[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 73.159433][ T31] audit: type=1800 audit(1570839326.218:25): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 73.182198][ T31] audit: type=1800 audit(1570839326.238:26): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 73.216171][ T31] audit: type=1800 audit(1570839326.268:27): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.213' (ECDSA) to the list of known hosts. 2019/10/12 00:15:40 fuzzer started 2019/10/12 00:15:44 dialing manager at 10.128.0.26:46157 2019/10/12 00:15:44 syscalls: 2412 2019/10/12 00:15:44 code coverage: enabled 2019/10/12 00:15:44 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/10/12 00:15:44 extra coverage: enabled 2019/10/12 00:15:44 setuid sandbox: enabled 2019/10/12 00:15:44 namespace sandbox: enabled 2019/10/12 00:15:44 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/12 00:15:44 fault injection: enabled 2019/10/12 00:15:44 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/12 00:15:44 net packet injection: enabled 2019/10/12 00:15:44 net device setup: enabled 2019/10/12 00:15:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 00:19:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000100), 0xc6, 0x0, 0x0) syzkaller login: [ 306.561703][T11296] IPVS: ftp: loaded support on port[0] = 21 [ 306.696787][T11296] chnl_net:caif_netlink_parms(): no params data found [ 306.750140][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.757439][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.766060][T11296] device bridge_slave_0 entered promiscuous mode [ 306.775958][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.783175][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.791744][T11296] device bridge_slave_1 entered promiscuous mode [ 306.823796][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.836192][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.867137][T11296] team0: Port device team_slave_0 added [ 306.876271][T11296] team0: Port device team_slave_1 added [ 306.986843][T11296] device hsr_slave_0 entered promiscuous mode [ 307.182972][T11296] device hsr_slave_1 entered promiscuous mode [ 307.462213][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.469439][T11296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.478489][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.485700][T11296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.563089][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.582744][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 307.594139][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.604485][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.616535][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 307.635674][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.653352][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 307.662402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.669622][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.726811][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 307.736109][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.743331][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.753619][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 307.763583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 307.772947][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 307.781927][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 307.794069][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 307.804427][T11296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 307.837912][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 00:19:21 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x3, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfffffda9, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x8000000000000003, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000540)="c340", 0x2, 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/192, 0xc0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000000ac0), 0x12f, 0x0, 0x0) 00:19:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 308.194761][T11310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 308.246323][T11310] kvm: emulating exchange as write 00:19:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000480), 0x4) sendmsg$inet6(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@hoplimit={{0x18}}], 0x18}, 0x0) 00:19:21 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000480), 0x4) sendmsg$inet6(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@hoplimit={{0x18}}], 0x18}, 0x0) 00:19:21 executing program 0: mkdir(&(0x7f0000632000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000780), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50) read$FUSE(r0, &(0x7f0000001780), 0x1000) write$FUSE_ENTRY(r0, &(0x7f00000005c0)={0x90, 0x0, 0x2}, 0x90) write$FUSE_ENTRY(r0, &(0x7f0000000380)={0x90, 0x0, 0x3, {0x2, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7d8}}}, 0x90) 00:19:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080), 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:22 executing program 1: semget$private(0x0, 0x1, 0x443) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x5c0457a132566ae8, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, 'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/48, 0x30, 0x8, 0x7, 0xccd, 0x3, 0x40}, 0x120) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x4, 0x8}, 0xc) kcmp(0xffffffffffffffff, 0x0, 0x6, r0, r1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x0, 0x20000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) r3 = dup(0xffffffffffffffff) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000240)={0x400, 0x0, 0x7ddc1ee2, 0xffffffff}, 0x10) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x240000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000001300)=0x1008) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000001340)={r5, @in6={{0xa, 0x4e24, 0x2, @local}}, 0x9, 0x0, 0xe93, 0x9, 0xc0}, &(0x7f0000001400)=0x98) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x44, r6, 0xc00, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0x40020}, 0x800) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = creat(&(0x7f0000001600)='./file0\x00', 0x40) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r8) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001680)='fou\x00') sendmsg$FOU_CMD_DEL(r8, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x20f473209ba3bc07}, 0xc, &(0x7f0000001740)={&(0x7f00000016c0)={0x78, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x6}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @local}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, [], 0x12}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x60054850) r10 = syz_open_dev$swradio(&(0x7f00000017c0)='/dev/swradio#\x00', 0x1, 0x2) write$P9_RFLUSH(r10, &(0x7f0000001800)={0x7, 0x6d, 0x2}, 0x7) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001840)=""/206, &(0x7f0000001940)=0xce) syz_open_dev$vbi(&(0x7f0000001980)='/dev/vbi#\x00', 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) r11 = openat$full(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/full\x00', 0x480300, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000001a00)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r11, 0x40086424, &(0x7f0000001a40)={r12, 0x2}) r13 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/hwrng\x00', 0x10200, 0x0) ioctl$MON_IOCX_MFETCH(r13, 0xc0109207, &(0x7f0000001b00)={&(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x7}) r14 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/btrfs-control\x00', 0x800c0, 0x0) syncfs(r14) 00:19:22 executing program 0: socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:22 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:23 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 00:19:23 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) 00:19:23 executing program 0: syz_emit_ethernet(0x0, 0x0, 0x0) [ 310.196997][T11350] IPVS: ftp: loaded support on port[0] = 21 00:19:23 executing program 0: syz_emit_ethernet(0x0, &(0x7f00000000c0)=ANY=[], 0x0) 00:19:23 executing program 0: syz_emit_ethernet(0x0, &(0x7f00000000c0)=ANY=[], 0x0) [ 310.376733][T11350] chnl_net:caif_netlink_parms(): no params data found 00:19:23 executing program 0: syz_emit_ethernet(0x0, &(0x7f00000000c0)=ANY=[], 0x0) [ 310.448052][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.455443][T11350] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.464714][T11350] device bridge_slave_0 entered promiscuous mode [ 310.484185][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.491402][T11350] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.500137][T11350] device bridge_slave_1 entered promiscuous mode [ 310.541414][T11350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.557757][T11350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:19:23 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 310.604837][T11350] team0: Port device team_slave_0 added [ 310.614070][T11350] team0: Port device team_slave_1 added 00:19:23 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 310.696641][T11350] device hsr_slave_0 entered promiscuous mode [ 310.735480][T11350] device hsr_slave_1 entered promiscuous mode 00:19:23 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) [ 310.774890][T11350] debugfs: Directory 'hsr0' with parent '/' already present! [ 310.835105][T11350] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.842468][T11350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.850166][T11350] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.857469][T11350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.952300][T11350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.972331][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.986218][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.996473][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.010015][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 311.029026][T11350] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.045790][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 311.055108][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.062367][T11361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.105368][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 311.114988][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.122240][T11361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.132597][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 311.142574][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 311.153624][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 311.172851][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 311.189446][T11350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.204603][T11350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 311.217081][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 311.256495][T11350] 8021q: adding VLAN 0 to HW filter on device batadv0 00:19:24 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8"], 0x0) 00:19:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r0, 0x89fb, &(0x7f00000000c0)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x100, 'queue0\x00'}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f00000002c0)={0x2, 0x8001, 0x5}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000300)={{0x8000, 0x4, 0x9, 0x4}, 'syz0\x00', 0x55}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xe8) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r7, r6) ioctl$int_out(r7, 0x5460, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', r5}) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") clone(0xa0980000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 00:19:24 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8"], 0x0) 00:19:24 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8"], 0x0) 00:19:24 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b"], 0x0) 00:19:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/.yz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x7a00, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1040, 0x83) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154, 0x9a}], 0x1, 0x54) 00:19:24 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b"], 0x0) 00:19:24 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x34, 0xdc, 0x8f, 0x8, 0x471, 0x330, 0x395a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc6, 0x0, 0x0, 0xc5, 0x8f, 0x33}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x0, 0x23, 0x83, {0x83, 