x0, 0x0, 0x0, &(0x7f0000000780)) 19:20:26 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@rc, 0x80, 0x0}, 0x0) 19:20:26 executing program 5: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000100)='?', &(0x7f0000000200)}, 0x48) 19:20:26 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0045878, 0x0) 19:20:26 executing program 4: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) 19:20:27 executing program 0: bpf$BPF_TASK_FD_QUERY(0x9, 0x0, 0x0) 19:20:27 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x4020940d, &(0x7f00000000c0)={'rose0\x00'}) 19:20:27 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000f840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000800)=@raw=[@btf_id], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x155c3}, 0x78) perf_event_open(&(0x7f000000f900)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f000000fbc0)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000025780)={0x18, 0x2, &(0x7f000000fd00)=@raw=[@map_val], &(0x7f000000fd80)='GPL\x00', 0x48c1, 0xd6, &(0x7f000000fdc0)=""/214, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:27 executing program 1: bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 19:20:27 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x5450, 0x0) 19:20:27 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2, 0x4f}]}]}}, &(0x7f00000000c0)=""/210, 0x32, 0xd2, 0x1}, 0x20) 19:20:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:20:27 executing program 1: socketpair(0x26, 0x0, 0x0, &(0x7f00000001c0)) 19:20:27 executing program 4: socketpair(0x2, 0x1, 0x40, &(0x7f0000000240)) 19:20:27 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40010002) 19:20:27 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000940)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:27 executing program 2: bpf$BPF_TASK_FD_QUERY(0xa, 0x0, 0x0) 19:20:28 executing program 0: socketpair(0xa, 0x0, 0x0, &(0x7f0000000240)) 19:20:28 executing program 1: bpf$PROG_LOAD(0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x2d, 0x10, 0x0, 0xfffffffffffffffb}, 0xd8) 19:20:28 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 19:20:28 executing program 3: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0), 0x10) 19:20:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40049409, &(0x7f00000000c0)={'rose0\x00'}) 19:20:29 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001900)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x4a0}, 0x0) 19:20:29 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x10, 0x0) 19:20:29 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf4240, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xf4, &(0x7f00000000c0)=""/244, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:29 executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0}, 0x48) 19:20:29 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x12, 0x1, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f00000003c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 19:20:29 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f00000016c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001400)=[{0x0}, {&(0x7f00000000c0)="bf", 0x1}, {&(0x7f0000000180)='?', 0x1}], 0x3, &(0x7f0000001480)=ANY=[], 0x240}, 0x80041) 19:20:29 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000000c0)=""/210, 0x26, 0xd2, 0x1}, 0x20) 19:20:30 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 19:20:30 executing program 5: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x1a}, 0x10) 19:20:30 executing program 4: bpf$BPF_TASK_FD_QUERY(0x8, 0x0, 0x0) 19:20:30 executing program 2: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:20:30 executing program 5: bpf$LINK_GET_FD_BY_ID(0x22, 0x0, 0x0) 19:20:30 executing program 3: openat$tun(0xffffffffffffff9c, 0x0, 0x402100, 0x0) 19:20:34 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf4240, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xf4, &(0x7f00000000c0)=""/244, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:34 executing program 1: bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 19:20:34 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x4cc2, 0x0) 19:20:34 executing program 2: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 19:20:34 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={0xffffffffffffffff, 0xf, 0x1, 0x8001, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, 0x0, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x101, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x9}, &(0x7f00000001c0)=0x19b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x1}}, 0x10) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.mem_exclusive\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={&(0x7f00000003c0)="7151ecc0adb31d26e13f14", &(0x7f0000000400)=""/230, &(0x7f0000000500)="7f4f5858379e155710feff6e6abefb653c00307cd3c4bc7ccbc535959b8521689e3dc13f7364339a97444fa38ff7b60688bc44439190d0fb03880c1056f5e490f2ef09d154d4f242c9e9f542f3f3732af78c0bac7ded5d93f63c845a17e6704c7328595c9f9be4064badab08e952eba6bd36cf27c99e12ce6e5a328d983be50d1d488c348c28906ddc588bef94fa19a33733e2", &(0x7f00000005c0)="b3f5211e7a8ea2c1c3b1dcd8d6a71199efa912a42f6155e1b3c2f203f60b67d0cc3b36e8a7864ed2c53b9e43719a6bea72e979356b88e35626aa4c49f2a67882ddbc96d626f26985aa0dcdced6ad9298469a130405b06891b6940d4195d6fa53de35a1052160046be66bad0004d3d22a296a83573224b8b0d4f00aff0e0520aadbbf69410363094011a46d581fc5a33ea1f50e7fb89b6c59c40427e7085c7bf3aa565e9f854580736936d9c2ea967f9879a89c87385bd556e0b973330b9c1bc58dc7f81acfe1811a5bcf471978fade7a30ea694811816a57e43c63fd26260768803ab76332ba803394d76eb95e906a1e66e87ed9ad99e2", 0x6809, 0xffffffffffffffff, 0x4}, 0x38) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000700)) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000740)=0xac5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000f840)=@bpf_ext={0x1c, 0x5, &(0x7f0000000800)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @alu={0x4, 0x0, 0x1, 0x0, 0x2, 0x1, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000840)='GPL\x00', 0x1, 0xbb, &(0x7f0000000880)=""/187, 0x41100, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000f7c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f000000f800)={0x4, 0xe, 0x5, 0x6}, 0x10, 0x155c3}, 0x78) perf_event_open(&(0x7f000000f900)={0x3, 0x70, 0x9, 0x5, 0x2, 0x8, 0x0, 0x9ff6, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f000000f8c0)}, 0x2000, 0xfd1, 0x0, 0x0, 0x7ff, 0x3f, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0x0, &(0x7f000000fbc0)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000025780)={0x18, 0xf, &(0x7f000000fd00)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @map={0x18, 0xb}, @alu={0x7, 0x0, 0x2, 0x4, 0xb, 0x30, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x654f06a8}, @alu={0x7, 0x0, 0xc, 0x8, 0x3, 0x30, 0x1}, @exit, @map, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0x9, 0x8, 0x8, 0x0, 0xffffffffffffffff}], &(0x7f000000fd80)='GPL\x00', 0x48c1, 0xd6, &(0x7f000000fdc0)=""/214, 0x41100, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000025700)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000025740)={0x3, 0x0, 0x51df, 0x728923c8}, 0x10}, 0x78) 19:20:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 19:20:34 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x2, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/173, 0x1a, 0xad, 0x1}, 0x20) 19:20:34 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x7, 0x1000, &(0x7f00000002c0)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x9, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:34 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000f840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000800)=@raw=[@btf_id], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f000000f7c0), 0x8, 0x10, 0x0, 0x0, 0x155c3}, 0x78) 19:20:35 executing program 3: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:20:35 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000240)) 19:20:37 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x700) 19:20:37 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:37 executing program 4: perf_event_open(&(0x7f000000f900)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x8) 19:20:37 executing program 5: socketpair(0xf, 0x3, 0x0, &(0x7f0000000900)) 19:20:37 executing program 3: socketpair(0x1a, 0x0, 0x0, &(0x7f0000000780)) 19:20:37 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000cc0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{}, 0x1}}, 0x10, 0x0}, 0x0) 19:20:38 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x2, &(0x7f0000001340)=@raw=[@map_val], &(0x7f00000013c0)='syzkaller\x00', 0x5, 0xa3, &(0x7f0000001400)=""/163, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:38 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xe2, &(0x7f00000000c0)=""/226, 0x0, 0x12, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:38 executing program 2: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 19:20:38 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000000c0)="bf", 0x1}], 0x1, &(0x7f0000001480)=ANY=[], 0x240}, 0x0) 19:20:38 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:38 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000f840)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:38 executing program 4: socketpair(0xf570884200000002, 0x3, 0x0, &(0x7f0000000200)) 19:20:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xe2, &(0x7f00000000c0)=""/226, 0x0, 0x12, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:38 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x0) 19:20:38 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000002080)) 19:20:38 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:39 executing program 0: bpf$BPF_TASK_FD_QUERY(0xb, &(0x7f0000002880)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 19:20:39 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[], 0x4a0}, 0x0) 19:20:39 executing program 5: bpf$BPF_TASK_FD_QUERY(0x22, &(0x7f0000002880)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 19:20:39 executing program 4: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000f840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000800)=@raw=[@btf_id], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x155c3}, 0x78) perf_event_open(&(0x7f000000f900)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f000000fbc0)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000025780)={0x18, 0x2, &(0x7f000000fd00)=@raw=[@map_val], &(0x7f000000fd80)='GPL\x00', 0x48c1, 0xd6, &(0x7f000000fdc0)=""/214, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:39 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:39 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000780)="86", 0x20000781}], 0x1}, 0x0) 19:20:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f000000f980)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40) 19:20:40 executing program 2: r0 = gettid() perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:20:40 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:40 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000780)="86", 0xfffffdef}], 0x1}, 0x0) 19:20:40 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x105000, 0x0) 19:20:40 executing program 0: socketpair(0xf57088420000002c, 0x0, 0x0, &(0x7f0000000200)) 19:20:40 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0}, 0x0) 19:20:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, 0x0, 0x0) 19:20:41 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a80000000700000001000000000000010000000025"], &(0x7f0000000080)=""/173, 0xc7, 0xad, 0x1}, 0x20) 19:20:41 executing program 5: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080)="75e4da517083bb8b7b77c9a1b1584d5dbd209dd45fde88bc9e675c8a81ca444d693adf90e3acc16fb7c11bf59081e9c07f01c00e7e524e3ed76fef1065daa23c9949405de38ff71b911d9a96d3942accdf", 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00'}) 19:20:41 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[{0x10}], 0x10}, 0x0) 19:20:41 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000500)=""/137, 0x67, 0x89, 0x19b2}, 0x20) 19:20:41 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:41 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 19:20:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x40049409, 0x0) 19:20:42 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0xe, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:42 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000200)=@framed={{}, [@call, @ldst={0x1}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x1000, &(0x7f00000002c0)=""/4096, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000012c0), 0x8, 0x10, 0x0}, 0x78) 19:20:42 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000040)=@raw=[@func], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xf4, &(0x7f00000000c0)=""/244, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:20:42 executing program 0: bpf$LINK_GET_FD_BY_ID(0x3, 0x0, 0x0) 19:20:42 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x1370c2, 0x0) 19:20:42 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="8b", 0x1}], 0x1}, 0x0) 19:20:42 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={0x0, &(0x7f0000000600)=""/139, 0x0, 0x8b}, 0x20) 19:20:43 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:43 executing program 4: bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 19:20:43 executing program 0: r0 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 19:20:43 executing program 3: bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)={0x0}, 0x10) 19:20:43 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x44000, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f0000002380)) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 19:20:43 executing program 5: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000240)) 19:20:43 executing program 0: perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xe, 0xffffffffffffffff, 0xf) 19:20:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x30}, 0x20) 19:20:43 executing program 1: close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) [ 1068.566114][T19658] can: request_module (can-proto-0) failed. [ 1068.590961][T19660] can: request_module (can-proto-0) failed. 19:20:44 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14}}], 0x18}, 0x0) 19:20:44 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f000000f840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000800)=@raw=[@btf_id], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x155c3}, 0x78) perf_event_open(&(0x7f000000f900)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f000000fbc0)='ns/time_for_children\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000025780)={0x18, 0x2, &(0x7f000000fd00)=@raw=[@map_val], &(0x7f000000fd80)='GPL\x00', 0x48c1, 0xd6, &(0x7f000000fdc0)=""/214, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:44 executing program 2: bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 19:20:44 executing program 0: socketpair(0x26, 0x5, 0x0, &(0x7f0000000640)) 19:20:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz0\x00', 0x200002, 0x0) 19:20:44 executing program 1: close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:44 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080)="75e4da517083bb8b7b77c9a1b1584d5dbd209dd45fde88bc9e675c8a81ca444d693adf90e3acc16fb7c11bf59081e9c07f01c00e7e524e3ed76fef1065daa23c9949405de38ff71b911d9a96d3942accdf", 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00'}) 19:20:45 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000025780)={0x18, 0x2, &(0x7f000000fd00)=@raw=[@map_val], &(0x7f000000fd80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:45 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) close(r0) 19:20:45 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc020660b, 0x0) 19:20:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xe}, 0x40) 19:20:45 executing program 1: close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0xe2, &(0x7f00000000c0)=""/226, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:45 executing program 0: socketpair(0x3, 0x0, 0x401, &(0x7f0000000000)) 19:20:45 executing program 5: socketpair(0x1, 0x0, 0x5, &(0x7f00000000c0)) 19:20:45 executing program 2: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000100)) 19:20:46 executing program 1: socketpair(0x0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:46 executing program 4: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x2) [ 1070.905023][T19714] can: request_module (can-proto-0) failed. [ 1070.959433][T19714] can: request_module (can-proto-0) failed. 19:20:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0xe2, &(0x7f00000000c0)=""/226, 0x0, 0x12, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:46 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 19:20:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x8}]}]}}, &(0x7f00000000c0)=""/210, 0x32, 0xd2, 0x1}, 0x20) 19:20:46 executing program 4: bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f000000fb00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 19:20:46 executing program 3: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080)="75e4da517083bb8b7b77c9a1b1584d5dbd209dd45fde88bc9e675c8a81ca444d693adf90e3acc16fb7c11bf59081e9c07f01c00e7e524e3ed76fef1065daa23c9949405de38ff71b911d9a96d3942accdf5d", 0x0}, 0x20) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00'}) 19:20:46 executing program 1: socketpair(0x0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:47 executing program 0: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, r0, 0x0, 0xffffffffffffffff, 0x0) 19:20:47 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffff000}], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xf4, &(0x7f00000000c0)=""/244, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:20:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x1, &(0x7f0000000500)=@raw=[@alu], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 19:20:47 executing program 2: bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x1f) 19:20:47 executing program 0: socketpair(0x2, 0x6, 0x8, &(0x7f0000000040)) 19:20:47 executing program 3: bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 19:20:47 executing program 1: socketpair(0x0, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x220040, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 19:20:48 executing program 2: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:20:48 executing program 4: bpf$OBJ_GET_MAP(0x7, &(0x7f0000001500)={0x0, 0x0, 0x20}, 0x10) 19:20:48 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r0, 0x0, 0x0) 19:20:48 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:48 executing program 5: socketpair(0xa, 0x5, 0x0, &(0x7f0000000900)) 19:20:48 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000340)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x40) 19:20:48 executing program 4: r0 = getpid() perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}}, r0, 0x0, 0xffffffffffffffff, 0x0) 19:20:48 executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1d, 0x0, 0x0, &(0x7f0000002380)) 19:20:48 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000070000000100000000000001"], &(0x7f0000000080)=""/173, 0xc7, 0xad, 0x1}, 0x20) 19:20:49 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:49 executing program 5: bpf$BPF_TASK_FD_QUERY(0x7, &(0x7f0000002880)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 19:20:49 executing program 2: ioprio_set$uid(0x0, 0x0, 0x2000) [ 1073.952612][T19790] can: request_module (can-proto-0) failed. 