0x9, "4f1773660f4b5906252a7cad290f0ae5fc627da650070da971122965bfcf8e59edb6cb3f37c09eec2d4aedf6042ea5d5f5f7bcf0c4c2cd493888ec218aae1ffef4a304352c051ed4c33c1c7d1cb2eaa585f806295eae24e1dd0146e0b3cbb65caa293265db8ab6069d41fd483f22b50055033dfe08b4623c5dd501be446356d8ac"}}, &(0x7f00000000c0)={0x0, 0x3, 0x92, @string={0x92, 0x3, "f60b8686c2b5b15ad1641a40ad055eabd57de56b4f9d75dca2a5e1346972220d45643370b160154abdfbe54da51b89f083fe658732389649d2beb1975521d15e415aedf318c3287e25df9adae6d8111bd2eb5b52b6055fbaa1b697f21809c8b25e5ef3a3508aa11867126d02b7365e58dc8f5aa7c9bb4beab4ed030d17838d8968807ca036b0e7edeaf24faac4125663"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x0, 0xe, 0x87, "a15019baf968e5e0cc1bf1e14570b2232176bd76581defbf6d3131cbe497c4f12c61dda4e094076af519605714a35062a59989028a268c3101ab20a153c0ca9f40268ce3210d983055de4c62f47869c219e7473329bf09575ff475299c48b488103a8801b4636476cdba4afc950ff837504e33dfbeb5bfe06c6aecaf719731dd4021f6e8f84fab"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000000380)={0x20, 0x0, 0x2d, {0x2b, "2ef345e7d28716fb7380601b7a6bbc06a5baadab71aa76d29994b936926d5b7c0e1b839aaded408b296b3e"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x8}}) syz_usb_control_io(r0, 0x0, &(0x7f0000001d80)={0xac, &(0x7f0000001a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000001e40)=""/4096) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0xac, &(0x7f0000000480)={0x0, 0x0, 0x1, "11"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240), 0x0, 0x0}) 00:19:24 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b"], 0x0) 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee2332"], 0x0) 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee2332"], 0x0) 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee2332"], 0x0) 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/243], 0x0) 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/243], 0x0) [ 312.302206][ T12] usb 2-1: new high-speed USB device number 2 using dummy_hcd 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/243], 0x0) 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/251], 0x0) 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/251], 0x0) [ 312.553604][ T12] usb 2-1: Using ep0 maxpacket: 8 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/251], 0x0) 00:19:25 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/255], 0x0) [ 312.703356][ T12] usb 2-1: config 0 has an invalid interface number: 198 but max is 0 [ 312.711773][ T12] usb 2-1: config 0 has no interface number 0 [ 312.718076][ T12] usb 2-1: New USB device found, idVendor=0471, idProduct=0330, bcdDevice=39.5a [ 312.727265][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.772991][ T12] usb 2-1: config 0 descriptor?? [ 312.817268][ T12] gspca_main: sonixj-2.14.0 probing 0471:0330 [ 313.972245][ T12] gspca_sonixj: reg_r err -110 [ 313.977383][ T12] sonixj: probe of 2-1:0.198 failed with error -110 00:19:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/255], 0x0) 00:19:28 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x848, 0x0) sendmsg$inet6(r0, &(0x7f00000014c0)={&(0x7f0000000040)={0xa, 0x4e22, 0xb7a, @dev={0xfe, 0x80, [], 0x13}, 0x9}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000000080)="4394d56dbf420e3fe61c9ae2bb99324fa989d93ade795786fa724929791934128db212b865fd4010c14914dee0b71357ce19dd19f7cab063e46d9e717da3ea59ac0f3f520600a503204a174d7d084d9461b963f5bfd96b97754f780a5b81605a3a00e0ab43643ff2", 0x68}, {&(0x7f0000000100)="194e1118d5649781", 0x8}, {&(0x7f0000000140)="4688554d7bc62c75e7e29da558361a06253610e6763deb207133406000dd279f8515f0e98f73b6a1fa32d674e961911fb6e962dec3685fe0bd09cc05dfb27f433e4b90c723", 0x45}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="d2240c75ace9e3f4d04862296bbab7ce9f9a39fe5335addc47530bcceb4e714e250c0ecc3a9cba6984089ec092448bafa87d4f30bf9e855c327f07af5d32c5c31e303f1005a0024c6491e0ba114e6d1da4dee5ae3e4f7a5aa4603921277f54b35366ed8c8d0533", 0x67}, {&(0x7f0000001240)="16b25103731647810c8dcac39804dc6e56de1d135b5c1b0cead4a4f9609b9f9de38b10658aec655416165412377b28013672aa72789d843b1a38d3197fe78247eed030ae20873b51f423ef51d4b55ae5c3e2c8c98d46ef6e8194a4cebf4950bfea6c6a942dd877b36c7e268addf0b67242104a2367c8c0920aa17237ae86fdce0ad1b564e91c9ce78d4186b59727be566545e6552e04df65f0f66b93f67ef76252979e2502c3290ce42fc096ccfd1a4a8184e03824f637d20702e65a960c548cf07341929352088fc7b6ed8115138207", 0xd0}, {&(0x7f0000001340)="abcf2b2c36c1b8c20cb3d388990836d2e9f318876d1dabd47ce3c81e6e42c27612ce20712311c3647dc845d7783dbaaf80fd3a96b8fd43de756cbaa74ec1d7cf543785daf56e3892f72b820e81e0ff02b1fd3fc9543db934d3bddb28f1bea8eb16255292d5c62144f198d4103759db5a550c7a8852e269e06b32", 0x7a}, {&(0x7f00000013c0)="f3c665a05c736bf533c9b82736afb229f6d04f07a5e8aaf775f6d363875406e0c7bb266ec8a3979a2b6aea155b44543642d28cbe6e4312035b793f30c7f602d1b5eb89206767abf18751c72b", 0x4c}], 0x8}, 0x20000000) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000001500)={0x8, 0xfffffffb, 0x3, {0xa, @sdr={0x38323151, 0x46ad41cd}}}) r1 = syz_open_dev$vbi(&(0x7f0000001600)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000001640)) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000001680)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000016c0)=0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001700)={0xffffffffffffffff}, 0x39, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000001780)={0x9, 0x108, 0xfa00, {r3, 0x63, "450e53", "df0329262dd717535d0215303d31c7751b700965435a361f216d08abd0f65933c93077830571bf4c3c354959815aaf085fe076df6f6f1489e7e2feff44c9d8b7a4f47882fd8d512b121e090714e4ab63c1f494cb1af033ff26f1e96cd821b15a2df8adb17f7c229183468ba9ec45055cf27e2d3c2e93be17493df1a2e69aa9a8a3b89f1477a39ce12cfd1b2536a76a48b5f4f0d0ba152f1ae7ea19d4912432a475473a133b194f3b4d5f1e9095a42c046d3f0ed0f96b879add326765a9189b2b9cdbe673c46fab6ba87f2ea04098bf7cf0e8765d40a2f2e827af8d35169c65ed7bd221c3a36061b48cfe910679e6a0241840c2ad08be8f1fae9c895787bb9c73"}}, 0x110) r4 = io_uring_setup(0xca7, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x1, 0x3b9}) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000001940)) r6 = syz_open_dev$audion(&(0x7f0000001980)='/dev/audio#\x00', 0x10000, 0x8203) write$P9_RCREATE(r6, &(0x7f00000019c0)={0x18, 0x73, 0x1, {{0x6, 0x4, 0x4}, 0x4}}, 0x18) pipe2(&(0x7f0000001a00)={0xffffffffffffffff}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@empty}}, &(0x7f0000001b40)=0xe8) ioctl$TUNSETOWNER(r7, 0x400454cc, r8) getegid() openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/loop-control\x00', 0x3689ea98a2285473, 0x0) r9 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000002280)='/proc/capi/capi20\x00', 0x80000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r9, 0x28, 0x1, &(0x7f00000022c0)=0x3, 0x8) r10 = open(&(0x7f0000002300)='./file0\x00', 0x2000, 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000002340)={0x0, 0x3, 0x3, 0x0, 0x8001}) pipe2(&(0x7f0000002380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2000) ioctl$RTC_PIE_ON(r11, 0x7005) r12 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000023c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x2ff20979c1c61fc5, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xe, 0xb819a8323ea6d309, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x3b2, 0x40, 0x40, 0x6}}}}}]}}]}}, &(0x7f0000002540)={0xa, &(0x7f0000002400)={0xa, 0x6, 0x250, 0x80, 0x7f, 0x5, 0xff, 0x5}, 0x3a, &(0x7f0000002440)={0x5, 0xf, 0x3a, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x7e40d381896254fc, 0x31, 0x0, 0xfffb, 0x5}, @generic={0x1e, 0x10, 0xf, "2d8e3522af05ee45adc81acd417cbb8e51cded987223bb76a2dadb"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x7fff801, 0xf0f, 0x9}]}, 0x3, [{0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4}}, {0x4, &(0x7f0000002500)=@lang_id={0x4, 0x3, 0x3b61bbc0f3eae71b}}]}) syz_usb_ep_read(r12, 0xf, 0xc2, &(0x7f0000002580)=""/194) r13 = add_key$user(&(0x7f0000002680)='user\x00', &(0x7f00000026c0)={'syz', 0x2}, &(0x7f0000002700)="87b2af851e1519f3be3f5410b7aba6bef1a2c5a243e774dc71f6fe1665c41a89e6265f8256aa9da82e3f9e10cf8d0227c7462ccef7deb0cef6279ea8ca1217240de19cc96460b13787e7ebb536e7364c5f2cfae6624d2ac8fd759f6f467abae2079eef1d23199ce9c93d13e2b6e2ff55e458d4640e823ed034753d2fdeb0f1048169a767cdb309cf2479d5797185e743db26", 0x92, 0xfffffffffffffff8) r14 = request_key(&(0x7f00000027c0)='encrypted\x00', &(0x7f0000002800)={'syz', 0x0}, &(0x7f0000002840)='/dev/vbi#\x00', 0xfffffffffffffff8) r15 = add_key(&(0x7f0000002880)='id_resolver\x00', &(0x7f00000028c0)={'syz', 0x0}, &(0x7f0000002900)="65c4b3ca8562013a7dc1a2c2a0d66e814de8bb065f692f44c420b59822764019bac8509f", 0x24, 0xfffffffffffffffa) keyctl$dh_compute(0x17, &(0x7f0000002940)={r13, r14, r15}, &(0x7f0000002980)=""/114, 0x72, &(0x7f0000003a40)={&(0x7f0000002a00)={'ghash-ce\x00'}, &(0x7f0000002a40)="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", 0x1000}) [ 315.011619][T11361] usb 2-1: USB disconnect, device number 2 00:19:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/255], 0x0) 00:19:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/257], 0x0) 00:19:28 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffff, 0x80) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000180)="21807998a045e553043562c29ad789e48c58c0cf75505b0f8adb768a699ade03573ae299b21ea295a16eeefdd6940c4af79c066402d28820f8b79b0cd5346eef14eb469d20ffec6b4c135dcaf120860a36f223e2a72c17b771f1f29028b4a2395a11b6069db63d70ef473435553336fdef24", &(0x7f0000000240)="aa44a8fad985336174adff5c8d994a1f9404a54dd307d2393d4f85017bd949f038142e63566c07a2fbd23cfc1f559134699d5a3cee46d8c6fa958b9db73754833f9a1a91078af2469178746d16fae728", 0x2}, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001400)=[{&(0x7f0000000200)="4e5cc948cdc8ab2620c01ab799425dc3a5ca44cc3a83439efdb478285030cf9f58e6476345d078c9c39c171ad25b8df5172b5c1c2c31f44d", 0x38}], 0x1, 0x0) close(r3) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r4, 0x0, 0x16, &(0x7f00000002c0)=0x7e, 0x4) r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r8 = socket(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r9, 0x401, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1080004}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r9, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x4012) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r10 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r11 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r12 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r14 = dup2(r13, r12) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r14, 0xc0145401, &(0x7f0000000480)={0x0, 0x1, 0x3, 0x1, 0x800}) r15 = dup2(r11, r10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r15, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r15, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000340)=0x10) splice(r2, 0x0, r3, 0x0, 0x10000, 0x0) 00:19:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/257], 0x0) 00:19:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/257], 0x0) 00:19:28 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/nullb0\x00', 0x101440, 0x0) preadv(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x2fdc00}], 0x2, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r6}) ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0206416, &(0x7f0000000080)={0x0, 0x9, 0x1, 0x3, 0x8, 0x80000000}) [ 315.627560][T11463] IPVS: ftp: loaded support on port[0] = 21 00:19:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/258], 0x0) 00:19:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/258], 0x0) 00:19:28 executing program 0: syz_emit_ethernet(0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/258], 0x0) [ 315.906184][T11463] chnl_net:caif_netlink_parms(): no params data found [ 316.012452][T11463] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.019648][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.028381][T11463] device bridge_slave_0 entered promiscuous mode 00:19:29 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/devV\x1d\x0e\rut/mice\x00', 0x0, 0x6a6041) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001b5a94401aeb06509aed0000000109021b0001000000000904db00015a963c000905820200000000005824ee5ac7dce1500aa0bd2b57d0d50c39dad5bddb1fb7741a270499763484800fc0394f986fd8ef8efde9b3090de0394a289414d1cbd74b2dd93fb01800053844082b73"], 0x0) 00:19:29 executing program 0 (fault-call:0 fault-nth:0): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) [ 316.067608][T11463] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.075493][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.084134][T11463] device bridge_slave_1 entered promiscuous mode [ 316.117226][T11481] FAULT_INJECTION: forcing a failure. [ 316.117226][T11481] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 316.130897][T11481] CPU: 0 PID: 11481 Comm: syz-executor.0 Not tainted 5.4.0-rc2+ #0 [ 316.145701][T11481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.155891][T11481] Call Trace: [ 316.159310][T11481] dump_stack+0x191/0x1f0 [ 316.163787][T11481] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 316.169822][T11481] should_fail+0xa3f/0xa50 [ 316.174322][T11481] should_fail_alloc_page+0x1fb/0x270 [ 316.179729][T11481] __alloc_pages_nodemask+0x3c1/0x60c0 [ 316.185218][T11481] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 316.191349][T11481] ? ima_match_policy+0x1b01/0x1bb0 [ 316.196625][T11481] ? stack_trace_save+0x11c/0x1b0 [ 316.201702][T11481] ? stack_trace_save+0x11c/0x1b0 [ 316.206778][T11481] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 316.213027][T11481] ? update_stack_state+0xa12/0xb40 [ 316.218267][T11481] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 316.224366][T11481] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 316.230557][T11481] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 316.236664][T11481] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 316.242585][T11481] alloc_pages_current+0x68d/0x9a0 [ 316.247756][T11481] skb_page_frag_refill+0x2b0/0x580 [ 316.253059][T11481] tun_get_user+0x1c85/0x6f70 [ 316.257814][T11481] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 316.263736][T11481] tun_chr_write_iter+0x1f2/0x360 [ 316.268785][T11481] ? tun_chr_read_iter+0x460/0x460 [ 316.273970][T11481] do_iter_readv_writev+0xa16/0xc30 [ 316.279213][T11481] ? tun_chr_read_iter+0x460/0x460 [ 316.284342][T11481] do_iter_write+0x304/0xdc0 [ 316.288960][T11481] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 316.295162][T11481] ? import_iovec+0x4ad/0x660 [ 316.299870][T11481] do_writev+0x435/0x900 [ 316.304161][T11481] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 316.310268][T11481] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 316.316015][T11481] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 316.321931][T11481] __se_sys_writev+0x9b/0xb0 [ 316.326545][T11481] __x64_sys_writev+0x4a/0x70 [ 316.331248][T11481] do_syscall_64+0xb6/0x160 [ 316.335776][T11481] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 316.341767][T11481] RIP: 0033:0x459911 [ 316.345684][T11481] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b9 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 316.365303][T11481] RSP: 002b:00007f9238aaaba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 316.373735][T11481] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000459911 [ 316.381737][T11481] RDX: 0000000000000001 RSI: 00007f9238aaac00 RDI: 00000000000000f0 [ 316.389721][T11481] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 316.397701][T11481] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9238aab6d4 [ 316.405682][T11481] R13: 00000000004c8c09 R14: 00000000004dffa8 R15: 0000000000000003 [ 316.439009][T11463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.452502][T11463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.485708][T11463] team0: Port device team_slave_0 added [ 316.496176][T11463] team0: Port device team_slave_1 added [ 316.567333][T11463] device hsr_slave_0 entered promiscuous mode [ 316.654130][T11463] device hsr_slave_1 entered promiscuous mode [ 316.702898][ T12] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 316.723348][T11463] debugfs: Directory 'hsr0' with parent '/' already present! [ 316.750426][T11463] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.757678][T11463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.765527][T11463] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.772778][T11463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.850577][T11463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.869681][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.880652][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.890072][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.904855][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 316.925262][T11463] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.941180][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.950903][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.959840][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.967294][T11361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.019611][T11463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.030694][T11463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.048392][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.057954][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.062977][ T12] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 317.066890][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.074306][ T12] usb 2-1: config 0 has no interface number 0 [ 317.081346][T11361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.087593][ T12] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 317.096575][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 317.104959][ T12] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 317.114697][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.121975][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.131504][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.147439][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.156857][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.166495][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.175844][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.184937][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.194427][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.203482][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.218404][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.227122][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.269450][T11463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.273645][ T12] usb 2-1: config 0 descriptor?? [ 317.317372][ T12] em28xx 2-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 317.326801][ T12] em28xx 2-1:0.219: Video interface 219 found: bulk [ 317.564314][ T12] em28xx 2-1:0.219: unknown em28xx chip ID (0) [ 317.692265][ T12] em28xx 2-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 317.700638][ T12] em28xx 2-1:0.219: board has no eeprom [ 317.713138][T11361] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 317.812607][ T12] em28xx 2-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 317.820507][ T12] em28xx 2-1:0.219: analog set to bulk mode. [ 317.827782][ T5] em28xx 2-1:0.219: Registering V4L2 extension [ 317.849754][ T12] usb 2-1: USB disconnect, device number 3 [ 317.856405][ T12] em28xx 2-1:0.219: Disconnecting em28xx [ 317.884407][ T5] em28xx 2-1:0.219: Config register raw data: 0xffffffed [ 317.891562][ T5] em28xx 2-1:0.219: AC97 chip type couldn't be determined [ 317.898923][ T5] em28xx 2-1:0.219: No AC97 audio processor [ 317.907966][ T5] usb 2-1: Decoder not found [ 317.913138][ T5] em28xx 2-1:0.219: failed to create media graph [ 317.919579][ T5] em28xx 2-1:0.219: V4L2 device video39 deregistered [ 317.963403][ T5] em28xx 2-1:0.219: Remote control support is not available for this card. [ 317.980225][ T12] em28xx 2-1:0.219: Closing input extension [ 317.995308][ T12] em28xx 2-1:0.219: Freeing device [ 318.015905][T11361] usb 3-1: device descriptor read/64, error 18 [ 318.412369][T11361] usb 3-1: device descriptor read/64, error 18 [ 318.432299][ T12] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 318.682352][T11361] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 318.832748][ T12] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 318.841053][ T12] usb 2-1: config 0 has no interface number 0 [ 318.847340][ T12] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 318.857520][ T12] usb 2-1: New USB device found, idVendor=eb1a, idProduct=5006, bcdDevice=ed.9a [ 318.866750][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.877174][ T12] usb 2-1: config 0 descriptor?? [ 318.937007][ T12] em28xx 2-1:0.219: New device @ 480 Mbps (eb1a:5006, interface 219, class 219) [ 318.946421][ T12] em28xx 2-1:0.219: Video interface 219 found: bulk [ 318.964133][T11361] usb 3-1: device descriptor read/64, error 18 [ 319.212928][ T12] em28xx 2-1:0.219: unknown em28xx chip ID (0) [ 319.342300][ T12] em28xx 2-1:0.219: reading from i2c device at 0xa0 failed (error=-5) [ 319.350632][ T12] em28xx 2-1:0.219: board has no eeprom [ 319.363325][T11361] usb 3-1: device descriptor read/64, error 18 [ 319.472555][ T12] em28xx 2-1:0.219: Identified as Honestech Vidbox NW03 (card=83) [ 319.480477][ T12] em28xx 2-1:0.219: analog set to bulk mode. [ 319.487711][ T5] em28xx 2-1:0.219: Registering V4L2 extension [ 319.495004][T11361] usb usb3-port1: attempt power cycle [ 319.533255][ T12] usb 2-1: USB disconnect, device number 4 [ 319.539779][ T12] em28xx 2-1:0.219: Disconnecting em28xx [ 319.549168][ T5] em28xx 2-1:0.219: Config register raw data: 0xffffffed [ 319.556999][ T5] em28xx 2-1:0.219: AC97 chip type couldn't be determined [ 319.564332][ T5] em28xx 2-1:0.219: No AC97 audio processor [ 319.573224][ T5] usb 2-1: Decoder not found [ 319.577934][ T5] em28xx 2-1:0.219: failed to create media graph [ 319.584499][ T5] em28xx 2-1:0.219: V4L2 device video39 deregistered [ 319.635027][ T5] em28xx 2-1:0.219: Remote control support is not available for this card. [ 319.647321][ T12] em28xx 2-1:0.219: Closing input extension [ 319.661609][ T12] em28xx 2-1:0.219: Freeing device [ 320.212042][T11361] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 320.312165][T11361] usb 3-1: Invalid ep0 maxpacket: 197 00:19:33 executing program 0 (fault-call:0 fault-nth:1): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:33 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000040)=0x1, 0x4) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f00000000c0)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x100c80, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x100, r3, 0x702, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x510c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd5a6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3c}]}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x8000) clock_gettime(0x0, &(0x7f0000006680)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000000340), 0x80, &(0x7f0000002740)=[{&(0x7f00000003c0)=""/76, 0x4c}, {&(0x7f0000000440)=""/192, 0xc0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/207, 0xcf}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/113, 0x71}, {&(0x7f0000002680)=""/159, 0x9f}], 0x7, &(0x7f00000027c0)=""/228, 0xe4}, 0x20}, {{&(0x7f00000028c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/107, 0x6b}, {&(0x7f00000039c0)=""/218, 0xda}, {&(0x7f0000003ac0)=""/103, 0x67}, {&(0x7f0000003b40)=""/4096, 0x1000}, {&(0x7f0000004b40)=""/90, 0x5a}], 0x6, &(0x7f0000004c40)=""/64, 0x40}, 0x739e}, {{0x0, 0x0, &(0x7f00000061c0)=[{&(0x7f0000004c80)=""/156, 0x9c}, {&(0x7f0000004d40)=""/234, 0xea}, {&(0x7f0000004e40)=""/46, 0x2e}, {&(0x7f0000004e80)=""/134, 0x86}, {&(0x7f0000004f40)=""/191, 0xbf}, {&(0x7f0000005000)=""/215, 0xd7}, {&(0x7f0000005100)=""/69, 0x45}, {&(0x7f0000005180)}, {&(0x7f00000051c0)=""/4096, 0x1000}], 0x9, &(0x7f0000006280)=""/178, 0xb2}, 0xffffffff}, {{&(0x7f0000006340)=@ethernet, 0x80, &(0x7f0000006440)=[{&(0x7f00000063c0)=""/38, 0x26}, {&(0x7f0000006400)=""/2, 0x2}], 0x2, &(0x7f0000006480)=""/221, 0xdd}}], 0x4, 0x40002020, &(0x7f00000066c0)={r4, r5+30000000}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000006740)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000006840)={&(0x7f0000006700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006800)={&(0x7f0000006780)={0x64, r7, 0x8, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3c}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x7f]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="b3ece6ca5c8353ca5d3090a47e6031a8"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004040}, 0x1) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000006880)='/dev/audio\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f00000068c0)={0x2, 0x2, 0x6, 0x0, 0x3}) write$FUSE_OPEN(r0, &(0x7f0000006900)={0x20, 0x0, 0x4, {0x0, 0x4}}, 0x20) fstat(r1, &(0x7f0000006940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000069c0)=0x0, &(0x7f0000006a00), &(0x7f0000006a40)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006a80)={0x0, 0x0, 0x0}, &(0x7f0000006ac0)=0xc) setgroups(0x3, &(0x7f0000006b00)=[r9, r10, r11]) socket$netlink(0x10, 0x3, 0x12) r12 = inotify_init1(0x1000) write$binfmt_script(r12, &(0x7f0000006b40)={'#! ', './file0', [{0x20, '%'}], 0xa, "e94b86a3e8c722f61893e84768df867590484fe77d876482f2d694c120225de2f6068f74be3d7a0a958ba635ce46ee36e486049a1aae607dbc58a3f57889d363f6f15b59ab9295eb5221672c3e42b3c32361fba83e6fab64112a723b47d9ddcab6ae9add25519905bf2009b9bd073173170d474fb09e650ca7aba60c438b6ffb5958b39785a0e2d250bf279f5de190eab6536a9b9941dae89244da44ddd85780dcb5789bf495796c051744f29e439df821842819142592fffa42dec8a60f8d1cbcc03899094f59fba2a98b1e20aa751f2fc61ddb7d7743041fea4556c68cc744cf31092d4ef3ae5358a7ca547c8f92c1ee3c"}, 0xff) r13 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) getsockopt$IP_VS_SO_GET_VERSION(r13, 0x0, 0x480, &(0x7f0000006c40), &(0x7f0000006c80)=0x40) r14 = socket(0x9, 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r14, 0x111, 0x5, 0x9, 0x4) r15 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000006d00)={'hsr0\x00', &(0x7f0000006cc0)=@ethtool_rxfh={0x22, 0x38f8, 0x6, 0x0, 0xff, "bfd8a1", 0x7f, [0x800, 0x8, 0x80000000]}}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) socket$packet(0x11, 0x2, 0x300) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000006d40)='/dev/hwrng\x00', 0x800, 0x0) setsockopt$XDP_TX_RING(r16, 0x11b, 0x3, &(0x7f0000006d80)=0x100, 0x4) 00:19:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000001540)=""/4086, 0xffffffffffffff32) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000018008114e00f80ecdb4cb92e0a60042c000cd300e8bd6efb120009000e0014a00200000006001600fec0", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 00:19:33 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x8db0e77ed3100817, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x81000, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0xe}, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffffb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000280)={{0x2, 0x4e22, @broadcast}, {0x306}, 0x10, {0x2, 0x4e20, @broadcast}, 'veth1_to_hsr\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="39840029e54b56748760a8a13000000010000108", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a0000000000"], 0x30}}, 0x0) [ 320.462065][T11361] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 320.563794][T11501] FAULT_INJECTION: forcing a failure. [ 320.563794][T11501] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 320.577032][T11501] CPU: 1 PID: 11501 Comm: syz-executor.0 Not tainted 5.4.0-rc2+ #0 [ 320.584926][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.594968][T11501] Call Trace: [ 320.598263][T11501] dump_stack+0x191/0x1f0 [ 320.602589][T11501] should_fail+0xa3f/0xa50 [ 320.607017][T11501] should_fail_alloc_page+0x1fb/0x270 [ 320.612384][T11501] __alloc_pages_nodemask+0x3c1/0x60c0 [ 320.619400][T11501] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 320.625286][T11501] ? kmsan_get_shadow_origin_ptr+0x1ab/0x4c0 [ 320.631257][T11501] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 320.637398][T11501] ? prep_new_page+0x792/0x9b0 [ 320.642165][T11501] ? get_page_from_freelist+0x11d3/0x19f0 [ 320.648243][T11501] kmsan_alloc_page+0xc3/0x360 [ 320.653014][T11501] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 320.658915][T11501] __alloc_pages_nodemask+0x149d/0x60c0 [ 320.664550][T11501] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 320.670604][T11501] ? ima_match_policy+0x1b01/0x1bb0 [ 320.675810][T11501] ? stack_trace_save+0x11c/0x1b0 [ 320.680821][T11501] ? stack_trace_save+0x11c/0x1b0 [ 320.685832][T11501] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 320.691975][T11501] ? update_stack_state+0xa12/0xb40 [ 320.697171][T11501] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 320.703237][T11501] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 320.709385][T11501] ? __msan_metadata_ptr_for_store_2+0x10/0x20 [ 320.715537][T11501] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 320.721426][T11501] alloc_pages_current+0x68d/0x9a0 [ 320.726539][T11501] skb_page_frag_refill+0x2b0/0x580 [ 320.731736][T11501] tun_get_user+0x1c85/0x6f70 [ 320.736432][T11501] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 320.742319][T11501] tun_chr_write_iter+0x1f2/0x360 [ 320.747348][T11501] ? tun_chr_read_iter+0x460/0x460 [ 320.752452][T11501] do_iter_readv_writev+0xa16/0xc30 [ 320.757656][T11501] ? tun_chr_read_iter+0x460/0x460 [ 320.762756][T11501] do_iter_write+0x304/0xdc0 [ 320.767336][T11501] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 320.773485][T11501] ? import_iovec+0x4ad/0x660 [ 320.778162][T11501] do_writev+0x435/0x900 [ 320.782412][T11501] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 320.788474][T11501] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 320.794181][T11501] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 320.800066][T11501] __se_sys_writev+0x9b/0xb0 [ 320.804647][T11501] __x64_sys_writev+0x4a/0x70 [ 320.809311][T11501] do_syscall_64+0xb6/0x160 [ 320.813806][T11501] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 320.819681][T11501] RIP: 0033:0x459911 [ 320.823564][T11501] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b9 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 320.843160][T11501] RSP: 002b:00007f9238aaaba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 320.851563][T11501] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000459911 [ 320.859518][T11501] RDX: 0000000000000001 RSI: 00007f9238aaac00 RDI: 00000000000000f0 [ 320.867477][T11501] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 320.875439][T11501] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9238aab6d4 [ 320.883396][T11501] R13: 00000000004c8c09 R14: 00000000004dffa8 R15: 0000000000000003 [ 320.899103][T11361] usb 3-1: device descriptor read/8, error -71 00:19:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = openat(r3, &(0x7f0000000040)='./file0\x00', 0x200000, 0x123) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2000, 0x1}) 00:19:34 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x8db0e77ed3100817, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x81000, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@ng={0x4, 0xe}, 0x2, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffffb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000240)={0x7, 0x4d, 0x1}, 0x7) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000280)={{0x2, 0x4e22, @broadcast}, {0x306}, 0x10, {0x2, 0x4e20, @broadcast}, 'veth1_to_hsr\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="39840029e54b56748760a8a13000000010000108", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000a0000000000"], 0x30}}, 0x0) 00:19:34 executing program 0 (fault-call:0 fault-nth:2): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) [ 321.112661][T11361] usb 3-1: device descriptor read/8, error -71 [ 321.137166][T11516] FAULT_INJECTION: forcing a failure. [ 321.137166][T11516] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 321.150419][T11516] CPU: 0 PID: 11516 Comm: syz-executor.0 Not tainted 5.4.0-rc2+ #0 [ 321.158300][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.168341][T11516] Call Trace: [ 321.171632][T11516] dump_stack+0x191/0x1f0 [ 321.175970][T11516] should_fail+0xa3f/0xa50 [ 321.180388][T11516] should_fail_alloc_page+0x1fb/0x270 [ 321.185754][T11516] __alloc_pages_nodemask+0x3c1/0x60c0 [ 321.191210][T11516] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 321.197099][T11516] ? kmsan_get_shadow_origin_ptr+0x1ab/0x4c0 [ 321.203209][T11516] ? prep_new_page+0x792/0x9b0 [ 321.207987][T11516] ? get_page_from_freelist+0x11d3/0x19f0 [ 321.213726][T11516] kmsan_alloc_page+0x131/0x360 [ 321.218571][T11516] __alloc_pages_nodemask+0x149d/0x60c0 [ 321.224131][T11516] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 321.230196][T11516] ? ima_match_policy+0x1b01/0x1bb0 [ 321.235400][T11516] ? stack_trace_save+0x11c/0x1b0 [ 321.240412][T11516] ? stack_trace_save+0x11c/0x1b0 [ 321.245427][T11516] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 321.251570][T11516] ? update_stack_state+0xa12/0xb40 [ 321.256765][T11516] ? entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 321.262831][T11516] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 321.268995][T11516] ? __msan_metadata_ptr_for_store_2+0x10/0x20 [ 321.275238][T11516] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 321.281126][T11516] alloc_pages_current+0x68d/0x9a0 [ 321.286239][T11516] skb_page_frag_refill+0x2b0/0x580 [ 321.291454][T11516] tun_get_user+0x1c85/0x6f70 [ 321.296155][T11516] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 321.302042][T11516] tun_chr_write_iter+0x1f2/0x360 [ 321.307061][T11516] ? tun_chr_read_iter+0x460/0x460 [ 321.312158][T11516] do_iter_readv_writev+0xa16/0xc30 [ 321.317358][T11516] ? tun_chr_read_iter+0x460/0x460 [ 321.322453][T11516] do_iter_write+0x304/0xdc0 [ 321.327034][T11516] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 321.333175][T11516] ? import_iovec+0x4ad/0x660 [ 321.337871][T11516] do_writev+0x435/0x900 [ 321.342467][T11516] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 321.348868][T11516] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 321.354579][T11516] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 321.360460][T11516] __se_sys_writev+0x9b/0xb0 [ 321.365050][T11516] __x64_sys_writev+0x4a/0x70 [ 321.369725][T11516] do_syscall_64+0xb6/0x160 [ 321.374219][T11516] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 321.380098][T11516] RIP: 0033:0x459911 [ 321.383983][T11516] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b9 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 321.403667][T11516] RSP: 002b:00007f9238aaaba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 321.412067][T11516] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000459911 [ 321.420025][T11516] RDX: 0000000000000001 RSI: 00007f9238aaac00 RDI: 00000000000000f0 [ 321.427995][T11516] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 321.435957][T11516] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9238aab6d4 [ 321.443912][T11516] R13: 00000000004c8c09 R14: 00000000004dffa8 R15: 0000000000000003 00:19:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071") mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000100)='./file0/../file0\x00') chdir(&(0x7f0000000380)='./file0\x00') r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8, 0x408c00) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000240)=0x4, 0x4) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') [ 321.472080][T11361] usb usb3-port1: unable to enumerate USB device 00:19:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8), &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000000040)) utime(&(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000500)) 00:19:34 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em1ppr0ScpusftsysL\xc5\xf9z') 00:19:34 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xd, 0x4f, 0xea, 0x8, 0x5ac, 0x8501, 0xc23, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa5, 0x0, 0x1, 0xe, 0x1, 0x0, 0x0, [], [{{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) 00:19:34 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x26f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x5, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x1b, &(0x7f0000000080)={0x40, 0x2, 0xfffffd81, {0xfffffffffffffffd, 0x5, "6e54ddffffffffffbe048cf9393679ffffe0373c0e72e2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 00:19:34 executing program 0 (fault-call:0 fault-nth:3): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) [ 322.021621][T11537] IPVS: ftp: loaded support on port[0] = 21 [ 322.082702][T11538] FAULT_INJECTION: forcing a failure. [ 322.082702][T11538] name failslab, interval 1, probability 0, space 0, times 1 [ 322.095454][T11538] CPU: 1 PID: 11538 Comm: syz-executor.0 Not tainted 5.4.0-rc2+ #0 [ 322.103395][T11538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.113493][T11538] Call Trace: [ 322.116850][T11538] dump_stack+0x191/0x1f0 [ 322.121251][T11538] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 322.127584][T11538] should_fail+0xa3f/0xa50 [ 322.132089][T11538] __should_failslab+0x264/0x280 [ 322.137159][T11538] should_failslab+0x29/0x70 [ 322.141804][T11538] kmem_cache_alloc+0xd6/0xd10 [ 322.146636][T11538] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 322.152595][T11538] ? build_skb+0x82/0x720 [ 322.156996][T11538] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 322.163231][T11538] build_skb+0x82/0x720 [ 322.167467][T11538] tun_get_user+0x2238/0x6f70 [ 322.172273][T11538] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 322.178230][T11538] tun_chr_write_iter+0x1f2/0x360 [ 322.183332][T11538] ? tun_chr_read_iter+0x460/0x460 [ 322.188513][T11538] do_iter_readv_writev+0xa16/0xc30 [ 322.193815][T11538] ? tun_chr_read_iter+0x460/0x460 [ 322.198982][T11538] do_iter_write+0x304/0xdc0 [ 322.203650][T11538] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 322.209867][T11538] ? import_iovec+0x4ad/0x660 [ 322.214628][T11538] do_writev+0x435/0x900 [ 322.218960][T11538] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 322.225089][T11538] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 322.230877][T11538] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 322.236829][T11538] __se_sys_writev+0x9b/0xb0 [ 322.241471][T11538] __x64_sys_writev+0x4a/0x70 [ 322.246195][T11538] do_syscall_64+0xb6/0x160 [ 322.249785][ T12] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 322.250786][T11538] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 322.264116][T11538] RIP: 0033:0x459911 [ 322.268062][T11538] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b9 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 322.287898][T11538] RSP: 002b:00007f9238aaaba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 322.296368][T11538] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000459911 [ 322.304567][T11538] RDX: 0000000000000001 RSI: 00007f9238aaac00 RDI: 00000000000000f0 [ 322.312580][T11538] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 322.320616][T11538] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9238aab6d4 [ 322.328653][T11538] R13: 00000000004c8c09 R14: 00000000004dffa8 R15: 0000000000000003 [ 322.340580][T11537] chnl_net:caif_netlink_parms(): no params data found [ 322.400941][T11537] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.408297][T11537] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.415157][T11361] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 322.416959][T11537] device bridge_slave_0 entered promiscuous mode [ 322.445523][T11537] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.452890][T11537] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.461526][T11537] device bridge_slave_1 entered promiscuous mode [ 322.494721][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 322.504455][T11537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.519148][T11537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.554089][T11537] team0: Port device team_slave_0 added [ 322.564517][T11537] team0: Port device team_slave_1 added [ 322.612206][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.623416][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.645435][ T12] usb 2-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 [ 322.654736][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.666252][ T12] usb 2-1: config 0 descriptor?? [ 322.677063][T11537] device hsr_slave_0 entered promiscuous mode [ 322.692534][T11361] usb 3-1: Using ep0 maxpacket: 8 [ 322.715229][T11537] device hsr_slave_1 entered promiscuous mode [ 322.772047][T11537] debugfs: Directory 'hsr0' with parent '/' already present! [ 322.807523][T11537] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.814801][T11537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.822591][T11537] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.829764][T11537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.833767][T11361] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 322.845305][T11361] usb 3-1: config 0 has no interface number 0 [ 322.851510][T11361] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice= c.23 [ 322.860740][T11361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.920973][T11537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.929195][T11361] usb 3-1: config 0 descriptor?? [ 322.953852][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 322.966207][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.979262][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.991669][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 322.996364][T11361] uvcvideo: Found UVC 0.00 device (05ac:8501) [ 323.006120][T11361] uvcvideo: No valid video chain found. [ 323.041107][T11537] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.067766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 323.077961][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.085256][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.106622][T11361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 323.115670][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.122895][T11361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.157571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 323.178246][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 323.188325][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 323.199911][T11361] usb 3-1: USB disconnect, device number 6 [ 323.223645][T11537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.234211][T11537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.251805][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 323.261801][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 323.274618][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 323.315168][T11537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.412471][ T12] usbhid 2-1:0.0: can't add hid device: -71 [ 323.418721][ T12] usbhid: probe of 2-1:0.0 failed with error -71 [ 323.446929][ T12] usb 2-1: USB disconnect, device number 5 00:19:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000040)={'bond0\x00\x00\x19\x02\x00\x00\x00\x00?\x00', @ifru_names='bond0\x00'}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0xffffff19, 0x0, 0x0, 0x197) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000040)={0x20003, 0x0, [0x61b880000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 00:19:36 executing program 0 (fault-call:0 fault-nth:4): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) [ 323.744232][T11549] FAULT_INJECTION: forcing a failure. [ 323.744232][T11549] name failslab, interval 1, probability 0, space 0, times 0 [ 323.757057][T11549] CPU: 1 PID: 11549 Comm: syz-executor.0 Not tainted 5.4.0-rc2+ #0 [ 323.764985][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.775075][T11549] Call Trace: [ 323.778418][T11549] dump_stack+0x191/0x1f0 [ 323.782806][T11549] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 323.788765][T11549] should_fail+0xa3f/0xa50 [ 323.793246][T11549] __should_failslab+0x264/0x280 [ 323.798214][T11549] should_failslab+0x29/0x70 [ 323.802844][T11549] kmem_cache_alloc+0xd6/0xd10 [ 323.807666][T11549] ? __nf_conntrack_alloc+0x16d/0x6b0 [ 323.813082][T11549] __nf_conntrack_alloc+0x16d/0x6b0 [ 323.818306][T11549] init_conntrack+0x6c5/0x2490 [ 323.823118][T11549] nf_conntrack_in+0xc0a/0x2664 [ 323.828019][T11549] ipv6_conntrack_in+0x68/0x80 [ 323.832811][T11549] ? ipv4_confirm+0x400/0x400 [ 323.837503][T11549] nf_hook_slow+0x18b/0x3f0 [ 323.842064][T11549] ipv6_rcv+0x273/0x710 [ 323.846246][T11549] ? local_bh_enable+0x40/0x40 [ 323.851123][T11549] netif_receive_skb_internal+0x4e3/0xc20 [ 323.856877][T11549] netif_receive_skb+0x1da/0x3a0 [ 323.861879][T11549] tun_get_user+0x6c44/0x6f70 [ 323.866650][T11549] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 323.872579][T11549] tun_chr_write_iter+0x1f2/0x360 [ 323.877661][T11549] ? tun_chr_read_iter+0x460/0x460 [ 323.882803][T11549] do_iter_readv_writev+0xa16/0xc30 [ 323.888042][T11549] ? tun_chr_read_iter+0x460/0x460 [ 323.893166][T11549] do_iter_write+0x304/0xdc0 [ 323.897789][T11549] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 323.903962][T11549] ? import_iovec+0x4ad/0x660 [ 323.908671][T11549] do_writev+0x435/0x900 [ 323.912960][T11549] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 323.919047][T11549] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 323.924811][T11549] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 323.930762][T11549] __se_sys_writev+0x9b/0xb0 [ 323.935404][T11549] __x64_sys_writev+0x4a/0x70 [ 323.940226][T11549] do_syscall_64+0xb6/0x160 [ 323.944767][T11549] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 323.950675][T11549] RIP: 0033:0x459911 [ 323.954598][T11549] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b9 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 323.974225][T11549] RSP: 002b:00007f9238aaaba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 323.982663][T11549] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000459911 [ 323.990663][T11549] RDX: 0000000000000001 RSI: 00007f9238aaac00 RDI: 00000000000000f0 [ 323.998674][T11549] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 324.006658][T11549] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9238aab6d4 [ 324.014643][T11549] R13: 00000000004c8c09 R14: 00000000004dffa8 R15: 0000000000000003 [ 324.086513][T11552] bond0: cannot enslave bond to itself. [ 324.148665][T11553] bond0: cannot enslave bond to itself. [ 324.193950][T11361] usb 3-1: new high-speed USB device number 7 using dummy_hcd 00:19:37 executing program 0 (fault-call:0 fault-nth:5): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:37 executing program 3: process_vm_writev(0x0, 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f00000028c0)=""/224, 0xe0}], 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000140)=@hci, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/129, 0xcd}, 0x0) process_vm_writev(0x0, &(0x7f0000000b80)=[{&(0x7f0000000d00)=""/226, 0xe2}], 0x1, 0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) move_mount(r2, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000600)=""/164, 0xa4}], 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) close(r3) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000740)={r5, 0x66, "d4c47a3fcc1d50b201902894c38c217c8077161640bb6b9bf9b1c02af714c5c28bc5c80140c6f32a227959085cd25a19578fb340c3844eb9f09bdab25585059f978b95763cef442b851878c21fcae6c384462e4d8f4b84780f5c4ff32e2a66def34072f66a45"}, &(0x7f00000007c0)=0x6e) r6 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r7 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r8 = dup2(r7, r6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000940)={0xc2, 0xa, 0x501c21e91011f94f, r3}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000006c0)={r5, 0x7fff}, &(0x7f0000000900)=0x8) sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000c00)=""/251, 0xfb}], 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000002c0)=""/10, 0xa}, {&(0x7f00000007c0)=""/108, 0x6c}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000840)=""/96, 0x60}, {&(0x7f00000008c0)=""/64, 0x40}], 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x14b}, {&(0x7f00000000c0)=""/85, 0xb}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/120, 0x6c}, {&(0x7f0000000480)=""/60, 0x3dd}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000540)=""/154, 0x40d}, {&(0x7f0000000340)=""/22, 0x16}], 0x161, &(0x7f0000000600)=""/191, 0xbf}}], 0x40000000000020a, 0x0, &(0x7f0000003700)={0x77359400}) [ 324.303400][ T12] usb 2-1: new high-speed USB device number 6 using dummy_hcd 00:19:37 executing program 4: personality(0x4000009) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') read$usbfs(r0, &(0x7f0000000040)=""/1, 0x1) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x1c9c380}}, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000240)=0xe8) r2 = getegid() fchownat(r0, &(0x7f0000000100)='./file0\x00', r1, r2, 0x1000) r3 = clone3(&(0x7f00000003c0)={0x42000, &(0x7f0000000280)=0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=0x0, 0x800, 0x0, &(0x7f0000000340)=""/51, 0x33, &(0x7f0000000380)=""/17}, 0x40) sched_setaffinity(r3, 0x8, &(0x7f0000000400)=0x3f) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0x1f, &(0x7f0000000440)='vboxnet0userposix_acl_access*,\x00'}, 0x30) r7 = getpgid(0xffffffffffffffff) kcmp(r6, r7, 0x0, r4, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000500)=0x14) inotify_init1(0x1000) socket$tipc(0x1e, 0x2, 0x0) r8 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x10000, 0x2000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000580)={{0x20, 0x8}, 0x1, 0x8, 0x1, {0x9}, 0xde, 0x5}) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000600)={@loopback, @rand_addr=0x100, @dev={0xac, 0x14, 0x14, 0xe}}, 0xc) pipe2(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000680)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000006c0)=0x14) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000700)={{&(0x7f0000ffb000/0x5000)=nil, 0x5000}, 0x2}) r10 = syz_open_procfs(r6, &(0x7f0000000740)='net/llc\x00') write$cgroup_type(r10, &(0x7f0000000780)='threaded\x00', 0x9) r11 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vcs\x00', 