19:20:49 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x1, 0x1, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xdf4c, 0x4, @perf_config_ext={0xcb6, 0x3f}, 0x2048, 0x9, 0x0, 0x2, 0x0, 0x4, 0x2}, 0xffffffffffffffff, 0x1, r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000007823ff00000001bc7b2e640f00000000000000000000000000000005bd46643e11edaab10e838e0c268dee", @ANYRES16, @ANYRESDEC, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x11}, 0x80, &(0x7f0000000300)}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') 19:20:49 executing program 4: perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x444}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:20:49 executing program 0: bpf$LINK_GET_FD_BY_ID(0x15, 0x0, 0x0) 19:20:49 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:49 executing program 2: perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) 19:20:49 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_freezer_state(r0, 0x0, 0x0) 19:20:50 executing program 4: syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{}]}}]}}, 0x0) 19:20:50 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000440)=[{0x0}], 0x1) 19:20:50 executing program 1: socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:50 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000000)='&@[\x00') sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x1, 0x1, 0xa1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xdf4c, 0x4, @perf_config_ext={0xcb6, 0x3f}, 0x2048, 0x9, 0x0, 0x2, 0x0, 0x4, 0x2}, 0xffffffffffffffff, 0x1, r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000100000000007823ff00000001bc7b2e640f00000000000000000000000000000005bd46643e11edaab10e838e0c268dee", @ANYRES16, @ANYRESDEC, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0, 0x11}, 0x80, &(0x7f0000000300)}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a1, &(0x7f0000000680)='&@[\x00') 19:20:50 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0xf8}}]}}, 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) renameat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0xffffffffffffffff, 0x0) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x11, 0x0, 0x0) 19:20:50 executing program 2: syz_usb_connect$printer(0x7, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x80}}]}}]}}, 0x0) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) open$dir(0x0, 0x0, 0x0) geteuid() [ 1075.424063][T15495] usb 5-1: new high-speed USB device number 2 using dummy_hcd 19:20:50 executing program 1: socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:51 executing program 0: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000440)=[{0x0}], 0x1) [ 1075.714065][T15495] usb 5-1: device descriptor read/64, error 18 [ 1075.934181][ T8475] usb 6-1: new high-speed USB device number 97 using dummy_hcd 19:20:51 executing program 3: socket$inet6(0x18, 0x0, 0x3f) msgsnd(0x0, 0x0, 0x0, 0x0) 19:20:51 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffffffffff23, 0x0, 0x7, [@restrict, @restrict]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/172, 0x1f, 0xad, 0x1}, 0x20) 19:20:51 executing program 1: socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) [ 1076.167132][T15495] usb 5-1: device descriptor read/64, error 18 [ 1076.247442][ T8475] usb 6-1: device descriptor read/64, error 18 [ 1076.448562][T15495] usb 5-1: new high-speed USB device number 3 using dummy_hcd 19:20:51 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(0xffffffffffffffff) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) [ 1076.677093][ T8475] usb 6-1: device descriptor read/64, error 18 [ 1076.767138][T15495] usb 5-1: device descriptor read/64, error 18 [ 1076.953894][ T8475] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1077.185966][T15495] usb 5-1: device descriptor read/64, error 18 [ 1077.224014][ T8475] usb 6-1: device descriptor read/64, error 18 [ 1077.313995][T15495] usb usb5-port1: attempt power cycle [ 1077.643970][ T8475] usb 6-1: device descriptor read/64, error 18 [ 1077.764011][ T8475] usb usb6-port1: attempt power cycle [ 1078.033833][T15495] usb 5-1: new high-speed USB device number 4 using dummy_hcd 19:20:53 executing program 4: 19:20:53 executing program 3: 19:20:53 executing program 0: 19:20:53 executing program 2: [ 1078.153920][T15495] usb 5-1: device descriptor read/8, error -71 [ 1078.373850][T15495] usb 5-1: device descriptor read/8, error -71 [ 1078.488603][ T8475] usb 6-1: new high-speed USB device number 99 using dummy_hcd 19:20:54 executing program 5: 19:20:54 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(0xffffffffffffffff) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:54 executing program 0: 19:20:54 executing program 2: 19:20:54 executing program 3: 19:20:54 executing program 4: [ 1078.696690][ T8475] usb 6-1: device descriptor read/8, error -71 [ 1078.904403][ T8475] usb 6-1: device descriptor read/8, error -71 19:20:54 executing program 2: 19:20:54 executing program 0: 19:20:54 executing program 3: 19:20:54 executing program 4: 19:20:54 executing program 5: 19:20:55 executing program 2: 19:20:55 executing program 4: 19:20:55 executing program 0: 19:20:55 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(0xffffffffffffffff) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:55 executing program 3: 19:20:55 executing program 5: 19:20:55 executing program 2: 19:20:55 executing program 4: 19:20:55 executing program 0: 19:20:55 executing program 3: 19:20:55 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:55 executing program 5: 19:20:56 executing program 0: 19:20:56 executing program 4: 19:20:56 executing program 2: 19:20:56 executing program 3: 19:20:56 executing program 5: 19:20:56 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:56 executing program 0: 19:20:56 executing program 4: 19:20:56 executing program 2: 19:20:57 executing program 3: 19:20:57 executing program 5: 19:20:57 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0xfffffffffffffffe, 0x300}, 0x0) 19:20:57 executing program 0: 19:20:57 executing program 4: 19:20:57 executing program 2: 19:20:57 executing program 3: 19:20:57 executing program 5: 19:20:57 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, 0x0, 0x0) 19:20:58 executing program 0: 19:20:58 executing program 4: 19:20:58 executing program 2: 19:20:58 executing program 3: 19:20:58 executing program 5: 19:20:58 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, 0x0, 0x0) 19:20:58 executing program 0: 19:20:58 executing program 4: 19:20:58 executing program 3: 19:20:58 executing program 5: 19:20:58 executing program 2: 19:20:59 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, 0x0, 0x0) 19:20:59 executing program 0: 19:20:59 executing program 4: 19:20:59 executing program 2: 19:20:59 executing program 3: 19:20:59 executing program 5: 19:20:59 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 19:20:59 executing program 0: 19:20:59 executing program 4: 19:21:00 executing program 2: 19:21:00 executing program 3: 19:21:00 executing program 5: 19:21:00 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 19:21:00 executing program 0: 19:21:00 executing program 4: 19:21:00 executing program 2: 19:21:00 executing program 3: 19:21:00 executing program 5: 19:21:00 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 19:21:01 executing program 0: 19:21:01 executing program 4: 19:21:01 executing program 2: 19:21:01 executing program 3: 19:21:01 executing program 5: 19:21:01 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500), 0x0, 0xfffffffffffffffe}, 0x0) 19:21:01 executing program 0: 19:21:01 executing program 4: 19:21:01 executing program 2: 19:21:01 executing program 3: 19:21:02 executing program 5: 19:21:02 executing program 0: 19:21:02 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500), 0x0, 0xfffffffffffffffe}, 0x0) 19:21:02 executing program 4: 19:21:02 executing program 3: 19:21:02 executing program 2: 19:21:02 executing program 5: 19:21:02 executing program 0: 19:21:02 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500), 0x0, 0xfffffffffffffffe}, 0x0) 19:21:02 executing program 4: 19:21:03 executing program 3: 19:21:03 executing program 2: 19:21:03 executing program 5: 19:21:03 executing program 0: 19:21:03 executing program 4: 19:21:03 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1, 0xfffffffffffffffe}, 0x0) 19:21:03 executing program 3: 19:21:03 executing program 5: 19:21:03 executing program 2: 19:21:04 executing program 0: 19:21:04 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1, 0xfffffffffffffffe}, 0x0) 19:21:04 executing program 4: 19:21:04 executing program 3: 19:21:04 executing program 5: 19:21:04 executing program 2: 19:21:04 executing program 0: 19:21:04 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r1) recvmsg(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1, 0xfffffffffffffffe}, 0x0) 19:21:04 executing program 4: 19:21:04 executing program 5: 19:21:04 executing program 3: 19:21:05 executing program 2: 19:21:05 executing program 0: 19:21:05 executing program 1: 19:21:05 executing program 4: 19:21:05 executing program 5: 19:21:05 executing program 3: 19:21:05 executing program 2: 19:21:05 executing program 0: 19:21:05 executing program 1: 19:21:05 executing program 4: 19:21:06 executing program 5: 19:21:06 executing program 3: 19:21:06 executing program 2: 19:21:06 executing program 0: 19:21:06 executing program 1: 19:21:06 executing program 4: 19:21:06 executing program 5: 19:21:06 executing program 3: 19:21:06 executing program 2: 19:21:07 executing program 0: 19:21:07 executing program 4: 19:21:07 executing program 1: 19:21:07 executing program 5: 19:21:07 executing program 3: 19:21:07 executing program 2: 19:21:07 executing program 0: 19:21:08 executing program 5: 19:21:08 executing program 1: 19:21:08 executing program 0: 19:21:08 executing program 2: 19:21:08 executing program 4: 19:21:08 executing program 3: 19:21:08 executing program 1: 19:21:08 executing program 2: 19:21:08 executing program 3: 19:21:08 executing program 5: 19:21:08 executing program 0: 19:21:08 executing program 4: 19:21:09 executing program 1: 19:21:09 executing program 0: 19:21:09 executing program 2: 19:21:09 executing program 3: 19:21:09 executing program 5: 19:21:09 executing program 4: 19:21:09 executing program 1: 19:21:10 executing program 3: 19:21:10 executing program 0: 19:21:10 executing program 2: 19:21:10 executing program 5: 19:21:10 executing program 4: 19:21:10 executing program 1: 19:21:10 executing program 3: 19:21:10 executing program 0: 19:21:10 executing program 2: 19:21:10 executing program 4: 19:21:10 executing program 5: 19:21:10 executing program 1: 19:21:11 executing program 3: 19:21:11 executing program 0: 19:21:11 executing program 2: 19:21:11 executing program 4: 19:21:11 executing program 5: 19:21:11 executing program 1: 19:21:11 executing program 3: 19:21:11 executing program 0: 19:21:11 executing program 2: 19:21:11 executing program 4: 19:21:12 executing program 5: 19:21:12 executing program 1: 19:21:12 executing program 3: 19:21:12 executing program 0: 19:21:12 executing program 2: 19:21:12 executing program 4: 19:21:12 executing program 5: 19:21:12 executing program 1: 19:21:12 executing program 3: 19:21:12 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000040), 0x4) 19:21:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 19:21:13 executing program 1: 19:21:13 executing program 2: 19:21:13 executing program 0: 19:21:13 executing program 5: 19:21:13 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) 19:21:13 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 19:21:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) 19:21:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x9, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3c00}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:13 executing program 0: bpf$BPF_BTF_LOAD(0x14, &(0x7f0000000240)={0x0, &(0x7f0000000140)=""/214, 0x0, 0xd6}, 0x20) 19:21:13 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000900)={&(0x7f0000000840), 0xc, &(0x7f00000008c0)={0x0}}, 0x0) 19:21:14 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x541b, 0x0) 19:21:14 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) pipe2(&(0x7f0000000000), 0x0) 19:21:14 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r0, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x81, 0x0) 19:21:14 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f, 0x71]}, 0x40) 19:21:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x5, &(0x7f00000000c0)=@framed={{}, [@map_val]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x5, 0x7, 0x8}, 0x40) 19:21:14 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x31, 0xffffffffffffffff, 0x8000000) 19:21:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000000)) 19:21:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 19:21:15 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private1}}) 19:21:15 executing program 5: socketpair(0x2, 0x0, 0x539cb5b2, &(0x7f0000000740)) 19:21:15 executing program 0: syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0xffffffffffffffff, 0x101040) 19:21:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03000000", 0x4, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}, {0x0, 0x0, 0x40000}], 0x0, &(0x7f0000014a00)=ANY=[]) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f00000002c0), 0x0, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x77c70cd7ab1fe31, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc000) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, 0x0, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001740)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002040)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98080000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="ac01028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000010000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004004305200508000000400000037fdd00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004003b00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f7469665e5f70656572735f636f756e740000000000000000000000000000050003000300000008000400fc52000008000100", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000001000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff0fb5072000000001807f0501000100050006200400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000010000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400cac2c388080001", @ANYRES32=0x0, @ANYBLOB="7c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f75", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000100080007000000000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000500010105000000040033050800000001007e8100100000010103050800000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040009000000080001", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400e100000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c000100240001006c625f74785f6d65", @ANYRES32=0x0, @ANYBLOB="0800070000000000080001", @ANYRES32=0x0, @ANYBLOB="2c0102803800010024000100616374697665706f727400"/43, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400", @ANYRES32], 0x898}, 0x1, 0x0, 0x0, 0x80}, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x8) 19:21:15 executing program 1: socket(0xa, 0x2, 0x5) 19:21:15 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="9c0000005304d7"], 0x9c}}, 0x0) 19:21:16 executing program 0: bpf$MAP_CREATE(0x2, &(0x7f0000000140), 0x40) 19:21:16 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x19, 0x0, 0x0, 0x401}, 0x40) 19:21:16 executing program 5: clock_getres(0x0, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) [ 1100.705685][ T32] audit: type=1107 audit(1604085676.129:72): pid=20166 uid=0 auid=0 ses=4 subj==unconfined msg='' 19:21:16 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040), 0x4) 19:21:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000240)={'sit0\x00', 0x0}) 19:21:16 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0xffffffff}, 0x8) 19:21:16 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000001780)={{0x77359400}, {0x77359400}}, 0x0) 19:21:16 executing program 5: prlimit64(0x0, 0xc8c34ffc46bee70f, 0x0, 0x0) 19:21:16 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001180)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 19:21:16 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000040)=0xffffffff, 0x4) 19:21:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x9, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x18}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:17 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x63, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/214, 0x1a, 0xd6, 0x1}, 0x20) 19:21:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000340)=""/4096, 0x1}) 19:21:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8943, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:17 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x5452, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:17 executing program 4: socketpair(0x0, 0x0, 0x0, &(0x7f0000004780)) 19:21:17 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040)=0x5, 0x4) 19:21:18 executing program 1: ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000080)={'veth1\x00', {0x2, 0x0, @broadcast}}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)) 19:21:18 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x3f}, 0x40) 19:21:18 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x25, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 19:21:18 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x80000, 0x4) 19:21:18 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r3, 0x0, 0x800000080004103) 19:21:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) [ 1103.160782][T20222] TCP: TCP_TX_DELAY enabled 19:21:18 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000000)={&(0x7f0000000d80), 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0xa, 0x3fb, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}}, 0x0) 19:21:18 executing program 