0x802, 0x0) ioctl$UI_SET_KEYBIT(r11, 0x40045565, 0x2c) r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm_plock\x00', 0x400140, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r12, 0x80dc5521, &(0x7f0000000840)) r13 = syz_open_dev$vcsn(&(0x7f0000000880)='/dev/vcs#\x00', 0x7, 0x40380) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r13, 0xc0a85322, &(0x7f00000008c0)) r14 = syz_open_procfs(r5, &(0x7f0000000980)='wchan\x00') ioctl$DRM_IOCTL_DROP_MASTER(r14, 0x641f) [ 324.399365][T11559] FAULT_INJECTION: forcing a failure. [ 324.399365][T11559] name failslab, interval 1, probability 0, space 0, times 0 [ 324.412401][T11559] CPU: 0 PID: 11559 Comm: syz-executor.0 Not tainted 5.4.0-rc2+ #0 [ 324.420336][T11559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 324.430430][T11559] Call Trace: [ 324.433786][T11559] dump_stack+0x191/0x1f0 [ 324.438179][T11559] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 324.444136][T11559] should_fail+0xa3f/0xa50 [ 324.448631][T11559] __should_failslab+0x264/0x280 [ 324.453638][T11559] should_failslab+0x29/0x70 [ 324.458279][T11559] __kmalloc_track_caller+0x1ad/0xea0 [ 324.463709][T11559] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 324.469651][T11559] ? nf_ct_ext_add+0x360/0x610 [ 324.474468][T11559] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 324.480420][T11559] __krealloc+0x23c/0x390 [ 324.484781][T11559] nf_ct_ext_add+0x360/0x610 [ 324.489400][T11559] init_conntrack+0x1139/0x2490 [ 324.494295][T11559] nf_conntrack_in+0xc0a/0x2664 [ 324.499193][T11559] ipv6_conntrack_in+0x68/0x80 [ 324.503975][T11559] ? ipv4_confirm+0x400/0x400 [ 324.508669][T11559] nf_hook_slow+0x18b/0x3f0 [ 324.513205][T11559] ipv6_rcv+0x273/0x710 [ 324.517403][T11559] ? local_bh_enable+0x40/0x40 [ 324.522203][T11559] netif_receive_skb_internal+0x4e3/0xc20 [ 324.527982][T11559] netif_receive_skb+0x1da/0x3a0 [ 324.532947][T11559] tun_get_user+0x6c44/0x6f70 [ 324.537712][T11559] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 324.543628][T11559] tun_chr_write_iter+0x1f2/0x360 [ 324.548677][T11559] ? tun_chr_read_iter+0x460/0x460 [ 324.553808][T11559] do_iter_readv_writev+0xa16/0xc30 [ 324.559043][T11559] ? tun_chr_read_iter+0x460/0x460 [ 324.564181][T11559] do_iter_write+0x304/0xdc0 [ 324.568795][T11559] ? __msan_metadata_ptr_for_store_8+0x13/0x20 [ 324.574963][T11559] ? import_iovec+0x4ad/0x660 [ 324.579672][T11559] do_writev+0x435/0x900 [ 324.583958][T11559] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 324.590047][T11559] ? prepare_exit_to_usermode+0x19a/0x4d0 [ 324.595795][T11559] ? kmsan_get_shadow_origin_ptr+0x6e/0x4c0 [ 324.601707][T11559] __se_sys_writev+0x9b/0xb0 [ 324.606321][T11559] __x64_sys_writev+0x4a/0x70 [ 324.611019][T11559] do_syscall_64+0xb6/0x160 [ 324.615550][T11559] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 324.621450][T11559] RIP: 0033:0x459911 [ 324.625382][T11559] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 b9 fb ff c3 48 83 ec 08 e8 fa 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 43 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 324.645004][T11559] RSP: 002b:00007f9238aaaba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 324.653448][T11559] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 0000000000459911 [ 324.661430][T11559] RDX: 0000000000000001 RSI: 00007f9238aaac00 RDI: 00000000000000f0 [ 324.669411][T11559] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 324.677398][T11559] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9238aab6d4 [ 324.685383][T11559] R13: 00000000004c8c09 R14: 00000000004dffa8 R15: 0000000000000003 00:19:37 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00<'], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x9) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r3 = dup2(r2, r1) r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x0, 0xedcb, 0x1, 0x9}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x8, 0x2, 0x0, 0x1, 'syz1\x00', 0x23b5}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) [ 324.732033][T11361] usb 3-1: Using ep0 maxpacket: 8 [ 324.843412][ T12] usb 2-1: Using ep0 maxpacket: 8 [ 324.852418][T11361] usb 3-1: config 0 has an invalid interface number: 165 but max is 0 [ 324.860734][T11361] usb 3-1: config 0 has no interface number 0 [ 324.867069][T11361] usb 3-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice= c.23 [ 324.876293][T11361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.947385][T11361] usb 3-1: config 0 descriptor?? [ 324.963597][ T12] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.974675][ T12] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.987690][ T12] usb 2-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.40 00:19:38 executing program 2: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000240)={0x0, 0x31d, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x1}}, 0x4c080) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000380)=0x1, 0x4) r8 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f00000000c0)) r9 = open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="aca2"], 0x2) ftruncate(r9, 0x10099b7) [ 324.988246][T11361] usb 3-1: can't set config #0, error -71 [ 324.996912][ T12] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.015397][T11361] usb 3-1: USB disconnect, device number 7 00:19:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x45, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x8, 0x10001, 0x0, 0x4, 0x4ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x629}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000200000007000000000005"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 325.193799][ T12] usb 2-1: config 0 descriptor?? 00:19:38 executing program 2: seccomp(0x1, 0x0, &(0x7f0000001980)={0x2, &(0x7f0000000580)=[{0x48000016}, {0x6}]}) rt_sigprocmask(0x1, &(0x7f0000000000)={0x1}, &(0x7f0000000040), 0x8) [ 325.216556][ T12] usb 2-1: can't set config #0, error -71 [ 325.246854][T11568] IPVS: ftp: loaded support on port[0] = 21 00:19:38 executing program 0 (fault-call:0 fault-nth:6): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) [ 325.268514][ T12] usb 2-1: USB disconnect, device number 6 [ 325.572295][T11568] chnl_net:caif_netlink_parms(): no params data found 00:19:38 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r4, r3) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000040)={0x9, 0x400}) syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRESDEC=r4, @ANYRESDEC, @ANYRES64]], 0x0) [ 325.679231][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 325.679265][ T31] audit: type=1326 audit(1570839578.738:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11574 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 325.686628][T11568] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.715996][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.724764][T11568] device bridge_slave_0 entered promiscuous mode 00:19:38 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0xff, 0x0, 'queue0\x00'}) r6 = fcntl$getown(r5, 0x9) capget(&(0x7f00000000c0)={0x400e204c, r6}, &(0x7f0000000100)={0x3ff, 0x8001, 0x1ff, 0x7, 0x1ff, 0x7fff}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xb06, 0x308c01) ioctl$TIOCLINUX4(r7, 0x541c, &(0x7f0000000080)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in]}, &(0x7f0000000240)=0x10) r9 = dup2(r1, r8) dup3(r9, r2, 0x0) 00:19:38 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x2, 0xad, 0x401000}}, 0x30) 00:19:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)={0x1, 0x0, {0xffffffffffffffff, 0x1, 0x80000000, 0x3, 0x8}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 325.875377][T11568] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.883059][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.891839][T11568] device bridge_slave_1 entered promiscuous mode [ 325.964551][T11568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.999814][T11568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 00:19:39 executing program 1: pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000200)="af8c3f1a979969096608a87c8015338f5171b48a841e637f2086dea616a0e410f374509dcf4d92c85e2a9728d421c21cab28817f1f1a0ff3400a5d8c058b6074aa5fb49a99147f86b0cd8a85e3a6587cf41c325408c1c0875e614840b2c5fe8fa07052d3c84aa798f32dd8603e463bf3030addb17a0d70e3040b9b00e028f6bd95d0a2099788e8d4cb4b7db2dd5ee3870b49751d19d217b940859229d5fe6a2f20953f3a5e532c5d86435a56d04abe4c5410fd969b9ccc2be067ece9bec09324d9bc151d146a3e621479dcbd63117c88f6afc50488f724a79ee00b9a3d37e8f4c384f03f06a551c21c520b7b89acc5d0", 0xf0}], 0x1, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000000)={0x7, 0x6, 0x11c44c74, 0x376, 'syz1\x00', 0x3f}) ppoll(&(0x7f0000000180)=[{}], 0x20000000000000a9, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 00:19:39 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r1, r0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x3) [ 326.054595][T11568] team0: Port device team_slave_0 added [ 326.067634][T11568] team0: Port device team_slave_1 added [ 326.217919][T11568] device hsr_slave_0 entered promiscuous mode [ 326.232369][ T31] audit: type=1326 audit(1570839579.288:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11574 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0x0 [ 326.283231][T11568] device hsr_slave_1 entered promiscuous mode [ 326.306510][T11568] debugfs: Directory 'hsr0' with parent '/' already present! [ 326.399380][T11568] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.406665][T11568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.414471][T11568] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.421645][T11568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.548898][T11568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.565289][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.575491][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.588558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 326.614454][T11568] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.623042][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 326.631552][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 326.653569][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 326.663416][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 326.672703][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.679861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.688345][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 326.697795][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 326.706879][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.714098][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.727582][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 326.749822][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 326.783091][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 326.792918][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 326.802836][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 326.812923][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 326.822464][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 326.831583][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 326.847972][T11568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 326.864230][T11568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 326.897538][T11568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.906409][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 326.915921][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 326.925139][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 00:19:40 executing program 1: openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) mkdir(&(0x7f0000639000)='./file0\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x0) unshare(0x40600) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r0, 0x1, 0x8000, 0xfffffffff0000000}) sync_file_range(r0, 0x0, 0x0, 0x5) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/if_inet6\x00') ioctl$FICLONE(r3, 0x40049409, r4) 00:19:40 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00<'], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x9) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r3 = dup2(r2, r1) r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x0, 0xedcb, 0x1, 0x9}, 0x14) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x8, 0x2, 0x0, 0x1, 'syz1\x00', 0x23b5}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 00:19:40 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r3, 0x6, 0x85a) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r6, r5) write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x3f, 0x0, 0x0, @tick=0x7fffffff, {}, {}, @connect}], 0x15a) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100626f6e64000000001400020008000b00", @ANYRES32=0x0, @ANYRESHEX=r5], 0x5}}, 0x0) 00:19:40 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @dev}, 0x10) connect(r0, &(0x7f0000000000)=@rc={0x1f, {0x7f, 0x8f, 0x2, 0xa8, 0x4c, 0x7f}, 0xfe}, 0x80) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000240)={0x3f, {0x6636, 0x81, 0x0, 0x10000, 0x10001, 0x2}}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x8) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000100)={0x2, 0x3, 0x2, 0x8}) r5 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e431d00000081fffffff08ef9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x200, 0x400000) getsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000180)=""/128, &(0x7f0000000200)=0x80) eventfd(0x8000) sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0) r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$TIOCPKT(r9, 0x5420, &(0x7f00000002c0)=0x10000) 00:19:40 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000100)=0x1e) r3 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) recvmmsg(r3, &(0x7f0000001a40)=[{{&(0x7f0000000940)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/129, 0x81}, {&(0x7f0000000a80)=""/5, 0x5}, {&(0x7f0000000ac0)=""/32, 0x20}], 0x3, &(0x7f0000000b40)=""/98, 0x62}, 0x8}, {{&(0x7f0000000bc0)=@tipc, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c40)=""/67, 0x43}, {&(0x7f0000000cc0)=""/113, 0x71}, {&(0x7f0000000d40)=""/11, 0xb}], 0x3, &(0x7f0000000dc0)=""/233, 0xe9}, 0x7}, {{&(0x7f0000000ec0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f40)=""/3, 0x3}, {&(0x7f0000000f80)=""/85, 0x55}, {&(0x7f0000001000)=""/68, 0x44}, {&(0x7f0000001080)=""/18, 0x12}, {&(0x7f00000010c0)=""/215, 0xd7}], 0x5, &(0x7f0000001240)=""/88, 0x58}, 0xfffffffd}, {{&(0x7f00000012c0)=@sco, 0x80, &(0x7f0000001980)=[{&(0x7f0000001340)=""/237, 0xed}, {&(0x7f0000001440)=""/255, 0xff}, {&(0x7f0000001540)=""/160, 0xa0}, {&(0x7f0000001600)=""/157, 0x9d}, {&(0x7f00000016c0)=""/6, 0x6}, {&(0x7f0000001700)=""/187, 0xbb}, {&(0x7f0000001840)=""/249, 0xf9}, {&(0x7f0000001940)=""/3, 0x3}], 0x8, &(0x7f0000001a00)=""/13, 0xd}, 0x5}], 0x4, 0x2142, &(0x7f0000001b40)={0x0, 0x989680}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x59, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 00:19:40 executing program 4: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000001240)={0x2, 0x0, @dev}, 0x10) connect(r0, &(0x7f0000000000)=@rc={0x1f, {0x7f, 0x8f, 0x2, 0xa8, 0x4c, 0x7f}, 0xfe}, 0x80) r1 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000240)={0x3f, {0x6636, 0x81, 0x0, 0x10000, 0x10001, 0x2}}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x400000, 0x8) ioctl$HIDIOCGCOLLECTIONINFO(r4, 0xc0104811, &(0x7f0000000100)={0x2, 0x3, 0x2, 0x8}) r5 = socket$kcm(0x10, 0x800000000002, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)="2e000000130081c5e4050cecdb4cb9040a485e431d00000081fffffff08ef9000600b0ebb06ac40006001400f9ff", 0x2e}], 0x1}, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x200, 0x400000) getsockopt$inet6_opts(r6, 0x29, 0x3b, &(0x7f0000000180)=""/128, &(0x7f0000000200)=0x80) eventfd(0x8000) sendmmsg(r0, &(0x7f0000001540), 0x24c, 0x0) r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r9 = dup2(r8, r7) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$TIOCPKT(r9, 0x5420, &(0x7f00000002c0)=0x10000) 00:19:41 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x60, "9c40789dea7386cb7d2027f430c5063b602d470f0bbfd2613c3860fa4ad2efb3b0528d3842af5d7e1021399d40ae4cb4f00e1958ede1de03158d4068f84aa9973f4a85213e4a23839fce9f6bbe2795c2fc8d6bf54cd15dc9dcf0462310db79b3"}, &(0x7f0000000200)=0x84) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) close(r2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000740)={r4, 0x66, "d4c47a3fcc1d50b201902894c38c217c8077161640bb6b9bf9b1c02af714c5c28bc5c80140c6f32a227959085cd25a19578fb340c3844eb9f09bdab25585059f978b95763cef442b851878c21fcae6c384462e4d8f4b84780f5c4ff32e2a66def34072f66a45"}, &(0x7f00000007c0)=0x6e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x81}}}, &(0x7f0000000340)=0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)={r5, 0x97, "490b90429995bfe92ae0f8c44b57b1a53309124bb329d05248b73b00ba8063569568dfd67cd4acef67e54f21aa28a0355e9dd933868b96a1215a8f902fdc07727dc9b4d7b80f010f8e98fce031d3135d8d300bdabf07479a5c6a51a77e50e252dad4ff36b601c6addcac34b11a431e2381ad68db3443c08d72aaaa4f6771daafbbbbb3cc2221d2189be74c10103c606e0e58cdedf7e9e5"}, &(0x7f0000000440)=0x9f) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c2080900152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855c7ad6eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:41 executing program 3: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000002c0)={'syz'}, &(0x7f00000004c0)="004dde0301b3d8a52150dbf7f3649aa4a133b1b47392870e2defc66e389f1912e8d05566b4faa7040cc60d103d385210cae9cc0804628a83533410d5996991644a3fe726a1063c39e41d570890b0d9256e0b19698ef7213a67bcfc7af200080000f071991224ad9524b280b9fa224a833ea0cc3c5a51d5d20acd5aa3a5926c8079170000000000000000000000000054db45165107b9c877a83a6bfaf6f33a59150445c45cc59c3a967d69bd8ecb5724a39784673c37c977e61cc6b3e20cd4f9", 0xc0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000040)='9', 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000400)={r1, r0, r1}, &(0x7f0000000080)=""/92, 0x5c, &(0x7f0000000200)={&(0x7f0000000000)={'sha1\x00'}}) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x128) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={&(0x7f00000001c0)=[0x7c, 0x400, 0xfffffffc, 0x7, 0x401, 0x80000000], 0x6, 0xffffffff, 0x0, 0xfffffffe, 0x7, 0x8, {0x10001, 0x1, 0x7f, 0x98, 0x2, 0x0, 0x1f, 0xff, 0x6, 0x0, 0x23, 0x6, 0x8, 0x6, "758d1e8efd12c26657b5c6399d15f39f77defab4bf839b03698e7359fd6ea8af"}}) 00:19:41 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'gretap0\x00', 0x8000}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r6, 0x89b0, &(0x7f0000000140)={'tunl0\x00', 0x0}) r7 = dup2(r1, r6) dup3(r7, r5, 0x0) 00:19:41 executing program 2: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r8, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x3, 0x18, {0x0, @link='broadcast-link\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00'}}}}, 0x3b2}}, 0x0) sysfs$2(0x2, 0x6, &(0x7f0000000640)=""/207) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x24, r8, 0x4, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xffff}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x2002) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="9234dc476589835f"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100736662002c0002002800010000000000000000000000000000000000000000000000000000000009000000000000fbff"], 0x58}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r6, {}, {}, {0x3}}, [@filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x4}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'yam0\x00', r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 00:19:41 executing program 4: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x200000) keyctl$setperm(0x3, r0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/119, 0x77) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r3, r2) write$sndseq(r2, &(0x7f0000000000)=[{0x0, 0x3f, 0x0, 0x0, @tick=0x7fffffff, {}, {}, @connect}], 0x15a) r4 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r6 = dup2(r5, r4) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRESHEX=r5, @ANYBLOB="63f943fc9027819b213fedc6f5451cddd3512c9399f6efe16e061a8d2b830b8869825ebcd9fdf20c9d5d47cb766b54a89c1544995cbf5a045be124af9498a37185b44edfbb1b59cfd9c087118d43095e7c49707c67e84ee2c6b4411f47005d1da8469632f142ec4e61879df85909a56e958e2c200fed1c40f69c225195d2077dc967129e0924847ed3d18d4845626aa34062417e4e6447c9cfbe88cc31752b8b5ac8135cb94d23ab30ac1ade83dfaf5bc7c6ff7e5382fac961fceb25ab794fbb4caf0a605a5e4edb3d3d03b387812aa2929d6fc49c9be8bdb9158ad6573babc3", @ANYRESDEC=r6], 0x4}}, 0x0) 00:19:41 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r1, r0) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = fcntl$dupfd(r1, 0x0, r4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000000)={0xa, 0x8, 0x3, "14287deb0f6d6b111ef0"}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:41 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x88, 0x22, 0xa6, 0x10, 0xfe9, 0xdb71, 0x700c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd1, 0x0, 0x0, 0x3b, 0x40, 0x4c}}]}}]}}, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)) 00:19:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'hsr0\x00', 0x1fe}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000003c0)={'gre0\x00', 0xa96}) 00:19:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba4300b00bee660f3a172e0010000f32652e0f0866b83c4a00000f23c80f21f866350c0030000f23f83e0b450eb804010f00d00f01f60f3800210f01cf", 0x3d}], 0x1, 0x0, 0x0, 0x0) uselib(&(0x7f0000000000)='./file0\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x80800, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000140)='erspan0\x00') r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:19:41 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) [ 328.782091][T11299] usb 2-1: new high-speed USB device number 7 using dummy_hcd 00:19:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'hsr0\x00', 0x1fe}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000003c0)={'gre0\x00', 0xa96}) 00:19:41 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) [ 329.022158][T11299] usb 2-1: Using ep0 maxpacket: 16 00:19:42 executing program 3: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x14, @empty, 0x6}}}, 0x88) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syzkaller0\x00'}, 0x18) 00:19:42 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x408c0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000200)) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) 00:19:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5a0bcfe46bf070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="fce5b69fe0d99bfefd5a3481016f4200000000000000009c0012000c00010062726964676500000c0002000800080088a8ffff"], 0x3c}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 329.143138][T11299] usb 2-1: config 0 has an invalid interface number: 209 but max is 0 [ 329.151486][T11299] usb 2-1: config 0 has no interface number 0 [ 329.158403][T11299] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=70.0c [ 329.167577][T11299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.210925][T11696] IPVS: Unknown mcast interface: syzkaller0 [ 329.257786][T11299] usb 2-1: config 0 descriptor?? 00:19:42 executing program 3: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x14, @empty, 0x6}}}, 0x88) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syzkaller0\x00'}, 0x18) 00:19:42 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_setup(0x1cf, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x1fc}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200002, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}, 0x194, 0x0, 0xffffffffffffffc3, 0x0, 0xffffffffffffffbe}, 0x24008184) dup2(r0, r2) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, 0x0) tkill(r3, 0x1004000000015) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000140)) [ 329.306081][T11299] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 329.315206][T11299] dvb-usb: bulk message failed: -22 (2/-1) [ 329.379107][T11299] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 329.437668][T11299] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware) [ 329.448163][T11299] usb 2-1: media controller created [ 329.478255][T11709] IPVS: Unknown mcast interface: syzkaller0 00:19:42 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000000)={0x1, 0x203, 0x1, 0x3, 0x2, 0x8}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000480)={@empty, 0xd, r6}) [ 329.592872][T11299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 329.769042][T11299] cxusb: set interface failed [ 329.774489][T11299] dvb-usb: bulk message failed: -22 (1/0) [ 329.780313][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 329.786310][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 329.863869][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 329.869901][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 329.902883][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 329.908946][T11299] dvb-usb: bulk message failed: -22 (5/-1) [ 329.915126][T11299] zl10353_read_register: readreg error (reg=127, ret==-121) [ 329.923918][T11299] dvb-usb: bulk message failed: -22 (5/-1) [ 