1: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) 19:21:18 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000d40), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, r0, 0x0, 0x4}, 0x40) 19:21:18 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x2000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040), 0x4) 19:21:19 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:19 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x1b, &(0x7f0000000040), 0x4) 19:21:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0xfffffffffffffcf7) 19:21:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) 19:21:19 executing program 1: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) 19:21:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8947, &(0x7f00000000c0)={'ip6erspan0\x00', @ifru_flags}) 19:21:20 executing program 3: waitid(0x0, 0x0, 0x0, 0xc0c7bab834ffbd9c, 0x0) 19:21:20 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 19:21:20 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r3, 0x0, 0x800000080004103) 19:21:20 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x7fffdf001000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) 19:21:20 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)) 19:21:21 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) 19:21:21 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)={0x10}, 0x10}}, 0x0) 19:21:21 executing program 0: bpf$BPF_BTF_LOAD(0x3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 19:21:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000040), 0x4) 19:21:21 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @mcast1}}) 19:21:21 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x8000000) 19:21:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000640)='keyring\x00', &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000540)='asymmetric\x00', &(0x7f0000000580)='team0\x00') 19:21:21 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x89a1, &(0x7f0000000080)={'netdevsim0\x00', {0x2, 0x0, @multicast1}}) 19:21:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f0000000140)=""/214, 0x1000000, 0xd6, 0x1}, 0x20) 19:21:25 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r3, 0x0, 0x800000080004103) 19:21:25 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8922, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:25 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 19:21:25 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x9, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x63}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="13000000", @ANYRES16=r1, @ANYBLOB="01"], 0x14}}, 0x0) 19:21:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0}) 19:21:25 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000040), 0x4) 19:21:25 executing program 0: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)="d7", 0x1}, 0x68) 19:21:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03000000", 0x4, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}, {0x0, 0x0, 0x40000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f00000002c0), 0x0, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x77c70cd7ab1fe31, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc000) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001740)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98080000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004003b00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f7469665e5f70656572735f636f756e740000000000000000000000000000050003000300000008000400fc52000008000100", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000001000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff0fb5072000000001807f0501000100050006200400000038000100240001006c625f73746174735f", @ANYRES32=0x0, @ANYBLOB="7c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f75", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000100080007000000000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000500010105000000040033050800000001007e8100100000010103050800000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400e100000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c000100240001006c625f74785f6d6574686f640000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="ff2860f8c00afa81dd5ad50cb6dc6d0af7ed7c6269be6e49190fa520b0afe6f6b0d2062e4a8071d949deefd428a540b7f8e8c11af72e36"], 0x898}, 0x1, 0x0, 0x0, 0x80}, 0x8880) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 19:21:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) 19:21:25 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write(r0, 0x0, 0x803e) 19:21:26 executing program 2: bpf$BPF_BTF_LOAD(0x13, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 19:21:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r3, 0x0, 0x800000080004103) 19:21:28 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) getsockname(r0, &(0x7f0000000180)=@sco, &(0x7f0000000080)=0xfffffffffffffe71) 19:21:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03000000", 0x4, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}, {0x0, 0x0, 0x40000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f00000002c0), 0x0, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x77c70cd7ab1fe31, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc000) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001740)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98080000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004003b00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f7469665e5f70656572735f636f756e740000000000000000000000000000050003000300000008000400fc52000008000100", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000001000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff0fb5072000000001807f0501000100050006200400000038000100240001006c625f73746174735f", @ANYRES32=0x0, @ANYBLOB="7c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f75", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000100080007000000000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000500010105000000040033050800000001007e8100100000010103050800000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400e100000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000008000100", @ANYRES32=0x0, @ANYBLOB="800002803c000100240001006c625f74785f6d6574686f640000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="ff2860f8c00afa81dd5ad50cb6dc6d0af7ed7c6269be6e49190fa520b0afe6f6b0d2062e4a8071d949deefd428a540b7f8e8c11af72e36"], 0x898}, 0x1, 0x0, 0x0, 0x80}, 0x8880) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 19:21:28 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote}}) 19:21:28 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) accept4(r0, 0x0, 0x0, 0x0) 19:21:28 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000210000000001"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xa3, &(0x7f00000000c0)=""/163, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:29 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8929, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:29 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10040, 0x0) 19:21:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) 19:21:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) 19:21:29 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@struct={0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000003c0)=""/211, 0x28, 0xd3, 0x1}, 0x20) 19:21:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, 0x0) 19:21:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 19:21:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x98, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 19:21:32 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x4020940d, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180)='devlink\x00') sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x1c, 0x82, 'source_mac_is_multicast\x00'}}]}, 0x4c}}, 0x0) 19:21:32 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) 19:21:32 executing program 2: bpf$BPF_BTF_LOAD(0xd, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 19:21:32 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x1, 0x7, 0x98, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x40) 19:21:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x8, 0x4) 19:21:32 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0x64, 0x0, &(0x7f0000000040)) 19:21:32 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:32 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, [0x2e]}, 0x40) 19:21:32 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) dup2(r1, r0) 19:21:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 19:21:33 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000180)=""/222, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:33 executing program 2: socketpair(0x26, 0x5, 0x5, &(0x7f0000000000)) 19:21:33 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000040), 0x4) 19:21:33 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) 19:21:33 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x9, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1118.302462][T20418] sock: process `syz-executor.0' is using obsolete setsockopt SO_BSDCOMPAT 19:21:33 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 19:21:34 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write(r0, &(0x7f0000000080)="16", 0xfffffffffffffdef) 19:21:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='wlan1\x00') 19:21:34 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) 19:21:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1, &(0x7f0000000000)=0x8001, 0x4) 19:21:34 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "040000000000000871525ea66a69ffff00"}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0xffffffff) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "0251b108b085e63bd641b7345de372be4809c6"}) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)) 19:21:34 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004103) 19:21:34 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, 0x0, 0x0, 0x2042, 0x0) 19:21:34 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0xa, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:34 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x2}}, &(0x7f0000000140)=""/214, 0x1a, 0xd6, 0x1}, 0x20) 19:21:34 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f00000005c0)={'bridge0\x00', @ifru_hwaddr=@remote}) 19:21:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[], 0x34}, 0x7}, 0x0) 19:21:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r2, 0x0, 0x800000080004103) 19:21:35 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1, &(0x7f0000000040)=@raw=[@jmp], &(0x7f00000000c0)='GPL\x00', 0x5, 0xe7, &(0x7f0000000280)=""/231, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:35 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x9, 0x1, 0xe93, 0x7}, 0x40) 19:21:35 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x8ae0, 0x4) 19:21:35 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) 19:21:35 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0xa07400, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) 19:21:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x20, 0x4) 19:21:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03000000", 0x4, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}, {0x0, 0x0, 0x40000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f00000002c0), 0x0, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x77c70cd7ab1fe31, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc000) r3 = dup(0xffffffffffffffff) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001740)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002040)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98080000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250300000008000100", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004003b00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f7469665e5f70656572735f636f756e740000000000000000000000000000050003000300000008000400fc520000080001", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000001000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f75", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000100080007000000000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000500010105000000040033050800000001007e8100100000010103050800000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400e100000038000100240001006e6f746966795f70656572735f696e74657276616c00"/151, @ANYRES32=0x0, @ANYBLOB="800002803c000100240001006c625f74785f6d6574686f640000", @ANYRES32=0x0, @ANYBLOB="0800070000000000080001", @ANYRES32=0x0, @ANYBLOB="2c0102803800010024000100616374697665706f7274000000000000000000", @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300", @ANYRES32=r4, @ANYBLOB="ff2860f8c00afa81dd5ad50cb6dc6d0af7ed7c6269be6e49190fa520b0afe6f6b0d2062e4a8071d949deefd428a540b7f8e8c11af72e36"], 0x898}, 0x1, 0x0, 0x0, 0x80}, 0x8880) umount2(&(0x7f0000000040)='./file0\x00', 0x8) 19:21:36 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8906, 0x0) 19:21:36 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) 19:21:36 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c"], 0x9c}, 0x63}, 0x0) 19:21:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000f80)={'batadv_slave_1\x00'}) 19:21:39 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:21:39 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f0000000140)=""/214, 0x1a, 0xd6, 0x1}, 0x20) 19:21:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x7, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:39 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0xfff, 0xa, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x40) 19:21:39 executing program 5: memfd_create(&(0x7f0000000200)='system_u:object_r:hald_keymap_exec_t:s0\x00', 0x0) 19:21:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x3f}, 0x40) 19:21:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1a}, 0x40) 19:21:40 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/214, 0x1a, 0xd6, 0x1}, 0x20) 19:21:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) 19:21:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @private2}}) 19:21:40 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x894a, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:40 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c0000003408"], 0x9c}}, 0x0) 19:21:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:21:42 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, 0x0, 0x80000001}) 19:21:42 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x5, 0x7}, 0x40) 19:21:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040), 0x4) 19:21:42 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'veth1\x00', {0x2, 0x0, @broadcast}}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000040)='geneve1\x00'}) 19:21:42 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8946, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:43 executing program 0: syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x42201) 19:21:43 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) 19:21:43 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000041, 0x0) 19:21:43 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0xbbd}, 0x40) 19:21:43 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xffffffffffffff68, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}, ["", "", "", "", "", ""]}, 0xffffff44}}, 0x0) 19:21:43 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x8000000) 19:21:46 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 19:21:46 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4002032, 0xffffffffffffffff, 0x8000000) 19:21:46 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8937, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:46 executing program 1: socketpair(0x28, 0x1, 0x0, &(0x7f00000000c0)) 19:21:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={0x0}}, 0x0) 19:21:46 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x19, 0xa, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x9, 0x3, &(0x7f0000000380)=@framed={{}, [], {0x95, 0x0, 0x0, 0x2}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:46 executing program 1: socketpair(0x28, 0x1, 0x0, &(0x7f00000000c0)) 19:21:46 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x41, &(0x7f0000000040), 0x4) 19:21:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x200000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xff, 0x3, 0x3c, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8000, 0x10, 0x45c, 0x9}}) open_tree(r1, &(0x7f0000000040)='./file0\x00', 0x80100) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x5421, &(0x7f00000002c0)={'syztnl0\x00', 0x0}) 19:21:46 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x3f}, 0x40) 19:21:46 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 19:21:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x3, 0x5, 0x7}, 0x40) 19:21:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:47 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8913, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:47 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 19:21:47 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}, 0x40) write(r0, 0x0, 0x0) 19:21:47 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 19:21:47 executing program 1: syz_mount_image$tmpfs(&(0x7f00000002c0)='tmpfs\x00', &(0x7f0000000100)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000380)='./bus\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000402) 19:21:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:47 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x300, 0x0, 0x0, 0x0) 19:21:47 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x894c, 0x0) 19:21:47 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x5460, 0x0) 19:21:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:21:48 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0xc020660b, 0x0) 19:21:48 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:48 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x9, 0x3, &(0x7f0000000380)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:48 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x8931, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:48 executing program 5: socketpair(0x2, 0x3, 0xd7, &(0x7f0000000180)) 19:21:48 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, 0x38}, 0x300}, 0x0) 19:21:49 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:49 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:49 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x40049409, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) 19:21:49 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000040)) 19:21:49 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="180000002100000000000000760c000009"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0xa3, &(0x7f00000000c0)=""/163, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:21:52 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 19:21:52 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0xc0189436, 0x0) 19:21:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8901, &(0x7f0000000080)={'netdevsim0\x00', {0x2, 0x0, @multicast1}}) 19:21:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 19:21:52 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:21:52 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c0000005304"], 0x9c}}, 0x0) 19:21:52 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x17, 0x0, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:52 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1}]}]}}, &(0x7f0000000280)=""/228, 0x2e, 0xe4, 0x1}, 0x20) 19:21:52 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:52 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) [ 1137.690718][ T32] audit: type=1107 audit(1604085713.108:73): pid=20678 uid=0 auid=0 ses=4 subj==unconfined msg='' 19:21:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getpeername$inet6(r0, 0x0, 0x0) 19:21:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:21:55 executing program 2: munmap(&(0x7f00007ff000/0x800000)=nil, 0x800000) getrusage(0x0, &(0x7f0000000000)) 19:21:55 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_ifreq(r0, 0x8910, &(0x7f00000000c0)={'caif0\x00', @ifru_names}) 19:21:55 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 19:21:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:21:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000d5f4655fd5f4655f0100ffff53ef010001000000d4f4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000091b73ef4b8d944c4be6aeaa0d6c47e6c010040", 0x1f, 0x4e0}, {&(0x7f0000010300), 0x0, 0x640}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000d4f4655fd5f4655fd5f4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000d4f4655fd4f4655fd4f4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901", 0x5, 0x30000}], 0x0, &(0x7f0000014a00)=ANY=[]) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f00000002c0), 0x0, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x77c70cd7ab1fe31, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc000) r4 = dup(0xffffffffffffffff) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) getsockname$packet(0xffffffffffffffff, &(0x7f0000001700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001740)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002040)={&(0x7f00000020c0)=ANY=[@ANYBLOB="98080000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="ac01028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000010000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004004305200508000000400000037fdd00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004003b00000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f7469665e5f70656572735f636f756e740000000000000000000000000000050003000300000008000400fc52000008000100", @ANYRES32=0x0, @ANYBLOB="7801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000001000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff0fb5072000000001807f0501000100050006200400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000010000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400cac2c388080001", @ANYRES32=0x0, @ANYBLOB="7c01028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f75", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040001000100080007000000000054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000240004000500010105000000040033050800000001007e8100100000010103050800000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="080202805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c000400bd63802003000000ff0f058008000000008002ee0001000003000103740d0000400000010700000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003800010024000100", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400e100000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400050000000800", @ANYRES32=0x0, @ANYBLOB="800002803c000100240001006c625f74785f6d6574686f640000", @ANYRES32=0x0, @ANYBLOB="0800070000000000080001", @ANYRES32=0x0, @ANYBLOB="2c0102803800010024000100616374697665706f7274000000000000000000000000000000000000000000000500030003", @ANYRES32=r5, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005", @ANYRES32=r6, @ANYBLOB="ff2860f8c00afa81dd5ad50cb6dc6d0af7ed7c6269be6e49190fa520b0afe6f6b0d2062e4a8071d949deefd428a540b7f8e8c11af72e36"], 0x898}, 0x1, 0x0, 0x0, 0x80}, 0x8880) umount2(&(0x7f0000000040)='./file0\x00', 0x8) 19:21:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x4, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x0, 0xf4240, &(0x7f0000000380)=@framed, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1140.698348][T20713] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:21:56 executing program 2: socketpair(0x1, 0x2, 0x0, &(0x7f0000000180)) 19:21:56 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c"], 0x9c}, 0x300}, 0x0) 19:21:56 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x8953, &(0x7f0000000080)={'netdevsim0\x00', {0x2, 0x0, @multicast1}}) 19:21:56 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x4, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:59 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:21:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3c*sgrVex:De', 0x0) 19:21:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x0, 0x100}) 19:21:59 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000280)=""/228, 0x2e, 0xe4, 0x1}, 0x20) 19:21:59 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", ""]}, 0xfffffffffffffdcd}}, 0x0) 19:21:59 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x4, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:59 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x22, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:21:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x0, @remote}}) 19:21:59 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:21:59 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00') 19:22:00 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa4) 19:22:00 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:22:02 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:02 executing program 1: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) lchown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0xee01) 19:22:02 executing program 0: openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x72141, 0x141) 19:22:02 executing program 5: utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x77359400}}) 19:22:02 executing program 2: pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 19:22:02 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:22:03 executing program 5: open(&(0x7f0000000240)='.\x00', 0x10, 0x0) 19:22:03 executing program 0: open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) 19:22:03 executing program 2: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000180)="ce", 0x1}], 0x1) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 19:22:03 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x0, 0x400000, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:22:03 executing program 1: select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x4}, 0x0, 0x0) 19:22:03 executing program 5: open(&(0x7f0000000240)='.\x00', 0x410902, 0x0) 19:22:05 executing program 4: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:05 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:22:05 executing program 2: utimes(0x0, &(0x7f0000000040)) 19:22:05 executing program 0: ppoll(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) 19:22:05 executing program 1: close(0x3) close(0x4) close(0x5) pipe(&(0x7f0000000000)={0x0, 0x0}) close(0x3) close(0x4) close(0x5) 19:22:05 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) 19:22:06 executing program 1: openat(0xffffffffffffff9c, 0xfffffffffffffffe, 0x0, 0x0) 19:22:06 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0xd40e92eb6d09f7b3) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = open(&(0x7f0000000900)='.\x00', 0x0, 0x100) dup3(r2, r1, 0x0) dup(r2) dup2(0xffffffffffffffff, r0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write(r3, &(0x7f0000000140)="9d6fe20d87fa8cb5ffb5af8fa77afc04c4aa4832a62d39ef27ecc6fbfa2bcdf30a0695681f9ee6d484c691bcfd0418b75cc6c734d2e040243cb29bc1989b5b85d95efa8ddaa5ba00a9082caf79e4bc44bd682bdce00c155534913152457ddbe522552cc23ebaad39a8896e4db1653b9b4466f264ff0da27c673f9f39deb7b117b91c15deb9170eb4cba80b", 0x8b) r4 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000080)='./file1\x00') r5 = creat(&(0x7f0000000200)='./file1\x00', 0x6) r6 = dup2(r5, r2) dup(0xffffffffffffffff) r7 = creat(&(0x7f0000000200)='./file1\x00', 0x320) r8 = dup2(r7, 0xffffffffffffffff) linkat(0xffffffffffffffff, 0x0, r8, 0x0, 0x1000) utimensat(r8, &(0x7f00000002c0)='./file1/file0\x00', &(0x7f0000000300)={{0x7, 0x2}, {0x6, 0xfffffffffffffff9}}, 0x100) linkat(0xffffffffffffffff, 0x0, r6, 0x0, 0x1000) open(&(0x7f0000000280)='./file0\x00', 0x2000, 0x80) 19:22:06 executing program 5: getcwd(0x0, 0xffffffffffffffcc) 19:22:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@mbim={0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 19:22:06 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:22:06 executing program 5: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) [ 1151.268229][ T32] audit: type=1804 audit(1604085726.687:74): pid=20838 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir851130377/syzkaller.135vsH/618/file0" dev="sda1" ino=16379 res=1 errno=0 [ 1151.666227][T15495] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1151.726262][ T8791] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1151.936748][T15495] usb 1-1: Using ep0 maxpacket: 16 [ 1151.966618][ T8791] usb 6-1: Using ep0 maxpacket: 16 [ 1152.067105][T15495] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.067274][T15495] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1152.198622][ T8791] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1152.247376][T15495] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1152.247449][T15495] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.247504][T15495] usb 1-1: Product: syz [ 1152.247559][T15495] usb 1-1: Manufacturer: syz [ 1152.247612][T15495] usb 1-1: SerialNumber: syz [ 1152.382260][ T8791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1152.382408][ T8791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.382529][ T8791] usb 6-1: Product: syz [ 1152.382650][ T8791] usb 6-1: Manufacturer: syz [ 1152.382770][ T8791] usb 6-1: SerialNumber: syz [ 1152.492741][T20845] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1152.639249][ T8791] usb 6-1: USB disconnect, device number 101 [ 1152.796330][T15495] cdc_ncm 1-1:1.0: bind() failure [ 1152.833891][T15495] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 1152.850704][T15495] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 1152.871819][T15495] usbtest: probe of 1-1:1.1 failed with error -71 [ 1152.883822][T15495] usb 1-1: USB disconnect, device number 7 [ 1153.446096][ T8475] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1153.536303][ T9935] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1153.686118][ T8475] usb 6-1: Using ep0 maxpacket: 16 [ 1153.776357][ T9935] usb 1-1: Using ep0 maxpacket: 16 [ 1153.902644][ T9935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1153.902813][ T9935] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1153.906667][ T8475] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1154.066865][ T9935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.066947][ T9935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.067008][ T9935] usb 1-1: Product: syz [ 1154.067070][ T9935] usb 1-1: Manufacturer: syz [ 1154.067132][ T9935] usb 1-1: SerialNumber: syz [ 1154.076522][ T8475] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1154.076652][ T8475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.076769][ T8475] usb 6-1: Product: syz [ 1154.076926][ T8475] usb 6-1: Manufacturer: syz [ 1154.077038][ T8475] usb 6-1: SerialNumber: syz [ 1154.356806][ T8475] usb 6-1: USB disconnect, device number 102 [ 1154.406231][ T9935] cdc_ncm 1-1:1.0: bind() failure [ 1154.415224][ T9935] cdc_ncm 1-1:1.1: bind() failure [ 1154.466396][ T9935] usb 1-1: USB disconnect, device number 8 19:22:10 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:10 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000080)='/dev/hidraw#\x00', 0x0, 0x0) write$hidraw(r0, 0x0, 0x0) 19:22:10 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:22:10 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 19:22:10 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 19:22:10 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:10 executing program 1: 19:22:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) [ 1155.656603][ T8791] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1155.662932][ T9935] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1155.769136][ T8473] usb 3-1: new high-speed USB device number 11 using dummy_hcd 19:22:11 executing program 1: [ 1155.906627][ T9935] usb 1-1: Using ep0 maxpacket: 16 19:22:11 executing program 1: [ 1156.019032][ T8473] usb 3-1: Using ep0 maxpacket: 16 [ 1156.031250][ T9935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 19:22:11 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) [ 1156.031395][ T9935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1156.031546][ T9935] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1156.031690][ T9935] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1156.031830][ T9935] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1156.031973][ T9935] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1156.137642][ T8473] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1156.137809][ T8473] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 19:22:12 executing program 1: [ 1156.137988][ T8473] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1156.187104][ T9935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1156.187188][ T9935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.187253][ T9935] usb 1-1: Product: syz [ 1156.187319][ T9935] usb 1-1: Manufacturer: syz [ 1156.187383][ T9935] usb 1-1: SerialNumber: syz [ 1156.208859][ T8791] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1156.209000][ T8791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.209120][ T8791] usb 6-1: Product: syz [ 1156.209241][ T8791] usb 6-1: Manufacturer: syz [ 1156.209362][ T8791] usb 6-1: SerialNumber: syz [ 1156.247994][ T8791] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1156.298325][ T8473] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1156.298477][ T8473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.298610][ T8473] usb 3-1: Product: syz [ 1156.298743][ T8473] usb 3-1: Manufacturer: syz [ 1156.298882][ T8473] usb 3-1: SerialNumber: syz [ 1156.506689][ T9935] cdc_ncm 1-1:1.0: bind() failure [ 1156.515750][ T9935] cdc_ncm 1-1:1.1: bind() failure [ 1156.540616][T20912] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1156.592499][ T9935] usb 1-1: USB disconnect, device number 9 [ 1156.796918][ T8473] cdc_ncm 3-1:1.0: bind() failure [ 1156.835084][ T8473] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1156.846757][ T8473] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1156.866988][ T8473] usbtest: probe of 3-1:1.1 failed with error -71 [ 1156.885661][ T8473] usb 3-1: USB disconnect, device number 11 [ 1157.057088][T15495] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1157.207779][ T9935] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1157.447226][ T9935] usb 1-1: Using ep0 maxpacket: 16 [ 1157.482006][ T8475] usb 6-1: USB disconnect, device number 103 [ 1157.538983][ T8473] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1157.584752][ T9935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.584900][ T9935] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.585056][ T9935] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1157.585202][ T9935] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1157.585353][ T9935] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1157.585488][ T9935] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1157.744970][ T9935] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1157.745053][ T9935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.745115][ T9935] usb 1-1: Product: syz [ 1157.745178][ T9935] usb 1-1: Manufacturer: syz [ 1157.745247][ T9935] usb 1-1: SerialNumber: syz [ 1157.806285][ T8473] usb 3-1: Using ep0 maxpacket: 16 [ 1157.947682][ T8473] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1157.947823][ T8473] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1157.947979][ T8473] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1158.084733][ T9935] cdc_ncm 1-1:1.0: bind() failure [ 1158.094249][ T9935] cdc_ncm 1-1:1.1: bind() failure [ 1158.128130][ T8473] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1158.128271][ T8473] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.128396][ T8473] usb 3-1: Product: syz [ 1158.128519][ T8473] usb 3-1: Manufacturer: syz [ 1158.128634][ T8473] usb 3-1: SerialNumber: syz [ 1158.136721][T15495] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1158.136928][T15495] ath9k_htc: Failed to initialize the device [ 1158.137684][ T8475] usb 6-1: ath9k_htc: USB layer deinitialized [ 1158.176715][ T9935] usb 1-1: USB disconnect, device number 10 [ 1158.406467][ T8473] cdc_ncm 3-1:1.0: bind() failure [ 1158.415597][ T8473] cdc_ncm 3-1:1.1: bind() failure [ 1158.481172][ T8473] usb 3-1: USB disconnect, device number 12 [ 1158.496486][ T8475] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1158.856955][ T8475] usb 6-1: device descriptor read/all, error -71 19:22:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:16 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x6, 0x4, 0x400000, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x40) 19:22:16 executing program 1: 19:22:16 executing program 0: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74'}) 19:22:16 executing program 2: 19:22:16 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:16 executing program 1: 19:22:16 executing program 2: 19:22:16 executing program 3: [ 1161.010069][ T8475] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1161.026181][ T8473] usb 6-1: new high-speed USB device number 106 using dummy_hcd 19:22:16 executing program 1: 19:22:16 executing program 2: [ 1161.548373][ T8473] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 19:22:17 executing program 3: [ 1161.548501][ T8473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.548608][ T8473] usb 