329.929786][T11299] mt352_read_register: readreg error (reg=127, ret==-121) [ 329.937075][T11299] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' [ 330.042730][T11299] Registered IR keymap rc-dvico-portable [ 330.049584][T11299] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 330.063807][T11299] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 330.119900][T11299] dvb-usb: schedule remote query interval to 100 msecs. [ 330.127562][T11299] dvb-usb: bulk message failed: -22 (2/-1) [ 330.133583][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 330.139423][T11299] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected. [ 330.182931][T11299] usb 2-1: USB disconnect, device number 7 [ 330.320843][T11299] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmwa successfully deinitialized and disconnected. [ 330.724589][T11299] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 330.972708][T11299] usb 2-1: Using ep0 maxpacket: 16 [ 331.092932][T11299] usb 2-1: config 0 has an invalid interface number: 209 but max is 0 [ 331.101228][T11299] usb 2-1: config 0 has no interface number 0 [ 331.107611][T11299] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=70.0c [ 331.116863][T11299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.164092][T11299] usb 2-1: config 0 descriptor?? [ 331.207703][T11299] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 331.218594][T11299] dvb-usb: bulk message failed: -22 (2/-1) [ 331.275828][T11299] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.302538][T11299] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2 w/o firmware) [ 331.312225][T11299] usb 2-1: media controller created [ 331.400414][T11299] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.500699][T11299] cxusb: set interface failed [ 331.505648][T11299] dvb-usb: bulk message failed: -22 (1/0) [ 331.511481][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 331.517505][T11299] dvb-usb: bulk message failed: -22 (3/-1) 00:19:44 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="000004000000001851f8bfece58f40a867ad00"], 0x8) write$binfmt_elf64(r0, &(0x7f0000000ec0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8a}, [{}], "", [[], [], [], [], []]}, 0x578) socket$inet6(0xa, 0x2, 0x0) 00:19:44 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)={0x14, 0x7, 0x7, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) 00:19:44 executing program 3: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x14, @empty, 0x6}}}, 0x88) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syzkaller0\x00'}, 0x18) 00:19:44 executing program 0: syz_emit_ethernet(0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab76197fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9963046580000007ef53e3f99c7cff4f1822e8d3e2847fb8e563460d84062d6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9f5f4178ee233221000000000000000000000000000000000000000000090000000000000000000bf916c54dcb4b50a30a1ce5a8de1fa17275de4dd9842ca6b1b30289880e0f62a62023e91b4119a2583812b796f665a88e7aa5e04156e1a74bee510fbf1cac054d773453d6e8441a4885db868b878b08e090cd0b22da020b359fd521ee4971fd2e6cf69be801439164ae5bc85f5c93e174"], 0x0) syz_emit_ethernet(0xe7, &(0x7f0000000200)={@dev={[], 0x19}, @local, [], {@x25={0x805, {0x0, 0x3f, 0x46, "e16aa081ce0b582db960dda56076685e7e34b9069404d7467f0ff84b7289d7409dc03c78391f4e252780bb9292a0be0580a23ea6f0a6bdd3708109a1ecd3bf124a6c82c7b8edb91bc780a2eb56da0e5052bae188e4d644b2670b113a994dcf1fd4b3e75a6a320d76ee873c449f1ab4d452c3bcd57d9426ae35745c91008559462fa79e575a0e29c58ca19e64d025e3ac923f8fd2ee9bce8a3b1724f24a3b693cabd784306967aae9bff5bcab2fecc9e285be04dac926e08e1df90cc98d4f4e09744dcea2bf89d53b4a87565eabd142c44cadb7adf747"}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) getpid() r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10600, 0x10) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xfeb43) [ 331.555072][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 331.561086][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 331.653550][T11299] dvb-usb: bulk message failed: -22 (3/-1) [ 331.659473][T11299] dvb-usb: bulk message failed: -22 (5/-1) [ 331.665458][T11299] zl10353_read_register: readreg error (reg=127, ret==-121) [ 331.673593][T11299] dvb-usb: bulk message failed: -22 (5/-1) [ 331.679449][T11299] mt352_read_register: readreg error (reg=127, ret==-121) [ 331.686726][T11299] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' [ 331.712947][T11735] IPVS: Unknown mcast interface: syzkaller0 00:19:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x2c, 0x2, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x8}, @IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_DOWNDELAY={0x8}, @IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_AD_LACP_RATE={0x8, 0x15, 0x1}]}}}]}, 0x5c}}, 0x0) 00:19:44 executing program 0: r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r4, r3) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@multicast1, @initdev}, &(0x7f0000000140)=0x8) write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x3f, 0x0, 0x0, @tick=0x7fffffff, {}, {}, @connect}], 0x15a) r5 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r6, r5) r7 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r8 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) dup2(r8, r7) syz_emit_ethernet(0x3, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRES16=r2, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES16=r3, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r6, @ANYRESOCT=r8, @ANYRES16=r0], @ANYRES64=r2, @ANYBLOB="9a2d999af1dd00969f90a28d42ad177d9347bbf9f5562cc85b9a29e33bd78427a4418fd467d1cd44de49d2cf4e184382fd8a5cfe8dea3b7f7461e17b4a90882f4e9c436e8f878727b8eb64fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0aa6dae82a0df646e1a0673a82899847eec6bee18b7d6da41a32b98ad8fc3d95839b9423d78c566d8769cdcd70e00dba216d0da63a356960b0fb037d34304f7502b652a8c70595cbc"]], 0x0) [ 331.928075][T11744] netlink: 'syz-executor.2': attribute type 17 has an invalid length. [ 331.936833][T11744] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 331.945288][T11744] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 331.958253][T11299] Registered IR keymap rc-dvico-portable [ 331.965110][T11299] rc rc0: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 00:19:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000100)=0xfffffffffffffffb) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x5000, 0x80000001, 0x7fe, 0x0, 0x0, [{0x0, 0x0, 0x0, [], 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0x2}, {0x0, 0x0, 0x0, [], 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, [], 0xfc}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:19:45 executing program 3: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x14, @empty, 0x6}}}, 0x88) r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syzkaller0\x00'}, 0x18) [ 331.977642][T11299] input: DViCO FusionHDTV DVB-T NANO2 w/o firmware as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input6 [ 332.103630][T11752] IPVS: Unknown mcast interface: syzkaller0 [ 332.125187][T11299] dvb-usb: schedule remote query interval to 100 msecs. [ 332.132354][T11299] dvb-usb: bulk message failed: -22 (2/-1) [ 332.138316][T11299] dvb-usb: bulk message failed: -22 (3/-1) 00:19:45 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b4544fcd9c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee23322100"/259], 0x0) [ 332.144764][T11299] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware successfully initialized and connected. 00:19:45 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x9fc, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000380)={0x3c1b3fab}) r2 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r4 = dup2(r3, r2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KDSETMODE(r4, 0x4b3a, 0x3ff) r5 = dup(0xffffffffffffffff) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x1) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000d80), 0x4) unshare(0x40000000) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='task\x00') mkdirat$cgroup(r8, &(0x7f0000000040)='0-\x00', 0x1ff) r9 = syz_open_dev$midi(&(0x7f0000000400)='/dev/midi#\x00', 0xfffffffffffffffc, 0x1) ioctl$VT_DISALLOCATE(r9, 0x5608) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x6, 0xfb, 0x20, 0xe, 0x0, 0x3f, 0x2000, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x100, 0x1, 0x3, 0x9, 0xfffffffffffffe00, 0xfffff001, 0x7}, r7, 0x9, r8, 0x0) mkdirat$cgroup(r6, &(0x7f0000000040)='0-\x00', 0x1ff) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/prev\x00') write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180)}}, 0x18) ioctl$PIO_CMAP(r6, 0x4b71, &(0x7f0000000000)={0x8, 0x10000, 0x1, 0x885, 0xfdc, 0x3f}) r11 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r12 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x81) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) getsockopt$SO_TIMESTAMP(r13, 0x1, 0x40, &(0x7f0000000440), &(0x7f0000000480)=0x4) 00:19:45 executing program 3: setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000080)={0x4, {{0xa, 0x4e24, 0x14, @empty, 0x6}}}, 0x88) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'syzkaller0\x00'}, 0x18) 00:19:45 executing program 0: syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c20000000000eb71000086dd60e2009c00101105fe8000000000000000000000000000bbff02000000000000000000000000000100000000089078cc7371f44010c2c208e6b5152b83dd5268c3ab761b7fad4c2cc8cd2570c722c5eb1b1ff196958255985844d01c069f073bc83cce6d5ea557d5b74e7fc7aa1dfa35b24f7fc8181ee9962046580000007ff53e3f99c7cff4f1822e8d3e2847fb8e563460d840abd6b3504f1cf3e9ae511635a55d29eb52876c4c75958ef855cfad4eb8de3ee63b81112bee8beb8784f3e3a2a72d74ee588792e7d4594a9fc029875f4178ee2332210000000000000000000000000000000068b200"/259], 0x0) [ 332.363122][ T12] dvb-usb: bulk message failed: -22 (1/-30591) [ 332.369342][ T12] ===================================================== [ 332.376363][ T12] BUG: KMSAN: uninit-value in dvb_usb_read_remote_control+0xf9/0x290 [ 332.384423][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.4.0-rc2+ #0 [ 332.391777][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.401829][ T12] Workqueue: events dvb_usb_read_remote_control [ 332.408057][ T12] Call Trace: [ 332.411336][ T12] dump_stack+0x191/0x1f0 [ 332.415665][ T12] kmsan_report+0x14c/0x2c0 [ 332.420161][ T12] __msan_warning+0x73/0xe0 [ 332.424701][ T12] cxusb_rc_query+0x2f7/0x360 [ 332.429371][ T12] ? cxusb_bluebird_power_ctrl+0x240/0x240 [ 332.435171][ T12] ? cxusb_bluebird_power_ctrl+0x240/0x240 [ 332.440967][ T12] dvb_usb_read_remote_control+0xf9/0x290 [ 332.447048][ T12] ? legacy_dvb_usb_read_remote_control+0x790/0x790 [ 332.453626][ T12] ? legacy_dvb_usb_read_remote_control+0x790/0x790 [ 332.460273][ T12] process_one_work+0x1572/0x1ef0 [ 332.465321][ T12] worker_thread+0x111b/0x2460 [ 332.470116][ T12] kthread+0x4b5/0x4f0 [ 332.474174][ T12] ? process_one_work+0x1ef0/0x1ef0 [ 332.479375][ T12] ? kthread_blkcg+0xf0/0xf0 [ 332.483953][ T12] ret_from_fork+0x35/0x40 [ 332.488359][ T12] [ 332.490672][ T12] Local variable description: ----ircode@cxusb_rc_query [ 332.497583][ T12] Variable was created at: [ 332.501985][ T12] cxusb_rc_query+0x4d/0x360 [ 332.506593][ T12] dvb_usb_read_remote_control+0xf9/0x290 [ 332.512297][ T12] ===================================================== [ 332.519215][ T12] Disabling lock debugging due to kernel taint [ 332.525349][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 332.531923][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.4.0-rc2+ #0 [ 332.540658][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.550712][ T12] Workqueue: events dvb_usb_read_remote_control [ 332.556934][ T12] Call Trace: [ 332.560213][ T12] dump_stack+0x191/0x1f0 [ 332.564574][ T12] panic+0x3c9/0xc1e [ 332.568480][ T12] kmsan_report+0x2b4/0x2c0 [ 332.572991][ T12] __msan_warning+0x73/0xe0 [ 332.577485][ T12] cxusb_rc_query+0x2f7/0x360 [ 332.582153][ T12] ? cxusb_bluebird_power_ctrl+0x240/0x240 [ 332.588042][ T12] ? cxusb_bluebird_power_ctrl+0x240/0x240 [ 332.593838][ T12] dvb_usb_read_remote_control+0xf9/0x290 [ 332.599556][ T12] ? legacy_dvb_usb_read_remote_control+0x790/0x790 [ 332.606133][ T12] ? legacy_dvb_usb_read_remote_control+0x790/0x790 [ 332.612715][ T12] process_one_work+0x1572/0x1ef0 [ 332.617745][ T12] worker_thread+0x111b/0x2460 [ 332.622515][ T12] kthread+0x4b5/0x4f0 [ 332.626577][ T12] ? process_one_work+0x1ef0/0x1ef0 [ 332.632210][ T12] ? kthread_blkcg+0xf0/0xf0 [ 332.636786][ T12] ret_from_fork+0x35/0x40 [ 332.642594][ T12] Kernel Offset: disabled [ 332.646930][ T12] Rebooting in 86400 seconds..