6-1: Product: syz [ 1161.548722][ T8473] usb 6-1: Manufacturer: syz [ 1161.548842][ T8473] usb 6-1: SerialNumber: syz [ 1161.558006][ T8475] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1161.558088][ T8475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.558142][ T8475] usb 1-1: Product: syz [ 1161.558214][ T8475] usb 1-1: Manufacturer: syz [ 1161.558387][ T8475] usb 1-1: SerialNumber: syz [ 1161.587980][ T8473] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1161.614344][ T8475] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1162.147389][ T8471] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1162.280111][ T8791] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1162.649942][ T8473] usb 6-1: USB disconnect, device number 106 [ 1162.690815][ T8475] usb 1-1: USB disconnect, device number 11 [ 1163.176440][ T8471] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1163.176612][ T8471] ath9k_htc: Failed to initialize the device [ 1163.177678][ T8473] usb 6-1: ath9k_htc: USB layer deinitialized [ 1163.343537][ T8791] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1163.343696][ T8791] ath9k_htc: Failed to initialize the device [ 1163.344388][ T8475] usb 1-1: ath9k_htc: USB layer deinitialized [ 1163.717074][ T8475] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1164.047091][ T8475] usb 1-1: device descriptor read/all, error -71 19:22:20 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', 0x0, 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:20 executing program 1: 19:22:20 executing program 2: 19:22:20 executing program 3: 19:22:20 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:20 executing program 0: 19:22:20 executing program 0: 19:22:20 executing program 1: 19:22:20 executing program 3: 19:22:21 executing program 2: [ 1165.660002][T11112] usb 6-1: new high-speed USB device number 107 using dummy_hcd 19:22:21 executing program 0: 19:22:21 executing program 1: [ 1166.222202][T11112] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1166.222335][T11112] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.222453][T11112] usb 6-1: Product: syz [ 1166.222574][T11112] usb 6-1: Manufacturer: syz [ 1166.222692][T11112] usb 6-1: SerialNumber: syz [ 1166.288255][T11112] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1166.896637][ T8475] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1167.425749][ T8471] usb 6-1: USB disconnect, device number 107 [ 1167.976512][ T8475] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1167.976689][ T8475] ath9k_htc: Failed to initialize the device [ 1167.978302][ T8471] usb 6-1: ath9k_htc: USB layer deinitialized 19:22:24 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:24 executing program 2: 19:22:24 executing program 3: 19:22:24 executing program 0: 19:22:24 executing program 1: 19:22:24 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:24 executing program 2: 19:22:24 executing program 0: 19:22:24 executing program 3: 19:22:24 executing program 1: [ 1169.466503][ T8473] usb 6-1: new high-speed USB device number 108 using dummy_hcd 19:22:25 executing program 2: 19:22:25 executing program 3: [ 1169.988193][ T8473] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1169.988335][ T8473] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1169.988457][ T8473] usb 6-1: Product: syz [ 1169.988580][ T8473] usb 6-1: Manufacturer: syz [ 1169.988703][ T8473] usb 6-1: SerialNumber: syz [ 1170.028142][ T8473] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1170.636867][ T9935] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1171.138747][ T8791] usb 6-1: USB disconnect, device number 108 [ 1171.657573][ T9935] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1171.657742][ T9935] ath9k_htc: Failed to initialize the device [ 1171.658540][ T8791] usb 6-1: ath9k_htc: USB layer deinitialized 19:22:28 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:28 executing program 1: 19:22:28 executing program 0: 19:22:28 executing program 3: 19:22:28 executing program 2: 19:22:28 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 19:22:28 executing program 1: 19:22:28 executing program 2: 19:22:28 executing program 3: [ 1173.281504][ T8791] usb 6-1: new high-speed USB device number 109 using dummy_hcd 19:22:28 executing program 0: 19:22:29 executing program 3: 19:22:29 executing program 1: [ 1173.838024][ T8791] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1173.838163][ T8791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.838289][ T8791] usb 6-1: Product: syz [ 1173.838412][ T8791] usb 6-1: Manufacturer: syz [ 1173.838532][ T8791] usb 6-1: SerialNumber: syz [ 1173.880373][ T8791] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1174.517048][ T8475] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1174.722573][ T8791] usb 6-1: USB disconnect, device number 109 [ 1175.587018][ T8475] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1175.587254][ T8475] ath9k_htc: Failed to initialize the device [ 1175.592251][ T8791] usb 6-1: ath9k_htc: USB layer deinitialized 19:22:32 executing program 0: 19:22:32 executing program 2: 19:22:32 executing program 1: 19:22:32 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:32 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 19:22:32 executing program 3: 19:22:32 executing program 2: 19:22:32 executing program 1: [ 1177.136662][T17681] usb 6-1: new high-speed USB device number 110 using dummy_hcd 19:22:32 executing program 0: 19:22:32 executing program 3: 19:22:33 executing program 2: 19:22:33 executing program 1: 19:22:33 executing program 0: 19:22:33 executing program 3: [ 1177.668232][T17681] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1177.668373][T17681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.668494][T17681] usb 6-1: Product: syz [ 1177.668617][T17681] usb 6-1: Manufacturer: syz [ 1177.668728][T17681] usb 6-1: SerialNumber: syz [ 1177.768447][T17681] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 19:22:33 executing program 1: [ 1178.328354][ T8471] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1178.545323][ T9935] usb 6-1: USB disconnect, device number 110 [ 1179.336843][ T8471] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1179.337016][ T8471] ath9k_htc: Failed to initialize the device [ 1179.337891][ T9935] usb 6-1: ath9k_htc: USB layer deinitialized 19:22:36 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:36 executing program 2: 19:22:36 executing program 0: 19:22:36 executing program 3: 19:22:36 executing program 1: 19:22:36 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 19:22:36 executing program 2: 19:22:36 executing program 0: 19:22:36 executing program 1: 19:22:36 executing program 3: [ 1181.344343][ T8475] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1181.382043][T21203] isofs_fill_super: root inode is not a directory. Corrupted media? 19:22:36 executing program 2: 19:22:37 executing program 0: [ 1181.898242][ T8475] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1181.898382][ T8475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.898502][ T8475] usb 6-1: Product: syz [ 1181.898620][ T8475] usb 6-1: Manufacturer: syz [ 1181.898739][ T8475] usb 6-1: SerialNumber: syz [ 1181.948640][ T8475] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1182.560562][T15495] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1182.766136][ T2980] usb 6-1: USB disconnect, device number 111 [ 1183.576689][T15495] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1183.576845][T15495] ath9k_htc: Failed to initialize the device [ 1183.579198][ T2980] usb 6-1: ath9k_htc: USB layer deinitialized 19:22:40 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:40 executing program 3: 19:22:40 executing program 2: 19:22:40 executing program 1: 19:22:40 executing program 0: 19:22:40 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:40 executing program 3: 19:22:40 executing program 1: 19:22:40 executing program 2: 19:22:40 executing program 0: [ 1185.116700][T21240] isofs_fill_super: root inode is not a directory. Corrupted media? 19:22:40 executing program 1: 19:22:41 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:43 executing program 3: 19:22:43 executing program 2: 19:22:43 executing program 0: 19:22:43 executing program 1: 19:22:43 executing program 5: syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:43 executing program 1: 19:22:43 executing program 0: 19:22:43 executing program 3: 19:22:43 executing program 2: [ 1188.346308][T21265] isofs_fill_super: root inode is not a directory. Corrupted media? 19:22:44 executing program 0: 19:22:44 executing program 3: 19:22:46 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {0x0, 0x0, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:46 executing program 1: 19:22:46 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:46 executing program 2: 19:22:46 executing program 0: 19:22:46 executing program 3: 19:22:46 executing program 3: 19:22:46 executing program 0: 19:22:46 executing program 2: 19:22:46 executing program 1: [ 1191.363515][T21289] isofs_fill_super: root inode is not a directory. Corrupted media? 19:22:47 executing program 3: 19:22:47 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:49 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {0x0, 0x0, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:49 executing program 0: 19:22:49 executing program 2: 19:22:49 executing program 1: 19:22:49 executing program 3: 19:22:49 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:49 executing program 1: 19:22:49 executing program 3: 19:22:49 executing program 0: 19:22:49 executing program 2: [ 1194.575328][T21314] isofs_fill_super: root inode is not a directory. Corrupted media? 19:22:50 executing program 3: 19:22:50 executing program 1: 19:22:52 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {0x0, 0x0, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:52 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:52 executing program 0: 19:22:52 executing program 2: 19:22:52 executing program 3: 19:22:52 executing program 1: 19:22:52 executing program 1: 19:22:52 executing program 2: [ 1197.524244][T21339] isofs_fill_super: root inode is not a directory. Corrupted media? 19:22:53 executing program 3: 19:22:53 executing program 0: [ 1197.608521][ T2980] usb 6-1: new high-speed USB device number 112 using dummy_hcd 19:22:53 executing program 1: 19:22:53 executing program 2: [ 1198.189126][ T2980] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1198.189265][ T2980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.189388][ T2980] usb 6-1: Product: syz [ 1198.189510][ T2980] usb 6-1: Manufacturer: syz [ 1198.189632][ T2980] usb 6-1: SerialNumber: syz [ 1198.258435][ T2980] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1198.887178][ T8475] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1199.094684][ T2980] usb 6-1: USB disconnect, device number 112 [ 1199.897390][ T8475] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1199.897560][ T8475] ath9k_htc: Failed to initialize the device [ 1199.898652][ T2980] usb 6-1: ath9k_htc: USB layer deinitialized 19:22:56 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280), 0x0, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:22:56 executing program 3: 19:22:56 executing program 0: 19:22:56 executing program 1: 19:22:56 executing program 2: 19:22:56 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:22:56 executing program 0: 19:22:56 executing program 3: 19:22:56 executing program 1: 19:22:56 executing program 2: [ 1201.488015][ T9935] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1201.505577][T21378] isofs_fill_super: root inode is not a directory. Corrupted media? 19:22:57 executing program 1: 19:22:57 executing program 3: [ 1202.009565][ T9935] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1202.009690][ T9935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.009819][ T9935] usb 6-1: Product: syz [ 1202.009943][ T9935] usb 6-1: Manufacturer: syz [ 1202.010064][ T9935] usb 6-1: SerialNumber: syz [ 1202.049750][ T9935] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1202.633345][ T8473] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1202.842373][ T8471] usb 6-1: USB disconnect, device number 113 [ 1203.657286][ T8473] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1203.657459][ T8473] ath9k_htc: Failed to initialize the device [ 1203.664921][ T8471] usb 6-1: ath9k_htc: USB layer deinitialized 19:23:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280), 0x0, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:00 executing program 2: 19:23:00 executing program 0: 19:23:00 executing program 1: 19:23:00 executing program 3: 19:23:00 executing program 5: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74', {0x3, 0x0, 0x0, 0x30}}) 19:23:00 executing program 3: 19:23:00 executing program 0: 19:23:00 executing program 2: 19:23:00 executing program 1: [ 1205.287955][ T8471] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1205.320908][T21417] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:01 executing program 3: 19:23:01 executing program 0: [ 1205.808940][ T8471] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1205.809107][ T8471] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.809249][ T8471] usb 6-1: Product: syz [ 1205.809409][ T8471] usb 6-1: Manufacturer: syz [ 1205.809544][ T8471] usb 6-1: SerialNumber: syz [ 1205.848800][ T8471] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1206.417619][T17681] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1206.627135][ T2980] usb 6-1: USB disconnect, device number 114 [ 1207.501298][T17681] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1207.501457][T17681] ath9k_htc: Failed to initialize the device [ 1207.502308][ T2980] usb 6-1: ath9k_htc: USB layer deinitialized 19:23:04 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280), 0x0, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:04 executing program 2: 19:23:04 executing program 1: 19:23:04 executing program 3: 19:23:04 executing program 0: 19:23:04 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 19:23:04 executing program 0: 19:23:04 executing program 3: 19:23:04 executing program 1: 19:23:04 executing program 2: [ 1209.113740][ T8791] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1209.154661][T21456] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:05 executing program 1: 19:23:05 executing program 3: [ 1209.698533][ T8791] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1209.698673][ T8791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.698794][ T8791] usb 6-1: Product: syz [ 1209.698915][ T8791] usb 6-1: Manufacturer: syz [ 1209.699036][ T8791] usb 6-1: SerialNumber: syz [ 1209.749561][ T8791] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1210.340618][ T8475] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1210.752470][ T2980] usb 6-1: USB disconnect, device number 115 [ 1211.417108][ T8475] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1211.417260][ T8475] ath9k_htc: Failed to initialize the device [ 1211.418102][ T2980] usb 6-1: ath9k_htc: USB layer deinitialized 19:23:07 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c000800", 0xd, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:07 executing program 2: 19:23:07 executing program 0: 19:23:07 executing program 1: 19:23:07 executing program 3: 19:23:07 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 19:23:08 executing program 2: 19:23:08 executing program 3: 19:23:08 executing program 0: 19:23:08 executing program 1: [ 1212.901290][ T8475] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1212.971386][T21495] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:08 executing program 2: 19:23:09 executing program 0: [ 1213.472940][ T8475] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1213.473091][ T8475] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.473209][ T8475] usb 6-1: Product: syz [ 1213.473337][ T8475] usb 6-1: Manufacturer: syz [ 1213.473463][ T8475] usb 6-1: SerialNumber: syz [ 1213.539784][ T8475] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1214.157357][ T2980] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1214.578534][ T8830] usb 6-1: USB disconnect, device number 116 [ 1215.177769][ T2980] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1215.177933][ T2980] ath9k_htc: Failed to initialize the device [ 1215.183211][ T8830] usb 6-1: ath9k_htc: USB layer deinitialized 19:23:11 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c000800", 0xd, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:11 executing program 3: 19:23:11 executing program 1: 19:23:11 executing program 2: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) 19:23:11 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x10) 19:23:11 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 19:23:12 executing program 2: socket$inet6(0x18, 0x1, 0x0) 19:23:12 executing program 3: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) 19:23:12 executing program 1: r0 = socket$inet6(0x18, 0x2, 0x0) sendmsg(r0, &(0x7f0000001400)={&(0x7f0000000040)=ANY=[], 0xa, 0x0, 0x0, 0x0, 0x10f8}, 0x7) 19:23:12 executing program 0: r0 = socket$inet6(0x18, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) [ 1216.849652][T17681] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1216.931291][T21538] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:12 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x2, 0x7fffffff, 0x3, 0x0, 0x1}, 0x40) 19:23:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffd}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1217.377785][T17681] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1217.377925][T17681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.378046][T17681] usb 6-1: Product: syz [ 1217.378166][T17681] usb 6-1: Manufacturer: syz [ 1217.378290][T17681] usb 6-1: SerialNumber: syz [ 1217.420588][T17681] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1218.007408][ T8473] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1218.431139][ T2980] usb 6-1: USB disconnect, device number 117 [ 1219.019270][ T8473] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1219.019438][ T8473] ath9k_htc: Failed to initialize the device [ 1219.020224][ T2980] usb 6-1: ath9k_htc: USB layer deinitialized 19:23:15 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c000800", 0xd, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:15 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xffffffffffffff8b, 0x464, 0x0, 0x0, 0x0, "4e32e28a920962f0559f015f517be8ea1c2c32c887c4086056bc5647f2f95d146189b2438fa85a4d2b7c4146a535db72c7aed84d014b7e280d0be3b49d61d2ec240e2bc5d939d3a2afa81566f0d818b7567f85535328e98f776e44818720a49233834a1f969536413dc817912c5723be07000000000000008c18fcb59999ca89b64e87e86df08e1d357d40", ["", "", "", "", "", "", ""]}, 0x9c}}, 0x0) 19:23:15 executing program 1: bpf$BPF_BTF_LOAD(0x10, &(0x7f0000000440)={0x0, &(0x7f0000000380)=""/179, 0x0, 0xb3}, 0x20) 19:23:15 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) syz_io_uring_setup(0x3e58, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 19:23:15 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000280), 0x4) 19:23:15 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74'}) 19:23:16 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x2}]}}, &(0x7f0000000380)=""/179, 0x26, 0xb3, 0x1}, 0x20) 19:23:16 executing program 0: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x5000) 19:23:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x2}]}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/179, 0x33, 0xb3, 0x1}, 0x20) 19:23:16 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{}, [], {0x95, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1220.897562][T17681] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1220.922054][T21590] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:16 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={0x0}, 0x300}, 0x0) 19:23:16 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000280)={&(0x7f00000001c0), 0xffffff93, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x3f5, 0x0, 0x0, 0x0, "", ["", "", "", "", "", "", "", "", "", ""]}, 0xfffffffffffffd63}}, 0x0) [ 1221.418985][T17681] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1221.419125][T17681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.419248][T17681] usb 6-1: Product: syz [ 1221.419371][T17681] usb 6-1: Manufacturer: syz [ 1221.419490][T17681] usb 6-1: SerialNumber: syz [ 1221.479143][T17681] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1222.037573][ T9935] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1222.447959][ T8830] usb 6-1: USB disconnect, device number 118 [ 1223.113736][ T9935] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1223.113894][ T9935] ath9k_htc: Failed to initialize the device [ 1223.121444][ T8830] usb 6-1: ath9k_htc: USB layer deinitialized 19:23:19 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809", 0x14, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x4, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000380)=""/179, 0x26, 0xb3, 0x1}, 0x20) 19:23:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18100000", @ANYRES32, @ANYBLOB="000018"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:19 executing program 3: select(0x1e, &(0x7f00000008c0), &(0x7f0000000900), 0x0, 0x0) 19:23:19 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9c}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:19 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74'}) 19:23:20 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x19, 0x0, 0x0) 19:23:20 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000380)=""/179, 0x26, 0xb3, 0x1}, 0x20) [ 1224.737523][T17681] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1224.814636][T21640] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:20 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0x10, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380)=""/179, 0x1a, 0xb3, 0x1}, 0x20) [ 1225.260617][T17681] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1225.260759][T17681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 19:23:21 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x7ff, [{0x0, 0x1, 0x400}, {0x0, 0x3}]}]}}, &(0x7f0000000380)=""/179, 0x3e, 0xb3, 0x1}, 0x20) [ 1225.260876][T17681] usb 6-1: Product: syz [ 1225.260998][T17681] usb 6-1: Manufacturer: syz 19:23:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1225.261120][T17681] usb 6-1: SerialNumber: syz [ 1225.301570][T17681] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1225.867564][ T9935] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1226.281960][ T8830] usb 6-1: USB disconnect, device number 119 [ 1226.937582][ T9935] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1226.937753][ T9935] ath9k_htc: Failed to initialize the device [ 1226.963591][ T8830] usb 6-1: ath9k_htc: USB layer deinitialized 19:23:23 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809", 0x14, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:23 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:23 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f00000029c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x1000000000000600}], 0x0, &(0x7f00000001c0)={[{@fat=@gid={'gid'}}]}) 19:23:23 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x300) 19:23:23 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x2}, 0x40) 19:23:23 executing program 5: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000180)=@conn_svc_rsp={0x0, 0x0, 0xa, '\\N74'}) 19:23:23 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x8, 0x3f2, 0x0, 0x0, 0x0, "", ["", ""]}, 0x20000050}}, 0x0) 19:23:24 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:24 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x2, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380)=""/179, 0x1a, 0xb3, 0x1}, 0x20) 19:23:24 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x2000}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1228.704405][T21688] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1228.767293][ T9935] usb 6-1: new high-speed USB device number 120 using dummy_hcd 19:23:24 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x7, 0x1, 0x0, 0x0) 19:23:24 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2}]}, {0x0, [0x0]}}, &(0x7f0000000380)=""/179, 0x27, 0xb3, 0x1}, 0x20) [ 1229.288891][ T9935] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1229.289033][ T9935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.289154][ T9935] usb 6-1: Product: syz [ 1229.289274][ T9935] usb 6-1: Manufacturer: syz [ 1229.289395][ T9935] usb 6-1: SerialNumber: syz [ 1229.329718][ T9935] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1229.897713][ T8471] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1230.305382][ T9935] usb 6-1: USB disconnect, device number 120 [ 1230.937951][ T8471] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1230.938134][ T8471] ath9k_htc: Failed to initialize the device [ 1230.939007][ T9935] usb 6-1: ath9k_htc: USB layer deinitialized 19:23:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809", 0x14, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:27 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x26, 0x0, 0xc, 0xc, 0x2, [@func]}}, &(0x7f0000000380)=""/179, 0x26, 0xb3, 0x1}, 0x20) 19:23:27 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:27 executing program 3: shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x5000) pipe2(&(0x7f0000000240), 0x0) 19:23:27 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000851095ebfbeab79f03"], &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:27 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x8}, 0xb, &(0x7f0000000080)={0x0}}, 0x0) 19:23:28 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f00000004c0)) select(0x40, &(0x7f00000008c0), &(0x7f0000000900)={0x9}, 0x0, 0x0) 19:23:28 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0x2000018c, &(0x7f0000000080)={&(0x7f0000000040)={0x8, 0x3f2, 0x0, 0x0, 0x0, "", ["", ""]}, 0x10}}, 0x0) 19:23:28 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x74, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380)=""/179, 0x1a, 0xb3, 0x1}, 0x20) 19:23:28 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1232.715519][T21737] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380)=""/179, 0x1a, 0xb3, 0x1}, 0x20) 19:23:28 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1810", @ANYRES32, @ANYBLOB="000018"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a", 0x17, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000380)=""/179, 0x32, 0xb3, 0x1}, 0x20) 19:23:31 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1c, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000001480)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:31 executing program 2: setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0xfffffffffffffdc6) 19:23:31 executing program 0: inotify_init1(0x0) select(0x40, &(0x7f00000008c0), &(0x7f0000000900)={0x9}, 0x0, 0x0) 19:23:31 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) connect(r0, &(0x7f0000000000)=@nl=@proc, 0x80) 19:23:31 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x40) 19:23:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000023c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000024c0)="b9800000c03500400000665c0f5d0202f5fbfb20e035c5e17de74b064000c4635765f766400fc774a600f30fbcf726660f38807769653626400fc7bb00000000360f7955f49af342d8868680000049b8206bc3c3220d2d4f5d2e66420fc73366bab6200000", 0x65}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000002300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000280)={{0x0, 0x0, 0xff4e, {0xd000}}, "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:23:31 executing program 5: r0 = socket$nl_audit(0x10, 0x3, 0x9) connect(r0, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x0, 0x800000}, 0x80) 19:23:31 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB='$'], 0x424}}, 0x0) [ 1236.131651][T21776] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:31 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000180), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}, 0x300}, 0x0) 19:23:31 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x2, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000380)=""/179, 0x1a, 0xb3, 0x1}, 0x20) 19:23:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a", 0x17, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 1236.538440][ T5] kworker/dying (5) used greatest stack depth: 3896 bytes left 19:23:32 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800008000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x7, 0xa0, &(0x7f0000000180)=""/160, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:23:32 executing program 5: socketpair(0x26, 0x5, 0x0, &(0x7f0000000100)) 19:23:32 executing program 2: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) select(0x40, &(0x7f00000008c0), &(0x7f0000000900)={0x9}, 0x0, 0x0) 19:23:32 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}, {0x0, [], 0x2}}, &(0x7f0000000380)=""/179, 0x1a, 0xb3, 0x1}, 0x20) 19:23:32 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x2, &(0x7f0000000180)=@raw=[@map_val], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x86, &(0x7f0000000200)=""/134, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 1237.116814][T21800] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:32 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x8}, 0xc, &(0x7f0000000080)={0x0}}, 0x0) 19:23:32 executing program 5: pipe(0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740)='mptcp_pm\x00') 19:23:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 19:23:33 executing program 0: syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) 19:23:33 executing program 2: pipe(&(0x7f00000006c0)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740)='mptcp_pm\x00') 19:23:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x40) 19:23:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a", 0x17, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:35 executing program 5: shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0xd800) 19:23:35 executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') socket$xdp(0x2c, 0x3, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) 19:23:35 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:35 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000002c40)={r0}, 0x8) 19:23:35 executing program 3: pipe(&(0x7f0000000a00)) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 19:23:36 executing program 3: syz_genetlink_get_family_id$mptcp(0x0) socket$vsock_stream(0x28, 0x1, 0x0) 19:23:36 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) 19:23:36 executing program 5: clock_gettime(0x0, &(0x7f0000012300)) 19:23:36 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:36 executing program 0: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740)='mptcp_pm\x00') ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000003440)={'wg1\x00'}) [ 1240.978236][T21853] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:37 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) accept4(r0, 0x0, 0x0, 0x80800) 19:23:39 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a08", 0x19, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:39 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/pid_for_children\x00') socket(0x0, 0x0, 0x0) 19:23:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:39 executing program 5: pipe(&(0x7f0000003600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, 0x0, 0x0) 19:23:39 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socketpair(0x2b, 0x80000, 0x0, &(0x7f0000005d00)) 19:23:39 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$ethtool(0x0) 19:23:39 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socketpair(0x10, 0x0, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00') socketpair(0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00)='nl80211\x00') 19:23:39 executing program 5: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 19:23:39 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:39 executing program 2: r0 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r0, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10100, &(0x7f00000034c0)) [ 1244.179760][T21890] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:39 executing program 0: pipe(&(0x7f00000055c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x0) 19:23:40 executing program 1: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:42 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a08", 0x19, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:42 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x0, 0x0, 0x0) 19:23:42 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x441, 0x0) 19:23:42 executing program 5: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) pipe(0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x10}, 0x10}}, 0x0) 19:23:42 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 19:23:42 executing program 1: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:42 executing program 1: getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:42 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) 19:23:42 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x441, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') 19:23:42 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000240), 0x10) 19:23:42 executing program 2: [ 1247.542218][T21928] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:43 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:45 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a08", 0x19, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:45 executing program 3: 19:23:45 executing program 2: 19:23:45 executing program 5: 19:23:45 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:45 executing program 0: 19:23:46 executing program 0: 19:23:46 executing program 5: 19:23:46 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f0000000a40)) 19:23:46 executing program 2: 19:23:46 executing program 3: [ 1250.856590][T21962] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:46 executing program 5: 19:23:48 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 19:23:48 executing program 0: 19:23:48 executing program 2: 19:23:48 executing program 3: 19:23:48 executing program 5: 19:23:49 executing program 3: 19:23:49 executing program 5: 19:23:49 executing program 2: 19:23:49 executing program 0: 19:23:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) [ 1254.041123][T21990] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:50 executing program 0: 19:23:52 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:52 executing program 5: 19:23:52 executing program 3: 19:23:52 executing program 2: 19:23:52 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 19:23:52 executing program 0: 19:23:52 executing program 2: 19:23:52 executing program 0: 19:23:52 executing program 5: 19:23:52 executing program 3: 19:23:52 executing program 1: [ 1257.292276][T22017] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:52 executing program 1: 19:23:53 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:53 executing program 2: 19:23:53 executing program 0: 19:23:53 executing program 3: 19:23:53 executing program 5: 19:23:53 executing program 1: 19:23:53 executing program 2: [ 1258.324238][T22033] isofs_fill_super: root inode is not a directory. Corrupted media? 19:23:54 executing program 0: 19:23:54 executing program 2: 19:23:54 executing program 3: 19:23:54 executing program 5: 19:23:54 executing program 1: 19:23:56 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:23:56 executing program 2: 19:23:56 executing program 5: 19:23:56 executing program 0: 19:23:56 executing program 3: 19:23:56 executing program 1: 19:23:57 executing program 1: 19:23:57 executing program 0: 19:23:57 executing program 3: 19:23:57 executing program 2: 19:23:57 executing program 5: [ 1262.127836][T22059] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:23:57 executing program 3: 19:24:00 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:00 executing program 0: 19:24:00 executing program 1: 19:24:00 executing program 2: 19:24:00 executing program 5: 19:24:00 executing program 3: 19:24:00 executing program 3: 19:24:00 executing program 5: 19:24:00 executing program 2: 19:24:00 executing program 1: 19:24:00 executing program 0: [ 1265.317697][T22085] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:00 executing program 1: 19:24:03 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:03 executing program 3: 19:24:03 executing program 2: 19:24:03 executing program 1: 19:24:03 executing program 5: 19:24:03 executing program 0: 19:24:03 executing program 1: 19:24:03 executing program 3: 19:24:03 executing program 2: 19:24:03 executing program 0: 19:24:03 executing program 5: 19:24:04 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000040)={'ip6gretap0\x00', @ifru_ivalue}) [ 1268.517885][T22109] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:06 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x0, 0x4}]}]}}, &(0x7f0000000140)=""/150, 0x36, 0x96, 0x8000}, 0x20) 19:24:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x14}, 0x14}}, 0x0) 19:24:06 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:24:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000200)="ce04ec112b69027b525a", 0xa) 19:24:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto, @enum]}}, &(0x7f0000000140)=""/150, 0x32, 0x96, 0x8000}, 0x20) 19:24:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{}]}]}}, &(0x7f0000000140)=""/150, 0x2e, 0x96, 0x8000}, 0x20) 19:24:06 executing program 0: bpf$PROG_LOAD(0x11, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:24:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc) 19:24:07 executing program 5: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)={0x1000000c}) [ 1271.590353][T22143] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 19:24:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) 19:24:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:09 executing program 0: bpf$PROG_LOAD(0x12, 0x0, 0x0) 19:24:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) 19:24:09 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) 19:24:09 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000000)=""/175, &(0x7f00000000c0)=0xaf) 19:24:09 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}}) 19:24:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @local}}) 19:24:10 executing program 3: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x10002005}) 19:24:10 executing program 0: socketpair(0x2c, 0x803, 0x0, &(0x7f0000000000)) 19:24:10 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}) 19:24:10 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "d718c49039f56bf60588bde3e987220018ab195749979d689bb52542bcbc76639453c1cdcfa30f2dfb34b0d5ab16488b1f7f31667c4b102f13ae766c379f98dfd0d1c02e4dcfb0d61d31ae99f965fea6"}, 0xd8) 19:24:10 executing program 0: bpf$PROG_LOAD(0x3, 0x0, 0x0) [ 1275.058206][T22180] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:13 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {0x0, 0x0, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:13 executing program 1: bpf$PROG_LOAD(0x3, 0x0, 0x700) 19:24:13 executing program 0: bpf$PROG_LOAD(0x7, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:24:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000c00)=@unspec, 0xc) 19:24:13 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x0, 0x0, &(0x7f0000000800)) 19:24:13 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x7, &(0x7f00000000c0)=@raw=[@jmp, @alu={0x3}, @ldst, @map_val, @initr0], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:24:13 executing program 3: bpf$PROG_LOAD(0xd, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:24:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001400)=@buf={0x50, &(0x7f0000000400)="d0c1d010158a0fa2b8e1b3eab2d80e57115431b2e069abb3d491878606d0dc9ed6ef1223de9f52fa305e3b01ecbeb3d1d5f2d98014a2d73616232bb591f556c9648b7fd965421010d9e3aa5a32a7261e"}) 19:24:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 19:24:13 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x80, 0x14, 0x0, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0x6a, 0x1, "221db1a06684c7a7a21646131e7be726c14d993863e0b7dc3b572089f91f10225e3ba6e8f4dc846ded56c1e52a7f2141c7e08f165e2466c9216d7b99e2c2d3c66884cbd17ddd07a50cd06637ee9c997f3728f91db630ca27f2edf11c00ec4973591e362e7120"}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 19:24:14 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000019c0)) [ 1278.716761][T22220] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:14 executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001600), 0x8) 19:24:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000c00)=@proc, 0xc) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f00000019c0)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 19:24:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(r0, &(0x7f0000000c00)=@proc, 0xc) 19:24:16 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) 19:24:16 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0xe95, 0x4) 19:24:16 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0x3, &(0x7f0000000ec0)=@framed, &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:24:17 executing program 1: bpf$PROG_LOAD(0x22, 0x0, 0x0) 19:24:17 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x3, &(0x7f00000007c0)=@framed, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x200009b8) 19:24:17 executing program 2: bpf$PROG_LOAD(0x1e, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:24:17 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) [ 1281.908079][T22257] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'ip6erspan0\x00', @ifru_hwaddr=@multicast}) 19:24:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 19:24:20 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000001c0), 0x4) 19:24:20 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) 19:24:20 executing program 0: r0 = socket$nl_audit(0x10, 0x3, 0x9) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12000) sendmsg$AUDIT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x0, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 19:24:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0xd04, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0xc2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xc25, 0x3, "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"}]}]}, 0xd04}}, 0x0) 19:24:20 executing program 3: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240), 0x10) 19:24:20 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1a2}, 0x40) 19:24:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "000001000000000008fc9d71fc00000000000000f8ffff002e0b3836005404b0d6301a4ce875f2e3ff5f163ee340b76795008000f8000000000104003c5811039e15775027ecce66fd792bbf0e5bf5ff9b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ff42c65400"}, 0x80) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000002800310f00"/20, @ANYRES32=r2, @ANYBLOB="940e00000000ffff000000000b0001006367726f75700000480002004400010040000004090001006d706c73000000000000028008000500630b0c000500070005000000040006000c05000000000000000000000c0008000000000000000000060005005c12e20d"], 0x80}}, 0x0) 19:24:20 executing program 5: bpf$PROG_LOAD(0x1c, 0x0, 0x0) 19:24:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003600)) 19:24:20 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) [ 1285.362199][T22297] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:21 executing program 0: socketpair(0x1, 0x0, 0x3ff, &(0x7f0000000140)) 19:24:23 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600), 0x0, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 19:24:23 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={0x0, 0x0, 0x18}, 0x10) 19:24:23 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000001}) 19:24:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240)='tls\x00', 0x4) 19:24:23 executing program 0: bpf$PROG_LOAD(0x23, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 19:24:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}) 19:24:24 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000016c0)={0x10}, 0x10}}, 0x0) 19:24:24 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) connect$netlink(r0, 0x0, 0x0) 19:24:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000001400)=@buf={0x0, &(0x7f0000000400)}) 19:24:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000780)=@buf={0x28, &(0x7f0000000740)="b211b24b03768524e4043226ed6dce4a1c336bec62ec08546e6af29acaee672a83d296476cf2fda0"}) [ 1288.873869][T22335] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xfffffffffffffee0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) 19:24:27 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200043004400", 0x2d, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:27 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 19:24:27 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'bridge0\x00', @ifru_map}) 19:24:27 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000140001040000000000e2fe5a23000000", @ANYRES32, @ANYBLOB="080002"], 0x20}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x4924924924926dd, 0x0) 19:24:27 executing program 5: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) r2 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r2, 0xee00, 0x0) 19:24:27 executing program 2: socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="a16965678270", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x4, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @local}, "08006371ae9b1c01"}}}}}, 0x0) [ 1291.834508][T22364] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1291.865524][T22364] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 19:24:27 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) [ 1292.140970][T22376] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 [ 1292.154810][T22371] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue 19:24:27 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020202020202020202020202020202020202020202020202020000000000000000022000000000000220000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010600)="ff4344303031", 0x6, 0x8800}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a08020000010000010100504e0701be", 0x27, 0xb800}], 0x0, &(0x7f0000011700)) 19:24:27 executing program 0: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='upperdir=./bus,lowerdir=./file3,workdir=./file0']) mount$overlay(0x400302, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) [ 1292.290267][T22374] EXT4-fs (loop5): re-mounted. Opts: [ 1292.310978][T22374] EXT4-fs error (device loop5): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 19:24:28 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x13) [ 1292.311310][T22374] Quota error (device loop5): write_blk: dquota write failed [ 1292.311393][T22374] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1292.315008][T22371] EXT4-fs (loop5): re-mounted. Opts: [ 1292.678662][T22390] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1292.679594][T22390] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1292.705829][T22384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1292.728496][T22389] EXT4-fs (loop2): re-mounted. Opts: 19:24:28 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000240)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r1}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r1}}, 0xfffffe67) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) [ 1292.737702][T22384] EXT4-fs (loop2): re-mounted. Opts: [ 1292.771878][T22384] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 19:24:28 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) [ 1292.772204][T22384] Quota error (device loop2): write_blk: dquota write failed [ 1292.772288][T22384] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1292.793771][T22384] Quota error (device loop2): write_blk: dquota write failed [ 1292.793860][T22384] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1292.892389][T22384] EXT4-fs (loop2): re-mounted. Opts: [ 1292.893592][T22389] EXT4-fs (loop2): re-mounted. Opts: [ 1293.320169][ T9179] Quota error (device loop2): free_dqentry: Quota structure has offset to other block (0) than it should (8) [ 1293.320341][ T9179] Quota error (device loop2): write_blk: dquota write failed [ 1293.320548][ T9179] Quota error (device loop2): write_blk: dquota write failed [ 1293.941789][T22409] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 19:24:31 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200043004400", 0x2d, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:31 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x13) 19:24:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:31 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:31 executing program 3: r0 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x134}) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000180)=""/67, 0x43}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) [ 1295.948611][T22419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1295.966135][T22419] EXT4-fs (loop2): re-mounted. Opts: [ 1295.982298][T22419] EXT4-fs (loop2): re-mounted. Opts: [ 1296.000550][T22419] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters [ 1296.020804][T22419] Quota error (device loop2): write_blk: dquota write failed 19:24:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) [ 1296.357462][T22435] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:31 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r0, 0xee00, 0x0) 19:24:31 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0xb1}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 19:24:32 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x13) 19:24:32 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:32 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) dup2(0xffffffffffffffff, r0) [ 1296.450417][T22441] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1296.464735][T22441] EXT4-fs (loop2): re-mounted. Opts: [ 1296.471945][T22441] EXT4-fs (loop2): re-mounted. Opts: [ 1296.482826][T22441] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters [ 1297.074612][T22452] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1297.096762][T22452] EXT4-fs (loop2): re-mounted. Opts: [ 1297.130971][T22452] EXT4-fs (loop2): re-mounted. Opts: [ 1297.230344][T22452] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 19:24:35 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e00550058002000200020002000200020002000200020002000200043004400", 0x2d, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:35 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:35 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r0, 0xee00, 0x0) 19:24:35 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x13) 19:24:35 executing program 3: unshare(0x400) r0 = openat$urandom(0xffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000040)) 19:24:35 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) dup2(0xffffffffffffffff, r0) [ 1300.159711][T22484] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1300.193046][T22488] EXT4-fs (loop2): re-mounted. Opts: 19:24:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x21) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r2, r0, 0x0, 0xffffff38) [ 1300.222664][T22488] EXT4-fs (loop2): re-mounted. Opts: 19:24:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x9, 0x9d, 0x100400, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)="906e0f958f686d8a3008b1fdc47a6bcbfafc4e0d2c07f04b4ce3d2304d3a590289275657c24a41a55fed3b535267664fc01b4c0ff6510ade1b22db45f74ca367c849858c7b7bcf4d3348f2e36c663492352941028e10b1c60f0490e814977518da6a124ed2dc8337f1ff9565d7f4fd5c2c9a0b3d80cb2605c9e9dc12594ff8d30580b3a157ecbec40cc0bc7a09e5ea5b163a5286c6571644e008fd562ce4", &(0x7f00000003c0), 0x400, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000540)=""/131, &(0x7f0000000080), &(0x7f0000000140), 0x2, r0}, 0x38) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="76657468305f766c616e323300cd4643eb22096d8156af0214b2359f9b5d0f582d0c640e953b4c919fa01991f884210d039727654915324c404bec5cd7aa"], 0xd) socket(0x0, 0x0, 0x0) [ 1300.322788][T22488] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 19:24:35 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) [ 1300.421038][T22488] __quota_error: 15 callbacks suppressed [ 1300.421079][T22488] Quota error (device loop2): write_blk: dquota write failed [ 1300.434791][T22488] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1300.511032][T22492] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 [ 1300.516164][ T32] audit: type=1800 audit(1604085875.926:75): pid=22493 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16375 res=0 errno=0 19:24:36 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:36 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r0, 0xee00, 0x0) 19:24:36 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) dup2(0xffffffffffffffff, r0) [ 1300.683818][ T32] audit: type=1804 audit(1604085875.966:76): pid=22495 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir383965445/syzkaller.PCqcvd/838/file0" dev="sda1" ino=16375 res=1 errno=0 [ 1300.684043][ T32] audit: type=1804 audit(1604085875.976:77): pid=22495 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383965445/syzkaller.PCqcvd/838/file0" dev="sda1" ino=16375 res=1 errno=0 [ 1300.684277][ T32] audit: type=1804 audit(1604085876.026:78): pid=22495 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir383965445/syzkaller.PCqcvd/838/file0" dev="sda1" ino=16375 res=1 errno=0 [ 1301.622570][T22515] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1301.680113][T22515] EXT4-fs (loop2): re-mounted. Opts: [ 1301.696442][T22515] EXT4-fs (loop2): re-mounted. Opts: [ 1301.775314][T22515] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters [ 1301.775692][T22515] Quota error (device loop2): write_blk: dquota write failed [ 1301.775786][T22515] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota 19:24:39 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020", 0x44, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:39 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 19:24:39 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "a7c61b", 0x0, 0x87, 0x0, @remote, @ipv4={[], [], @multicast2}}}}}, 0x0) 19:24:39 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:39 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) dup2(0xffffffffffffffff, r0) 19:24:39 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) [ 1304.484934][T22534] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 19:24:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:24:40 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) [ 1304.688140][T22543] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:40 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x13) 19:24:40 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1305.389584][T22556] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1305.396028][T22556] EXT4-fs (loop2): re-mounted. Opts: [ 1305.504720][T22556] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters [ 1305.505095][T22556] Quota error (device loop2): write_blk: dquota write failed [ 1305.505189][T22556] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota 19:24:43 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020", 0x44, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:43 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:43 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x13) 19:24:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:24:43 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) [ 1308.221312][T22579] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1308.244294][T22579] EXT4-fs (loop2): re-mounted. Opts: [ 1308.265148][T22579] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters [ 1308.286016][T22579] Quota error (device loop2): write_blk: dquota write failed [ 1308.293900][T22579] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota 19:24:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:43 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)=0x13) 19:24:44 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1308.736810][T22588] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 [ 1309.068603][T22598] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 19:24:44 executing program 5: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) [ 1309.086685][T22603] EXT4-fs (loop2): re-mounted. Opts: [ 1309.135332][T22598] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters 19:24:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) [ 1309.137901][T22598] Quota error (device loop2): write_blk: dquota write failed [ 1309.137993][T22598] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1309.921462][T22612] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1309.930347][T22612] EXT4-fs (loop2): re-mounted. Opts: [ 1309.942635][T22612] EXT4-fs (loop2): re-mounted. Opts: [ 1309.963806][T22612] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters [ 1309.964160][T22612] Quota error (device loop2): write_blk: dquota write failed [ 1309.964250][T22612] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 1309.993634][T22612] Quota error (device loop2): write_blk: dquota write failed [ 1309.993727][T22612] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota 19:24:47 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020", 0x44, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:47 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:47 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:24:47 executing program 5: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) 19:24:47 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r0, 0xee00, 0x0) fchown(0xffffffffffffffff, 0xee00, 0x0) [ 1312.349224][T22628] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 19:24:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1312.432660][T22635] EXT4-fs (loop2): re-mounted. Opts: [ 1312.524650][T22628] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters [ 1312.567690][T22628] __quota_error: 3 callbacks suppressed [ 1312.567732][T22628] Quota error (device loop2): write_blk: dquota write failed [ 1312.581952][T22628] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota 19:24:48 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200), 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r0, 0xee00, 0x0) fchown(0xffffffffffffffff, 0xee00, 0x0) 19:24:48 executing program 5: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) [ 1312.922756][T22639] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:48 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1313.695150][T22655] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 19:24:51 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000", 0x4f, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200), 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:51 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 19:24:51 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r0, 0xee00, 0x0) fchown(0xffffffffffffffff, 0xee00, 0x0) 19:24:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1316.210406][T22673] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1316.252228][T22673] EXT4-fs (loop2): re-mounted. Opts: [ 1316.275385][T22673] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 8192 vs 22 free clusters [ 1316.328520][T22673] Quota error (device loop2): write_blk: dquota write failed [ 1316.336332][T22673] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota 19:24:51 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200), 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:52 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 19:24:52 executing program 2: r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:52 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:24:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1316.977468][T22686] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:55 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000", 0x4f, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:55 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, 0x0) 19:24:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:55 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:55 executing program 2: r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:24:55 executing program 2: r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:55 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 19:24:55 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:55 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1320.299619][T22725] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:55 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:58 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d0020002000200020002000200020002000200020002000000000000000", 0x4f, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:24:58 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 19:24:58 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:58 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:24:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:24:58 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:24:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:24:58 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) [ 1323.495568][T22764] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:24:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:24:59 executing program 5: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000000)) 19:24:59 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:25:01 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00000000", 0x55, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:25:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:01 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:01 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:01 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) 19:25:01 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:25:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:02 executing program 1: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:25:02 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:02 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:02 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100), 0x5) [ 1327.075796][T22806] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:25:02 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:05 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00000000", 0x55, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:25:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80000, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:05 executing program 5: openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') 19:25:05 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:05 executing program 1: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1330.202986][T22844] device lo entered promiscuous mode 19:25:05 executing program 3: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), 0xe) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:05 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:05 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:06 executing program 1: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1330.585202][T22847] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:25:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff010200000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000ffffffff", 0x58}], 0x1) [ 1331.076575][T22856] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (98 blocks) 19:25:09 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf00000000", 0x55, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:25:09 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:09 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:09 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:25:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}]}]}, 0x6c}}, 0x0) 19:25:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1334.373556][T22886] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (98 blocks) [ 1334.394407][T22892] tipc: Started in network mode [ 1334.399791][T22892] tipc: Own node identity 20010000000000000000000000000002, cluster identity 4711 [ 1334.409358][T22892] tipc: Enabling of bearer rejected, failed to enable media [ 1334.619920][T22895] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:25:10 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:10 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}, {&(0x7f0000000080)="c7", 0x1, 0xc400}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:10 executing program 5: ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) bpf$MAP_CREATE(0x4, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x109801, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x80000) 19:25:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:10 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf", 0x58, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 1335.292856][T22910] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (98 blocks) [ 1335.357753][T22913] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:25:10 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:25:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:11 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:12 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:12 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab04, 0xffffffffffffffff) 19:25:13 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1338.792803][T22951] block nbd5: shutting down sockets [ 1338.826451][T22950] block nbd5: shutting down sockets 19:25:15 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf", 0x58, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 19:25:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab04, 0xffffffffffffffff) 19:25:15 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) [ 1340.057468][T22961] block nbd5: shutting down sockets 19:25:15 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab04, 0xffffffffffffffff) 19:25:15 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) 19:25:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1340.543089][T22966] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:25:16 executing program 4: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf", 0x58, 0x8800}, {&(0x7f0000001280)="88001c0000000000001c00080000000008007809140b2a3a0802", 0x1a, 0xe000}], 0x0, &(0x7f0000000040)={[{@cruft='cruft'}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) [ 1340.924131][T22976] block nbd5: shutting down sockets 19:25:16 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x864b4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x53) 19:25:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab04, 0xffffffffffffffff) [ 1341.316892][T22982] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1341.404125][T22989] isofs_fill_super: bread failed, dev=loop4, iso_blknum=56, block=112 19:25:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) 19:25:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:17 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655fddf4655f0100ffff53ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000040)) r0 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) r1 = syz_mount_image$cramfs(&(0x7f0000000540)='cramfs\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x0, 0x0, 0x240038, &(0x7f0000001ec0)=ANY=[]) fchown(r1, 0xee00, 0x0) fchown(r0, 0xee00, 0x0) [ 1341.879930][T22996] block nbd5: shutting down sockets 19:25:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) socketpair(0x1e, 0x4, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab04, 0xffffffffffffffff) 19:25:17 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0xb40000}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)=0x5) 19:25:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100), 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="b1", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000), 0x4) [ 1342.446192][T23004] block nbd5: shutting down sockets [ 1342.496292][T23005] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 1342.521588][T23009] EXT4-fs (loop2): re-mounted. Opts: [ 1342.561748][T23005] EXT4-fs (loop2): re-mounted. Opts: [ 1342.573179][T23005] ===================================================== [ 1342.573209][T23005] BUG: KMSAN: uninit-value in qtree_entry_unused+0x137/0x1b0 [ 1342.573230][T23005] CPU: 1 PID: 23005 Comm: syz-executor.2 Not tainted 5.9.0-rc8-syzkaller #0 [ 1342.573239][T23005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.573245][T23005] Call Trace: [ 1342.573267][T23005] dump_stack+0x21c/0x280 [ 1342.573312][T23005] kmsan_report+0xf7/0x1e0 [ 1342.573340][T23005] __msan_warning+0x5f/0xa0 [ 1342.573360][T23005] qtree_entry_unused+0x137/0x1b0 [ 1342.573380][T23005] v2r1_mem2diskdqb+0x43d/0x710 [ 1342.573400][T23005] ? v2r0_is_id+0x380/0x380 [ 1342.573418][T23005] qtree_write_dquot+0x226/0x870 [ 1342.573441][T23005] v2_write_dquot+0x1ad/0x280 [ 1342.573460][T23005] ? v2_read_dquot+0x1a0/0x1a0 [ 1342.573476][T23005] dquot_acquire+0x46e/0x760 [ 1342.573549][T23005] ext4_acquire_dquot+0x422/0x550 [ 1342.573569][T23005] ? ext4_write_dquot+0x490/0x490 [ 1342.573586][T23005] dqget+0x14be/0x1c50 [ 1342.573610][T23005] __dquot_initialize+0x9d6/0x19e0 [ 1342.573632][T23005] ? capable_wrt_inode_uidgid+0x318/0x420 [ 1342.573656][T23005] dquot_initialize+0x4d/0x60 [ 1342.573690][T23005] ext4_setattr+0x984/0x2f70 [ 1342.573712][T23005] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1342.573733][T23005] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1342.573799][T23005] ? evm_inode_setattr+0x168/0x4c0 [ 1342.573820][T23005] ? ext4_write_inode+0x8e0/0x8e0 [ 1342.573856][T23005] notify_change+0x1efd/0x2570 [ 1342.573878][T23005] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1342.573901][T23005] chown_common+0x71e/0xb20 [ 1342.573925][T23005] ksys_fchown+0x246/0x390 [ 1342.573946][T23005] __se_sys_fchown16+0x185/0x1b0 [ 1342.573964][T23005] __ia32_sys_fchown16+0x4a/0x70 [ 1342.573984][T23005] __do_fast_syscall_32+0x129/0x180 [ 1342.574003][T23005] do_fast_syscall_32+0x6a/0xc0 [ 1342.574021][T23005] do_SYSENTER_32+0x73/0x90 [ 1342.574040][T23005] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1342.574053][T23005] RIP: 0023:0xf7f28549 [ 1342.574070][T23005] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1342.574080][T23005] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 000000000000005f [ 1342.574096][T23005] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ee00 [ 1342.574106][T23005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1342.574116][T23005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.574126][T23005] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1342.574136][T23005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.574145][T23005] [ 1342.574149][T23005] Uninit was created at: [ 1342.574178][T23005] kmsan_internal_poison_shadow+0x5c/0xf0 [ 1342.574196][T23005] kmsan_slab_alloc+0x8d/0xe0 [ 1342.574210][T23005] __kmalloc+0x282/0x490 [ 1342.574225][T23005] getdqbuf+0x4e/0xe0 [ 1342.574241][T23005] qtree_write_dquot+0xf2/0x870 [ 1342.574257][T23005] v2_write_dquot+0x1ad/0x280 [ 1342.574272][T23005] dquot_acquire+0x46e/0x760 [ 1342.574294][T23005] ext4_acquire_dquot+0x422/0x550 [ 1342.574309][T23005] dqget+0x14be/0x1c50 [ 1342.574324][T23005] __dquot_initialize+0x9d6/0x19e0 [ 1342.574339][T23005] dquot_initialize+0x4d/0x60 [ 1342.574353][T23005] ext4_setattr+0x984/0x2f70 [ 1342.574368][T23005] notify_change+0x1efd/0x2570 [ 1342.574383][T23005] chown_common+0x71e/0xb20 [ 1342.574398][T23005] ksys_fchown+0x246/0x390 [ 1342.574414][T23005] __se_sys_fchown16+0x185/0x1b0 [ 1342.574429][T23005] __ia32_sys_fchown16+0x4a/0x70 [ 1342.574447][T23005] __do_fast_syscall_32+0x129/0x180 [ 1342.574463][T23005] do_fast_syscall_32+0x6a/0xc0 [ 1342.574480][T23005] do_SYSENTER_32+0x73/0x90 [ 1342.574498][T23005] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1342.574503][T23005] ===================================================== [ 1342.574508][T23005] Disabling lock debugging due to kernel taint [ 1342.574518][T23005] Kernel panic - not syncing: panic_on_warn set ... [ 1342.574536][T23005] CPU: 1 PID: 23005 Comm: syz-executor.2 Tainted: G B 5.9.0-rc8-syzkaller #0 [ 1342.574545][T23005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1342.574550][T23005] Call Trace: [ 1342.574571][T23005] dump_stack+0x21c/0x280 [ 1342.574591][T23005] panic+0x4c8/0xea7 [ 1342.574612][T23005] ? add_taint+0x17c/0x210 [ 1342.574629][T23005] kmsan_report+0x1da/0x1e0 [ 1342.574650][T23005] __msan_warning+0x5f/0xa0 [ 1342.574669][T23005] qtree_entry_unused+0x137/0x1b0 [ 1342.574688][T23005] v2r1_mem2diskdqb+0x43d/0x710 [ 1342.574708][T23005] ? v2r0_is_id+0x380/0x380 [ 1342.574725][T23005] qtree_write_dquot+0x226/0x870 [ 1342.574747][T23005] v2_write_dquot+0x1ad/0x280 [ 1342.574765][T23005] ? v2_read_dquot+0x1a0/0x1a0 [ 1342.574782][T23005] dquot_acquire+0x46e/0x760 [ 1342.574802][T23005] ext4_acquire_dquot+0x422/0x550 [ 1342.574820][T23005] ? ext4_write_dquot+0x490/0x490 [ 1342.574836][T23005] dqget+0x14be/0x1c50 [ 1342.574859][T23005] __dquot_initialize+0x9d6/0x19e0 [ 1342.574880][T23005] ? capable_wrt_inode_uidgid+0x318/0x420 [ 1342.574903][T23005] dquot_initialize+0x4d/0x60 [ 1342.574919][T23005] ext4_setattr+0x984/0x2f70 [ 1342.574934][T23005] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1342.574955][T23005] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 1342.574972][T23005] ? evm_inode_setattr+0x168/0x4c0 [ 1342.574991][T23005] ? ext4_write_inode+0x8e0/0x8e0 [ 1342.575008][T23005] notify_change+0x1efd/0x2570 [ 1342.575029][T23005] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1342.575051][T23005] chown_common+0x71e/0xb20 [ 1342.575074][T23005] ksys_fchown+0x246/0x390 [ 1342.575094][T23005] __se_sys_fchown16+0x185/0x1b0 [ 1342.575113][T23005] __ia32_sys_fchown16+0x4a/0x70 [ 1342.575132][T23005] __do_fast_syscall_32+0x129/0x180 [ 1342.575152][T23005] do_fast_syscall_32+0x6a/0xc0 [ 1342.575171][T23005] do_SYSENTER_32+0x73/0x90 [ 1342.575190][T23005] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1342.575202][T23005] RIP: 0023:0xf7f28549 [ 1342.575219][T23005] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 1342.575228][T23005] RSP: 002b:00000000f55220cc EFLAGS: 00000296 ORIG_RAX: 000000000000005f [ 1342.575245][T23005] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ee00 [ 1342.575255][T23005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1342.575266][T23005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1342.575276][T23005] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1342.575292][T23005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1342.575979][T23005] Kernel Offset: disabled [ 1343.237768][T23005] Rebooting in 86400 seconds..